Coinbase Agentic Wallet

51Agent Risk Score51% of the points we could check · partial, 6 of 7 inputsHow much an AI agent could lose here if it is wrong, hacked or prompt-injected. Higher is safer.

Last checked 4 official sources linkedHow we scoreIncident tracker

Category
Agent payments
Pricing
Agentic Wallet MCP, wallet creation and gas (sponsored) are free
Best for
Agent payments · USDC on Base, Polygon and Solana, ETH, POL and SOL sends, token swaps on Base and Polygon
Verified
2026-10-26

Visit Coinbase Agentic Wallet

Official site (source): https://docs.cdp.coinbase.com/agentic-wallet/cli/welcome

Agent Risk Score (v2)

Agent risk 51% (partial, 6 of 7 inputs) If an agent using this tool is wrong, hacked or prompt-injected, how much money can it lose? Higher is safer. Each input links to the vendor's own docs; affiliate links never affect it. How it's calculated · Incidents

Missing: Transaction preview or simulation. Missing inputs lower the maximum instead of counting as zero.

InputFrom official docsPoints
Who holds the keysPrivate keys stay in Coinbase infrastructure in Trusted Execution Environments, never exposed to the agent's prompt or LLM source10 / 20
Spending limits enforced outside the agentMax per call and max per session are set in the wallet UI; agents respect these limits but can't change them source20 / 20
Human approvalOnce permissions and limits are set, the agent acts with no approval per transaction source0 / 15
Sending funds to new addressesThe send command takes any address or ENS name (e.g. vitalik.eth); no recipient allowlist is documented source0 / 15
Transaction preview or simulationMissing: no official source found yetmissing / 10
Open source and auditsThe agent skills are open source (MIT); no audit report found source6 / 10
Incident record (last 12 months)No incident naming this tool in our incident tracker for the last 12 months, and every scored input links an official source source10 / 10
Total51% of the points we could check46 / 90

The Safety score (v1) isn't shown in this section: it is built for tools that place orders. Why

Full facts

CategoryAI agent payments
AssetsUSDC on Base, Polygon and Solana, ETH, POL and SOL sends, token swaps on Base and Polygon, x402 paid APIs
Live vs paperlive; the CLI also supports Base Sepolia and Solana Devnet
Order approval / safetyprivate keys stay in Coinbase infrastructure (TEEs), never exposed to the agent's prompt or LLM; a max per call and a max per session are set in the wallet UI and agents can't change them; KYT and OFAC screening block high-risk or sanctioned transfers; no approval per transaction once limits are set; the send command takes any address or ENS name
Pricing / free tierAgentic Wallet MCP, wallet creation and gas (sponsored) are free; x402 services set their own prices; Coinbase Onramp standard fees
Rate limitsnot stated on the pages we checked
Official / communityofficial
Last checked2026-10-26
Sourcedocs.cdp.coinbase.com
Repositoryhttps://github.com/coinbase/agentic-wallet-skills

Change log

Recent changes

All changes across tools

Related: Agent payments

Are you the maker? Claim this listing (adds a separate "Provided by vendor" box; it never changes our sourced facts), Add a "Listed on TradingAgentStack" badge or send a correction.

More in Build an AI agent

Other paths: Trade with a bot · Markets & infrastructure · Learn · Search all tools

Get the weekly agent risk update

New Agent Risk Scores, incidents and safety changes for the wallets, exchanges and brokers AI agents use. One email a week, unsubscribe anytime.

No spam. Unsubscribe anytime. Privacy