# AI agent wallet security: risk scores compared (2026)

> AI agent wallet security compared: Coinbase CDP, Privy, Turnkey, Crossmint, Safe, ZeroDev and AgentKit, scored on custody, limits and approvals.

Canonical: https://tradingagentstack.com/ai-agent-wallets/

1. [Home](https://tradingagentstack.com/)

2. AI agent wallets

# AI agent wallets with spending limits (2026)

7 wallets and toolkits that let an AI agent hold and move crypto, scored on what they let it lose: who holds the keys, which limits the agent can't override, and whether a human approves. Checked against official sources 2026-10-26.
Build an AI agent

**Who it's for:** Builders giving an AI agent its own crypto wallet who want spending limits, allowlists and human approval enforced where the agent can't switch them off.

Every fact sourced · last checked 2026-10-26 · [how we verify](https://tradingagentstack.com/methodology/)

**⚠ Risk note.** An agent wallet limits what a bug or a prompt injection can cost; it doesn't make a strategy safe. Limits only protect you when the wallet, smart account or signer enforces them, not the agent's prompt. Start on testnet and fund the wallet with only what the agent may lose. Not financial advice.

**What can this agent do with your money?** We score how much an AI agent could lose if it is wrong, hacked or prompt-injected, from official docs only. [How we score it](https://tradingagentstack.com/methodology/#agent-risk-score) · [Incident tracker](https://tradingagentstack.com/incidents/)

## Agent Risk Scores

| Tool | Agent Risk Score | Points | Section | Missing inputs |
| --- | --- | --- | --- | --- |
| [Privy server wallets](https://tradingagentstack.com/tool/privy-server-wallets/#agent-risk-score) | [Agent risk 63%](https://tradingagentstack.com/methodology/#agent-risk-score) | 63 / 100 | Agent wallets | none |
| [Safe Smart Account](https://tradingagentstack.com/tool/safe-smart-account/#agent-risk-score) | [Agent risk 100% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score) | 90 / 90 | Agent wallets | preview |
| [ZeroDev](https://tradingagentstack.com/tool/zerodev/#agent-risk-score) | [Agent risk 88% (partial, 5 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score) | 66 / 75 | Agent wallets | approval, preview |
| [Crossmint Agent Wallets](https://tradingagentstack.com/tool/crossmint-agent-wallets/#agent-risk-score) | [Agent risk 67% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score) | 60 / 90 | Agent wallets | preview |
| [Turnkey](https://tradingagentstack.com/tool/turnkey/#agent-risk-score) | [Agent risk 64% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score) | 58 / 90 | Agent wallets | preview |
| [Coinbase CDP Server Wallets](https://tradingagentstack.com/tool/coinbase-cdp-server-wallets/#agent-risk-score) | [Agent risk 56% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score) | 50 / 90 | Agent wallets | preview |
| [Coinbase AgentKit](https://tradingagentstack.com/tool/coinbase-agentkit/#agent-risk-score) | [Agent risk 38% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score) | 34 / 90 | Agent wallets | preview |

Points per input, with the source for each, are on every tool page. [How the score works](https://tradingagentstack.com/methodology/#agent-risk-score).

## Compared

| Tool | Safety and access | Live / paper | Pricing | Visit |
| --- | --- | --- | --- | --- |
| **38**[Coinbase AgentKit](https://tradingagentstack.com/tool/coinbase-agentkit/) | open-source toolkit giving an AI agent its own wallet (CDP, Privy or keypair providers) with transfer, swap and custom actions; use testnets and spending limits first | live and testnet | free, open source; CDP usage may be billed | [Visit Coinbase AgentKit](https://tradingagentstack.com/go/coinbase-agentkit/?from=/ai-agent-wallets/) |
| **56**[Coinbase CDP Server Wallets](https://tradingagentstack.com/tool/coinbase-cdp-server-wallets/) | server wallets for agents and backends: Coinbase keeps private keys inside a Trusted Execution Environment and your server controls the accounts with API keys; a Policy Engine accepts or rejects each operation by destination address, value and network before signing; no human-approval step in the policy docs | live and testnet (the quickstart runs on Base Sepolia with CDP Faucets) | first 5,000 wallet operations per month free, then $0.005 per operation | [Visit Coinbase CDP Server Wallets](https://tradingagentstack.com/go/coinbase-cdp-server-wallets/?from=/ai-agent-wallets/) |
| **63**[Privy server wallets](https://tradingagentstack.com/tool/privy-server-wallets/) | wallets your backend or agent controls through authorization keys; keys are split into shares and only reassembled inside a trusted execution environment (AWS Nitro Enclaves), which checks policies before signing: transfer limits per transaction or time window, recipient and contract allowlists; key quorums can require m-of-n approvals, including a user | live and testnet (the REST quickstart sends a Sepolia transaction) | free Developer plan up to 499 monthly active users with 50K signatures and $1M transaction volume a month; Core $299/mo, Scale $499/mo, Enterprise custom | [Visit Privy server wallets](https://tradingagentstack.com/go/privy-server-wallets/?from=/ai-agent-wallets/) |
| **64**[Turnkey](https://tradingagentstack.com/tool/turnkey/) | key infrastructure where keys are only decrypted inside secure enclaves, where the signer and the policy engine run; policies can check value (eth.tx.value) and recipient (eth.tx.to) and set a consensus of users who must approve an action | live; official code examples sign on testnets (Dogecoin, Tron, Celestia, Arc, Tempo) | Pay as You Go: 25 free signatures a month, then $0.10 per signature; Pro $99/mo plus $0.05 per signature; Enterprise custom | [Visit Turnkey](https://tradingagentstack.com/go/turnkey/?from=/ai-agent-wallets/) |
| **67**[Crossmint Agent Wallets](https://tradingagentstack.com/tool/crossmint-agent-wallets/) | the user or your backend holds the root key; the agent holds a delegated key bound to a permission set the owner approves (spend cap, allowed counterparties, time window), enforced on-chain; the agent then signs with no prompt per action, and removing the agent signer ends its access | live and staging (staging is connected to testnets, funded with test tokens of no value) | 1,000 monthly active wallets free; overages start at $0.025 per monthly active user (the pricing table also says from $0.02 per monthly active wallet) | [Visit Crossmint Agent Wallets](https://tradingagentstack.com/go/crossmint-agent-wallets/?from=/ai-agent-wallets/) |
| **100**[Safe Smart Account](https://tradingagentstack.com/tool/safe-smart-account/) | open-source multisig smart account: Safe's AI-agent guide makes the agent one signer with a threshold that needs at least one human approval; an allowance module can give the agent a per-token spending limit that resets on a schedule; guards can check every transaction | live; contracts are deployed on many networks (see Safe's supported-networks list) | open-source contracts (LGPL-3.0); network gas fees apply | [Visit Safe Smart Account](https://tradingagentstack.com/go/safe-smart-account/?from=/ai-agent-wallets/) |
| **88**[ZeroDev](https://tradingagentstack.com/tool/zerodev/) | Kernel smart accounts with permissions: you keep the main key and give an agent a session key limited by policies (allowed contracts and functions, a value limit, rate limits, gas and time windows), checked by the account's permission validator on-chain | live and testnet (the free Sandbox plan is testnet only) | Sandbox $0/mo (testnet only, 10,000 credits); Launch $69/mo; Scale $399/mo; Enterprise custom | [Visit ZeroDev](https://tradingagentstack.com/go/zerodev/?from=/ai-agent-wallets/) |

Trading on-chain through Telegram bots or DEX APIs instead? See [On-chain and DeFi agents](https://tradingagentstack.com/defi-trading-bots-and-agents/). Exchange keys for bots: [Crypto exchanges for bots](https://tradingagentstack.com/crypto-exchanges-for-trading-bots/).
C

### [Coinbase AgentKit](https://tradingagentstack.com/tool/coinbase-agentkit/)
Agent walletsofficial
**38**
 Pricingfree, open source
Best forAgent wallets · EVM chains, Solana
Money accesslive and testnet
[Agent risk 38% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score)✓ Verified 2026-10-26[Details →](https://tradingagentstack.com/tool/coinbase-agentkit/)

C

### [Coinbase CDP Server Wallets](https://tradingagentstack.com/tool/coinbase-cdp-server-wallets/)
Agent walletsofficial
**56**
 Pricingfirst 5,000 wallet operations per month free, then $0.005 per operation
Best forAgent wallets · EVM networks (e.g. Base)
Money accesslive and testnet (the quickstart runs on Base Sepolia with CDP Faucets)
[Agent risk 56% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score)✓ Verified 2026-10-26[Details →](https://tradingagentstack.com/tool/coinbase-cdp-server-wallets/)

P

### [Privy server wallets](https://tradingagentstack.com/tool/privy-server-wallets/)
Agent walletsofficial
**63**
 Pricingfree Developer plan up to 499 monthly active users with 50K signatures and $1M…
Best forAgent wallets · Ethereum and EVM chains, Solana
Money accesslive and testnet (the REST quickstart sends a Sepolia transaction)
[Agent risk 63%](https://tradingagentstack.com/methodology/#agent-risk-score)✓ Verified 2026-10-26[Details →](https://tradingagentstack.com/tool/privy-server-wallets/)

T

### [Turnkey](https://tradingagentstack.com/tool/turnkey/)
Agent walletsofficial
**64**
 PricingPay as You Go: 25 free signatures a month, then $0.10 per signature
Best forAgent wallets · EVM chains, Solana, Bitcoin, Dogecoin, Tron, Cosmos and other chains
Money accesslive
[Agent risk 64% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score)✓ Verified 2026-10-26[Details →](https://tradingagentstack.com/tool/turnkey/)

C

### [Crossmint Agent Wallets](https://tradingagentstack.com/tool/crossmint-agent-wallets/)
Agent walletsofficial
**67**
 Pricing1,000 monthly active wallets free
Best forAgent wallets · stablecoins (e.g. USDC), on-chain payments
Money accesslive and staging (staging is connected to testnets, funded with test tokens of no value)
[Agent risk 67% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score)✓ Verified 2026-10-26[Details →](https://tradingagentstack.com/tool/crossmint-agent-wallets/)

S

### [Safe Smart Account](https://tradingagentstack.com/tool/safe-smart-account/)
Agent walletsofficial
**100**
 Pricingopen-source contracts (LGPL-3.0)
Best forAgent wallets · EVM chains
Money accesslive
[Agent risk 100% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score)✓ Verified 2026-10-26[Details →](https://tradingagentstack.com/tool/safe-smart-account/)

Z

### [ZeroDev](https://tradingagentstack.com/tool/zerodev/)
Agent walletsofficial
**88**
 PricingSandbox $0/mo (testnet only, 10,000 credits)
Best forAgent wallets · EVM chains (ERC-4337 smart accounts)
Money accesslive and testnet (the free Sandbox plan is testnet only)
[Agent risk 88% (partial, 5 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score)✓ Verified 2026-10-26[Details →](https://tradingagentstack.com/tool/zerodev/)

## FAQ

### What is an AI agent wallet?

A wallet an AI agent can use to sign transactions on its own, with limits set by a key the agent doesn't control: either a policy engine run by the provider in a secure environment (Coinbase CDP Server Wallets, Privy, Turnkey) or an on-chain smart account with delegated keys, session keys or modules (Crossmint, Safe, ZeroDev).

### Which agent wallets can require a human to approve?

Required: Safe Smart Account. Optional: Privy server wallets, Turnkey, Coinbase AgentKit. Each tool page links the vendor's docs for the approval setup.

### Does Coinbase AgentKit limit what my agent can spend?

Not by itself. AgentKit's README says it does not gate transfers behind human approval, enforce spend caps or allowlist destinations. Use the wallet provider's policies (for example the CDP Policy Engine) or your own guardrails.

## More in Build an AI agent
[Broker MCP servers](https://tradingagentstack.com/category/broker-mcp/)[Market data MCPs](https://tradingagentstack.com/category/data-mcp/)[Agent frameworks](https://tradingagentstack.com/category/agent-framework/)[Risk & paper trading](https://tradingagentstack.com/trading-bot-risk-safety-tools/)[Agent payments](https://tradingagentstack.com/ai-agent-payments/)[TAS Guard: limits for AI orders](https://tradingagentstack.com/guard/)[How each broker MCP gates orders](https://tradingagentstack.com/broker-mcp-safety-controls/)[Best broker for AI agents](https://tradingagentstack.com/best-broker-for-ai-agents/)[Best paper trading and guardrails](https://tradingagentstack.com/best-paper-trading-and-guardrails-for-ai-agents/)[Setup guides](https://tradingagentstack.com/guides/)

Other paths: [Trade with a bot](https://tradingagentstack.com/trade-with-a-bot/) · [Markets & infrastructure](https://tradingagentstack.com/markets-and-infrastructure/) · [Learn](https://tradingagentstack.com/learn-algorithmic-trading/) · [Search all tools](https://tradingagentstack.com/tools/)

## Check a wallet before you connect an agent

Official links, the worst case for your money and a safe setup, every line sourced. [Check any link](https://tradingagentstack.com/check/).
[Zodl (formerly Zashi)](https://tradingagentstack.com/check/zodl/)[Ywallet](https://tradingagentstack.com/check/ywallet/)[Unstoppable Wallet](https://tradingagentstack.com/check/unstoppable-wallet/)[Cake Wallet](https://tradingagentstack.com/check/cake-wallet/)[Feather Wallet](https://tradingagentstack.com/check/feather-wallet/)[Monero GUI / CLI (official)](https://tradingagentstack.com/check/monero-gui-cli/)[Stack Wallet](https://tradingagentstack.com/check/stack-wallet/)[Edge Wallet](https://tradingagentstack.com/check/edge-wallet/)[Phantom](https://tradingagentstack.com/check/phantom/)[MetaMask](https://tradingagentstack.com/check/metamask/)[Rabby Wallet](https://tradingagentstack.com/check/rabby/)[Trust Wallet](https://tradingagentstack.com/check/trust-wallet/)[Exodus](https://tradingagentstack.com/check/exodus/)[Backpack](https://tradingagentstack.com/check/backpack/)[Solflare](https://tradingagentstack.com/check/solflare/)[Coinbase Wallet](https://tradingagentstack.com/check/coinbase-wallet/)[Electrum](https://tradingagentstack.com/check/electrum/)[Keystone](https://tradingagentstack.com/check/keystone/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)