MetaMask Agent Wallet: A Complete Beginner's Guide

Key Takeaways

1.  MetaMask Agent Wallet lets an AI agent trade crypto on your behalf, but you stay in control by setting spending limits, approved protocols, and which mode the agent runs in.

2.  Guard Mode (the default) requires your approval via 2FA for anything outside your preset rules. Beast Mode allows more autonomy but still blocks and flags malicious transactions.

3.  Every transaction goes through a mandatory three-step security pipeline: simulation, Blockaid threat scanning, and MEV protection. Confirmed safe transactions are covered by up to $10,000 per month in Transaction Protection.

Ethereum

Yes

Main EVM network

Base

Yes

Coinbase Layer 2, low fees

Arbitrum

Yes

Popular Ethereum Layer 2

Optimism

Yes

Ethereum Layer 2

Polygon

Yes

Low-cost EVM chain

Linea

Yes

MetaMask's own Layer 2

Avalanche

Yes

High-speed EVM network

BNB Chain (BSC)

Yes

Binance's EVM network

Sei

Yes

Fast EVM network

Hyperliquid

Partial

Supported for perps trading

Other EVM chains

Partial

Accessible but without full threat scanning

1. Transaction Simulation

Runs a dry-run of the transaction to show exactly what will happen: how much moves, which contracts are involved, and what the outcome will be before anything is submitted to the blockchain

Transaction is blocked automatically

2. Blockaid Threat Scanning(Transaction Shield)

Scans the transaction against a database of known malicious contracts, scam wallets, phishing routes, and flagged addresses. Powered by Blockaid.

Transaction is auto-rejected and sent to you for 2FA review

3. MEV Protection

Prevents your transaction from being front-run by bots that try to extract value from your trade by inserting their own transactions ahead of yours (known as Maximal Extractable Value, or MEV)

Submission is held until a protected route is available

Transaction Protection Coverage: Transactions that pass all three security layers are eligible for MetaMask's Transaction Protection coverage of up to $10,000 per month (capped at 100 eligible transactions). This is not insurance against speculative losses or market moves. It covers losses from malicious transactions that bypassed detection. Terms and exclusions apply.

Who it is for

Beginners and everyday traders

Experienced traders who want hands-off automation

Default setting

Yes, this is the default

No, must be opted into

Daily spend limits

Yes, you set the cap

Yes, you set the cap

Protocol allowlis

Yes, agent only uses your approved protocols

No, agent can use any protocol

2FA triggers when

Any transaction outside your policy rules (spending, chain, protocol)

Any transaction flagged as malicious by Blockaid

Can malicious transactions bypass 2FA?

No, never

No, never

Good for learning

Yes, highly recommended

Not ideal for beginners

Think of it this way: Guard Mode is like a bank that requires you to add a recipient to your approved list before you can send money to them. Anything outside your list triggers a human approval step. Beast Mode scans addresses in real time and only stops you if something is flagged as dangerous. Both modes still block malicious transactions. Neither mode removes the security pipeline.

MetaMask account

A standard MetaMask wallet (browser extension or mobile app). Download only from metamask.io.

MetaMask Mobile app

Required for 2FA push notifications. Available on iOS and Android.

Early Access spot

Apply at metamask.io/agent-wallet. The Early Access Program is free.

An AI agent framework

MetaMask Agent Wallet is compatible with OpenClaw, Claude Code, OpenAI Codex, Cursor, Nous Research Hermes Agent, and others.

Command-line access

The wallet connects via a CLI (command-line interface). Basic familiarity with a terminal is helpful.

Funds to deposit

You will create a separate agent-specific wallet and fund it. Start with only what you are comfortable potentially losing.

Important safety rule: MetaMask Agent Wallet creates a separate wallet just for the agent. Your main MetaMask wallet and its funds are not automatically connected. Never fund the agent wallet with more than you would be comfortable losing entirely.

STEP 1  Apply for Early Access

• Go to metamask.io/agent-wallet

• Click Join the Early Access Program

• Fill in the application (it is free to apply and free to join if accepted)

• Check your email for an acceptance notification

• Accepted users get first access, direct contact with the MetaMask build team, and a say in the product roadmap

STEP 2  Install MetaMask (if you have not already)

• Go to metamask.io (only this official URL)

• Download the browser extension for Chrome, Firefox, Brave, or Edge

• Or download the MetaMask mobile app from the App Store (iOS) or Google Play (Android)

• Create a new wallet or import an existing one

• Write down your 12-word Secret Recovery Phrase on paper and store it somewhere safe offline. Never share it. Never photograph it.

STEP 3  Set Up MetaMask Mobile for 2FA

• Install the MetaMask app on your phone if you have not already

• Sign in to the same account as your browser wallet

• Enable push notifications in your phone's settings so MetaMask can reach you for 2FA approvals

• Alternatively, you can use email approval links for 2FA if you prefer

• When the agent tries a transaction outside your rules, your phone or email will prompt you to approve or reject it. You have 5 minutes to respond before it auto-declines.

STEP 4  Install the MetaMask Agent Wallet CLI

• Once accepted into Early Access, follow the installation link provided by MetaMask

• The CLI (command-line interface) is the tool that connects your AI agent framework to MetaMask Agent Wallet

• You will also install the skills library for your specific agent framework (for example, OpenClaw, Claude Code, or Codex)

• This is a developer-style setup. If you are not comfortable with a terminal, you may want to wait for the full GUI release this summer.

STEP 5  Create and Fund Your Agent Wallet

• The CLI will walk you through creating a new, separate wallet specifically for your agent

• This wallet is self-custodial: you hold the keys and can export your Secret Recovery Phrase at any time

• Fund this wallet with a small amount of crypto. A good starting amount for testing is whatever you consider a completely acceptable total loss.

• Do not connect your main MetaMask wallet to the agent. Keep them separate.

• Your keys are protected by a Trusted Execution Environment (TEE), which means even MetaMask and Consensys cannot read your key material while it is in use

STEP 6  Set Your Rules Before Going Live

• This is the most important step. Set up your policy before activating the agent.

• Daily spend limit: the maximum the agent can spend per day across all transactions

• Protocol allowlist (Guard Mode): the specific DeFi apps and protocols the agent is permitted to use

• Token allowlist: which tokens the agent can touch

• Chain restrictions: which blockchains the agent can transact on

• Risk profile: how conservatively or aggressively the agent should operate

• Choose Guard Mode (recommended for beginners) or Beast Mode

STEP 7  Connect Your Agent Framework and Go

• Connect your AI agent (for example, a Claude Code agent or OpenClaw session) to the MetaMask Agent Wallet via the CLI

• Give the agent its first instruction. For example: 'Monitor this liquidity pool and alert me if the yield drops below 5%'

• The agent will begin operating inside your defined rules

• Every transaction it attempts goes through the three-step security pipeline automatically

• Watch your first few transactions closely to confirm the agent is behaving as expected

• Check your transaction logs regularly

Agent tries a transaction outside your policy

Push notification on MetaMask Mobile OR email approval link

Open the notification, review the transaction details, then tap Approve or Reject

Agent tries a transaction flagged as malicious

Push notification or email in both Guard Mode and Beast Mode

Review the details carefully. Reject if anything looks unfamiliar or suspicious.

You do not respond within 5 minutes

The request auto-declines

No action needed. The transaction does not execute.

Agent attempts a transaction within your rules (Guard Mode)

No notification. Transaction executes automatically.

Nothing required. Review your activity log later.

Never approve a 2FA request you did not initiate or do not recognize. If you receive an approval request you are not expecting, reject it immediately and review your agent's recent activity. Then check whether your agent framework may have been given a prompt you did not intend.

Start with Guard Mode

It gives you the most control and requires approval for anything unusual. Switch to Beast Mode only after you understand how your agent behaves.

Use a separate agent wallet

Never connect the agent to your main wallet. The agent wallet is its own isolated account with its own keys.

Set a daily spend limit you can afford to lose

Even with security layers in place, no system is perfect. Treat the agent wallet balance as money you are comfortable with losing entirely.

Do not install unverified plugins

Agent frameworks allow third-party extensions. Only install ones with a clear audit trail or those recommended by the official framework documentation.

Read every 2FA notification before approving

Do not tap Approve automatically. Read the transaction details. If anything looks wrong or unexpected, reject it.

Export and store your Secret Recovery Phrase offline

Write it on paper. Store it somewhere physically secure. Never photograph it or store it in the cloud.

Review your transaction logs weekly

Autonomous agents can build up unexpected patterns over time. A quick weekly review keeps you informed.

Never share your seed phrase

MetaMask support will never ask for it. Anyone who does is attempting a scam.

AI Agent

Software that can take actions on its own, like executing trades, without requiring a human to approve every single step.

Self-Custodial Wallet

A wallet where you hold your own private keys. No exchange or company controls your funds. You are responsible for keeping the keys safe.

Secret Recovery Phrase

A 12-word backup phrase generated when you create a MetaMask wallet. Anyone who has these 12 words can access all funds in the wallet. Store offline only.

Private Key

A long cryptographic string that proves ownership of a wallet and authorizes transactions. Never share it.

DeFi (Decentralized Finance)

Financial services like lending, trading, and earning yield that run on blockchains via smart contracts, with no banks or intermediaries.

Smart Contract

A self-executing program stored on a blockchain. It automatically carries out an agreement when certain conditions are met.

EVM (Ethereum Virtual Machine)

The computing environment shared by Ethereum and dozens of compatible chains like Base, Arbitrum, and Polygon.

2FA (Two-Factor Authentication)

A second layer of verification, in this context a push notification or email, required before a transaction outside your policy can execute.

MEV (Maximal Extractable Value)

A practice where bots insert transactions before yours to profit from the price change your trade causes. MEV protection defends against this.

TEE (Trusted Execution Environment)

A secure, hardware-isolated area inside a processor where private keys can be stored and used without being readable by the surrounding system.

Allowlist

A list of approved wallets, contracts, or protocols that the agent is permitted to interact with. Anything not on the list triggers a 2FA prompt.

Transaction Simulation

Running a dry-run of a transaction to preview exactly what will happen before it is submitted to the blockchain.

Guard Mode

The default MetaMask Agent Wallet mode. Enforces strict spending limits and protocol allowlists. 2FA triggers for anything outside policy.

Beast Mode

An opt-in mode for experienced users. Fewer policy interruptions, but malicious transactions still trigger 2FA and get blocked.

CLI (Command-Line Interface)

A text-based way to interact with software using typed commands in a terminal. MetaMask Agent Wallet connects via CLI in Early Access.

Blockaid

The security partner whose threat-scanning technology powers MetaMask's Transaction Shield, checking transactions against a database of malicious activity.