Coinbase is rolling out Agent Controls for Brokers, its service that connects customers’ AI instruments to their buying and selling accounts.
The Nov. 11 announcement provides limits enforced on Coinbase’s servers, whereas leaving customers chargeable for the trades their brokers make.
On Nov. 13, CEO Brian Armstrong promoted the controls as a method to make AI use in monetary accounts secure. A pause on new trades doesn’t imply present orders have been canceled, positions closed, or losses ended.
In its Agent Controls announcement, Coinbase describes a most greenback quantity for every commerce and a cap on complete buying and selling over 24 hours, and trades exceeding the quantity restrict is not going to undergo.
Auto-stop provides a portfolio percentage-loss set off, and the agent stops inserting trades till the person turns buying and selling again on within the Coinbase app.
Coinbase says enforcement runs on its servers, the place the agent can’t bypass the boundaries or change them itself, whereas customers handle the settings via their authenticated Coinbase account. That separates the foundations governing execution from directions given to an AI mannequin.
Product-category permissions stay forthcoming. Coinbase labels the selection of whether or not an agent could commerce crypto, equities, or derivatives as coming quickly.
The announcement doesn’t say auto-stop cancels excellent orders or closes present positions, and likewise offers no loss-calculation baseline or valuation frequency, and doesn’t outline how the 24-hour quantity window is counted.
Coinbase’s agent information treats order administration as a set of distinct operations, whereas its fairness steerage warns that receiving an order ID just isn’t proof of a fill and says particular person cancellation outcomes should be checked.
The command reference lists canceling an order and shutting a place individually, with availability relying on the product.
The sensible implication is {that a} person can’t deal with an agent’s stopped standing as affirmation that publicity has ended. A pause, a profitable cancellation, and a closed place reply totally different questions. The printed auto-stop description helps the primary of these, with out promising the opposite two.
Which portfolio boundary applies?
Customers can fund and scope a devoted portfolio for spot crypto.
US futures require the default portfolio; remoted agent portfolios are spot-only.
A stopped agent just isn’t affirmation that present publicity has ended.
Vendor-described habits, not a examined assure. Announcement doesn’t specify automated cancellation or place closure, loss baseline or valuation frequency. Eligibility and product help differ.
Portfolio isolation has a futures exception
Coinbase’s setup documentation recommends a devoted portfolio funded with solely what the person is keen to threat, with agent entry restricted to it. That makes the person’s preliminary allocation and permission selections a part of the safety.
US derivatives, together with futures, require the default portfolio. A person contemplating futures can’t assume the identical devoted spot-portfolio boundary applies throughout each supported asset class.
Supported AI apps join via distant MCP utilizing Coinbase OAuth, the place customers approve portfolios. The native command-line interface as an alternative makes use of a CDP API key scoped to chose accounts, with Commerce and Switch permissions.
The documented Switch permission permits inner portfolio strikes, and Coinbase additionally maintains a consumer allowlist, so compatibility alone would not grant entry.
The product web page says crypto, shares, and futures availability depends upon area and account eligibility. Approval earlier than every commerce and unattended scheduling additionally rely upon the agent app.
Coinbase’s information factors customers to Account Safety Connections to revoke entry, however deleting an area ability or clearing a chat doesn’t revoke it.
Coinbase additionally warns that AI brokers can fail, buying and selling can lose the complete funding, and customers assume duty for agent transactions and third-party information use. Customers nonetheless must resolve what publicity they settle for, examine what has executed, and handle the ensuing positions.
