# Virtuals ACP (acp-cli): agent risk score and safety controls

> Virtuals ACP (acp-cli): agent token with a product. Live and paper or demo trading. Agent risk 84% (partial). Not stated. Sourced, checked 2026-10-26.

Canonical: https://tradingagentstack.com/tool/virtuals-acp-acp-cli/

1. [Home](https://tradingagentstack.com/)

2. [Agent tokens with a product](https://tradingagentstack.com/category/agent-token/)

V

# Virtuals ACP (acp-cli)

[**84****Agent Risk Score**84% of the points we could check · partial, 6 of 7 inputsHow much an AI agent could lose here if it is wrong, hacked or prompt-injected. Higher is safer.](#agent-risk-score)

Last checked **2026-10-26****1** official sources linked[How we score](https://tradingagentstack.com/methodology/)[Incident tracker](https://tradingagentstack.com/incidents/)

Category[Agent tokens](https://tradingagentstack.com/ai-agent-tokens/)
Pricingnot stated (providers set job prices)
Best forAgent tokens · USDC agent-to-agent job payments held in escrow, agent wallets (EVM and Solana), virtual payment cards
Verified2026-10-26

[Visit Virtuals ACP (acp-cli)](https://tradingagentstack.com/go/virtuals-acp-acp-cli/?from=/tool/virtuals-acp-acp-cli/)

Official site (source): [https://whitepaper.virtuals.io/about-virtuals/commerce-layer](https://whitepaper.virtuals.io/about-virtuals/commerce-layer)

## Agent Risk Score (v2)

[Agent risk 84% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score) If an agent using this tool is wrong, hacked or prompt-injected, how much money can it lose? Higher is safer. Each input links to the vendor's own docs; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/methodology/#agent-risk-score) · [Incidents](https://tradingagentstack.com/incidents/)

Missing: Transaction preview or simulation. Missing inputs lower the maximum instead of counting as zero.

| Input | From official docs | Points |
| --- | --- | --- |
| Who holds the keys | Agent wallets are Privy-managed; signer keys are kept in the OS keychain after browser approval, and Node.js never touches raw key material at rest [source](https://github.com/Virtual-Protocol/acp-cli) | 10 / 20 |
| Spending limits enforced outside the agent | Wallet policies are allowlists of contract or wallet addresses, enforced server-side on every transaction the signer makes; editing them needs the dashboard [source](https://github.com/Virtual-Protocol/acp-cli) | 20 / 20 |
| Human approval | Optional deny-all signer policy: manual approval for every transaction (the default restricted policy authorizes all ACP transactions without asking) [source](https://github.com/Virtual-Protocol/acp-cli) | 15 / 15 |
| Sending funds to new addresses | Under the deny-all policy nothing leaves the wallet without manual approval; otherwise wallet policies limit destinations to an address allowlist [source](https://github.com/Virtual-Protocol/acp-cli) | 15 / 15 |
| Transaction preview or simulation | Missing: no official source found yet | missing / 10 |
| Open source and audits | acp-cli is open source (ISC); no audit report found for ACP [source](https://github.com/Virtual-Protocol/acp-cli) | 6 / 10 |
| Incident record (last 12 months) | No incident naming this tool in our incident tracker for the last 12 months, and every scored input links an official source [source](https://tradingagentstack.com/incidents/) | 10 / 10 |
| Total | 84% of the points we could check | **76 / 90** |

The Safety score (v1) isn't shown in this section: it is built for tools that place orders. [Why](https://tradingagentstack.com/methodology/#agent-wallets-v1)

## Full facts

| Category | Agent tokens with a product |
| --- | --- |
| Assets | USDC agent-to-agent job payments held in escrow, agent wallets (EVM and Solana), virtual payment cards |
| Live vs paper | live on Base mainnet (ACP v2.0, April 2026); Base Sepolia and BSC testnet also supported |
| Order approval / safety | agent wallets are Privy-managed and signer keys sit in the OS keychain after browser approval; signer policy is restricted by default (all ACP transactions), deny-all needs manual approval for every transaction, unrestricted needs none; wallet policies are address allowlists enforced server-side on every transaction and changed only in the dashboard; cards carry a spend limit; job payments stay in escrow until the client completes the job (released to the provider) or rejects it (refunded) |
| Pricing / free tier | not stated (providers set job prices) |
| Rate limits | not stated on the pages we checked |
| Official / community | official |
| Last checked | 2026-10-26 |
| Source | [github.com](https://github.com/Virtual-Protocol/acp-cli) |
| Repository | [https://github.com/Virtual-Protocol/acp-cli](https://github.com/Virtual-Protocol/acp-cli) |

## Change log

- **2026-10-23** · Added. Virtuals ACP (acp-cli): agents hire agents with USDC in escrow; server-side address allowlists and an optional approve-every-transaction signer policy.

Safety check: [Is Virtuals ACP (acp-cli) safe to connect to an AI agent?](https://tradingagentstack.com/tool/virtuals-acp-acp-cli/is-it-safe/)

## Recent changes

- **2026-10-23** New listing New listing: Virtuals ACP (acp-cli), the Agent Commerce Protocol toolkit where agents pay each other through USDC escrow, with server-side address allowlists. [Source](https://github.com/Virtual-Protocol/acp-cli)

[All changes across tools](https://tradingagentstack.com/changes/)

## Related: Agent tokens

- [Olas Pearl](https://tradingagentstack.com/tool/olas-pearl/)

Are you the maker? [Claim this listing](mailto:hello@tradingagentstack.com?subject=Claim%20listing%3A%20Virtuals%20ACP%20%28acp-cli%29) (adds a separate "Provided by vendor" box; it never changes our sourced facts), [Add a "Listed on TradingAgentStack" badge](https://tradingagentstack.com/badge/) or [send a correction](https://tradingagentstack.com/submit/).

## More in Trade with a bot
[AI trading bots](https://tradingagentstack.com/ai-trading-bots/)[Open-source bots](https://tradingagentstack.com/open-source-ai-trading-bots/)[AI signals](https://tradingagentstack.com/ai-trading-signals/)[Copy trading](https://tradingagentstack.com/copy-trading-platforms/)[DeFi & Telegram bots](https://tradingagentstack.com/defi-trading-bots-and-agents/)[AI trading agents](https://tradingagentstack.com/ai-trading-agents/)[Agent tokens](https://tradingagentstack.com/ai-agent-tokens/)[Find your bot (4-question picker)](https://tradingagentstack.com/find-your-bot/)[Best AI trading bots](https://tradingagentstack.com/best-ai-trading-bots/)[Best AI stock picking tools](https://tradingagentstack.com/best-ai-stock-picking-signal-tools/)[Best copy trading platforms](https://tradingagentstack.com/best-copy-trading-platforms/)[Best Telegram trading bots](https://tradingagentstack.com/best-telegram-trading-bots/)

Other paths: [Build an AI agent](https://tradingagentstack.com/build-an-ai-agent/) · [Markets & infrastructure](https://tradingagentstack.com/markets-and-infrastructure/) · [Learn](https://tradingagentstack.com/learn-algorithmic-trading/) · [Search all tools](https://tradingagentstack.com/tools/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)