MetaMask Launches Non-Custodial Agent Wallet for Autonomous AI Trading on Ethereum
MetaMask announced Agent Wallet on June 8, a non-custodial wallet built specifically for AI agents to execute autonomous trades across Ethereum and EVM-compatible networks. The product launches in early access to 200 traders and developers, with general availability planned for summer 2026, according to The Block and Incrypted.
The wallet is framework-agnostic, supporting OpenClaw, OpenAI Codex, Claude Code, Nous Research Hermes Agent, Cursor, and similar agent environments. Users retain full control of their keys and define behavioral boundaries: spending limits, risk profiles, and which protocols an agent is allowed to interact with.
How It Works
Agent Wallet supports swaps, perpetual futures trades, event contract purchases, and LP positions across more than 25 chains. MetaMask’s security stack, including Transaction Shield threat scanning powered by Blockaid, monitors every transaction. Any attempt to exceed user-defined boundaries, such as signing a suspicious contract, triggers mandatory two-factor authentication.
The wallet offers two operating modes. Guard mode enforces strict adherence to user-set rules. Beast mode grants agents more latitude in ambiguous situations while maintaining core security rails.
Key infrastructure uses trusted execution environment (TEE)-based key protection, meaning the private keys never leave a hardware-secured enclave even while the agent operates autonomously.
The Security Problem It Addresses
“For agents, this really is day one, but the infrastructure decision can’t be put off, because agents are already working with real money, and most of them are doing it wrong,” MetaMask Senior Director of Product Zhen Yu Tong told Decrypt.
Tong said some projects give agents direct access to private keys, a practice that creates serious risks if an agent is compromised or misinterprets instructions. Agent Wallet’s design separates the agent’s operational permissions from the underlying key material, so a compromised agent cannot exfiltrate funds beyond its spending limits.
“Autonomy becomes risky when wallet access is unrestricted. An agent may interpret a request too broadly. A contract may be malicious,” MetaMask’s developers wrote in the announcement. “MetaMask Agent Wallet is built on a simple premise: an agent can operate autonomously, but within rules defined by the user.”
Crypto Infrastructure Pivots Toward Agents
MetaMask’s move follows a broader pattern. Gemini has introduced agent-connected trading features. CertiK CEO Ronghui Gu recently warned that a catastrophe is looming due to widespread AI agent adoption without adequate security infrastructure, as Incrypted reported.
The product is significant because MetaMask is the dominant Ethereum wallet with tens of millions of users. Its decision to build dedicated agent infrastructure signals that the wallet layer, not just the model layer, is adapting to a world where autonomous software controls real capital. For agent builders working with DeFi or on-chain assets, MetaMask’s framework-agnostic approach means they can plug into existing wallet infrastructure without building custom custody solutions.
The 200-person early access cohort will be the first real-world stress test. Whether agents can operate within defined risk boundaries without triggering false positives on legitimate trades will determine how fast the product scales.