# ZeroDev agent risk score, safety controls and pricing

> ZeroDev: AI agent wallet. Live and paper or demo trading. Agent risk 88% (partial). Sandbox $0/mo. Sourced, checked 2026-10-26.

Canonical: https://tradingagentstack.com/tool/zerodev/

1. [Home](https://tradingagentstack.com/)

2. [AI agent wallets](https://tradingagentstack.com/category/agent-wallet/)

Z

# ZeroDev

[**88****Agent Risk Score**88% of the points we could check · partial, 5 of 7 inputsHow much an AI agent could lose here if it is wrong, hacked or prompt-injected. Higher is safer.](#agent-risk-score)

Last checked **2026-10-26****3** official sources linked[How we score](https://tradingagentstack.com/methodology/)[Incident tracker](https://tradingagentstack.com/incidents/)

Category[Agent wallets](https://tradingagentstack.com/ai-agent-wallets/)
PricingSandbox $0/mo (testnet only, 10,000 credits)
Best forAgent wallets · EVM chains (ERC-4337 smart accounts)
Verified2026-10-26

[Visit ZeroDev](https://tradingagentstack.com/go/zerodev/?from=/tool/zerodev/)

Official site (source): [https://zerodev.app/](https://zerodev.app/)

## Agent Risk Score (v2)

[Agent risk 88% (partial, 5 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score) If an agent using this tool is wrong, hacked or prompt-injected, how much money can it lose? Higher is safer. Each input links to the vendor's own docs; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/methodology/#agent-risk-score) · [Incidents](https://tradingagentstack.com/incidents/)

Missing: Human approval, Transaction preview or simulation. Missing inputs lower the maximum instead of counting as zero.

| Input | From official docs | Points |
| --- | --- | --- |
| Who holds the keys | You keep the main key; the agent gets a session key limited to the permissions you assign [source](https://docs.zerodev.app/sdk/permissions/intro) | 20 / 20 |
| Spending limits enforced outside the agent | Policies (value limit, allowed calls, rate limits, gas, time windows) are checked by the Kernel account's permission validator (checkUserOpPolicy) [source](https://github.com/zerodevapp/kernel) | 20 / 20 |
| Human approval | Missing: no official source found yet | missing / 15 |
| Sending funds to new addresses | The call policy restricts which contracts or addresses the session key can interact with [source](https://docs.zerodev.app/sdk/permissions/policies/call) | 10 / 15 |
| Transaction preview or simulation | Missing: no official source found yet | missing / 10 |
| Open source and audits | Open source (official repository); no audit report found in the official docs [source](https://github.com/zerodevapp/kernel) | 6 / 10 |
| Incident record (last 12 months) | No incident naming this tool in our incident tracker for the last 12 months, and every scored input links an official source [source](https://tradingagentstack.com/incidents/) | 10 / 10 |
| Total | 88% of the points we could check | **66 / 75** |

The Safety score (v1) isn't shown in this section: it is built for tools that place orders. [Why](https://tradingagentstack.com/methodology/#agent-wallets-v1)

## Full facts

| Category | AI agent wallets |
| --- | --- |
| Assets | EVM chains (ERC-4337 smart accounts) |
| Live vs paper | live and testnet (the free Sandbox plan is testnet only) |
| Order approval / safety | Kernel smart accounts with permissions: you keep the main key and give an agent a session key limited by policies (allowed contracts and functions, a value limit, rate limits, gas and time windows), checked by the account's permission validator on-chain |
| Pricing / free tier | Sandbox $0/mo (testnet only, 10,000 credits); Launch $69/mo; Scale $399/mo; Enterprise custom |
| Rate limits | credit-based: 10 credits per wallet signature, 20 per UserOp |
| Official / community | official |
| Last checked | 2026-10-26 |
| Source | [docs.zerodev.app](https://docs.zerodev.app/sdk/permissions/intro) |
| Repository | [https://github.com/zerodevapp/kernel](https://github.com/zerodevapp/kernel) |

## Change log

- **2026-10-23** · Added. ZeroDev Kernel smart accounts: session keys for agents limited by on-chain policies (call targets, value limit, rate limit). MIT.

Safety check: [Is ZeroDev safe to connect to an AI agent?](https://tradingagentstack.com/tool/zerodev/is-it-safe/)

## Recent changes

- **2026-10-23** New listing New listing: ZeroDev, Kernel smart accounts that give agents session keys limited by on-chain policies. [Source](https://docs.zerodev.app/sdk/permissions/intro)

[All changes across tools](https://tradingagentstack.com/changes/)

## Related: Agent wallets

- [Coinbase AgentKit](https://tradingagentstack.com/tool/coinbase-agentkit/)

- [Coinbase CDP Server Wallets](https://tradingagentstack.com/tool/coinbase-cdp-server-wallets/)

- [Privy server wallets](https://tradingagentstack.com/tool/privy-server-wallets/)

- [Turnkey](https://tradingagentstack.com/tool/turnkey/)

- [Crossmint Agent Wallets](https://tradingagentstack.com/tool/crossmint-agent-wallets/)

- [Safe Smart Account](https://tradingagentstack.com/tool/safe-smart-account/)

Are you the maker? [Claim this listing](mailto:hello@tradingagentstack.com?subject=Claim%20listing%3A%20ZeroDev) (adds a separate "Provided by vendor" box; it never changes our sourced facts), [Add a "Listed on TradingAgentStack" badge](https://tradingagentstack.com/badge/) or [send a correction](https://tradingagentstack.com/submit/).

## More in Build an AI agent
[Broker MCP servers](https://tradingagentstack.com/category/broker-mcp/)[Market data MCPs](https://tradingagentstack.com/category/data-mcp/)[Agent frameworks](https://tradingagentstack.com/category/agent-framework/)[Risk & paper trading](https://tradingagentstack.com/trading-bot-risk-safety-tools/)[Agent wallets](https://tradingagentstack.com/ai-agent-wallets/)[Agent payments](https://tradingagentstack.com/ai-agent-payments/)[TAS Guard: limits for AI orders](https://tradingagentstack.com/guard/)[How each broker MCP gates orders](https://tradingagentstack.com/broker-mcp-safety-controls/)[Best broker for AI agents](https://tradingagentstack.com/best-broker-for-ai-agents/)[Best paper trading and guardrails](https://tradingagentstack.com/best-paper-trading-and-guardrails-for-ai-agents/)[Setup guides](https://tradingagentstack.com/guides/)

Other paths: [Trade with a bot](https://tradingagentstack.com/trade-with-a-bot/) · [Markets & infrastructure](https://tradingagentstack.com/markets-and-infrastructure/) · [Learn](https://tradingagentstack.com/learn-algorithmic-trading/) · [Search all tools](https://tradingagentstack.com/tools/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)