# Coinbase Agentic Wallet agent risk score and pricing

> Coinbase Agentic Wallet: payments for AI agents. Live trading. Agent risk 51% (partial). Sourced, checked 2026-10-26.

Canonical: https://tradingagentstack.com/tool/coinbase-agentic-wallet/

1. [Home](https://tradingagentstack.com/)

2. [AI agent payments](https://tradingagentstack.com/category/agent-payments/)

C

# Coinbase Agentic Wallet

[**51****Agent Risk Score**51% of the points we could check · partial, 6 of 7 inputsHow much an AI agent could lose here if it is wrong, hacked or prompt-injected. Higher is safer.](#agent-risk-score)

Last checked **2026-10-26****4** official sources linked[How we score](https://tradingagentstack.com/methodology/)[Incident tracker](https://tradingagentstack.com/incidents/)

Category[Agent payments](https://tradingagentstack.com/ai-agent-payments/)
PricingAgentic Wallet MCP, wallet creation and gas (sponsored) are free
Best forAgent payments · USDC on Base, Polygon and Solana, ETH, POL and SOL sends, token swaps on Base and Polygon
Verified2026-10-26

[Visit Coinbase Agentic Wallet](https://tradingagentstack.com/go/coinbase-agentic-wallet/?from=/tool/coinbase-agentic-wallet/)

Official site (source): [https://docs.cdp.coinbase.com/agentic-wallet/cli/welcome](https://docs.cdp.coinbase.com/agentic-wallet/cli/welcome)

## Agent Risk Score (v2)

[Agent risk 51% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score) If an agent using this tool is wrong, hacked or prompt-injected, how much money can it lose? Higher is safer. Each input links to the vendor's own docs; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/methodology/#agent-risk-score) · [Incidents](https://tradingagentstack.com/incidents/)

Missing: Transaction preview or simulation. Missing inputs lower the maximum instead of counting as zero.

| Input | From official docs | Points |
| --- | --- | --- |
| Who holds the keys | Private keys stay in Coinbase infrastructure in Trusted Execution Environments, never exposed to the agent's prompt or LLM [source](https://www.coinbase.com/developer-platform/discover/launches/agentic-wallets) | 10 / 20 |
| Spending limits enforced outside the agent | Max per call and max per session are set in the wallet UI; agents respect these limits but can't change them [source](https://docs.cdp.coinbase.com/agentic-wallet/mcp/faq) | 20 / 20 |
| Human approval | Once permissions and limits are set, the agent acts with no approval per transaction [source](https://www.coinbase.com/developer-platform/discover/launches/agentic-wallets) | 0 / 15 |
| Sending funds to new addresses | The send command takes any address or ENS name (e.g. vitalik.eth); no recipient allowlist is documented [source](https://docs.cdp.coinbase.com/agentic-wallet/cli/welcome) | 0 / 15 |
| Transaction preview or simulation | Missing: no official source found yet | missing / 10 |
| Open source and audits | The agent skills are open source (MIT); no audit report found [source](https://github.com/coinbase/agentic-wallet-skills) | 6 / 10 |
| Incident record (last 12 months) | No incident naming this tool in our incident tracker for the last 12 months, and every scored input links an official source [source](https://tradingagentstack.com/incidents/) | 10 / 10 |
| Total | 51% of the points we could check | **46 / 90** |

The Safety score (v1) isn't shown in this section: it is built for tools that place orders. [Why](https://tradingagentstack.com/methodology/#agent-wallets-v1)

## Full facts

| Category | AI agent payments |
| --- | --- |
| Assets | USDC on Base, Polygon and Solana, ETH, POL and SOL sends, token swaps on Base and Polygon, x402 paid APIs |
| Live vs paper | live; the CLI also supports Base Sepolia and Solana Devnet |
| Order approval / safety | private keys stay in Coinbase infrastructure (TEEs), never exposed to the agent's prompt or LLM; a max per call and a max per session are set in the wallet UI and agents can't change them; KYT and OFAC screening block high-risk or sanctioned transfers; no approval per transaction once limits are set; the send command takes any address or ENS name |
| Pricing / free tier | Agentic Wallet MCP, wallet creation and gas (sponsored) are free; x402 services set their own prices; Coinbase Onramp standard fees |
| Rate limits | not stated on the pages we checked |
| Official / community | official |
| Last checked | 2026-10-26 |
| Source | [docs.cdp.coinbase.com](https://docs.cdp.coinbase.com/agentic-wallet/cli/welcome) |
| Repository | [https://github.com/coinbase/agentic-wallet-skills](https://github.com/coinbase/agentic-wallet-skills) |

## Change log

- **2026-10-23** · Added. Coinbase Agentic Wallet: TEE-held keys with per-call and per-session caps the agent can't change; pays x402 services, sends and swaps.

## Recent changes

- **2026-10-23** New listing New listing: Coinbase Agentic Wallet, a wallet for AI agents with per-call and per-session spending caps the agent can't change, used to pay x402 services, send and swap. [Source](https://docs.cdp.coinbase.com/agentic-wallet/cli/welcome)

[All changes across tools](https://tradingagentstack.com/changes/)

## Related: Agent payments

- [Stripe Issuing for agents](https://tradingagentstack.com/tool/stripe-issuing-for-agents/)

- [x402](https://tradingagentstack.com/tool/x402/)

- [Link agent wallet](https://tradingagentstack.com/tool/link-agent-wallet/)

- [Lightning Agent Tools](https://tradingagentstack.com/tool/lightning-agent-tools/)

- [Agent Payments Protocol (AP2)](https://tradingagentstack.com/tool/agent-payments-protocol-ap2/)

Are you the maker? [Claim this listing](mailto:hello@tradingagentstack.com?subject=Claim%20listing%3A%20Coinbase%20Agentic%20Wallet) (adds a separate "Provided by vendor" box; it never changes our sourced facts), [Add a "Listed on TradingAgentStack" badge](https://tradingagentstack.com/badge/) or [send a correction](https://tradingagentstack.com/submit/).

## More in Build an AI agent
[Broker MCP servers](https://tradingagentstack.com/category/broker-mcp/)[Market data MCPs](https://tradingagentstack.com/category/data-mcp/)[Agent frameworks](https://tradingagentstack.com/category/agent-framework/)[Risk & paper trading](https://tradingagentstack.com/trading-bot-risk-safety-tools/)[Agent wallets](https://tradingagentstack.com/ai-agent-wallets/)[Agent payments](https://tradingagentstack.com/ai-agent-payments/)[TAS Guard: limits for AI orders](https://tradingagentstack.com/guard/)[How each broker MCP gates orders](https://tradingagentstack.com/broker-mcp-safety-controls/)[Best broker for AI agents](https://tradingagentstack.com/best-broker-for-ai-agents/)[Best paper trading and guardrails](https://tradingagentstack.com/best-paper-trading-and-guardrails-for-ai-agents/)[Setup guides](https://tradingagentstack.com/guides/)

Other paths: [Trade with a bot](https://tradingagentstack.com/trade-with-a-bot/) · [Markets & infrastructure](https://tradingagentstack.com/markets-and-infrastructure/) · [Learn](https://tradingagentstack.com/learn-algorithmic-trading/) · [Search all tools](https://tradingagentstack.com/tools/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)