# MetaMask Agent Wallet: AI Agents Get a Crypto Wallet With Guardrails > Source: > Published: 2026-06-13 22:08:55+00:00 Your AI agent can already spin up cloud infrastructure, write and deploy code, and send emails on your behalf. The only thing stopping it from managing your DeFi portfolio was the lack of a wallet architecture that wouldn’t immediately destroy you financially if something went wrong. Handing an agent a raw private key is the crypto equivalent of giving someone your banking password and hoping they don’t touch the savings account. MetaMask just built the safer alternative. On June 8, 2026, MetaMask launched **Agent Wallet** in early access — a self-custodial wallet built specifically for AI agents, not humans. The distinction matters. Regular wallets are designed around a single assumption: the person holding the key makes every decision. Agent Wallet flips that. You set the rules. The agent executes within them. ## Why Raw Private Keys Were Never the Answer Before Agent Wallet, the standard approach for giving an AI agent crypto access was ugly: export your private key, paste it into an environment variable, and hope nothing leaked. There were no spend limits, no protocol restrictions, no kill switch. One prompt injection or misconfigured agent later, and your wallet was empty. This isn’t hypothetical. A $45M breach in early 2026 was traced back to AI trading agents with unguarded key access. The pattern is almost identical to the [AI agent that racked up $6,531 in AWS charges overnight](https://byteiota.com/ai-agent-racked-up-6531-in-aws-charges-overnight/) — an agent with unchecked access to a resource will eventually find the most expensive path. In crypto, that bill is paid in funds, not a receipt you can dispute. ## How Agent Wallet Works Every transaction an agent initiates runs through a mandatory three-step pipeline before anything hits the chain: **Transaction simulation**— the outcome is previewed before execution** Blockaid threat scanning**— malicious contracts, drainers, and known attack patterns are flagged** MEV protection**— sandwich attacks blocked before submission Beyond the transaction pipeline, Agent Wallet gives you a policy engine. Before your agent touches a single token, you define daily spend limits, allowlisted protocols, and allowlisted chains. Any transaction that falls outside those parameters pauses and requires 2FA approval from you before it proceeds. The agent’s private keys live in a Trusted Execution Environment (TEE), which means MetaMask itself cannot extract them. The agent also gets its own isolated wallet — separate from your main holdings. If something goes wrong, the blast radius is bounded by whatever you funded it with. ## Guard Mode and Beast Mode Agent Wallet ships with two operating modes worth understanding: **Guard Mode** is the default. Full policy enforcement applies: spend limits are hard caps, allowlists restrict which protocols the agent can touch, and any out-of-policy transaction stops and pings you for 2FA. This is the right setting if you are still testing your agent’s behavior or running significant capital. **Beast Mode** is opt-in. The security pipeline still runs on every transaction — Blockaid scanning, MEV protection, and 2FA for flagged transactions don’t go away. What changes is that policy edge cases get more latitude. Think of it as loosening the leash without removing the collar. The security architecture is identical in both modes. Beast Mode is not “no guardrails.” It is “trust your policy setup more.” ## What It Supports At launch, Agent Wallet covers 10 networks: Ethereum, Arbitrum, Base, Polygon, Optimism, Avalanche, Linea, BSC, Sei, and Hyperliquid. Supported DeFi operations include token swaps, perpetual futures, prediction markets, and LP positions. On the agent framework side, MetaMask has confirmed compatibility with Claude Code, OpenAI Codex, OpenCode, Cursor, and Nous Research Hermes. If your agent communicates over MCP, it connects. ## Getting Started Access is through the [early access program](https://metamask.io/news/introducing-metamask-agent-wallet), which opened with 200 spots. General availability is targeted for summer 2026. The CLI setup is three commands: ``` npm install -g @metamask/agentic-cli mm init mm connect --framework claude-code ``` `mm init` walks you through setting spend limits, allowlists, and choosing your operating mode. The [MetaMask Agent Wallet documentation](https://docs.metamask.io/agent-wallet/) covers the full setup, including the [server wallet design guide](https://docs.metamask.io/tutorials/design-server-wallets/) for teams building production agent systems. Transactions that pass all security checks but still result in a loss are covered up to $10,000/month through MetaMask’s Transaction Protection program. ## The Bigger Picture MetaMask Agent Wallet is not the first AI-adjacent DeFi product, but it is the first one built around the assumption that the agent is the primary actor, not an add-on. The underlying infrastructure — ERC-8004 for on-chain agent identity, ERC-7710 for delegation, ERC-7715 for scoped session keys — has been assembling quietly on Ethereum mainnet since early 2026. Agent Wallet is the first product that packages it into something deployable in an afternoon. Developers building agents that need to interact with DeFi now have a production-grade option that does not require them to choose between functionality and financial safety. If you’re in that group, the [early access program](https://metamask.io/news/metamask-launches-agent-wallet-giving-ai-agents-full-defi-access-with-default-security-on-every-transaction) is your next stop. The waitlist is short and the GA window is this summer.