TL;DR — Coinbase has shipped four major MCP-compatible products in under 12 months: Payments MCP (Oct 2025) for wallet operations and stablecoin payments, Base MCP (May 2026) connecting AI agents to DeFi protocols on the $4.2B TVL Base L2, Coinbase for Agents (Jun 2026) enabling AI-driven trading and portfolio management, and Coinbase Advisor (Jun 2026) — the first SEC-registered, NFA-registered AI investment adviser. All built on the open-source AgentKit framework and the x402 payment standard now governed by the Linux Foundation.
Introduction: Why Coinbase Bet the Farm on AI Agents
Between May 2025 and June 2026, Coinbase underwent the fastest product transformation in its 13-year history — and AI agents were at the center of every move. The company didn't just build a crypto wallet for LLMs. It built an entire financial operating system for autonomous agents: a payment protocol, a developer toolkit, a DeFi gateway, a trading platform, and a regulated advisory service. All connected through MCP.
This isn't a side experiment. With Base now the largest Ethereum L2 by TVL at $4.22 billion (Source: DefiLlama — Chain Rankings by TVL), and the x402 payment standard adopted by 60+ partners including Mastercard, PayPal, and Cloudflare (Source: Eco — x402 Protocol Explained), Coinbase is positioning itself as the default financial rail for the agent economy. This article maps the full stack — from protocol to product — and analyzes what it means for developers, traders, and the broader crypto x AI convergence.
The Full Stack: Four Products, One Protocol
Coinbase's agent strategy follows a clean architectural layering. Each product builds on the one below it:
| Layer | Product | Launch Date | What It Does |
|---|---|---|---|
| Protocol | x402 | May 2025 | Open standard for internet-native payments via HTTP 402 |
| Foundation | x402 Foundation | Sep 2025 → Linux Foundation (Apr 2026) | Governance body for the payment standard |
| Wallet Layer | Payments MCP | Oct 2025 | Wallets, onramps, stablecoin payments for AI agents |
| Developer SDK | AgentKit | Ongoing (v0.10.4) | Framework-agnostic toolkit for agent + wallet |
| DeFi Gateway | Base MCP | May 26, 2026 | AI agents access 7 DeFi protocols on Base L2 |
| Trading Platform | Coinbase for Agents | Jun 11, 2026 | AI agents trade, rebalance, pay via x402 |
| Advisory | Coinbase Advisor | Jun 16, 2026 | SEC/NFA-registered AI investment adviser |
This is not a collection of disconnected experiments. Each layer is designed to be composable — a developer can use AgentKit without Coinbase for Agents, or connect directly to Base MCP without touching the centralized exchange. The MCP standard is the connective tissue.
Layer 1: The x402 Protocol — Internet-Native Payments for Agents
Before an AI agent can trade or invest, it needs to be able to pay. That's the problem x402 solves.
Launched in May 2025 and open-sourced by Coinbase, x402 is a payment protocol that leverages the HTTP 402 "Payment Required" status code — a standard defined in 1999 but never meaningfully implemented until now (Source: Coinbase Developer Platform — Introducing x402). When an AI agent hits a paywalled resource, the server returns HTTP 402 with payment details. The agent pays in USDC (or another supported stablecoin), and access is granted. No API keys, no sign-up forms, no human in the loop.
In September 2025, Coinbase and Cloudflare jointly launched the x402 Foundation to govern the standard. By April 2026, the Foundation — and the protocol itself — moved to the Linux Foundation, a signal that x402 was being positioned as a neutral, Internet-level standard rather than a Coinbase-proprietary rail (Source: Linux Foundation — Welcoming the x402 Protocol).
Adoption metrics: As of June 2026, x402 has over 60 ecosystem partners including Mastercard, PayPal, Vercel, and Cloudflare. Cloudflare integrated x402 into its Workers platform, enabling serverless HTTP payment flows at the edge (Source: Cloudflare — x402 Foundation Launch). Google's AP2 (Agent Payment Protocol) standard, announced in late 2025, is interoperable with x402 and has been described as building on the same HTTP 402 foundation (Source: Eco — AP2 Protocol Explained).
Why this matters: The agent economy needs a payment layer that doesn't depend on human identity. x402 is the leading candidate — and Coinbase created it.
Layer 2: Payments MCP — The First Onchain Wallet for LLMs
In October 2025, Coinbase launched Payments MCP, the first product that directly connected MCP-compatible AI agents (Claude, Gemini, ChatGPT via Codex) to onchain wallet operations (Source: Coinbase — Payments MCP Launch).
The tool was deceptively simple: an AI agent could create a wallet, onramp fiat to crypto, and send stablecoin payments — all from a natural language prompt, with no API key required. It worked with Anthropic's Claude Desktop and Code, Google's Gemini, OpenAI's Codex, and Cherry Studio (Source: Decrypt — Coinbase Links AI to Crypto Payments).
Capabilities at launch:
- Wallet creation and management
- Fiat-to-crypto onramps (via Coinbase)
- USDC stablecoin transfers
- x402 payment flows (pay for compute, data, APIs)
- No API key required for basic operations
The design philosophy was radical: treat the AI agent as a first-class economic actor, not a human with an API token. By removing the API key requirement, Coinbase made it possible for any LLM with an MCP client to hold and spend money.
Layer 3: AgentKit — The Developer Framework
Behind every MCP integration is AgentKit, Coinbase's open-source toolkit for giving AI agents onchain capabilities. Hosted at github.com/coinbase/agentkit, the framework is both framework-agnostic (works with LangChain, ElizaOS, Vercel AI SDK, Google ADK, and Strands Agents) and wallet-agnostic (supports CDP wallets, Privy, and third-party providers) (Source: GitHub — coinbase/agentkit).
Key architecture decisions:
- Action Providers: Modular plugins that add specific capabilities (token transfers, contract deployment, DeFi interactions). Developers can write custom action providers or use Coinbase's pre-built ones.
-
MCP Extension: A dedicated
@coinbase/agentkit-model-context-protocolpackage (npm, v0.2.0) that implements the MCP server protocol, enabling any MCP-compatible client to discover and invoke AgentKit actions (Source: Coinbase AgentKit Docs — MCP Extension). - Nightly builds: The project maintains bleeding-edge nightly releases for developers tracking main-branch development.
-
Multi-language: Python (
coinbase-agentkiton PyPI, v0.7.4+) and TypeScript (@coinbase/agentkiton npm, v0.10.4, ~9,840 weekly downloads).
AgentKit is active but not massive — npm weekly downloads in the ~10K range as of early 2026. However, its strategic value to Coinbase far exceeds its download numbers. It's the SDK that connects every other product in the stack.
Layer 4: Base MCP — AI Meets DeFi
On May 26, 2026, Coinbase's Ethereum L2 network Base shipped Base MCP, a gateway that lets AI agents (ChatGPT, Claude, Cursor, and any MCP-compatible client) execute DeFi transactions on Base through OAuth 2.1-authenticated smart accounts (Source: Base Blog — Introducing Base MCP).
What changed: Before Base MCP, AI agents could hold and send crypto via Payments MCP, but couldn't interact with DeFi protocols — no lending, no swaps, no yield farming, no perpetuals trading. Base MCP opened that door.
At launch, Base MCP included skill plugins for seven DeFi protocols (Source: CoinDesk — Base Launches AI Tool for DeFi):
| Protocol | Category | Function |
|---|---|---|
| Morpho | Lending | Supply/borrow assets with optimized rates |
| Moonwell | Lending | Lend and borrow across multiple assets |
| Uniswap | DEX | Swap tokens, provide liquidity |
| Aerodrome | DEX | Base-native liquidity hub |
| Avantis | Perpetuals | Leveraged futures trading |
| Bankr | Agent Wallet | AI-native wallet infrastructure |
| Virtuals | AI Agents | AI agent co-ownership and revenue sharing |
Security architecture: Base MCP uses OAuth 2.1 for authentication — users grant scoped permissions to their AI agent via their Base Account. The wallet uses "stored requests," a Base Account primitive: the AI agent proposes a transaction, and the user approves and signs it (Source: Base Blog — Base MCP Architecture). The AI never holds private keys directly. Every transaction requires human approval.
This human-in-the-loop design is critical. It's not fully autonomous DeFi — it's agent-assisted DeFi. The AI researches, proposes strategies, and drafts transactions. The human approves or rejects.
Layer 5: Coinbase for Agents — Trading and Portfolio Management
On June 11, 2026, Coinbase launched Coinbase for Agents, a platform that connects AI assistants (ChatGPT, Claude) directly to a user's Coinbase account (or a sub-account) for trading, portfolio rebalancing, and x402 payments (Source: Coinbase Blog — Coinbase for Agents).
Capabilities:
- Trading: AI agents can execute spot trades on Coinbase's order books
- Portfolio management: Rebalance holdings across assets based on user-defined strategies
- x402 payments: Pay for services and APIs directly from Coinbase balances
- Sub-accounts: Dedicated accounts for AI agents with segregated balances, limiting risk
- MCP + CLI access: Available as both an MCP integration and a command-line interface
The sub-account architecture is the key risk-management feature. Rather than giving an AI agent access to a user's entire Coinbase portfolio, the platform supports isolated sub-accounts with defined spending limits — a pattern that echoes how enterprises provision service accounts for automated systems.
Layer 6: Coinbase Advisor — The SEC-Registered AI
On June 16, 2026 — just five days after Coinbase for Agents — the company dropped its most ambitious product yet: Coinbase Advisor, an AI-powered investment adviser registered with both the SEC and NFA (Source: TechTimes — Coinbase AI Trading Agent Is Now SEC-Registered).
This is a first. No other major crypto platform has registered an AI agent as a regulated investment adviser. The product, initially available to Coinbase One members in the United States, provides personalized investment guidance — turning market news, ideas, and opportunities into actionable recommendations with the legal framework of a registered adviser.
The same "System Update" on June 16-17 also included (Source: The Cryptonomist — Coinbase AI Investing Goes Live):
- Tokenized US stocks for non-US customers (1:1 backed by real shares, launching July 2026)
- Options trading for crypto and stocks
- SpaceX pre-IPO derivatives
- Commission-free stock trading
The product blitz positions Coinbase not just as a crypto exchange, but as a full-stack AI-powered brokerage — and Coinbase Advisor is the regulated face of that ambition.
Important caveat: Coinbase's own disclaimer states that users still bear all investment risk. The SEC registration means the AI adviser is compliant with regulatory standards for advice — it does not mean the SEC endorses its recommendations (Source: Thirdweb — Coinbase Registered an AI Agent With the SEC).
Security Considerations: The Attack Surface
Connecting AI agents to financial infrastructure creates a new attack surface. Several risks have already been identified:
1. Prompt injection: In February 2026, a security researcher submitted a finding to Coinbase's bug bounty program demonstrating that a prompt injection attack against AgentKit could enable unauthorized token transfers on Base Sepolia testnet. Coinbase validated the report, rated it medium severity, and awarded a $2,000 bounty. The researcher argued the real-world risk was higher than the official severity rating (Source: BingX — AgentKit Prompt Injection Flaw).
2. GitHub supply chain: In March 2025, a broader GitHub supply chain attack compromised the coinbase/agentkit repository. An attacker obtained a GitHub token with write permissions to the repository, less than two hours before a larger attack was launched against tj-actions/changed-files (Source: TechRadar — Coinbase Targeted After GitHub Attacks). Coinbase's postmortem confirmed the token was rotated and no malicious code was merged.
3. Architectural mitigations: Coinbase's stack uses several defense-in-depth measures:
- Human-in-the-loop signing: Base MCP requires human approval for every transaction
- Sub-account isolation: Coinbase for Agents uses segregated sub-accounts with spending limits
- OAuth 2.1 scoped permissions: Base MCP grants limited, revocable access tokens
- No private key exposure: AI agents never hold raw private keys
The architecture is conservative, but the risks are real. As these systems become more autonomous — and as prompt injection research advances — the security model will need to evolve.
Ecosystem Impact: What This Means for the Agent Economy
Coinbase's MCP stack has three structural implications for the AI agent ecosystem:
1. MCP becomes the standard for agent-to-finance integration. Anthropic's Model Context Protocol was designed as a general-purpose standard for AI-tool interaction. Coinbase's aggressive adoption — building four MCP-native products in under a year — has made MCP the de facto standard for connecting AI agents to financial infrastructure. Other crypto platforms (Metamask, Phantom) and traditional banks are following suit (Source: Open Banking Tracker — Agentic Banking Directory 2026).
2. The agent economy gets a payment rail. Before x402 and Payments MCP, AI agents couldn't pay for services natively. Now, an agent can pay for compute (via Cloudflare Workers x402 integration), access paywalled APIs, tip content creators, and manage lightweight business operations — all in USDC, onchain (Source: Fintech News Singapore — Coinbase Payments MCP). Combined with Vercel's x402 MCP server, this enables pay-per-use AI tool marketplaces (Source: Nodit — AI Agents That Pay for Themselves).
3. Regulation arrives for agentic finance. Coinbase Advisor's SEC registration sets a precedent: AI agents that give financial advice can and will be regulated. For builders in the space, this is both a barrier (compliance costs) and a signal (the regulators are paying attention, which means the market is real).
FAQ
Q: Do I need a Coinbase account to use these tools?
Base MCP and AgentKit do not require a centralized Coinbase exchange account — they operate on the Base L2, which is a public blockchain. However, Payments MCP and Coinbase for Agents require a Coinbase account with KYC. Coinbase Advisor requires Coinbase One membership and US residency.
Q: Can my AI agent trade autonomously without my approval?
Not in the current architecture. Base MCP requires human approval for every transaction via OAuth 2.1. Coinbase for Agents uses sub-accounts with programmable limits but still operates within the Coinbase platform's permission model. Full autonomy is technically possible with AgentKit + a self-custodied wallet, but none of Coinbase's managed products enable it out of the box.
Q: What's the difference between Base MCP and Payments MCP?
Payments MCP (Oct 2025) focuses on basic wallet operations: create wallets, onramp fiat, send stablecoin payments. Base MCP (May 2026) extends this to DeFi: lending, borrowing, swapping, liquidity provision, and perpetuals trading on the Base L2. Payments MCP is about moving money; Base MCP is about using money in DeFi protocols.
Q: How does x402 compare to Google's AP2 protocol?
Both use the HTTP 402 status code as a payment trigger and support stablecoin payments. x402 was launched earlier (May 2025 vs. late 2025) and has broader adoption with 60+ partners. AP2 has Google's weight behind it and strong integration with Google's agent frameworks. The two are interoperable — they're not competing standards so much as parallel implementations of the same HTTP 402 concept (Source: Eco — AP2 Protocol Explained).
Q: What's the risk of giving an AI agent access to my crypto?
The primary risks are prompt injection (an attacker tricks the AI into making unintended transactions), model hallucination (the AI executes a suboptimal strategy), and supply chain compromise (malicious code in AgentKit dependencies). Coinbase's architecture mitigates these with human-in-the-loop signing, sub-account limits, and OAuth scoping — but no system is risk-free. Start with small amounts and segregated sub-accounts.
Further Reading
- Coinbase Developer Platform — Payments MCP Launch
- Base Blog — Introducing Base MCP
- Coinbase Blog — Coinbase for Agents
- Coinbase Developer Docs — AgentKit MCP Extension
- github.com/coinbase/agentkit
- Linux Foundation — x402 Foundation Launch
- x402.org — Protocol Specification
- Thirdweb — What Coinbase's SEC-Registered AI Agent Means for Builders
- The Agent Report — MetaMask Agent Wallet: DeFi for AI Agents
- The Agent Report — AI Agent Security: Complete Guide to Threats and Defenses
- Open Banking Tracker — Agentic Banking and MCP Directory (2026)
This article was originally published on The Agent Report.













