Is Coinbase Agentic Wallet safe to connect to an AI agent?

Can trade unattended. Safety 55% Can trade unattended. Built from our sourced listing, last checked 2026-10-31. Not financial advice.

What an AI agent can do

Live vs paper: live; the CLI also supports Base Sepolia and Solana Devnet source
Order approval: private keys stay in Coinbase infrastructure (TEEs), never exposed to the agent's prompt or LLM; a max per call and a max per session are set in the wallet UI and agents can't change them; KYT and OFAC screening block high-risk or sanctioned transfers; no approval per transaction once limits are set; the send command takes any address or ENS name source
Markets: USDC on Base, Polygon and Solana, ETH, POL and SOL sends, token swaps on Base and Polygon, x402 paid APIs
Pricing: Agentic Wallet MCP, wallet creation and gas (sponsored) are free; x402 services set their own prices; Coinbase Onramp standard fees

Safeguards that exist

Guardrails outside the agent: Max per call and max per session are set in the wallet UI; agents respect these limits but can't change them (official docs) source
Test before real money: Paper, demo or testnet mode available source
Who holds the keys: Private keys stay in Coinbase infrastructure in Trusted Execution Environments, never exposed to the agent's prompt or LLM (official docs) source
Open source or audited: The agent skills are open source (MIT); no audit report found (official docs) source
Incident record (last 12 months): No incident naming this tool in our incident tracker in the last 12 months source

Safeguards that are missing

Human approval: Once permissions and limits are set, the agent acts with no approval per transaction (official docs) source
Sending funds out: The send command takes any address or ENS name (e.g. vitalik.eth); no recipient allowlist is documented (official docs) source

Safety score

Safety 55% Can trade unattended. If this tool, or an AI agent using it, is wrong, hacked or prompt-injected, how much of your money is at risk? Higher is safer. Not a ranking; affiliate links never affect it. How it's calculated · Incidents

Input	From official docs or our listing	Points
Human approval	Once permissions and limits are set, the agent acts with no approval per transaction (official docs) source	0 / 25
Guardrails outside the agent	Max per call and max per session are set in the wallet UI; agents respect these limits but can't change them (official docs) source	15 / 15
Test before real money	Paper, demo or testnet mode available	15 / 15
Sending funds out	The send command takes any address or ENS name (e.g. vitalik.eth); no recipient allowlist is documented (official docs) source	0 / 15
Who holds the keys	Private keys stay in Coinbase infrastructure in Trusted Execution Environments, never exposed to the agent's prompt or LLM (official docs) source	5 / 10
Open source or audited	The agent skills are open source (MIT); no audit report found (official docs) source	10 / 10
Incident record (last 12 months)	No incident naming this tool in our incident tracker in the last 12 months (incident tracker)	10 / 10
Total	55% of the points we could check	55 / 100

Sources

Full listing: Coinbase Agentic Wallet · How the score works: Safety score method