AgentScore

AgentScore

Coinbase Agentic Wallet Is Live: What to Build Now

Coinbase Agentic Wallet Is Live: What to Build Now

Jun 12, 20267 min readBy AgentScore Blog

Coinbase dropped three significant updates to its Developer Platform this week, and if you're building AI agents that touch money, data, or APIs, this is the release you've been waiting for. Agentic Wallet is now generally available. SQL API x402 support closes the loop between on-chain data reads and programmatic payment for that data. And the Onramp User Limits API has entered private beta, giving platform teams a compliance primitive they've had no clean way to express until now. This isn't incremental. Coinbase is making a serious move to become the default money rail for LLM agents, the same way Stripe became the default checkout for web apps. Here's what shipped, why it matters, and what your team should do before the end of Q3 2026.

What Actually Shipped

Agentic Wallet: Custody Without Long-Lived Keys

The Agentic Wallet, which Coinbase first unveiled in February 2026, is now a fully documented, production-ready API. The core design choice is worth dwelling on: instead of handing an agent a private key and hoping nothing goes wrong, the SDK uses session keys. An agent gets a scoped, time-bounded signing credential. It can authorize transactions within defined policy limits without ever touching the root private key. For engineering teams, this eliminates the most brittle part of building agentic finance: the key management layer. Previously, if you wanted an agent to transact on EVM chains, you were either storing private keys in secrets managers (fragile, expensive to rotate, a nightmare to audit) or building a bespoke custodial abstraction on top of something like Fireblocks or MPC infrastructure. The Agentic Wallet makes that a default rather than a custom build. Session key architecture also means spend policies become code. You define what an agent can sign at configuration time. Portfolio isolation, per-agent daily limits, allowed contract addresses: these are parameters, not ad hoc guardrails bolted on after the fact.

SQL API x402 Support: Pay for Data Programmatically

The x402 protocol is Coinbase's machine-to-machine payment standard, built on the HTTP 402 response code that the web reserved for payment required but never standardized. When an agent hits an API that requires payment, it receives a 402 response with a payment payload, fulfills it in USDC over Base, and gets access. No OAuth flows, no API key billing dashboards, no monthly invoice reconciliation. The SQL API x402 integration means agents can now query indexed blockchain data in real time and pay for that query on the spot. Read on-chain state, pay for the read, act on the result, execute a transaction. The entire loop runs programmatically, with no human in the critical path. Pricing for x402 is public: 1,000 transactions per month free, then roughly $0.001 per transaction. For most internal analytics workloads or low-frequency trading agents, the cost profile is negligible. At high query volumes it scales predictably, which is more than you can say for most data API pricing models. The launch partners for x402 include AWS, Anthropic, Circle, and Near. Travala is already running it in production for gasless USDC payments on Base inside their agentic travel protocol. That's not a pilot; that's a live deployment with real transaction volume.

Onramp User Limits API: Compliance as a Primitive

The private beta of the Onramp User Limits API is the least flashy of the three releases and probably the most strategically important for any team operating in a regulated context. It lets you query user-specific onramp limits in real time and enforce those limits as you expose financial autonomy to agents. If you're building a platform where multiple users delegate spending authority to agents, you need to know before the agent acts whether a given user's transaction will breach their limit. Previously you'd build this yourself, either by maintaining a parallel ledger of user activity or by hitting Coinbase's onramp flow reactively and handling errors. The Limits API gives you a query primitive so you can gate agent actions proactively. This is currently private beta, which means you need to apply for access. If your product has any compliance exposure, apply now and get into the feedback loop early.

The Competitive Picture

Framing this as a crypto story undersells what Coinbase is actually doing. The Agentic Wallet plus x402 is a direct play for territory that Stripe, Plaid, and traditional broker APIs currently occupy. Stripe handles checkout and billing for web apps. Coinbase is positioning x402 and the Agentic Wallet to handle the equivalent layer for AI agents: programmatic payment initiation, custody, and policy enforcement. The difference is that Coinbase's stack is built from the ground up for non-human actors. Stripe Agents (still in early access) can surface payment flows into LLM contexts, but the underlying model is still human-initiated checkout. x402 is a machine-to-machine protocol where no human is expected to be present at payment time. That's a meaningfully different design target. Here's how the current landscape stacks up for teams building agentic finance:

CapabilityCoinbase CDPTraditional Broker APIs
Agent-native wallet custody
Session key spend controls
Machine-to-machine payments (x402)
Real-time compliance limits query
On-chain data + payment in one flow
Fiat onramp

Coinbase's advantage is vertical integration across custody, payments, and data for the agentic use case specifically. The weakness is that everything settles in USDC on Base, which means you're accepting crypto rails whether or not your users think of themselves as crypto users. For some products that's fine. For others it creates a UX and compliance translation layer you'll need to build.

What This Means for Engineering Teams Right Now

The release has three concrete implications that should hit your sprint planning this week.

Spend policies need the same rigor as feature flags. Session keys and portfolio limits turn financial governance into configuration. That sounds like a simplification, and in one sense it is. But configuration has its own failure modes: stale policies, version drift between environments, no audit trail for changes. If you're deploying agents with real spending authority, your policy files need to be versioned in git, reviewed before merge, and monitored at runtime. Treat a misconfigured spend limit the same way you'd treat a misconfigured rate limiter on a financial API. The blast radius is real.

Evaluate x402 against your current API billing stack. If your agents are calling paid APIs today (LLM inference, data providers, enrichment services), you're almost certainly handling billing through OAuth credentials, API keys, and monthly invoices. x402 offers a different model: pay per call, in USDC, settled instantly. For high-volume agents, the operational overhead of managing API key rotation and billing reconciliation may already cost more than the transactions themselves. Run the math on your current API spend, then model what x402 unit economics look like at your query volume.

Apply for the Onramp User Limits API private beta if you have compliance exposure. Don't wait for GA. Being in the beta cohort gives you direct input into how the API is designed, and compliance primitives built early into your architecture are much cheaper than retrofitted guardrails.

What AgentScore's Approach Gets Right Here

The Coinbase release validates the infrastructure direction AgentScore has been building toward: the idea that AI agent commerce requires purpose-built primitives, not adapted human-facing payment flows.

Where AgentScore adds value on top of this stack is in the verification and compliance layer that the Coinbase releases don't fully address. Agentic Wallet gives you session keys and spend controls. x402 gives you machine-to-machine payment. What neither gives you is a universal mechanism to verify who or what is on the other side of a transaction: Is this agent acting on behalf of a verified buyer? Does the merchant have the right signals to trust this agent's authority to spend? What happens when an agent initiates a transaction across multiple platforms with different identity and compliance postures?

That's the gap AgentScore's Passport and compliance gating address. As the Coinbase stack matures and x402 adoption spreads across more API providers, the question of inter-platform trust and buyer verification becomes more acute, not less. The Coinbase releases make the payment mechanics trivially easy. The harder problem is establishing trust and compliance at the transaction layer before the payment fires. Teams building on Coinbase CDP should be thinking about that layer now, not after they've shipped. The Onramp User Limits API is Coinbase's first real move into that space. It won't be the last. But it's also narrowly scoped to onramp-specific limits, not general-purpose buyer verification or cross-platform compliance.

Concrete Recommendations

Audit your agent's current key management approach. If you're storing private keys in any form that a running process can access directly, Agentic Wallet's session key model is a strict improvement. Prioritize migration.

Pilot SQL API x402 in a read-only or paper-trading environment before connecting it to live execution. Understand the latency profile, the cost per query at your volume, and how 402 payment failures surface in your observability stack.

Apply for the Onramp User Limits API private beta at the CDP changelog if your platform exposes financial autonomy to end users.

Version and review your session key policies as infrastructure-as-code from day one. Build a monitoring hook that alerts on policy configuration changes and on agents approaching spend limits in real time.

Map your inter-platform trust requirements. If your agents transact across more than one platform or API provider, identify now where buyer verification and compliance gating will need to live. Don't assume x402's payment layer handles trust; it handles payment.

Where This Goes

Coinbase's COIN stock jumped more than 3% on the day of the agentic finance announcement. Markets are pricing in the platform thesis. The more interesting signal for engineering teams is that x402 already has production deployments and a launch partner list that includes Anthropic and AWS. This isn't a whitepaper. It's live infrastructure with growing adoption. Within 18 months, expect x402 support to appear across most major AI data providers, compute marketplaces, and research APIs. The SQL API integration is the proof of concept. The pattern will generalize. Teams that build their agents' payment and data layers around x402 now will have a meaningful head start when their upstream providers flip the switch. The question isn't whether agentic commerce infrastructure becomes standard. It's whether your team builds on a foundation designed for agents from the start, or retrofits human-facing payment primitives for the second time.

Get started with AgentScore

If you want to start accepting agent payments, AgentScore gets you live in one call:

typescript
1import { agentscoreGate } from '@agent-score/commerce/identity/hono';
2
3app.use('/purchase', agentscoreGate({
4  apiKey: process.env.AGENTSCORE_API_KEY!,
5  userAgent: `my-api/${VERSION}`,
6  requireKyc: true,
7  requireSanctionsClear: true,
8  minAge: 21,
9  allowedJurisdictions: ['US'],
10  createSessionOnMissing: { apiKey: process.env.AGENTSCORE_API_KEY! },
11}));

Ready to power your agents with secure commerce?

Join innovators using AgentScore to accept payments, verify buyers, and ensure compliance for every AI-driven transaction.

Read More Blog Posts

AgentScoreAgentScore

Commerce infrastructure insights for agent developers.

© 2026 AgentScore. All rights reserved.