MetaMask brings Agent Wallet to Grok Bot, with deposit-only perps limits
On October 28, 2026, MetaMask made Agent Wallet available as a Grok Bot plugin, giving the AI agent access to swaps, bridges, Hyperliquid perpetuals, Polymarket and yield vaults with security guardrails.
The plugin connects MetaMask's existing wallet product to Grok Bot, an always-on AI agent running on its own cloud computer. MetaMask states that the system simulates and threat-scans supported transactions before execution, though the checks vary by venue. For instance, swap transactions pass through wallet controls directly, while trading on an already-funded Hyperliquid account operates outside these controls.
Security Modes and Controls
In server-wallet mode, signing keys remain within a trusted execution environment, allowing Grok Bot to request transactions without accessing the user's main wallet or Secret Recovery Phrase. The system uses Blockaid for threat scanning and routes transactions through Smart Transactions with MEV protection where supported.
Guard Mode implements network, address and recipient allowlists within a rolling 24-hour outflow budget. Actions outside these boundaries require approval via email link or MetaMask Mobile push notification. Beast Mode removes these allowlist and spending-limit layers while maintaining threat scanning for transactions flagged as malicious or involving risky contracts.
Transactions flagged as malicious or contracts flagged as risky still require two-factor approval. The mode determines which otherwise legitimate transactions can proceed unattended.
Perpetuals Trading Limitations
For Hyperliquid perpetuals, MetaMask's wallet only evaluates the initial deposit against the outflow budget in Guard Mode. Opening, modifying and closing positions bypass wallet-level threat scanning, allowlist checks and two-factor authentication regardless of size. This means a $2,000 deposit could enable a $50,000 position at 25x leverage without additional wallet-level scrutiny.
The funding command defaults to sourcing $USDC from Arbitrum, though users can specify alternative chains. Collateral already in the venue's spot balance can be moved into perpetuals, with the deposit determining collateral amount and subsequent orders setting leveraged exposure.
Yield Vaults and Setup Considerations
The plugin also includes Agent Wallet's yield-vault workflow, where the agent lists available vaults, compares APYs and TVL, confirms user choice and executes. Users can filter discovery by chain, token, protocol and minimum TVL, or supply a vault address directly. Supply and withdrawal operations route through LiFi for cross-chain support.
MetaMask's Transaction Shield provides reimbursement up to $10,000 monthly in $mUSD for eligible transactions passing wallet checks, explicitly excluding ordinary market losses, protocol exploits, compromised keys or recovery phrases. The sign-in method determines the wallet address, with different server wallets created for Google, passwordless email and MetaMask Mobile QR logins, even with the same email.
The published perpetuals guide leaves the default slippage cap unspecified, meaning orders without an explicit cap depend on the CLI's unstated setting. At session start, the plugin checks for CLI installation and sign-in status, requiring user permission before installation.
Related
