MetaMask Launches Agent Wallet to Secure Autonomous AI Trading

MetaMask has launched "Agent Wallet," a self-custodial tool designed to allow AI agents to autonomously execute on-chain trades and interact with DeFi protocols. The move aims to bridge the gap between autonomous AI execution and the strict security requirements of self-custody.

The wallet is currently in an Early Access Program with approximately 200 users, with a wider rollout expected later this summer. To prevent the risks associated with giving large language models (LLMs) direct access to raw private keys, MetaMask utilizes Cubist's trusted execution environment (TEE) technology. This ensures private keys remain in a hardware-isolated enclave during the signing process.

Technical support extends to EVM-compatible chains and Hyperliquid, with integrations for frameworks such as OpenAI Codex, Claude Code, Cursor, OpenClaw, and Hermes Agent. To manage risk, the wallet offers two distinct operating modes: "Guard Mode," which requires pre-approved allowlists for all interactions, and "Beast Mode," which allows for more independent operation but triggers two-factor authentication (2FA) for transactions flagged as malicious. The security stack is further bolstered by Blockaid-powered threat scanning, transaction simulation, scam and malicious-contract detection, Clear Signing, and Servo MEV protection. Additionally, eligible transactions are backed by protection coverage of up to $10,000 per month.

The Shift to Agentic Infrastructure

This launch follows a broader industry trend toward "agentic" crypto infrastructure, with Coinbase and MoonPay recently introducing similar capabilities. The primary driver is the inherent vulnerability of AI models to prompt injection attacks. As Zhen Yu Yong, MetaMask Senior Director of Product, noted, prompt injection is an "open research problem" rather than a patchable bug, meaning LLMs cannot be guaranteed to resist manipulation.

Implications for Self-Custody

By moving the security layer from the AI model to the wallet level via TEEs and hard guardrails, MetaMask is attempting to standardize how autonomous agents interact with financial protocols. This shift effectively transforms the wallet into a security policy layer, ensuring that the rise of AI does not lead to a regression in custodial safety. According to Yong, if the first generation of trading agents normalizes the surrender of private keys, the industry risks rebuilding the same custodial mistakes that crypto spent a decade attempting to escape.

What to Watch

As the program moves beyond its initial 200-user cohort, the industry will be watching to see if the "Guard" and "Beast" modes provide enough flexibility for complex DeFi strategies without compromising security. The success of this rollout will likely determine whether TEE-based isolation becomes the standard for the emerging "AI x Crypto" thesis.