- Pricing
- free, open source
- Best for
- Agent wallets · EVM chains, Solana
- Money access
- live and testnet
AI agent wallets with spending limits (2026)
Who it's for: Builders giving an AI agent its own crypto wallet who want spending limits, allowlists and human approval enforced where the agent can't switch them off.
What can this agent do with your money? We score how much an AI agent could lose if it is wrong, hacked or prompt-injected, from official docs only. How we score it · Incident tracker
Agent Risk Scores
| Tool | Agent Risk Score | Points | Section | Missing inputs |
|---|---|---|---|---|
| Privy server wallets | Agent risk 63% | 63 / 100 | Agent wallets | none |
| Safe Smart Account | Agent risk 100% (partial, 6 of 7 inputs) | 90 / 90 | Agent wallets | preview |
| ZeroDev | Agent risk 88% (partial, 5 of 7 inputs) | 66 / 75 | Agent wallets | approval, preview |
| Crossmint Agent Wallets | Agent risk 67% (partial, 6 of 7 inputs) | 60 / 90 | Agent wallets | preview |
| Turnkey | Agent risk 64% (partial, 6 of 7 inputs) | 58 / 90 | Agent wallets | preview |
| Coinbase CDP Server Wallets | Agent risk 56% (partial, 6 of 7 inputs) | 50 / 90 | Agent wallets | preview |
| Coinbase AgentKit | Agent risk 38% (partial, 6 of 7 inputs) | 34 / 90 | Agent wallets | preview |
Compared
| Tool | Safety and access | Live / paper | Pricing | Visit |
|---|---|---|---|---|
| open-source toolkit giving an AI agent its own wallet (CDP, Privy or keypair providers) with transfer, swap and custom actions; use testnets and spending limits first | live and testnet | free, open source; CDP usage may be billed | Visit Coinbase AgentKit | |
| server wallets for agents and backends: Coinbase keeps private keys inside a Trusted Execution Environment and your server controls the accounts with API keys; a Policy Engine accepts or rejects each operation by destination address, value and network before signing; no human-approval step in the policy docs | live and testnet (the quickstart runs on Base Sepolia with CDP Faucets) | first 5,000 wallet operations per month free, then $0.005 per operation | Visit Coinbase CDP Server Wallets | |
| wallets your backend or agent controls through authorization keys; keys are split into shares and only reassembled inside a trusted execution environment (AWS Nitro Enclaves), which checks policies before signing: transfer limits per transaction or time window, recipient and contract allowlists; key quorums can require m-of-n approvals, including a user | live and testnet (the REST quickstart sends a Sepolia transaction) | free Developer plan up to 499 monthly active users with 50K signatures and $1M transaction volume a month; Core $299/mo, Scale $499/mo, Enterprise custom | Visit Privy server wallets | |
64Turnkey | key infrastructure where keys are only decrypted inside secure enclaves, where the signer and the policy engine run; policies can check value (eth.tx.value) and recipient (eth.tx.to) and set a consensus of users who must approve an action | live; official code examples sign on testnets (Dogecoin, Tron, Celestia, Arc, Tempo) | Pay as You Go: 25 free signatures a month, then $0.10 per signature; Pro $99/mo plus $0.05 per signature; Enterprise custom | Visit Turnkey |
| the user or your backend holds the root key; the agent holds a delegated key bound to a permission set the owner approves (spend cap, allowed counterparties, time window), enforced on-chain; the agent then signs with no prompt per action, and removing the agent signer ends its access | live and staging (staging is connected to testnets, funded with test tokens of no value) | 1,000 monthly active wallets free; overages start at $0.025 per monthly active user (the pricing table also says from $0.02 per monthly active wallet) | Visit Crossmint Agent Wallets | |
| open-source multisig smart account: Safe's AI-agent guide makes the agent one signer with a threshold that needs at least one human approval; an allowance module can give the agent a per-token spending limit that resets on a schedule; guards can check every transaction | live; contracts are deployed on many networks (see Safe's supported-networks list) | open-source contracts (LGPL-3.0); network gas fees apply | Visit Safe Smart Account | |
88ZeroDev | Kernel smart accounts with permissions: you keep the main key and give an agent a session key limited by policies (allowed contracts and functions, a value limit, rate limits, gas and time windows), checked by the account's permission validator on-chain | live and testnet (the free Sandbox plan is testnet only) | Sandbox $0/mo (testnet only, 10,000 credits); Launch $69/mo; Scale $399/mo; Enterprise custom | Visit ZeroDev |
- Pricing
- first 5,000 wallet operations per month free, then $0.005 per operation
- Best for
- Agent wallets · EVM networks (e.g. Base)
- Money access
- live and testnet (the quickstart runs on Base Sepolia with CDP Faucets)
- Pricing
- free Developer plan up to 499 monthly active users with 50K signatures and $1M…
- Best for
- Agent wallets · Ethereum and EVM chains, Solana
- Money access
- live and testnet (the REST quickstart sends a Sepolia transaction)
- Pricing
- Pay as You Go: 25 free signatures a month, then $0.10 per signature
- Best for
- Agent wallets · EVM chains, Solana, Bitcoin, Dogecoin, Tron, Cosmos and other chains
- Money access
- live
- Pricing
- 1,000 monthly active wallets free
- Best for
- Agent wallets · stablecoins (e.g. USDC), on-chain payments
- Money access
- live and staging (staging is connected to testnets, funded with test tokens of no value)
- Pricing
- open-source contracts (LGPL-3.0)
- Best for
- Agent wallets · EVM chains
- Money access
- live
- Pricing
- Sandbox $0/mo (testnet only, 10,000 credits)
- Best for
- Agent wallets · EVM chains (ERC-4337 smart accounts)
- Money access
- live and testnet (the free Sandbox plan is testnet only)
FAQ
What is an AI agent wallet?
A wallet an AI agent can use to sign transactions on its own, with limits set by a key the agent doesn't control: either a policy engine run by the provider in a secure environment (Coinbase CDP Server Wallets, Privy, Turnkey) or an on-chain smart account with delegated keys, session keys or modules (Crossmint, Safe, ZeroDev).
Which agent wallets can require a human to approve?
Required: Safe Smart Account. Optional: Privy server wallets, Turnkey, Coinbase AgentKit. Each tool page links the vendor's docs for the approval setup.
Does Coinbase AgentKit limit what my agent can spend?
Not by itself. AgentKit's README says it does not gate transfers behind human approval, enforce spend caps or allowlist destinations. Use the wallet provider's policies (for example the CDP Policy Engine) or your own guardrails.