MetaMask just opened the door to something that feels genuinely different in crypto. On June 9, 2026, the wallet provider launched early access for MetaMask Agent Wallet AI crypto trading, a product that lets AI agents execute onchain trades autonomously under rules set entirely by the user. It is MetaMask’s most direct move yet into AI-powered trading, and the launch is already drawing attention from developers, DeFi traders, and anyone watching how AI is reshaping decentralized finance.
The idea is straightforward, but the implications run deep. Rather than a human manually approving each swap or liquidity position, an AI agent gets its own dedicated wallet and can transact across supported networks within boundaries the user defines. Spending caps, protocol allowlists, and network restrictions set the rules before the agent touches a single dollar. The user stays in control, while the agent does the legwork.
It ships first as a command-line interface tool, which makes the target audience clear: developers and advanced traders already comfortable in terminal environments.
The reach of the product at launch is already substantial. MetaMask Agent Wallet supports 10 blockchain networks: Ethereum, Linea, Arbitrum, Avalanche, Optimism, Base, Polygon, BSC, Sei, and Hyperliquid. That coverage spans some of the most active DeFi ecosystems in crypto, from Ethereum’s deep liquidity pools to Base’s fast-growing activity and Hyperliquid’s onchain derivatives markets.
For AI agents operating in this environment, multi-chain access is not a nice-to-have. It is the point. DeFi opportunities often appear across different chains at the same time, and an agent that can only operate on one network is severely limited. By covering 10 chains from day one, MetaMask is signaling that Agent Wallet is built for serious trading strategies rather than simple single-chain experiments.
MetaMask currently counts over 10.5 million unique users, with Ethereum and BNB Chain as its most active networks, according to Dune Analytics. Agent Wallet is a direct play to deepen engagement among the most active segment of that user base.
The architecture of MetaMask Agent Wallet is built around one core principle: the user stays in charge. Before an AI agent executes anything, users configure daily spend limits and protocol allowlists that define exactly where and how the agent can operate. If a transaction falls outside those parameters, it does not go through.
That is not just a safety feature. It is a fundamental design choice. The risk of handing autonomous trading over to an AI agent is real, and MetaMask’s approach addresses it by keeping humans firmly in the loop at the configuration level.
When a transaction is flagged as malicious or steps outside user-defined rules, execution pauses immediately. The user then receives a two-factor authentication prompt through a MetaMask Mobile push notification or an email link. Nothing proceeds until that action is explicitly approved or rejected.
This mechanism is central to the trust model MetaMask is building around agentic trading. It means that even if an AI agent encounters an edge case or a malicious interaction, a human still has a clear off-ramp before any funds move.
Every transaction processed through Agent Wallet on supported networks passes through four distinct security checks:
The involvement of Blockaid, a recognized blockchain security firm, adds credibility to the threat-detection layer. MEV protection addresses one of DeFi’s persistent problems, where bots exploit transaction ordering to extract value from traders. The $10,000 monthly coverage under MetaMask’s Transaction Protection program adds another layer of financial assurance for eligible transactions.
Together, those four layers represent a serious attempt to make autonomous AI trading safer in an environment that has historically punished careless security practices.
MetaMask built two distinct configurations into Agent Wallet for early access users, and the naming choices say a lot about the intended audience.
Guard Mode is the default. It enforces strict policy controls across the board, so spend limits, network allowlists, and 2FA approval apply to every transaction without exception. This is the setting for users who want automation without surprises.
Beast Mode is the opt-in alternative. It is designed for traders and developers who find constant interruptions disruptive to fast-moving strategies. Security scanning and 2FA for flagged malicious transactions remain active in Beast Mode, but the agent operates with broader latitude around policy edge cases. In both modes, users retain full key ownership and final authority over their transactions.
The existence of Beast Mode is notable. It acknowledges that strict control mechanisms, while protective, can create friction that sophisticated users will not tolerate. By offering a relaxed-policy mode that still preserves core security scanning, MetaMask is trying to serve two different user profiles within one product without compromising the security floor.
The decision to launch as a command-line interface tool is a deliberate narrowing of the audience, at least initially. The CLI format targets developers and advanced crypto traders already working in agent frameworks and terminal environments.
Agent Wallet supports a wide range of agent integrations, including OpenClaw, OpenAI Codex, Claude Code, Nous Research Hermes Agent, and Cursor, among others. That is a meaningful list because it covers several of the most widely used AI coding and agent tools in active developer workflows. In practice, that suggests MetaMask is positioning Agent Wallet to slot into existing pipelines rather than asking developers to rebuild around a new system.
The early access period is explicitly framed as a feedback loop. MetaMask wants input from experienced users before broadening the product to a general audience.
One of the trickier problems in agentic crypto trading is key security. If an AI agent needs wallet access to transact, how do you prevent that access from becoming a vulnerability?
MetaMask’s answer is a trusted execution environment, or TEE, a protected hardware enclave where private keys are secured but never exposed to the broader system. The architecture preserves full user key ownership, meaning users can export their recovery phrase at any time and leave with their keys if they choose. Security lives in hardware, but control stays with the user.
This approach matters because it separates key custody from agent access in a meaningful way. The agent can transact within its rules, but it does not hold the keys in any portable or extractable sense.
MetaMask has set a summer 2026 timeline for the general public release of Agent Wallet. The early access window is designed to gather structured feedback from the developer and advanced trader community before the product scales to MetaMask’s broader user base.
MetaMask Director of Product Christian Montoya previously echoed CEO Joe Lubin’s framing of MetaMask as “a magic wand that hides all of the math and allows you to use Ethereum effectively.” Agent Wallet extends that vision by abstracting the complexity of DeFi execution behind an AI agent while keeping the user firmly anchored to the outcome.
The question heading into the summer release is not really whether the product works. The real test is whether mainstream crypto users are ready to hand trading decisions to an AI agent, even a well-controlled one. Agent Wallet’s design gives them every reason to trust the system. Whether they take that step is a different question entirely, and the answer will say a lot about where DeFi adoption goes next.
At launch, MetaMask Agent Wallet supports 10 networks: Ethereum, Linea, Arbitrum, Avalanche, Optimism, Base, Polygon, BSC, Sei, and Hyperliquid.
Any transaction flagged as malicious or that falls outside user-defined rules is automatically paused. The user then receives a two-factor authentication prompt via MetaMask Mobile or email and must approve or reject the action before it can proceed.
MetaMask has planned a general public release for summer 2026, following the current early access period aimed at advanced traders and developers.


