Table of Contents
MetaMask launched an agent wallet on June 8, opening an early access program to a limited group of traders and developers. The product gives AI agents access to DeFi workflows across EVM chains and Hyperliquid – swaps, perpetuals, prediction markets, liquidity provision – while running every transaction through a mandatory three-step security pipeline before it executes.
The design problem MetaMask is addressing is a practical one: an agent that can attempt transactions autonomously can also misinterpret a prompt, interact with a malicious contract, or exceed the amount a user intended to spend. MetaMask Agent Wallet requires users to define operating rules before the agent starts transacting. Daily spend limits, allowlisted protocols, and risk profiles are set upfront. Any transaction that falls outside those rules, or is flagged by the security stack, requires human approval via 2FA before it can proceed. The approval request arrives via MetaMask Mobile push notification or email, with a five-minute window before auto-decline.
Each transaction on Ethereum, Linea, Arbitrum, Avalanche, Optimism, Base, Polygon, BSC, and Sei passes through three checks: transaction simulation that surfaces balance changes and approvals before signing; Blockaid-powered threat scanning that auto-rejects malicious transactions; and smart transactions MEV protection. Transactions deemed safe carry transaction protection coverage of up to $10,000 per month.
The wallet ships with two operating modes. Guard Mode is the default: it enforces spend limits and protocol allowlists and pauses any out-of-policy transaction for 2FA review. Beast Mode is opt-in for users who want fewer interruptions; security checks and malicious-transaction 2FA still apply, but the agent has more latitude around policy edge cases.
MetaMask Agent Wallet is framework-agnostic, with integrations for OpenClaw, OpenAI Codex, Claude Code, Nous Research Hermes, and Cursor. It is available via CLI. Users retain self-custody; keys are backed by a trusted execution environment but exportable at any time. Developers can also bring their own keys.
The product is aimed at crypto-native traders and builder-traders already working in agent frameworks. General availability is targeted for summer 2026; the early access program is free and open for applications.
