MetaMask has launched early access for AI‑agent wallets and unveiled a feature that sets transaction rules and verifies them before execution. The feature allows users to perform transactions only within the scope of authority they specify, providing protection up to $10 000 (about 13.24 million KRW) per month when conditions are met. The company announced early access for Agent Wallets in June 2026 and introduced security enhancements at that time.
The feature includes restricting AI‑agents’ transaction permissions when operating a virtual asset wallet and verifying them before execution. To control latent risks such as malicious prompt injection, key leakage, or excessive authority, users can perform simulation and threat detection prior to the transaction and then apply MEV (Minimum Viable Execution) protection. In this process, users may set transaction rules, and supported transactions are automatically verified before execution.
In server‑wallet mode, keys are managed in a TEE (Trusted Execution Environment) so that agents cannot directly access them. MetaMask also offers the existing wallet‑connection method, allowing users to freely switch between legacy wallets and the newly introduced Agent Wallet as needed.
Security conditions do not apply to all transactions but only to specific situations. For example, the $10 000 per month limit applies only to those transactions that meet the condition; exclusions and application conditions are specified. The company also set a method for holding users accountable.
ChangeNOW announced that it will provide MCP server and API tools so that AI agents can interact with services at the Hub. These tools do not manage private keys, and they differ from wallet‑signing methods in service integration.
Token2049 Summit was held on 7–8 October 2026 at Marina Bay Sands. On the second day of the event, MetaMask, Trezor, and Dreadster participated in a panel discussing wallet security and AI‑agent access issues; the two participants had differing views. The panel did not disclose concrete statements or conclusions from the published materials, but the relationship between MetaMask and ChangeNOW deals with both wallet security and AI‑agent functionality together. This discussion serves as an example of user responsibility, similar to Coinbase’s note on liability for AI trading.