AI agent wallets with spending limits (2026)

7 wallets and toolkits that let an AI agent hold and move crypto, scored on what they let it lose: who holds the keys, which limits the agent can't override, and whether a human approves. Checked against official sources 2026-10-26.

Build an AI agent

Who it's for: Builders giving an AI agent its own crypto wallet who want spending limits, allowlists and human approval enforced where the agent can't switch them off.

Every fact sourced · last checked 2026-10-26 · how we verify

⚠ Risk note. An agent wallet limits what a bug or a prompt injection can cost; it doesn't make a strategy safe. Limits only protect you when the wallet, smart account or signer enforces them, not the agent's prompt. Start on testnet and fund the wallet with only what the agent may lose. Not financial advice.

What can this agent do with your money? We score how much an AI agent could lose if it is wrong, hacked or prompt-injected, from official docs only. How we score it · Incident tracker

Agent Risk Scores

ToolAgent Risk ScorePointsSectionMissing inputs
Privy server walletsAgent risk 63%63 / 100Agent walletsnone
Safe Smart AccountAgent risk 100% (partial, 6 of 7 inputs)90 / 90Agent walletspreview
ZeroDevAgent risk 88% (partial, 5 of 7 inputs)66 / 75Agent walletsapproval, preview
Crossmint Agent WalletsAgent risk 67% (partial, 6 of 7 inputs)60 / 90Agent walletspreview
TurnkeyAgent risk 64% (partial, 6 of 7 inputs)58 / 90Agent walletspreview
Coinbase CDP Server WalletsAgent risk 56% (partial, 6 of 7 inputs)50 / 90Agent walletspreview
Coinbase AgentKitAgent risk 38% (partial, 6 of 7 inputs)34 / 90Agent walletspreview

Points per input, with the source for each, are on every tool page. How the score works.

Compared

ToolSafety and accessLive / paperPricingVisit
open-source toolkit giving an AI agent its own wallet (CDP, Privy or keypair providers) with transfer, swap and custom actions; use testnets and spending limits firstlive and testnetfree, open source; CDP usage may be billedVisit Coinbase AgentKit
server wallets for agents and backends: Coinbase keeps private keys inside a Trusted Execution Environment and your server controls the accounts with API keys; a Policy Engine accepts or rejects each operation by destination address, value and network before signing; no human-approval step in the policy docslive and testnet (the quickstart runs on Base Sepolia with CDP Faucets)first 5,000 wallet operations per month free, then $0.005 per operationVisit Coinbase CDP Server Wallets
wallets your backend or agent controls through authorization keys; keys are split into shares and only reassembled inside a trusted execution environment (AWS Nitro Enclaves), which checks policies before signing: transfer limits per transaction or time window, recipient and contract allowlists; key quorums can require m-of-n approvals, including a userlive and testnet (the REST quickstart sends a Sepolia transaction)free Developer plan up to 499 monthly active users with 50K signatures and $1M transaction volume a month; Core $299/mo, Scale $499/mo, Enterprise customVisit Privy server wallets
key infrastructure where keys are only decrypted inside secure enclaves, where the signer and the policy engine run; policies can check value (eth.tx.value) and recipient (eth.tx.to) and set a consensus of users who must approve an actionlive; official code examples sign on testnets (Dogecoin, Tron, Celestia, Arc, Tempo)Pay as You Go: 25 free signatures a month, then $0.10 per signature; Pro $99/mo plus $0.05 per signature; Enterprise customVisit Turnkey
the user or your backend holds the root key; the agent holds a delegated key bound to a permission set the owner approves (spend cap, allowed counterparties, time window), enforced on-chain; the agent then signs with no prompt per action, and removing the agent signer ends its accesslive and staging (staging is connected to testnets, funded with test tokens of no value)1,000 monthly active wallets free; overages start at $0.025 per monthly active user (the pricing table also says from $0.02 per monthly active wallet)Visit Crossmint Agent Wallets
open-source multisig smart account: Safe's AI-agent guide makes the agent one signer with a threshold that needs at least one human approval; an allowance module can give the agent a per-token spending limit that resets on a schedule; guards can check every transactionlive; contracts are deployed on many networks (see Safe's supported-networks list)open-source contracts (LGPL-3.0); network gas fees applyVisit Safe Smart Account
Kernel smart accounts with permissions: you keep the main key and give an agent a session key limited by policies (allowed contracts and functions, a value limit, rate limits, gas and time windows), checked by the account's permission validator on-chainlive and testnet (the free Sandbox plan is testnet only)Sandbox $0/mo (testnet only, 10,000 credits); Launch $69/mo; Scale $399/mo; Enterprise customVisit ZeroDev

Trading on-chain through Telegram bots or DEX APIs instead? See On-chain and DeFi agents. Exchange keys for bots: Crypto exchanges for bots.

Privy server wallets

Agent walletsofficial
63
Pricing
free Developer plan up to 499 monthly active users with 50K signatures and $1M…
Best for
Agent wallets · Ethereum and EVM chains, Solana
Money access
live and testnet (the REST quickstart sends a Sepolia transaction)
Agent risk 63%✓ Verified 2026-10-26Details →

Turnkey

Agent walletsofficial
64
Pricing
Pay as You Go: 25 free signatures a month, then $0.10 per signature
Best for
Agent wallets · EVM chains, Solana, Bitcoin, Dogecoin, Tron, Cosmos and other chains
Money access
live

ZeroDev

Agent walletsofficial
88
Pricing
Sandbox $0/mo (testnet only, 10,000 credits)
Best for
Agent wallets · EVM chains (ERC-4337 smart accounts)
Money access
live and testnet (the free Sandbox plan is testnet only)

FAQ

What is an AI agent wallet?

A wallet an AI agent can use to sign transactions on its own, with limits set by a key the agent doesn't control: either a policy engine run by the provider in a secure environment (Coinbase CDP Server Wallets, Privy, Turnkey) or an on-chain smart account with delegated keys, session keys or modules (Crossmint, Safe, ZeroDev).

Which agent wallets can require a human to approve?

Required: Safe Smart Account. Optional: Privy server wallets, Turnkey, Coinbase AgentKit. Each tool page links the vendor's docs for the approval setup.

Does Coinbase AgentKit limit what my agent can spend?

Not by itself. AgentKit's README says it does not gate transfers behind human approval, enforce spend caps or allowlist destinations. Use the wallet provider's policies (for example the CDP Policy Engine) or your own guardrails.

More in Build an AI agent

Other paths: Trade with a bot · Markets & infrastructure · Learn · Search all tools

Check a wallet before you connect an agent

Official links, the worst case for your money and a safe setup, every line sourced. Check any link.

Get the weekly agent risk update

New Agent Risk Scores, incidents and safety changes for the wallets, exchanges and brokers AI agents use. One email a week, unsubscribe anytime.

No spam. Unsubscribe anytime. Privacy