# Is Virtuals ACP (acp-cli) safe to connect to an AI agent?

> Is Virtuals ACP (acp-cli) safe for an AI agent? Can trade unattended. Safety 60%. Safeguards and gaps, each from official sources, checked 2026-10-26.

Canonical: https://tradingagentstack.com/tool/virtuals-acp-acp-cli/is-it-safe/

1. [Home](https://tradingagentstack.com/)

2. [Agent tokens with a product](https://tradingagentstack.com/category/agent-token/)

3. [Virtuals ACP (acp-cli)](https://tradingagentstack.com/tool/virtuals-acp-acp-cli/)

# Is Virtuals ACP (acp-cli) safe to connect to an AI agent?

**Can trade unattended.** [Safety 60%](https://tradingagentstack.com/safety-score/) Can trade unattended. Built from our sourced listing, last checked 2026-10-26. Not financial advice.

## What an AI agent can do

- **Live vs paper:** live on Base mainnet (ACP v2.0, April 2026); Base Sepolia and BSC testnet also supported [source](https://github.com/Virtual-Protocol/acp-cli)

- **Order approval:** agent wallets are Privy-managed and signer keys sit in the OS keychain after browser approval; signer policy is restricted by default (all ACP transactions), deny-all needs manual approval for every transaction, unrestricted needs none; wallet policies are address allowlists enforced server-side on every transaction and changed only in the dashboard; cards carry a spend limit; job payments stay in escrow until the client completes the job (released to the provider) or rejects it (refunded) [source](https://github.com/Virtual-Protocol/acp-cli)

- **Markets:** USDC agent-to-agent job payments held in escrow, agent wallets (EVM and Solana), virtual payment cards

- **Pricing:** not stated (providers set job prices)

## Safeguards that exist

- **Paper, demo or testnet mode:** Paper, demo or testnet mode available [source](https://github.com/Virtual-Protocol/acp-cli)

- **Withdrawal permission needed or allowed:** Signers default to a 'restricted' policy allowing only Virtuals contracts; address-allowlist policies are enforced server-side, and 'unrestricted' is opt-in (official docs) [source](https://github.com/Virtual-Protocol/acp-cli)

- **Scoped keys, permission scopes or IP whitelisting:** Each agent signer is approved in the browser and bound to a policy (restricted, deny-all, unrestricted or custom allowlist) (official docs) [source](https://github.com/Virtual-Protocol/acp-cli)

- **Open source or audited:** Open source [source](https://github.com/Virtual-Protocol/acp-cli)

## Safeguards that are missing

- **Can it place live orders unattended?:** Can place live orders with no documented approval step [source](https://github.com/Virtual-Protocol/acp-cli)

- **Order approval or confirmation options:** No approval or limit option in our listing [source](https://github.com/Virtual-Protocol/acp-cli)

## Safety score

[Safety 60%](https://tradingagentstack.com/safety-score/) Can trade unattended. Not a ranking; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/safety-score/)

| Input | From our listing | Points |
| --- | --- | --- |
| Can it place live orders unattended? | Can place live orders with no documented approval step | 0 / 25 |
| Order approval or confirmation options | No approval or limit option in our listing | 0 / 15 |
| Paper, demo or testnet mode | Paper, demo or testnet mode available | 15 / 15 |
| Withdrawal permission needed or allowed | Signers default to a 'restricted' policy allowing only Virtuals contracts; address-allowlist policies are enforced server-side, and 'unrestricted' is opt-in (official docs) [source](https://github.com/Virtual-Protocol/acp-cli) | 15 / 15 |
| Scoped keys, permission scopes or IP whitelisting | Each agent signer is approved in the browser and bound to a policy (restricted, deny-all, unrestricted or custom allowlist) (official docs) [source](https://github.com/Virtual-Protocol/acp-cli) | 10 / 10 |
| Open source or audited | Open source | 10 / 10 |
| Sourced and verified facts | Facts from the vendor's official docs | 10 / 10 |
| Total | 60% of the points we could check | **60 / 100** |

## Sources

- [https://github.com/Virtual-Protocol/acp-cli](https://github.com/Virtual-Protocol/acp-cli)

Full listing: [Virtuals ACP (acp-cli)](https://tradingagentstack.com/tool/virtuals-acp-acp-cli/) · How the score works: [Safety score method](https://tradingagentstack.com/safety-score/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)