Answers · agent payments
Coinbase added Agent Controls to Coinbase for Agents on November 11, 2026. If I let an AI agent trade on my Coinbase account through the MCP, what can I cap, can the agent change or get around those limits, and what do they not protect me from?
Last updated
TL;DR: Three controls are rolling out now: a maximum trade size in US dollars for each trade (Coinbase's example is 100 USD), a 24-hour volume limit on the total the agent can trade over 24 hours, where any trade that would go over it won't go through (example: 1,000 USD), and auto-stop, a percentage-loss threshold for a portfolio: if the portfolio falls below it, the agent stops placing trades until you turn trading back on in the Coinbase app (example: 5%). A fourth, product permissions to choose which categories the agent may trade (crypto, equities, derivatives and more), is marked coming soon with no date. Coinbase says the controls run on its servers, not inside the agent, and are managed in the Coinbase app or on the web from your logged-in account behind your password and two-factor authentication, so the agent can't bypass them or change them on its own. What they don't do is judge the trades: Coinbase's disclaimer says agents may make mistakes or fail, that you direct all agent activity and that you assume all risk for transactions your agents execute. A 100 USD cap still allows many bad 100 USD trades up to the 24-hour limit, and auto-stop only reacts after the loss has happened.
What should I check, step by step?
1. Set all three controls before you connect an agent, not after its first bad day. Size the per-trade cap to the largest single order you'd accept without looking, and the 24-hour limit to the most you'd accept it trading while you're away.
- Pick the auto-stop threshold as the loss at which you want to look before anything else happens, and remember that turning trading back on is a manual step in the Coinbase app.
- Don't assume auto-stop closes positions or cancels orders. Coinbase describes it as stopping the agent from placing trades; its post doesn't say it sells anything or cancels open orders, so check what's still open when it triggers.
- Until product permissions arrive, the agent isn't restricted by product category through these controls. Keep riskier products such as derivatives out of reach some other way, or don't connect an agent to an account that can trade them.
- Keep the account login, password and two-factor authentication away from the agent. The controls hold because the agent can't reach the settings; an agent driving a logged-in browser session is a different situation from one calling the MCP.
- Treat prompt injection as a live risk. Research content the agent reads can steer what it trades within your limits, so tighter limits matter more than instructions in the agent's prompt.
- Keep your own record of what you asked the agent to do and what it traded, separate from the agent's session, so you can compare its trades with your instructions later.
What limits can you set on an AI agent trading through Coinbase for Agents?
Coinbase for Agents is Coinbase's MCP for researching and trading from your Coinbase account through an AI tool you choose. Agent Controls, announced November 11, 2026, add limits you set on how that agent trades. Maximum trade size caps each trade in USD. The 24-hour volume limit caps the total the agent can trade over 24 hours, and trades past it won't go through. Auto-stop watches a portfolio against a percentage-loss threshold and stops the agent placing trades once the portfolio falls below it.
- Product permissions, which would let you allow categories such as equities while leaving derivatives off, are labeled coming soon in the announcement. Until they ship, the live controls limit how much and how fast the agent trades, not what it trades.
- You can set the controls in the Coinbase app or on the web, or ask your agent where they are; Coinbase's suggested prompt is "Show me where the Coinbase Agent Controls are." Showing you where they are is not the same as the agent being able to edit them.
Can an AI agent change or get around Coinbase's Agent Controls?
Coinbase's key claim is where the limits live: on its servers, not in the agent. Limits written into an agent's prompt or configuration can be ignored by a model that misreads an instruction, or rewritten by one steered by injected text. Limits enforced by the exchange apply to every order the agent submits regardless of what it was told.
- The settings sit behind your logged-in account, protected by your password and two-factor authentication, and Coinbase says the agent can't change them on its own. That holds only while the agent has the MCP's access and not your account credentials, so keep those apart.
- This is the same pattern as issuer-side card rules and spend caps enforced at the payment layer: the agent can ask for anything, and a system it doesn't control decides what goes through.
What don't Coinbase's Agent Controls protect against?
They are boundaries on execution, not a judgment of the strategy. Within a 100 USD per-trade cap and a 1,000 USD daily limit, an agent can still make ten poor trades in a day. Auto-stop is a loss trigger: it acts after the portfolio has already fallen past your threshold.
- Coinbase's disclaimer is direct: the post is for informational purposes only and not investment advice, trading involves substantial risk including the potential loss of your entire investment, AI agents may make mistakes or fail, and you direct all agent activity and assume all risk for transactions your agents execute and for any use of your data by third-party AI providers.
- The controls also don't record why the agent made a trade. If you want to show later that a trade matched, or didn't match, what you told the agent, keep that record yourself outside the agent's session.
How do I ask Rightshold about this (free, no key)?
Add the MCP server https://www.rightshold.com/mcp to Claude, Cursor, ChatGPT, Grok or VS Code, then ask: “Before my trading agent sends a 100 USD buy through Coinbase for Agents, check it against the agent's own per-trade and daily budget, set lower than my Coinbase Agent Controls, and give me a signed allow or deny with the task id as the reference.”
{
"tool": "authorize_spend",
"arguments": {
"credential_id": "<this trading agent's credential id>",
"amount_minor": 10000,
"currency": "USD",
"merchant_domain": "coinbase.com",
"category": "trade",
"reference": "<task id>"
}
}- Set the policy first with set_spend_policy (owner account key, toolset=trust): per_tx_max_minor and daily_max_minor per agent credential, plus allowed_domains and allowed_categories. Note the daily total here resets at 00:00 UTC, which isn't the same window as Coinbase's 24-hour volume limit.
- authorize_spend returns a signed allow or deny receipt with reasons such as over_per_transaction_cap or over_daily_cap and records it on Rightshold's ledger, giving you a record of each trade the agent asked to make that sits outside its session.
- It doesn't place, block or cancel trades, read your Coinbase Agent Controls, balances or portfolio, or trigger auto-stop, and it only covers trades the agent checks with it first. Coinbase's server-side controls remain the limits that actually stop an order. Not investment advice.
Rightshold isn't affiliated with Coinbase, never holds or moves money or assets, and isn't an exchange, broker, wallet or investment adviser. Agent Controls behavior is as described in Coinbase's November 11, 2026 blog post, read November 13, 2026, while the controls are rolling out and product permissions are marked coming soon; limits and availability may change, so check your Coinbase account before relying on them. Not investment, financial or legal advice.
What are the sources?
- Coinbase Blog: Coinbase for Agents introduces new Agent Controls (November 11, 2026)
- Rightshold: agent spending policies and signed authorizations
Related
- Can an AI agent raise its own spending limit, and how do you stop it?
- How to enforce AI agent payment caps at the execution boundary (not in the prompt)
- Do Coinbase Agentic Wallet spending limits stop an AI agent from overspending?
- How to temporarily pause an AI agent's spend without revoking its credential
- Stopping a prompt injection from making your AI agent buy something
- How to require human approval before an AI agent spends money
Not legal advice. JSON · Markdown · All answers
Get a free API key in one call
No card and no email needed. 100 free credits; the license and policy checks stay free without a key.
curl -s -X POST https://www.rightshold.com/v1/accounts/signup -H "Content-Type: application/json" -d '{"accept_terms":true}'
export RIGHTSHOLD_API_KEY=rs_... # the api_key from the reply (shown once)
curl -s https://www.rightshold.com/v1/licenses/check -H "Authorization: Bearer $RIGHTSHOLD_API_KEY" \
-H "Content-Type: application/json" -d '{"license":"MIT","intended_use":{"commercial_use":true}}'