MetaMask launches AI-powered Agent Wallet with built‑in $10K loss protection
MetaMask is pushing deeper into automated crypto trading with the launch of Agent Wallet – a self‑custodial wallet built specifically for AI agents that can trade, swap, and deploy capital on‑chain under tight, user‑defined constraints and with up to $10,000 of transaction protection each month.
What is MetaMask Agent Wallet?
Agent Wallet is MetaMask’s new infrastructure layer for “agentic” finance: instead of a human manually approving every on‑chain action, specialized AI agents can operate a wallet directly, but only within a framework of rules, limits, and security checks set by the user in advance.
After a limited rollout to about 200 early testers in June, MetaMask has now made Agent Wallet broadly available. The product targets:
– Active traders who want AI models to monitor markets and execute strategies automatically
– Developers building agentic trading systems, arbitrage bots, market‑making tools, or quant strategies that need secure access to on‑chain liquidity
Supported use cases currently include:
– Spot token swaps
– Perpetual futures trading
– Positions in prediction markets
– Providing and managing liquidity on compatible protocols
Under the hood, Agent Wallet integrates with AI‑coding and agent frameworks such as Claude Code, Codex, Cursor, OpenClaw, Hermes, and OpenCode. Agents can be deployed across Hyperliquid and Ethereum Virtual Machine (EVM)‑compatible networks supported by MetaMask.
Rules first, not blind delegation
A core design principle behind Agent Wallet is that the AI never gets blanket control over your funds. Instead, users configure operating rules before they ever deposit assets. These rules can include:
– Daily or session‑based spending caps
– A whitelist of allowed protocols, dApps, or contract types
– Asset‑specific restrictions and position limits
– General risk profiles defining how aggressive or conservative the agent can be
Rather than trusting an AI model to understand every nuance of an instruction, MetaMask positions the wallet as a rules engine that constrains what agents are technically able to do.
According to the company, “the agent can act, but only inside the user’s boundaries.” Those boundaries are enforced at the wallet level, not left up to model interpretation.
Crucially, Agent Wallet maintains a self‑custodial structure. Users keep control of their private keys and can export their secret recovery phrase at any time, ensuring they are not locked into a proprietary custody solution.
Guard Mode vs. Beast Mode: two autonomy levels
MetaMask offers two distinct operating modes for Agent Wallet, depending on how comfortable a user is with automation and how frequently they want to be interrupted for approvals.
Guard Mode (default)
Guard Mode is designed for cautious users and for early deployments of new agents. In this mode:
– Any transaction that exceeds pre‑set spending limits
– Or attempts to interact with a non‑approved protocol
– Or violates any other wallet policy
is automatically paused until the human owner approves it via two‑factor authentication. Approvals can be granted through MetaMask Mobile or via an email confirmation link, creating a human checkpoint before higher‑risk actions go on‑chain.
Beast Mode
For experienced traders and developers who need lower latency and smoother execution, Beast Mode dials down the number of approval prompts:
– Routine transactions that pass security checks can go through without constant human confirmation
– If the system flags a transaction as potentially malicious or significantly abnormal, it still requires explicit user authorization
This structure allows algorithmic or AI‑driven strategies to run more freely, while still maintaining a tripwire against obviously dangerous behavior.
Gas abstraction: trading without native tokens
To make AI‑driven operations smoother, Agent Wallet incorporates gas abstraction. That means:
– Agents do not need to hold a network’s native token (like ETH) to pay for gas
– Instead, MetaMask settles transaction fees in the same token the agent is moving or swapping
Practically, this removes a common operational headache. Agents can focus on strategies involving stablecoins, governance tokens, or LP positions without maintaining separate balances of native gas tokens on every network they touch.
Layered security checks on every EVM transaction
Before an eligible EVM transaction leaves Agent Wallet for the blockchain, it passes through multiple filters:
1. Simulation – The system runs a transaction simulation to estimate expected outcomes and detect unusual behaviors, such as unexpected token drains or re‑routes.
2. Threat scanning – Transactions are evaluated for indicators of scams, malicious contracts, or suspicious patterns commonly associated with exploits.
3. Smart Transactions protection – MetaMask’s own protection layer is applied to reduce exposure to maximal extractable value (MEV) strategies that could front‑run or manipulate the transaction.
Only after clearing these checks is a transaction broadcast to the network. If, despite these safeguards, an eligible transaction still results in a loss due to specific covered issues, it may fall under the wallet’s transaction protection program.
Up to $10,000 in transaction protection per month
One of the standout features of Agent Wallet is its built‑in Transaction Protection coverage:
– Eligible losses can be reimbursed up to a total of $10,000 per month per user
– Coverage is subject to defined eligibility criteria
– Not all outcomes are covered – standard trading losses, failed strategies, or unsupported activity generally do not qualify
This distinction is critical. Autonomous trading remains exposed to:
– Market volatility and price slippage
– Smart‑contract bugs or protocol‑level failures
– Incorrect or ambiguous instructions fed to an agent
Wallet‑level guardrails can limit what an AI is allowed to do, but they cannot fully insulate users from economic risk or unforeseen events in DeFi. The protection is designed to catch certain types of transactional mishaps and security failures, not to underwrite speculation.
Why “AI‑safe” wallets matter
As AI agents become more capable, the most dangerous failure mode is not necessarily malicious intent, but unbounded authority. Giving an AI unrestricted access to a standard wallet creates the potential for:
– Draining funds due to misinterpreted prompts
– Infinite approval loops with malicious contracts
– Over‑leveraging or reckless strategies that ignore basic risk rules
MetaMask’s approach attempts to pre‑empt this by building hard limits directly into the wallet architecture. Agents do not have the technical ability to step outside configured policies, regardless of what a prompt or model output says.
That design reduces dependence on “prompt engineering” or on a model’s ability to understand natural‑language risk instructions – which remains a weak point in many AI trading experiments.
How developers and pro traders can use Agent Wallet
For developers and quant teams, Agent Wallet offers a controlled sandbox for deploying agentic strategies with real capital. Some practical applications include:
– Market‑making and arbitrage: Agents can constantly scan price feeds and liquidity pools across DEXs and perpetuals, executing constrained trades when spreads emerge.
– Position management: Agents can rebalance portfolios, adjust hedges, or roll perpetual contracts according to predefined rules, all while respecting daily spending caps.
– Event‑driven trading: AI models can monitor on‑chain governance proposals, oracle updates, or protocol announcements and trigger transactions within authorized protocols only.
– Prediction markets: Agents can open and close positions in prediction markets based on model‑generated probability updates, without exceeding certain exposure limits.
Because the wallet is self‑custodial and key‑controlled by the user or organization, Agent Wallet can also be slotted into existing operational security processes, such as multi‑sig governance around recovery phrases and rotation of keys.
How everyday users might benefit
Even for non‑professional traders, Agent Wallet hints at a future where AI handles a growing share of on‑chain complexity. Possible consumer‑oriented scenarios include:
– Agents that automatically optimize yield within a pre‑approved set of DeFi protocols
– Dollar‑cost‑averaging bots that buy selected assets at regular intervals within fixed budgets
– Tax‑aware agents that harvest losses or manage token sales with basic constraints on size and timing
In all these cases, Guard Mode gives individuals time to build trust in their agents, reviewing early transactions manually before deciding whether to grant more autonomy via Beast Mode.
MetaMask’s broader strategy: beyond a browser wallet
Agent Wallet is part of MetaMask’s ongoing shift from a simple browser extension to a broader financial platform for on‑chain activity.
Earlier, the company launched Money Account – a self‑custodial account centered around mUSD that brings together variable DeFi yields, trading, and card spending from a single balance. Together, these products point to a vision where:
– Wallets become programmable financial operating systems
– AI agents manage much of the routine interaction with DeFi and payments
– Users control the policy layer and custody, while delegating execution to software
By not releasing a token alongside Agent Wallet, MetaMask is effectively betting that product utility and developer adoption will be the real drivers of growth, rather than token incentives.
Competing in the AI‑driven finance landscape
MetaMask is entering a quickly forming niche where major crypto firms are building tools for autonomous software to hold and manage funds.
Other players have rolled out their own versions of “agentic” wallets and bots that execute trades, manage balances, or handle payments under constraints. Some solutions focus on natural‑language interfaces that allow users to describe what they want in plain English and let an agent do the rest.
Agent Wallet differentiates itself through:
– Its tight integration with the existing MetaMask ecosystem
– A self‑custodial, rules‑driven framework rather than custodial automation
– Transaction‑level security tooling and loss protection layered on top of EVM activity
The question now is not whether AI will participate in DeFi and on‑chain markets, but how much autonomy users are willing to grant it and under what guardrails.
The remaining risks and what users should watch
Even with all the safeguards, Agent Wallet does not remove the need for careful risk management. Users still need to:
– Understand the strategies their agents are running and the protocols involved
– Keep spending limits and whitelists conservative, especially at the start
– Regularly audit agent behavior and adjust rules as strategies evolve
– Recognize that no system can fully eliminate smart‑contract, market, or model risk
AI can amplify both good and bad decisions. A well‑designed agent constrained by sensible policies can execute a nuanced strategy 24/7. A poorly designed agent with too much freedom can compound losses rapidly.
A step toward autonomous, but controlled, on‑chain capital
Agent Wallet represents a significant step toward a world where much of on‑chain activity is carried out not by human clickers, but by autonomous software agents. MetaMask’s bet is that this shift will only be sustainable if the underlying wallet infrastructure is built “security‑first” – around explicit rules, constrained authority, and meaningful protection against certain classes of losses.
Whether Agent Wallet becomes a standard tool for AI‑powered trading will depend on how well it balances freedom and control: enough autonomy for agents to be useful, but enough structure for humans to stay firmly in charge of their capital.