MetaMask Agent Wallet
Give your AI agent a self-custody wallet with built-in security on every signing path.
Custody depends on wallet mode: server-wallet uses TEE-backed key storage; BYOK keeps keys under your
local control.
You install the mm CLI and add agent skills once.
After that, your agent handles authentication, transfers, swaps, bridges, perpetuals, and prediction
markets from natural-language requests.
MetaMask Agent Wallet is available through the Early Access Program.
What your agent can do
After setup, prompt your agent in plain language:
| You ask your agent | What happens |
|---|---|
| "Show the wallet address and USDC balance on Base" | Your agent checks auth, then queries balances. |
| "Send 10 USDT to 0x123… on Base" | Your agent confirms details, then submits a transfer. |
| "Swap 0.1 ETH to USDC on Base" | Your agent fetches a quote, confirms with you, then executes. |
| "Open a 5x long on BTC with $100 on Hyperliquid" | Your agent deposits if needed, quotes, and opens the position. |
| "Bet 10 USDT on YES for BTC 5-min price up" | Your agent searches markets, confirms odds, and places the order. |
Works in your agent
Install skills in any skills-compatible agent environment, including Claude Code, Codex, Cursor, OpenClaw, and Hermes Agent.
Capabilities
The mm CLI exposes a full command surface for wallet operations.
Your agent routes natural-language requests to these commands through installed skills.
| Area | What your agent can do |
|---|---|
| Authentication | Sign in, check session, sign out |
| Wallet | Create wallet, show address, check balances |
| Send | Transfer native tokens and ERC-20s |
| Sign / raw transactions | Sign messages, typed data, and raw EVM transactions |
| Decode calldata | Inspect unfamiliar EVM calldata before signing |
| Swap / bridge | Quote, execute, and track swaps and cross-chain bridges |
| Perpetuals | Trade on Hyperliquid (deposit, open, modify, close) |
| Prediction markets | Search, quote, and trade on Polymarket |
| Market data | Spot prices, token discovery, supported chains |
See the commands reference for every flag and subcommand.
Security by default
Signing and transaction requests pass through a built-in security pipeline before they complete.
- Transaction simulation: transactions are simulated before signing to surface reverts and unexpected state changes.
- Transaction Shield: threat scanning flags malicious contracts and scams; flagged transactions require your approval before they execute.
- Smart Transactions: helps protect against sandwich and front-running attacks where supported on the target chain.
- Server wallet: in server-wallet mode, your private key is held securely in a trusted execution environment (TEE).
Learn more in Security.
Operating modes
During mm init, you choose a wallet mode and, for server-wallet, a trading mode.
See Use the CLI directly for details.
Wallet mode (choose one):
- server-wallet: MetaMask holds your private key in a TEE-backed environment. Signing uses an
asynchronous model; long-running operations return a
pollingIdunless you pass--wait. - BYOK (bring your own key): you supply a BIP-39 mnemonic. Keys stay under your local control and operations return immediately.
Trading mode (server-wallet only):
- Guard Mode (Recommended): enforces daily spend limits and protocol allowlists you set during setup. Transactions that exceed those limits or target non-allowlisted protocols require 2-factor authentication before they execute.
- Beast Mode: skips routine policy checks for faster scripted workflows. 2-factor authentication still applies to malicious or flagged transactions.
Supported chains
MetaMask Agent Wallet supports multiple EVM chains.
Run mm chains list for the authoritative list for your CLI version.
See Supported chains for typical networks.