Virtuals ACP (acp-cli)

Last checked 2026-10-261 official sources linkedHow we scoreIncident tracker

Category: Agent tokens
Pricing: not stated (providers set job prices)
Best for: Agent tokens · USDC agent-to-agent job payments held in escrow, agent wallets (EVM and Solana), virtual payment cards
Verified: 2026-10-26

Agent Risk Score (v2)

Agent risk 84% (partial, 6 of 7 inputs) If an agent using this tool is wrong, hacked or prompt-injected, how much money can it lose? Higher is safer. Each input links to the vendor's own docs; affiliate links never affect it. How it's calculated · Incidents

Missing: Transaction preview or simulation. Missing inputs lower the maximum instead of counting as zero.

Input	From official docs	Points
Who holds the keys	Agent wallets are Privy-managed; signer keys are kept in the OS keychain after browser approval, and Node.js never touches raw key material at rest source	10 / 20
Spending limits enforced outside the agent	Wallet policies are allowlists of contract or wallet addresses, enforced server-side on every transaction the signer makes; editing them needs the dashboard source	20 / 20
Human approval	Optional deny-all signer policy: manual approval for every transaction (the default restricted policy authorizes all ACP transactions without asking) source	15 / 15
Sending funds to new addresses	Under the deny-all policy nothing leaves the wallet without manual approval; otherwise wallet policies limit destinations to an address allowlist source	15 / 15
Transaction preview or simulation	Missing: no official source found yet	missing / 10
Open source and audits	acp-cli is open source (ISC); no audit report found for ACP source	6 / 10
Incident record (last 12 months)	No incident naming this tool in our incident tracker for the last 12 months, and every scored input links an official source source	10 / 10
Total	84% of the points we could check	76 / 90

The Safety score (v1) isn't shown in this section: it is built for tools that place orders. Why

Category	Agent tokens with a product
Assets	USDC agent-to-agent job payments held in escrow, agent wallets (EVM and Solana), virtual payment cards
Live vs paper	live on Base mainnet (ACP v2.0, April 2026); Base Sepolia and BSC testnet also supported
Order approval / safety	agent wallets are Privy-managed and signer keys sit in the OS keychain after browser approval; signer policy is restricted by default (all ACP transactions), deny-all needs manual approval for every transaction, unrestricted needs none; wallet policies are address allowlists enforced server-side on every transaction and changed only in the dashboard; cards carry a spend limit; job payments stay in escrow until the client completes the job (released to the provider) or rejects it (refunded)
Pricing / free tier	not stated (providers set job prices)
Rate limits	not stated on the pages we checked
Official / community	official
Last checked	2026-10-26
Source	github.com
Repository	https://github.com/Virtual-Protocol/acp-cli

2026-10-23 · Added. Virtuals ACP (acp-cli): agents hire agents with USDC in escrow; server-side address allowlists and an optional approve-every-transaction signer policy.

2026-10-23 New listing New listing: Virtuals ACP (acp-cli), the Agent Commerce Protocol toolkit where agents pay each other through USDC escrow, with server-side address allowlists. Source