MetaMask ships Agent Wallet in early access, mandates 2FA on out-of-policy trades

Consensys opened a CLI-only early access on June 8 with ~200 traders, mandatory Blockaid scans, and up to $10,000 in Transaction Protection coverage.

Consensys opened early access to MetaMask Agent Wallet on Monday, June 8, seeding a CLI-only release to roughly 200 traders (per Decrypt) ahead of a summer 2026 general availability. The product gives AI agents self-custodial keys, autonomous DeFi access across nine named chains in MetaMask’s own release (and 25+ EVM chains per The Defiant), and a security envelope designed less to make agents safe than to bound what happens when they aren’t.

That distinction is the actual news. MetaMask product lead Tong, speaking to Decrypt, declined the usual launch-day posture. “The honest premise first: You cannot guarantee an LLM won’t be tricked,” Tong said, adding that “Prompt injection is an open research problem, not a bug you patch once.” The architecture follows. Every transaction passes three mandatory checks before signing: simulation, a Blockaid threat scan with auto-reject, and MEV protection. Transactions that clear the gauntlet are backed by up to $10,000 in Transaction Protection coverage, which The Defiant reports as a per-month figure.

Agents run in one of two modes. Guard Mode, the default, enforces spend limits and allowlists and fires a push notification to MetaMask Mobile for anything out-of-policy; the user has a five-minute window to approve or the trade auto-declines. Beast Mode reduces interruptions for opt-in users but still mandates 2FA on anything Blockaid flags as malicious. Key material lives inside a trusted execution environment supplied by Cubist, which Tong says neither MetaMask nor Consensys can access. Keys are exportable; developers can bring their own.

Five frameworks ship integrations at launch: OpenClaw, OpenAI Codex, Anthropic’s Claude Code, Nous Research’s Hermes Agent, and Cursor. Coverage spans Ethereum, Linea, Arbitrum, Avalanche, Optimism, Base, Polygon, BSC, Sei, and Hyperliquid.

Consensys CEO Joe Lubin calls it “the first agent wallet built with comprehensive full stack security.” The more telling framing is Tong’s, which concedes the perimeter is porous and prices the loss in advance. Insurance, not infallibility, is the product.