The bots are coming for DeFi — and MetaMask just handed them a key, but not a blank check. On June 8, 2026, the self-custody wallet drew a hard line: AI agents can trade, but they can't switch off the security checks.
What MetaMask Actually Launched — and What It Isn't
MetaMask Agent Wallet is a purpose-built signing and execution layer that lets autonomous AI agents hold transaction authority across Ethereum and other EVM chains while the human keeps self-custody. ConsenSys opened early access on June 8, 2026. It is a command-line product for accepted developers and traders — not a UI update to the familiar browser extension.
Quick Answer: MetaMask Agent Wallet, launched June 8, 2026, gives AI agents a dedicated, scoped wallet to trade DeFi while users keep self-custody. It began as CLI-only early access — roughly 200 users — with general availability targeted for summer 2026.
The scope matters. Agents do not take over your main MetaMask account. Each agent receives its own dedicated wallet with permissions you set before any trade, then connects through the CLI. General availability is targeted for summer 2026, with sign-up at metamask.io/agent-wallet .
Key security sits inside a trusted execution environment (TEE), reported by Decrypt as supplied by Cubist, so signing happens in a secured enclave and key material stays inaccessible to both MetaMask and ConsenSys . Self-custody is preserved: users hold their own keys and can export their recovery phrase at any time .
"The next great expansion of the onchain economy won't be driven by humans alone. Agents will manage real capital and make real financial decisions, and the infrastructure underneath has to be worthy of that," — Joe Lubin, CEO of ConsenSys and Ethereum co-founder (source: CoinDesk).
The Security Pipeline Every Agent Transaction Must Clear
Every supported transaction runs through a mandatory three-part security pipeline that agents cannot opt out of. Before any signature is finalized, MetaMask Agent Wallet enforces transaction simulation, threat scanning via Transaction Shield powered by Blockaid, and MEV protection via Smart Transactions . This directly targets the core crypto-agent failure mode: a freely signing bot exposed to prompt injection, malicious contracts, or bad routing causing irreversible loss .
The wallet runs two modes. Guard Mode, the default, enforces user-defined daily spend limits, protocol allowlists, and policy rules. Out-of-policy transactions pause for 2FA via a MetaMask Mobile push or email link, and stale approvals auto-decline after 5 minutes . Beast Mode, opt-in, reduces policy-edge interruptions but still runs every security check and still forces 2FA on any transaction flagged as malicious .
Safe transactions can be backed by Transaction Protection, but the terms are narrower than blanket insurance:
- Coverage up to $10,000 per month, capped at 100 eligible transactions .
- Standalone Transaction Shield costs $9.99 monthly or $99 yearly; claims must be filed within 21 days .
- Exclusions include compromised seed phrases or private keys, hacked protocols, speculative losses, and high-risk or ineligible transaction types .
At launch, the full pipeline applies across nine networks: Ethereum, Linea, Arbitrum, Avalanche, Optimism, Base, Polygon, BSC, and Sei . MetaMask advertises broader EVM and some non-EVM connectivity, but full protection and Blockaid scanning are bounded by this smaller supported-network list and eligibility rules .
How Agent Permissions Are Scoped: ERC-7710 and ERC-7715 in Practice
The Agent Wallet does not hand a bot unlimited access; it grants narrow, revocable permissions built on MetaMask's Delegation Toolkit and Smart Accounts Kit . Two Ethereum standards do the work. ERC-7710 defines the smart-contract delegation interfaces that specify how delegated capabilities are redeemed through a delegation manager (created May 20, 2024) . ERC-7715 defines the wallet permission-request methods that let an agent ask for scoped, pre-approved "session key" permissions (created May 24, 2024) .
In practice, that means an agent operates inside bounded authority rather than holding the keys outright. MetaMask's Smart Accounts Kit documentation shows a concrete case: an agent can be granted permission to spend 10 USDC per day to buy ETH, without requiring per-transaction approval . The grant is least-privilege and revocable at any time, so a user can cut off access the moment behavior looks wrong.
This design directly targets the agent failure mode. By capping spend, restricting protocols, and keeping permissions revocable, the model is built to contain damage from prompt injection or a malicious contract call rather than relying on the bot to behave.
The toolkit is also framework-agnostic. MetaMask names compatible environments including:
- OpenAI Codex and Claude Code
- Cursor and OpenCode
- Nous Research Hermes Agent and Hermes
- OpenClaw
Agent output is returned as structured JSON that large language models can parse, letting developers wire the wallet into existing agent stacks without bespoke integration work .
What to Watch: Competition, Caveats, and the Real Open Question
MetaMask is not alone in this race, and its headline pitch deserves scrutiny. The company's claim to be the first self-custodial agent wallet making security mandatory on every transaction is a product marketing claim, not an independently benchmarked standard. Rivals shipped comparable architectures earlier in 2026, and the infrastructure layer is converging fast rather than fragmenting.
The competitive field already includes two credible challengers:
- Coinbase Agentic Wallets — announced February 11, 2026, non-custodial, TEE-backed, with programmable guardrails.
- Cobo Agentic Wallet — launched in 2026 using MPC security, human-agent authorization, and policy-bounded execution [Cobo, 2026].
Interoperability signals matter more than any single launch. ConsenSys has committed to supporting x402, the open-source agentic-payments standard originated by Coinbase, and Google's Agent Payments Protocol (AP2); its Decentralized Infrastructure Network already handles x402 micropayments [ConsenSys]. Competitors building toward shared payment rails suggests the agent-wallet stack is standardizing, not splintering into walled gardens.
The market sizing behind all this is a forecast, not onchain data. MetaMask cites projected AI-agent growth from roughly $5.4 billion in 2024 to $236 billion by 2034 — a third-party market projection that should be read as a directional bet, not a settled number.
That leaves the real open question. Joe Lubin, ConsenSys CEO and Ethereum co-founder, argues "the infrastructure underneath has to be worthy of" agents managing real capital (source: CoinDesk, 2026-06). Whether transaction simulation, Blockaid scanning, and human approval thresholds can contain agent errors at real trading speed — without throttling the product into uselessness — is the test that will decide if mandatory security is a moat or a marketing line.
Takeaway: treat MetaMask's Agent Wallet as one early entrant in a crowded, converging field. The deciding factor will not be who launched first, but whose guardrails survive contact with adversarial DeFi at machine speed.
Frequently asked questions
Is MetaMask Agent Wallet available now?
Not for everyone. As of June 8, 2026, Agent Wallet is in early access via a command-line interface, opened to roughly 200 accepted traders and developers. General availability is expected in summer 2026. You can request access at metamask.io/agent-wallet.
Does the AI agent control my main MetaMask wallet?
No. The agent receives a separate, agent-specific wallet and connects through the CLI, operating only inside rules you set before trading begins, according to The Block. Your main account stays under your control, and you can export your recovery phrase at any time, per MetaMask.
What blockchains does MetaMask Agent Wallet support?
At launch the full security pipeline runs on nine chains: Ethereum, Linea, Arbitrum, Avalanche, Optimism, Base, Polygon, BSC, and Sei. MetaMask advertises broader EVM and some non-EVM connectivity beyond these, but full threat-scanning and protection coverage are bounded by a narrower supported-network list, per the product page.
What is the $10,000 Transaction Protection and what does it exclude?
Transactions judged safe can be backed by Transaction Protection up to $10,000 per month across up to 100 eligible transactions, with claims required within 21 days. Standalone Transaction Shield costs $9.99 monthly or $99 yearly. It excludes compromised keys or seed phrases, hacked protocols, speculative losses, high-risk and P2P transactions, and ineligible networks, per MetaMask support.
How is MetaMask Agent Wallet different from Coinbase's Agentic Wallet?
Both are non-custodial and TEE-backed with policy-bounded execution. MetaMask emphasizes mandatory Blockaid threat-scanning and MEV protection on every supported transaction, per CoinDesk. Coinbase announced its Agentic Wallets on February 11, 2026, four months earlier. Neither claim has been independently benchmarked.
