Until recently, AI agents could write reports, book hotels, and browse the web. Coinbase just handed them something more consequential: a live trading account.
The company launched Coinbase for Agents on Thursday, giving AI systems like ChatGPT and Claude their own dedicated accounts on the exchange. Users connect an existing Coinbase account, assign a spending limit, and the agent operates inside an isolated sandbox — it has no visibility into the rest of the portfolio and can only touch what's been explicitly allocated to it. From there, agents can execute trades, run dollar-cost averaging strategies, rebalance holdings, and pay for paywalled data or APIs directly via Coinbase's x402 machine-to-machine payment protocol, all without waiting for a human to approve each action.
The sandbox design matters here. A compromised agent with full account access would be a different class of problem — one bad API call and the entire account is exposed. Coinbase's approach keeps the blast radius small: if something goes wrong, only the allocated funds are at risk. Developers connect through MCP (model context protocol) or a command-line interface.
Coinbase also introduced Coinbase Advisor alongside the new platform — an SEC- and CFTC-registered AI financial adviser built into the app itself. Unlike Coinbase for Agents, the Advisor doesn't execute trades autonomously. It consults and recommends, leaving the final call to the user.
The move fits a broader push across financial infrastructure. Mastercard's AP4M network for agent payments launched last week with 30+ partners; MetaMask released dedicated agent wallets just days earlier. Major financial platforms are converging on the same thesis: the next dominant interface for managing money won't be an app — it'll be an autonomous agent working in the background.
The catch is as obvious as the opportunity. More agents with financial autonomy means a larger attack surface. Spending limits and sandboxing reduce the damage any single compromise can cause. But as agent APIs multiply and their capabilities expand, the incentive for attackers grows with them. Coinbase for Agents is a clean first step — the security architecture around agentic finance is still being written.
