MetaMask has opened Agent Wallet to everyone, a self-custodial wallet built to let AI agents sign transactions without a human tapping approve at every step. The product had been running since June in early access with roughly 200 users. Two modes frame how much autonomy an agent gets, and coverage of up to $10,000 a month applies to transactions cleared as safe.
Key Takeaways
- MetaMask opens its AI agent wallet to all after a 200-user test phase
- Guard Mode enforces caps and 2FA, Beast Mode only pulls the human in on threats
- Ten networks supported, six agent frameworks compatible, $10,000 monthly coverage
Two Modes to Set the Leash Length
The product rests on an inversion: the agent signs, the human arbitrates exceptions. MetaMask built two distinct regimes so users decide when they get pulled back into the loop.
Guard Mode ships as the default and the stricter of the two. It enforces daily spend limits, confines the agent to an allowlist of protocols, and pauses any transaction that breaks policy until two-factor approval lands. The Consensys documentation on how Agent Wallet handles approvals walks through that chain, which runs through the mobile app or an emailed approval link.
Beast Mode is opt-in and loosens the grip. Interruptions disappear on internal policy edge cases, and two-factor approval only fires on transactions flagged as malicious. The dial moves from compliance to threat, which changes the wallet’s risk profile entirely.
Under both regimes, every transaction crosses the same technical pipeline before execution. Simulation, threat scanning and MEV protection apply without the agent being able to route around them. Gas abstraction rounds it out, letting fees be paid in the asset being moved rather than the network’s native token.
Ten Networks, Six Frameworks, $10,000 of Cover
Network coverage is broad from day one. Ethereum, Linea, Arbitrum, Avalanche, Optimism, Base, Polygon, BSC, Sei and Hyperliquid are all supported, which puts the tool across nearly all active EVM liquidity.
On scope, the agent reaches swaps, perpetuals, prediction markets and liquidity provision. It can run the full playbook an advanced user runs by hand, leverage included. The Hyperliquid integration lands at a tense moment for that protocol, which just unlocked $817M of HYPE on Fed day.
Software compatibility was designed to close no doors. Claude Code, Codex, Cursor, OpenClaw, Hermes and OpenCode are all supported, making the wallet agnostic to whichever agent framework a developer already runs.
The financial cover is the line cautious users will read twice. MetaMask offers up to $10,000 per month on transactions its pipeline clears as safe. That ceiling draws a clean perimeter: it protects the individual running experiments, not a treasury deploying serious size. Worth remembering after the $35M drained from three DeFi protocols in six hours, where no cover existed at all.
Also on Cryptonomic:
- XRP Slides as Clarity Act Vote Moves to September
- Binance Sues RedotPay for $473M Over 470,000 Users
- Robinhood Chain Tops $70M in Tokenized Stocks
Consensys Bets on the Agent Economy
Joe Lubin, founder and chief executive of Consensys, framed the launch around a single claim: the next great expansion of the onchain economy will not be driven by humans alone. He insisted that security has to sit inside every layer of the stack rather than be bolted on afterward.
The number behind that pitch is the agent market itself, projected to grow from $5.4 billion in 2024 to $236 billion by 2034. That trajectory is what Consensys wants to capture, positioning itself as the signing layer rather than the model provider.
Near term, the sharpest risk is not theft but execution drift. An agent looping on a losing strategy burns capital without tripping a single security alert, because each individual transaction is perfectly legitimate. In a market where US exchange Kraken already dumped LayerZero after a $292M hack, liability for automated losses is still an open question.
Further out, autonomous agents on DEXs reshape market microstructure. Orders fired at machine cadence, without fatigue or hesitation, change book depth and how fast moves propagate. Protocols designed for humans will have to adapt to counterparties that never sleep.
Then there is the regulatory hole, which is complete. No US or European text currently says who answers for a transaction signed by an agent: the wallet publisher, the model provider, or the key holder. The legal vacuum is total here, and it will likely outlast the product cycle.
The 200-tester figure from June sets the scale of what comes next. Going from two hundred vetted users to an open base multiplies agent configurations, prompt mistakes and improvised strategies. The first weeks will show whether the security chain holds at that volume.
Follow the story on Cryptonomic.
