Is Crossmint Agent Wallets safe to connect to an AI agent?
Can trade unattended. Safety 35%
What an AI agent can do
- Live vs paper: live and staging (staging is connected to testnets, funded with test tokens of no value) source
- Order approval: the user or your backend holds the root key; the agent holds a delegated key bound to a permission set the owner approves (spend cap, allowed counterparties, time window), enforced on-chain; the agent then signs with no prompt per action, and removing the agent signer ends its access source
- Markets: stablecoins (e.g. USDC), on-chain payments
- Pricing: 1,000 monthly active wallets free; overages start at $0.025 per monthly active user (the pricing table also says from $0.02 per monthly active wallet)
Safeguards that exist
- Paper, demo or testnet mode: Paper, demo or testnet mode available source
- Scoped keys, permission scopes or IP whitelisting: Server and client API keys have different permission levels and API scopes; client keys need authorized origins (official docs) source
Safeguards that are missing
- Can it place live orders unattended?: Can place live orders with no documented approval step source
- Order approval or confirmation options: No approval or limit option in our listing source
- Withdrawal permission needed or allowed: Agent wallets can send funds; delegated signers can be limited with spending limits and recipient restrictions, but that is opt-in (official docs) source
- Open source or audited: No public source code in our listing source
Safety score
| Input | From our listing | Points |
|---|---|---|
| Can it place live orders unattended? | Can place live orders with no documented approval step | 0 / 25 |
| Order approval or confirmation options | No approval or limit option in our listing | 0 / 15 |
| Paper, demo or testnet mode | Paper, demo or testnet mode available | 15 / 15 |
| Withdrawal permission needed or allowed | Agent wallets can send funds; delegated signers can be limited with spending limits and recipient restrictions, but that is opt-in (official docs) source | 0 / 15 |
| Scoped keys, permission scopes or IP whitelisting | Server and client API keys have different permission levels and API scopes; client keys need authorized origins (official docs) source | 10 / 10 |
| Open source or audited | No public source code in our listing | 0 / 10 |
| Sourced and verified facts | Facts from the vendor's official docs | 10 / 10 |
| Total | 35% of the points we could check | 35 / 100 |
Sources
- https://docs.crossmint.com/agents/wallets/overview
- https://docs.crossmint.com/api-reference/wallets/register-delegated-key
- https://docs.crossmint.com/introduction/platform/api-keys
Full listing: Crossmint Agent Wallets ยท How the score works: Safety score method