{ "data": { "a": { "slug": "coinbase-cdp-agentkit", "name": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)", "vendor": "Coinbase Developer Platform", "vendorUrl": "https://docs.cdp.coinbase.com", "kind": "sdk", "category": "agent-wallets", "summary": "Coinbase's wallet infrastructure for agents, with programmatic transactions, spending controls and MCP integrations.", "url": "https://www.anchorterminal.com/tools/coinbase-cdp-agentkit", "markdownUrl": "https://www.anchorterminal.com/tools/coinbase-cdp-agentkit.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/coinbase-cdp-agentkit.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/coinbase-cdp-agentkit.json", "dns": "coinbase-cdp-agentkit.grade.anchorterminal.com", "repo": "https://github.com/coinbase/agentkit", "license": "Apache-2.0", "transports": [ "stdio", "streamable-http" ], "remoteUrl": "https://mcp.base.org", "packages": [ { "registry": "npm", "name": "awal" }, { "registry": "npm", "name": "@coinbase/payments-mcp" }, { "registry": "npm", "name": "@coinbase/agentkit" }, { "registry": "pypi", "name": "coinbase-agentkit" }, { "registry": "npm", "name": "@coinbase/agentkit-model-context-protocol" }, { "registry": "npm", "name": "@coinbase/cdp-cli" }, { "registry": "npm", "name": "@coinbase/cdp-sdk" }, { "registry": "npm", "name": "@x402/mcp" } ], "auth": "mixed", "authNotes": "Agentic Wallet (CLI and MCP) signs in with email OTP, no API key; the agent never sees a private key. CDP MCP / AgentKit / server wallets use a CDP API key ID + secret and a wallet secret (the CLI stores them in the OS keyring and mints short-lived JWTs). Coinbase Wallet MCP (https://mcp.base.org, a separate consumer-wallet product) uses per-action approval URLs.", "pricing": "freemium", "pricingNotes": "Agentic Wallet, its MCP server, wallet creation and gas on Base are free; x402 services charge their own prices and Coinbase Onramp fees apply. CDP server and embedded wallets bill $0.005 per wallet operation (create account 1, sign 1, send 2, policy evaluation 1) after 5,000 free operations a month; reads are free. AgentKit and the CLIs are free open source (https://docs.cdp.coinbase.com/wallets/pricing-and-rewards/overview).", "priceSummary": "$0.005 / call", "where": "both", "x402": { "level": "partial", "evidence": "Coinbase's CDP SQL API is paid per query over x402 at x402.cdp.coinbase.com. Agentic Wallet pays x402-gated APIs in USDC on Base, Polygon and Solana with a `--max-amount` cap and can host paid endpoints; @x402/fetch, @x402/axios, @x402/mcp and the CDP SDK cover code paths, and Coinbase runs the CDP facilitator. The wallet APIs and MCP servers aren't paid per call (https://github.com/coinbase/agentic-wallet-skills; https://docs.cdp.coinbase.com/agentic-wallet/cli/welcome)", "endpoints": [ { "url": "https://x402.cdp.coinbase.com/platform/v2/data/query/run", "priceUsd": null, "network": "" } ] }, "toolCount": null, "popularity": { "githubStars": 1322, "npmWeekly": 5785, "pypiWeekly": 1465, "asOf": "2026-09-30" }, "docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/welcome", "llmsTxt": "https://docs.cdp.coinbase.com/llms.txt", "openapi": "https://raw.githubusercontent.com/coinbase/cdp-sdk/main/openapi.yaml", "capabilities": [ "wallet.onchain", "wallet.custody", "wallet.spend-limits", "payments.x402" ], "tags": [ "official", "hosted", "local", "open-source", "x402-payer", "wallet", "stablecoin", "mcp", "llms-txt", "typescript", "python", "free-tier" ], "lastRelease": "2026-10-23", "graded": true, "anchor": { "graded": true, "score": 70.9, "grade": "BB", "agentReady": true, "rank": 183, "ranked": true, "rankOf": 1513, "categoryRank": 5, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 83, "maintenance": 77, "payments": 85, "reliability": 62, "schema": 94, "security": 78, "transparency": 77 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -8, "negativeNotes": [ "AgentKit's flaunch and zora action providers read any non-URL `image` argument as a local file path and uploaded the file to a public IPFS pinning service, so an injected agent could publish arbitrary host files (present since 2025-07-25). Fixed in source on 2026-08-19 by PR #1432 and documented in a changeset, but on 1 November it is still in no release (the newest tag is 0.10.3 from 2025-10-03, and npm served 0.10.4 from 2025-12-19 on 1 October), so we deduct less than for an open incident. The 3 September fix that strips control and invisible characters from attacker-set token names (#1480) is also unreleased but isn't deducted. It is hardening against indirect prompt injection, which AgentKit's README treats as inherent to an agent wallet rather than a flaw, it describes no exploit, and the security score's injection line already counts it, as mapbox's and docker-agent's hardening fixes were read. Only agents that register those providers are exposed (https://github.com/coinbase/agentkit/pull/1432). (-5)", "Breaking changes shipped without notice, one term. @coinbase/cdp-sdk 1.57.0 (2026-09-25), a minor release, regenerated the client with \"No compatibility shims\", replacing `Network` with `PaymentNetwork`, narrowing `CreateTransferSource` and removing `OriginatingBankAccountUs`, and 1.59.0 (2026-10-16) removed `listCoinbaseAccountBalances`. On 2026-09-29 the CDP changelog announced, the day it applied, that a matching reject rule now beats a matching accept rule whatever the rule order, so some previously accepted wallet operations are rejected. Read at the floor, as other listings' repeated breaks are (-3). https://github.com/coinbase/cdp-sdk/blob/main/typescript/packages/cdp-sdk/CHANGELOG.md and https://docs.cdp.coinbase.com/get-started/changelog" ], "verdict": "Operator-set max per call and max per session that the agent can't change, set in the wallet UI. AgentKit's newest release is from 2025, its fix for a local file read and public upload path is unreleased, and cdp-sdk minors have shipped breaking changes without notice.", "bestFor": "Giving a personal agent a USDC wallet with hard caps in two commands, and for builders who want policy-bound server wallets and x402 on both sides.", "strengths": [ "Operator-set max per call and max per session that the agent can't change, set in the wallet UI", "Server-wallet policy engine that rejects by default, on CDP API keys with scopes and a separate wallet secret", "Public OpenAPI with 243 operations, 105 typed error codes and idempotency keys, and SDKs in five languages", "x402 on Coinbase's own SQL API, payer and seller tooling, and the CDP facilitator", "$0.005 per wallet operation after 5,000 free a month; the Agentic Wallet and gas on Base are free", "Policy simulation (23 October) shows whether the policy engine would accept an operation before it is sent" ], "weaknesses": [ "AgentKit's newest release is from 2025, and its fix for a local file read and public upload path is unreleased", "cdp-sdk 1.57.0 and 1.59.0, minor releases, removed types and a method without notice", "Agentic Wallet caps are amounts only; allowlists need server wallets and the policy engine", "No published rate limits or SLA for the wallet APIs", "No official Coinbase entry in the MCP registry" ], "agentNotes": [ "Run `npx awal@2.12.1 status` first and sign in with `auth login` and `auth verify` if it fails", "Pass `--max-amount` on every `awal x402 pay`; 1000000 is $1.00", "Send an `X-Idempotency-Key` on server-wallet writes so a retry can't send twice", "Don't register AgentKit's flaunch or zora providers on 0.10.4; they read local files", "Give an agent a policy-bound server account or an Agentic Wallet, never a full CDP API key", "Call `POST /v2/policy-engine/simulate` before a new kind of server-wallet operation; since 29 September any matching reject rule wins" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.9 } ], "editorialScores": { "ergonomics": 83, "maintenance": 77, "payments": 85, "reliability": 62, "schema": 94, "security": 78, "transparency": 65 }, "provenanceScore": 89, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx skills add coinbase/agentic-wallet-skills", "claudeCode": "claude mcp add --scope user --transport stdio cdp -- npx -y @coinbase/cdp-cli mcp", "config": { "mcpServers": { "cdp": { "args": [ "-y", "@coinbase/cdp-cli", "mcp" ], "command": "npx" }, "coinbase-wallet": { "url": "https://mcp.base.org" } } } }, "letme": { "capability": "https://letme.dev/wallet.onchain", "tool": "https://letme.dev/coinbase-cdp-agentkit" }, "area": "payments", "unitPrices": [ { "item": "CDP wallet operation", "unit": "call", "usd": 0.005, "note": "after 5,000 free a month; a send counts as 2 operations" } ], "provenance": { "legalEntity": "Coinbase, Inc.", "domain": "base.org", "domainRegistered": "1996-11-11", "domainNote": "The hosted endpoint is the Coinbase Wallet MCP on base.org, the domain of Coinbase's Base network. base.org was registered long before Coinbase acquired it. The CDP docs send status readers to status.coinbase.com, which has a Developer Platform component group. coinbase.com's security.txt still carried Expires 2024-06-01 on 1 November 2026.", "endpointOnVendorDomain": true, "terms": "https://coinbase.com/legal/developer-platform/terms-of-service", "privacy": "https://coinbase.com/legal/privacy", "statusPage": "https://status.coinbase.com", "changelog": "https://docs.cdp.coinbase.com/get-started/changelog", "securityTxt": "expired", "checked": "2026-11-01", "score": 89 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/coinbase-cdp-agentkit.json", "live": { "slug": "coinbase-cdp-agentkit", "probe": { "target": "https://mcp.base.org", "method": "mcp-initialize", "lastAt": "2026-11-08T14:47:45.408499812Z", "lastOk": true, "lastStatus": 401, "lastMs": 137, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 146, "p95ms24h": 338, "samples24h": 242, "samples30d": 7844, "days": [ { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 248, "ok": 248 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 243, "ok": 243 }, { "date": "2026-11-08", "probes": 150, "ok": 150 } ], "since": "2026-10-08T00:00:00Z" }, "vendorStatus": { "page": "https://status.coinbase.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-08T14:50:28.571527846Z" }, "versions": [ { "registry": "npm", "name": "@coinbase/agentkit", "version": "0.10.4", "seenAt": "2026-11-08T00:46:07.196202087Z" }, { "registry": "npm", "name": "@coinbase/agentkit-model-context-protocol", "version": "0.2.0", "seenAt": "2026-11-08T00:46:09.462191742Z" }, { "registry": "npm", "name": "@coinbase/cdp-cli", "version": "2.0.145", "seenAt": "2026-11-08T00:46:11.188028969Z" }, { "registry": "npm", "name": "@coinbase/cdp-sdk", "version": "1.61.0", "seenAt": "2026-11-08T00:46:13.192369068Z" }, { "registry": "npm", "name": "@coinbase/payments-mcp", "version": "1.0.5", "seenAt": "2026-11-08T00:46:05.771588625Z" }, { "registry": "npm", "name": "@x402/mcp", "version": "2.30.0", "seenAt": "2026-11-08T00:46:15.190755831Z" }, { "registry": "npm", "name": "awal", "version": "2.12.2", "seenAt": "2026-11-08T00:46:04.990081869Z" }, { "registry": "pypi", "name": "coinbase-agentkit", "version": "0.7.4", "released": "2025-10-03", "seenAt": "2026-11-08T00:46:09.190780227Z" } ], "githubStars": 1354, "npmWeekly": 970, "pypiWeekly": 848, "securityTxt": { "url": "https://base.org/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:59.678956105Z" }, "llmsTxt": { "url": "https://docs.cdp.coinbase.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:10.292336615Z" }, "domain": { "domain": "base.org", "registered": "1996-11-11", "source": "https://rdap.publicinterestregistry.org/rdap/domain/base.org", "checkedAt": "2026-11-01T14:18:12.358875268Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/coinbase/agentkit/main/typescript/agentkit/CHANGELOG.md", "kind": "changelog", "status": 304, "checkedAt": "2026-10-01T13:15:13.62968539Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1256aa560318" }, { "url": "https://docs.cdp.coinbase.com/get-started/changelog", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-04T08:20:15.387106234Z", "changedAt": "2026-10-29T05:03:43.569158351Z", "fingerprint": "12d7d6f91d0d" }, { "url": "https://raw.githubusercontent.com/coinbase/cdp-sdk/main/typescript/packages/cdp-sdk/CHANGELOG.md", "kind": "deprecations", "status": 304, "checkedAt": "2026-11-07T14:20:23.96336438Z", "changedAt": "2026-11-06T13:41:43.712112335Z", "fingerprint": "250869258cf8" }, { "url": "https://docs.cdp.coinbase.com/wallets/pricing-and-rewards/overview", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:05:28.93238251Z", "changedAt": "2026-10-30T05:36:41.112828556Z", "fingerprint": "9a3edae6c0fc" }, { "url": "https://coinbase.com/legal/privacy", "kind": "privacy", "status": 403, "checkedAt": "2026-11-08T14:52:49.505935339Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3eb858739fa5" }, { "url": "https://coinbase.com/legal/developer-platform/terms-of-service", "kind": "terms", "status": 403, "checkedAt": "2026-11-08T14:52:47.375189073Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "110e4bdf13a9" } ], "mcpTools": { "url": "https://mcp.base.org", "checkedAt": "2026-11-08T01:56:50.568450273Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:43:16.645716741Z" }, "github": { "repo": "coinbase/agentkit", "checkedAt": "2026-11-02T08:40:38.332155628Z", "stars": 1350, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-14T21:50:54Z", "openIssues": 137, "openPRs": 335, "issuesOpened90d": 50, "issuesClosed90d": 5, "prsMerged90d": 5, "ci": { "branch": "main", "runs": 50, "success": 44, "failure": 6, "other": 0, "latest": "success", "latestAt": "2026-10-14T21:51:06Z" }, "replies": { "sampled": 25, "unanswered": 24, "medianDays": 0 } }, "updatedAt": "2026-11-08T14:52:49.505935339Z" }, "streak": { "days": 17, "from": "2026-10-22", "last": { "kind": "shutdown", "date": "2026-10-22", "what": "The SDKs' deprecated DELETE revoke-delegation methods (`revokeDelegationForEndUserDeprecated` and `revokeDelegationForEndUserAccountDeprecated`) are kept only until this date. Use the POST revoke endpoints", "source": "https://github.com/coinbase/cdp-sdk/blob/main/typescript/packages/cdp-sdk/CHANGELOG.md" }, "best": 17 } }, "answer": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) scores 70.9 (BB) on agent readiness against FluxA AI Wallet's 47 (D), and leads in every scored category.", "b": { "slug": "fluxa-ai-wallet", "name": "FluxA AI Wallet", "vendor": "FluxA Technology Pte. Ltd.", "vendorUrl": "https://fluxapay.xyz", "kind": "http-api", "category": "agent-wallets", "summary": "FluxA AI Wallet is a hosted agent wallet from FluxA Technology that signs x402 (EIP-3009) USDC payments on Base within budgets a person approves, reached through the fluxa-wallet CLI, a stdio MCP server and agent skills.", "url": "https://www.anchorterminal.com/tools/fluxa-ai-wallet", "markdownUrl": "https://www.anchorterminal.com/tools/fluxa-ai-wallet.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/fluxa-ai-wallet.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/fluxa-ai-wallet.json", "dns": "fluxa-ai-wallet.grade.anchorterminal.com", "repo": "https://github.com/FluxA-Agent-Payment/FluxA-AI-Wallet-MCP", "license": "The CLI and MCP server source is Apache-2.0 (LICENSE file and both package.json files), though the README's last section says MIT. The hosted wallet service is closed, and no terms covering the wallet were found", "transports": [ "http", "stdio" ], "remoteUrl": "https://walletapi.fluxapay.xyz", "packages": [ { "registry": "npm", "name": "@fluxa-pay/fluxa-wallet" }, { "registry": "npm", "name": "@fluxa-pay/fluxa-wallet-mcp" } ], "auth": "mixed", "authNotes": "An agent connects with `fluxa-wallet connect` (or the MCP tool `connect_wallet`), which returns an `authorization_url` on agentwallet.fluxapay.xyz for the owner to approve in a browser. The claim returns an Agent ID, a token and an RS256 JWT, stored in `~/.fluxa-ai-wallet-mcp/config.json` (mode 0600) or injected as `AGENT_ID`, `AGENT_TOKEN` and `AGENT_JWT`. The owner picks the token's validity (1h, 24h, 7d, 1mo, 180d or 1y; the server suggests 180 days locally and 7 days in cloud or container environments), and the JWT is refreshed with the token. `token_expired` and `token_revoked` return `reconnect_required`. The legacy `init` registers an Agent ID with an unauthenticated `POST https://agentid.fluxapay.xyz/register`. Spending needs a mandate the owner signs in the browser. AgentMarket commands can instead use `fxa_live_` keys with a spend limit, revocable from the CLI.", "pricing": "usage", "pricingNotes": "No fee schedule for the wallet, x402 signing, payouts, payment links or refunds was found in the repository, the skills or the AgentMarket pricing, terms and llms.txt pages (checked 2026-11-07). Merchants set x402 prices. Agent card products list their fees through `fluxa-wallet card types`, which needs a connected wallet, so those fees were not read. The wallet site and docs at agentwallet.fluxapay.xyz and docs.fluxapay.xyz could not be read, so whether opening a wallet needs a card is unchecked. AgentMarket's Balance is $1 = 1 Balance, with Units bundles from $1 to $25.", "priceSummary": "Pay per use", "where": "both", "x402": { "level": "partial", "evidence": "The wallet signs x402 `exact` (EIP-3009) payment authorisations for USDC on Base and Base Sepolia as a buyer (`fluxa-wallet x402 --mandate \u003cid\u003e --payload \u003c402 body\u003e`, MCP `request_x402_payment` and `request_x402_v3_payment`), and its payment links can be paid over x402 so another agent can pay the holder (https://github.com/FluxA-Agent-Payment/FluxA-AI-Wallet-MCP/blob/main/skills/fluxa-agent-wallet/INTEGRATION-GUIDE-CHARGE-AGENT.md, checked 2026-11-07). FluxA's own wallet API is not paid over x402, MPP or L402.", "endpoints": [] }, "toolCount": 15, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-07" }, "docsUrl": "https://docs.fluxapay.xyz/", "capabilities": [ "payments.x402", "wallet.spend-limits", "wallet.onchain", "payments.card", "auth.agent-identity" ], "tags": [ "hosted", "official", "open-source", "apache-2.0", "cli", "mcp", "stdio", "skills", "typescript", "wallet", "x402", "stablecoins", "virtual-cards", "usdc", "base" ], "lastRelease": "2026-11-06", "graded": true, "anchor": { "graded": true, "score": 47, "grade": "D", "agentReady": false, "rank": 1164, "ranked": true, "rankOf": 1513, "categoryRank": 11, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 60, "maintenance": 66, "payments": 45, "reliability": 20, "schema": 61, "security": 52, "transparency": 32 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-07" }, "negative": 0, "verdict": "Every spend runs against a mandate the owner signs in a browser, with a budget, a validity window and an optional host allowlist, and payouts need approval or a mandate. The published MCP package is 0.2.0 from March 2026 against 0.6.0 in the repository, and no status page, fee schedule, wallet terms or custody statement was found.", "bestFor": "An agent in a CLI-capable client that needs to pay x402 APIs, send USDC on Base or receive payments through links, inside budgets a person signs.", "strengths": [ "Spending runs against owner-signed mandates with a limit, a validity window and an optional host allowlist, enforced by the wallet API", "Payouts need per-payout browser approval unless a signed mandate is passed, and a required `payout_id` makes repeats return the same payout", "The CLI returns JSON with error codes, `next_command` hints and `retryable` and `reconnect_required` flags", "Client source is public under Apache-2.0, with 25 CLI releases on npm since March 2026, the latest on 6 November 2026", "Payment links let another agent pay the holder over x402, and refunds of link payments are supported" ], "weaknesses": [ "The published MCP package is 0.2.0 from 2 March 2026 with 13 tools, while the repository says 0.6.0 with 15", "No status page, rate limit, SLA, fee schedule or security contact was found", "Who holds the wallet keys is not stated. The docs say FluxA Wallet signs and call it managed", "The only terms and privacy policy read are AgentMarket's, which do not mention the wallet, cards, KYC or payouts", "The skill steers agents to paid APIs over free search and to request budgets for at least 100 calls by default" ], "agentNotes": [ "Run `fluxa-wallet status` first. If `configured` and `wallet_linked` are true, skip `connect`; otherwise show the `authorization_url` and wait with `connect-status --wait 100`", "On `token_expired` or `token_revoked`, reconnect with the same `--agent-id`. Never run `init` to recover, which creates a new identity", "Pass a unique `--id` on every `payout` and reuse it on retry; a repeat returns the existing payout instead of paying twice", "Check `fluxa-wallet mandates` for a signed mandate with enough remaining budget before creating one, and size new budgets to the task", "Install the CLI from npm, not the MCP package, whose npm release 0.2.0 lacks `connect_wallet` and `get_wallet_connection`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 47 } ], "editorialScores": { "ergonomics": 60, "maintenance": 66, "payments": 45, "reliability": 20, "schema": 61, "security": 52, "transparency": 26 }, "provenanceScore": 38, "checked": { "categories": { "ergonomics": "2026-11-07", "maintenance": "2026-11-07", "payments": "2026-11-07", "reliability": "2026-11-07", "schema": "2026-11-07", "security": "2026-11-07", "transparency": "2026-11-07" }, "last": "2026-11-07", "oldest": "2026-11-07", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @fluxa-pay/fluxa-wallet" }, "letme": { "capability": "https://letme.dev/payments.x402", "tool": "https://letme.dev/fluxa-ai-wallet" }, "sameCompany": [ "fluxa-agentmarket" ], "area": "payments", "provenance": { "legalEntity": "FluxA Technology Pte. Ltd.", "domain": "fluxapay.xyz", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "", "securityTxt": "unknown", "checked": "2026-11-07", "notes": [ "The legal entity is from the footer of agentmarket.fluxapay.xyz, \"© 2025 FluxA Technology Pte. Ltd. All rights reserved.\", the same on the about, terms, privacy and pricing pages. No registration number, address or country is given on those pages. A web search result names a companieshouse.sg page for FluxA Technology Pte Ltd with UEN 202555700C; that host could not be fetched, so the register entry is unread.", "AgentMarket's terms (effective 14 January 2026) and privacy policy (updated 14 January 2026) describe the marketplace and its Balance and do not mention the Agent Wallet, cards, KYC or payouts, so they are not recorded as the wallet's terms. The terms name no entity in their text and no governing law; contact support.fluxapay@fluxapay.xyz.", "fluxapay.xyz, agentwallet.fluxapay.xyz and docs.fluxapay.xyz could not be read. Each robots.txt fetch was refused for want of an approval on 7 November 2026, so nothing on those hosts was fetched. The wallet's own terms, privacy policy, fees, security.txt and docs are unchecked.", "https://agentmarket.fluxapay.xyz/.well-known/security.txt answered a client error. The repository has no SECURITY.md.", "The wallet API, Agent ID API and approval pages are on fluxapay.xyz subdomains named in the CLI source. agentmarket.fluxapay.xyz's robots.txt allows / and disallows /api/ (except /api/discover and /api/llm/skills.md) and /console/; nothing disallowed was fetched.", "unchecked: RDAP for fluxapay.xyz, the MCP registry, the Wayback Machine, GitHub stars and issues (the GitHub API refused the session) and npm download counts." ], "score": 38 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/fluxa-ai-wallet.json", "live": { "slug": "fluxa-ai-wallet", "probe": { "target": "https://walletapi.fluxapay.xyz", "method": "get", "lastAt": "2026-11-08T14:47:50.695700215Z", "lastOk": true, "lastStatus": 404, "lastMs": 532, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 542, "p95ms24h": 603, "samples24h": 90, "samples30d": 90, "days": [ { "date": "2026-11-08", "probes": 90, "ok": 90 } ], "since": "2026-11-08T00:00:00Z" }, "updatedAt": "2026-11-08T14:47:50.695700215Z" }, "streak": { "days": 0, "from": "2026-11-08", "sinceWatching": true, "best": 0 } }, "edges": [ { "by": 45, "category": "transparency", "leads": "coinbase-cdp-agentkit", "name": "Transparency \u0026 trust", "reasons": { "a": "AgentKit is Apache-2.0, cdp-sdk and the OpenAPI file are MIT, awal is Apache-2.0 on npm; the wallet service is closed under the CDP terms (25 of 30). The privacy policy, updated 27 May 2026 per the 1 October check, not re-read on 1 November, names Coinbase, Inc. for developer services, lists processing countries and transfer mechanisms (SCCs and the Data Privacy Frameworks), and ties retention to need without numbers (18 of 30). AgentKit's changelog marks the legacy cdp-wallet deprecated, without a removal date. cdp-sdk 1.58.0 (6 October) gave the old DELETE revoke-delegation methods until 22 October, 16 days, while 1.57.0 and 1.59.0 removed types and a method with no notice, so the line stays (10 of 20). Processing in Ireland, Germany, Singapore, the UK, the US and the Philippines is stated; service providers are named by category with no full subprocessor list (12 of 20).", "b": "The CLI and MCP server source is Apache-2.0 per the LICENSE file and both package.json files, while the README's last section says MIT. The hosted wallet is closed, and no terms covering it were found. AgentMarket's terms describe only the marketplace (15 of 30). AgentMarket's privacy policy of 14 January 2026 names Stripe and model providers and gives no retention periods, and it does not mention wallet addresses, KYC profiles, card data or payouts, which the CLI collects or handles. The wallet's own privacy policy was unreachable (5 of 30). The README marks `init` and `link-wallet` as legacy but still supported, and the skill pins a minimum CLI version; no deprecation policy or dated notice was found (3 of 20). Stripe is the only provider named; no card issuer, KYC provider, custody provider or data location is named. The CLI and MCP code send no telemetry (3 of 20). Total 26." }, "scores": { "a": 77, "b": 32 } }, { "by": 42, "category": "reliability", "leads": "coinbase-cdp-agentkit", "name": "Reliability", "reasons": { "a": "Scored on the hosted checklist although the listing is an SDK, because every wallet action ends in a call to Coinbase's API. status.coinbase.com, where the CDP docs send status readers, has a Coinbase Developer Platform group with Wallets, Payments, Stablecoins, Trading, Onchain Tools, Webhooks and Portal components (20). The history page carries its incident list in the page itself, and its two pages, read on 1 November, cover the whole 90 days from 3 August. Six incidents touch CDP, all partial or short. Degraded x402 facilitator performance for some users from 6:00 to 9:00 a.m. ET on 7 August, Onramp transactions for 4 minutes on 14 August, smart account API latency for 53 minutes on 19 August (Wallets), USDC payments on Polygon only from 22 to 24 August (Payments), Onramp guest checkout on 1 September and Payments Acceptance for 52 minutes on 15 September. Minor only (20 of 30, was 12 when the history couldn't be read). We found no rate-limit numbers for the wallet APIs, and the OpenAPI file defines 429 responses without figures (0). An optional `X-Idempotency-Key` with a 422 `idempotency_error`, and `rate_limit_exceeded` and `operation_in_progress` error types, but no Retry-After guidance (12 of 15). No SLA found (0). Server wallets and the awal CLI are generally available, and the Agentic Wallet overview, MCP overview, FAQ and MCP tools pages carry no beta label on 1 November (10, was 5). 20+20+0+12+0+10 = 62.", "b": "Graded with the hosted lines, because signing, mandates and approvals all run on FluxA's wallet API and the CLI and MCP server only wrap it, as kite-agent-passport and kane-cli were read. No status page was found in the repository, the skills or AgentMarket's pages. fluxapay.xyz and the wallet and docs hosts could not be read, so a status page there is unchecked and scored absent (0). With no readable history the record takes the default (5). No rate limit with numbers was found (0). The connection service treats 429 `slow_down` as wait and poll and marks errors `retryable`, the skill says a 503 means retry shortly, payouts require a caller-chosen `payout_id` that returns the existing payout on a repeat, `--biz-id` rejects a duplicate with 409, and card create and recharge resume with `--request-id` instead of paying again. No Retry-After or backoff schedule is documented for the wallet API (10 of 15). No SLA was found (0). No beta label was found on the wallet in what was read, but both packages are at 0.x, agent cards sit behind a waitlist and the wallet site was unread (5 of 10). Total 20." }, "scores": { "a": 62, "b": 20 } }, { "by": 40, "category": "payments", "leads": "coinbase-cdp-agentkit", "name": "Payments \u0026 pricing", "reasons": { "a": "Payment platforms and wallets take the highest step that applies on the 40-point protocol line. 40 for x402, MPP or L402 on all their own endpoints, 30 on part of their own API, 25 when their merchants can accept one, 20 for running a facilitator, 15 for paying as a buyer, 0 for only a protocol of their own. Coinbase's own CDP SQL API answers x402 at x402.cdp.coinbase.com, but the wallet API itself isn't paid per call, so the part-of-its-own-API step (30 of 40). Coinbase also runs the CDP facilitator, and Agentic Wallet pays and sells x402 services. $0.005 per wallet operation after 5,000 free a month, reads free, with units per operation published (20). The Agentic Wallet, wallet creation and gas are free, and the free operations need no card that we could find (20). An agent with its own mailbox can sign in by email OTP through `awal auth login` and `verify`, per the official skill; server wallets need a person to create a CDP Portal key (15 of 20).", "b": "Payment platforms and wallets take the highest step that applies on the 40-point protocol line. 40 for x402, MPP or L402 on all their own endpoints, 30 on part of their own API, 25 when their merchants can accept one, 20 for running a facilitator, 15 for paying as a buyer, 0 for only a protocol of their own. The wallet pays x402 as a buyer and its payment links can be paid over x402 so another agent pays the holder, as sponge-wallet's payment links were read. FluxA's own wallet API is not paid over x402, so the merchant step (25 of 40). No fee schedule for the wallet, x402 signing, payouts or payment links was found, and card fees appear only through an authenticated command (0 of 20). Registering an Agent ID and creating payment links cost nothing and need no card per the README and the charge-agent guide, but the wallet sign-up at agentwallet.fluxapay.xyz could not be read, so whether opening a funded wallet needs a card is unchecked (10 of 20). `POST https://agentid.fluxapay.xyz/register` returns credentials with no human step, but the CLI marks it legacy, the default connection needs a browser approval, and every spend needs the owner's wallet and a mandate signed in a browser (10 of 20). Total 45." }, "scores": { "a": 85, "b": 45 } }, { "by": 33, "category": "schema", "leads": "coinbase-cdp-agentkit", "name": "Schema \u0026 documentation", "reasons": { "a": "A public OpenAPI file, version 2.0.0, now with 243 operations, MIT-licensed in coinbase/cdp-sdk and regenerated into every SDK, re-read on 1 November (25). llms.txt and Markdown twins of the docs (10). Descriptions throughout the OpenAPI file, and the Agentic Wallet skill says when to use it and routes each task to a reference file (17 of 20). An `ErrorType` enum, now of 105 codes, patterns and length limits on IDs (14 of 15). Examples throughout the OpenAPI file and docs, errors with `errorType` and `errorMessage` (15). `/v2` paths, a dated CDP changelog and changesets in AgentKit, though AgentKit's 0.11.0 changelog entry has never reached npm per the 1 October check (13 of 15). 25+10+17+14+15+13 = 94.", "b": "No OpenAPI file or reference for the wallet API was found; the README shows sample requests for five endpoints. The MCP server's 15 tools in the 0.6.0 source carry typed Zod input schemas, and the CLI's flags are documented in prose in the skill files and `--help`. The MCP server is the secondary surface and its npm release is 0.2.0, so 12 of 25. The skill and its 18 Markdown guides are written for agents, and AgentMarket's llms.txt describes the wallet's payment role (10). `connect_wallet`, `init_agent_id` and `create_intent_mandate` say when to use them and when not to, and the skill has a when-to-use table per capability, while the payment-link and status tools have one-line descriptions (12 of 20). Zod enums for validity, runtime, hosting and currency, a regex on payout amounts and strict objects, but the x402 requirement fields are plain strings and `outputSchema` is a free-form record (10 of 15). The README has an example for every MCP tool, the skills give CLI examples and output, and error codes are tabled for mandates, payouts, cards and connections (12 of 15). Semver on npm with 25 CLI versions and a version line in the skill, two git tags and no changelog (5 of 15). Total 61." }, "scores": { "a": 94, "b": 61 } }, { "by": 26, "category": "security", "leads": "coinbase-cdp-agentkit", "name": "Security \u0026 auth", "reasons": { "a": "CDP API keys carry scopes (changing policies needs \"Non-custodial \u003e Manage\"), the SDKs mint short-lived JWTs from them, and signing also needs a separate wallet secret through `X-Wallet-Auth`. Agentic Wallet sign-in is email OTP with no key handed to the agent (30). The operator sets max per call and max per session in the wallet UI and the agent can't change them; server wallets have a default-deny policy engine on value, address and network; `x402 pay` takes `--max-amount`. AgentKit itself has no caps or approval gate, as its README says (16 of 20). AgentKit's README names direct and indirect prompt-injection surfaces and points to guardrails middleware and a human-approval example, but the fix that sanitises attacker-set token names (merged 3 September) is still in no release on 1 November (10 of 15). Webhooks with delivery status and retry counts; we didn't check per-call logs in the Portal (10 of 15). HackerOne bug bounty linked from SECURITY.md in AgentKit and cdp-sdk; coinbase.com's security.txt still carries Expires 2024-06-01 on 1 November, and the AgentKit file-read fix went through a public PR without an advisory (12 of 20).", "b": "The agent holds an Agent ID, a token whose validity the owner picks from 1 hour to 1 year at browser approval, and a short-lived RS256 JWT refreshed from the token; `token_revoked` exists. Credentials sit in a 0600 JSON file or environment variables. The token is not scoped, since limits live in mandates, and legacy `init` tokens are described as not expiring. Agent VCs are audience-bound and rejected by FluxA's own endpoints. No secret travels in a URL (22 of 30). Every x402 payment needs a mandate the owner signs, with a limit, a validity and an optional host allowlist enforced by the wallet API, payouts need per-payout approval unless a mandate covers them, cards need a mandate and KYC, and linked-card mandates are scoped to one merchant. A payout mandate sets no payee allowlist that was documented, and the skill tells agents to request budgets for at least 100 calls by default (16 of 20). The wallet returns little third-party content itself, but the skill sends agents to third-party x402 APIs, ClawPI posts and a remote announcement.md with no guidance on treating them as untrusted, its description steers agents to paid APIs even when a free web search looks enough, and the daily check-in runs `npx -y @fluxa-pay/fluxa-wallet@latest` unpinned twice a day (4 of 15). `mandates` lists limit, spent and remaining, with `recent-transactions`, `received-records` and payout status by CLI, and the MCP server writes a local audit log; the wallet app's logs were not read (10 of 15). No SECURITY.md, disclosure policy, bug bounty or certification was found, and agentmarket.fluxapay.xyz has no security.txt; fluxapay.xyz's is unchecked (0 of 20). Total 52." }, "scores": { "a": 78, "b": 52 } }, { "by": 23, "category": "ergonomics", "leads": "coinbase-cdp-agentkit", "name": "Agent ergonomics", "reasons": { "a": "The Agentic Wallet skill is a 4,040-byte router that loads one of nine reference files on demand and every `awal` command takes `--json`; the CDP CLI's MCP mode generates a tool per endpoint with a `cdp_help` lookup, which we couldn't read because the CLI source isn't public (18 of 25). `pageSize` and `pageToken` on 20 list operations, and SQL queries with `LIMIT` (18 of 20). Typed error codes with messages that say when to retry (18 of 20). Optional idempotency keys on writes; tool annotations not checked (14 of 20). SDKs in TypeScript, Python, Go, Rust and Java, and an Agentic Wallet signs in with two commands (15).", "b": "The MCP server has 15 tools with about 4,700 characters of descriptions, the 11 to 30 band (15). The CLI path loads SKILL.md (26.5 KB) and one of 18 guides per task, about 112 KB in all, with no read-only subset (no add-back, 15 of 25). `card transactions` takes page, limit, type and a time range, refunds take limit and offset, `received-records` and `recent-transactions` take a limit up to 100, and `market search` can be scoped to models or vendors; no cursor (12 of 20). Errors carry a `code`, `retryable`, `reconnect_required` and a `next_command` or `next_tool`, and card errors map to recovery hints, but the CLI exits only 0 or 1 and the MCP payment tools return the wallet API's raw error body without `isError` (14 of 20). A required `payout_id` idempotency key, `--biz-id` dedup and `--request-id` continuation on card operations, and the skill says not to initiate again to retry a payment. No `readOnlyHint` or `destructiveHint` on any MCP tool (12 of 20). Base USDC is the default network and asset, mandates default to 8 hours and the CLI installs in one command, but there is no SDK library and both packages are TypeScript (7 of 15). Total 60." }, "scores": { "a": 83, "b": 60 } } ], "facts": [ { "a": "SDK + MCP", "b": "HTTP API", "name": "Kind" }, { "a": "Coinbase Developer Platform", "b": "FluxA Technology Pte. Ltd.", "name": "Vendor" }, { "a": "https://mcp.base.org", "b": "https://walletapi.fluxapay.xyz", "name": "Hosted endpoint" }, { "a": "stdio, Streamable HTTP", "b": "HTTP, stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Pay per use", "name": "Pricing" }, { "a": "on some endpoints", "b": "payer tooling only", "name": "x402" }, { "a": "Apache-2.0", "b": "The CLI and MCP server source is Apache-2.0 (LICENSE file and both package.json files), though the README's last section says MIT. The hosted wallet service is closed, and no terms covering the wallet were found", "name": "Licence" }, { "a": "none", "b": "15", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-23", "b": "2026-11-06", "name": "Last release" }, { "a": "2026-06-23", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-05-27", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "1.3k stars, 5.8k npm/wk, 1.5k PyPI/wk", "b": "none", "name": "Popularity" }, { "a": "3.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) scores 70.9 (BB) on agent readiness against FluxA AI Wallet's 47 (D), and leads in every scored category.", "question": "Which is better for AI agents, Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) or FluxA AI Wallet?" }, { "answer": "Yes. Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) has a hosted endpoint at https://mcp.base.org and FluxA AI Wallet at https://walletapi.fluxapay.xyz.", "question": "Can an agent call Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) and FluxA AI Wallet without installing anything?" }, { "answer": "Yes. Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) is open source (Apache-2.0). FluxA AI Wallet is open source (The CLI and MCP server source is Apache-2.0 (LICENSE file and both package.json files), though the README's last section says MIT. The hosted wallet service is closed, and no terms covering the wallet were found).", "question": "Are Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) and FluxA AI Wallet open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 62 against 20", "Schema \u0026 documentation, 94 against 61", "Agent ergonomics, 83 against 60", "Security \u0026 auth, 78 against 52", "Payments \u0026 pricing, 85 against 45", "Maintenance \u0026 community, 77 against 66", "Transparency \u0026 trust, 77 against 32" ], "also": [ "Agent-ready, a grade of BB or better" ], "goodFor": "Giving a personal agent a USDC wallet with hard caps in two commands, and for builders who want policy-bound server wallets and x402 on both sides.", "slug": "coinbase-cdp-agentkit", "watchFor": "AgentKit's newest release is from 2025, and its fix for a local file read and public upload path is unreleased" }, { "aheadOn": null, "also": [ "No incidents deducted, where Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) loses 8 points for them" ], "goodFor": "An agent in a CLI-capable client that needs to pay x402 APIs, send USDC on Base or receive payments through links, inside budgets a person signs.", "slug": "fluxa-ai-wallet", "watchFor": "The published MCP package is 0.2.0 from 2 March 2026 with 13 tools, while the repository says 0.6.0 with 15" } ], "history": { "coinbase-cdp-agentkit": [ { "causes": [ "evidence", "event" ], "date": "2026-11-01", "delta": -0.4, "from": 71.3, "fromGrade": "BB", "to": 70.9, "toGrade": "BB" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 71.2, "fromGrade": "BB", "to": 71.3, "toGrade": "BB" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.4, "from": 71.6, "fromGrade": "BB", "to": 71.2, "toGrade": "BB" } ], "fluxa-ai-wallet": null }, "job": { "capability": "wallet.onchain", "name": "Onchain wallets" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcard-vs-fluxa-ai-wallet.json", "title": "Agentcard vs FluxA AI Wallet", "url": "https://www.anchorterminal.com/compare/agentcard-vs-fluxa-ai-wallet" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-coinbase-cdp-agentkit.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-coinbase-cdp-agentkit" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-fluxa-ai-wallet.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs FluxA AI Wallet", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-fluxa-ai-wallet" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-kite-agent-passport.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Kite Agent Passport", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-kite-agent-passport" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-openfort.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Openfort", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-openfort" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-privy.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-sponge-wallet.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-turnkey-agentic-wallets.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/circle-gateway-nanopayments-vs-fluxa-ai-wallet.json", "title": "Circle Gateway Nanopayments vs FluxA AI Wallet", "url": "https://www.anchorterminal.com/compare/circle-gateway-nanopayments-vs-fluxa-ai-wallet" }, { "json": "https://www.anchorterminal.com/compare/fluxa-agentmarket-vs-fluxa-ai-wallet.json", "title": "FluxA AgentMarket vs FluxA AI Wallet", "url": "https://www.anchorterminal.com/compare/fluxa-agentmarket-vs-fluxa-ai-wallet" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-kite-agent-passport.json", "title": "FluxA AI Wallet vs Kite Agent Passport", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-kite-agent-passport" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-nevermined.json", "title": "FluxA AI Wallet vs Nevermined API + MCP", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-nevermined" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-openfort.json", "title": "FluxA AI Wallet vs Openfort", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-openfort" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-payman.json", "title": "FluxA AI Wallet vs Payman Genie MCP", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-payman" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-privy.json", "title": "FluxA AI Wallet vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-sponge-wallet.json", "title": "FluxA AI Wallet vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-turnkey-agentic-wallets.json", "title": "FluxA AI Wallet vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-coinbase-cdp-agentkit.json", "title": "Agentcard vs Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)", "url": "https://www.anchorterminal.com/compare/agentcard-vs-coinbase-cdp-agentkit" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-self-agent-vault.json", "title": "FluxA AI Wallet vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-self-agent-vault" } ], "panel": null, "scores": [ { "by": 42, "coinbase-cdp-agentkit": 62, "edge": "coinbase-cdp-agentkit", "fluxa-ai-wallet": 20, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 33, "coinbase-cdp-agentkit": 94, "edge": "coinbase-cdp-agentkit", "fluxa-ai-wallet": 61, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 23, "coinbase-cdp-agentkit": 83, "edge": "coinbase-cdp-agentkit", "fluxa-ai-wallet": 60, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 26, "coinbase-cdp-agentkit": 78, "edge": "coinbase-cdp-agentkit", "fluxa-ai-wallet": 52, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 40, "coinbase-cdp-agentkit": 85, "edge": "coinbase-cdp-agentkit", "fluxa-ai-wallet": 45, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 11, "coinbase-cdp-agentkit": 77, "edge": "coinbase-cdp-agentkit", "fluxa-ai-wallet": 66, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 45, "coinbase-cdp-agentkit": 77, "edge": "coinbase-cdp-agentkit", "fluxa-ai-wallet": 32, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) scores 70.9 (BB) on agent readiness against FluxA AI Wallet's 47 (D), and leads in every scored category. Both do onchain wallets.", "tasks": null, "tutorials": [ { "title": "Check an Agentic Wallet balance on Base Sepolia", "tool": "coinbase-cdp-agentkit", "url": "https://www.anchorterminal.com/tutorials/coinbase-cdp-agentkit/" } ], "verdicts": { "coinbase-cdp-agentkit": "Operator-set max per call and max per session that the agent can't change, set in the wallet UI. AgentKit's newest release is from 2025, its fix for a local file read and public upload path is unreleased, and cdp-sdk minors have shipped breaking changes without notice.", "fluxa-ai-wallet": "Every spend runs against a mandate the owner signs in a browser, with a budget, a validity window and an optional host allowlist, and payouts need approval or a mandate. The published MCP package is 0.2.0 from March 2026 against 0.6.0 in the repository, and no status page, fee schedule, wallet terms or custody statement was found." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-fluxa-ai-wallet", "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-fluxa-ai-wallet.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-fluxa-ai-wallet.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-fluxa-ai-wallet.min.md" }, "markdown": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) scores 70.9 (BB) on agent readiness against FluxA AI Wallet's 47 (D), and leads in every scored category. Both do onchain wallets.\n\n- Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP): grade BB, 70.9/100, rank #183 of 1513. Markdown https://www.anchorterminal.com/tools/coinbase-cdp-agentkit.md · JSON https://www.anchorterminal.com/api/v1/tools/coinbase-cdp-agentkit.json\n- FluxA AI Wallet: grade D, 47/100, rank #1164 of 1513. Markdown https://www.anchorterminal.com/tools/fluxa-ai-wallet.md · JSON https://www.anchorterminal.com/api/v1/tools/fluxa-ai-wallet.json\n- Best agent wallets and spending controls: https://www.anchorterminal.com/best/agent-wallets/index.md\n- All 77 wallets comparisons: https://www.anchorterminal.com/compare/agent-wallets/index.md\n\n## Which one, for what\n\n### Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) (BB)\n\nGood for: Giving a personal agent a USDC wallet with hard caps in two commands, and for builders who want policy-bound server wallets and x402 on both sides.\n\nAhead on:\n- Reliability, 62 against 20\n- Schema \u0026 documentation, 94 against 61\n- Agent ergonomics, 83 against 60\n- Security \u0026 auth, 78 against 52\n- Payments \u0026 pricing, 85 against 45\n- Maintenance \u0026 community, 77 against 66\n- Transparency \u0026 trust, 77 against 32\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n\nWatch for: AgentKit's newest release is from 2025, and its fix for a local file read and public upload path is unreleased\n\n### FluxA AI Wallet (D)\n\nGood for: An agent in a CLI-capable client that needs to pay x402 APIs, send USDC on Base or receive payments through links, inside budgets a person signs.\n\nAlso in its favour:\n- No incidents deducted, where Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) loses 8 points for them\n\nWatch for: The published MCP package is 0.2.0 from 2 March 2026 with 13 tools, while the repository says 0.6.0 with 15\n\n\n## Why the edge\n\n### Transparency \u0026 trust: Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +45\n\n- Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) (77): AgentKit is Apache-2.0, cdp-sdk and the OpenAPI file are MIT, awal is Apache-2.0 on npm; the wallet service is closed under the CDP terms (25 of 30). The privacy policy, updated 27 May 2026 per the 1 October check, not re-read on 1 November, names Coinbase, Inc. for developer services, lists processing countries and transfer mechanisms (SCCs and the Data Privacy Frameworks), and ties retention to need without numbers (18 of 30). AgentKit's changelog marks the legacy cdp-wallet deprecated, without a removal date. cdp-sdk 1.58.0 (6 October) gave the old DELETE revoke-delegation methods until 22 October, 16 days, while 1.57.0 and 1.59.0 removed types and a method with no notice, so the line stays (10 of 20). Processing in Ireland, Germany, Singapore, the UK, the US and the Philippines is stated; service providers are named by category with no full subprocessor list (12 of 20).\n- FluxA AI Wallet (32): The CLI and MCP server source is Apache-2.0 per the LICENSE file and both package.json files, while the README's last section says MIT. The hosted wallet is closed, and no terms covering it were found. AgentMarket's terms describe only the marketplace (15 of 30). AgentMarket's privacy policy of 14 January 2026 names Stripe and model providers and gives no retention periods, and it does not mention wallet addresses, KYC profiles, card data or payouts, which the CLI collects or handles. The wallet's own privacy policy was unreachable (5 of 30). The README marks `init` and `link-wallet` as legacy but still supported, and the skill pins a minimum CLI version; no deprecation policy or dated notice was found (3 of 20). Stripe is the only provider named; no card issuer, KYC provider, custody provider or data location is named. The CLI and MCP code send no telemetry (3 of 20). Total 26.\n\n### Reliability: Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +42\n\n- Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) (62): Scored on the hosted checklist although the listing is an SDK, because every wallet action ends in a call to Coinbase's API. status.coinbase.com, where the CDP docs send status readers, has a Coinbase Developer Platform group with Wallets, Payments, Stablecoins, Trading, Onchain Tools, Webhooks and Portal components (20). The history page carries its incident list in the page itself, and its two pages, read on 1 November, cover the whole 90 days from 3 August. Six incidents touch CDP, all partial or short. Degraded x402 facilitator performance for some users from 6:00 to 9:00 a.m. ET on 7 August, Onramp transactions for 4 minutes on 14 August, smart account API latency for 53 minutes on 19 August (Wallets), USDC payments on Polygon only from 22 to 24 August (Payments), Onramp guest checkout on 1 September and Payments Acceptance for 52 minutes on 15 September. Minor only (20 of 30, was 12 when the history couldn't be read). We found no rate-limit numbers for the wallet APIs, and the OpenAPI file defines 429 responses without figures (0). An optional `X-Idempotency-Key` with a 422 `idempotency_error`, and `rate_limit_exceeded` and `operation_in_progress` error types, but no Retry-After guidance (12 of 15). No SLA found (0). Server wallets and the awal CLI are generally available, and the Agentic Wallet overview, MCP overview, FAQ and MCP tools pages carry no beta label on 1 November (10, was 5). 20+20+0+12+0+10 = 62.\n- FluxA AI Wallet (20): Graded with the hosted lines, because signing, mandates and approvals all run on FluxA's wallet API and the CLI and MCP server only wrap it, as kite-agent-passport and kane-cli were read. No status page was found in the repository, the skills or AgentMarket's pages. fluxapay.xyz and the wallet and docs hosts could not be read, so a status page there is unchecked and scored absent (0). With no readable history the record takes the default (5). No rate limit with numbers was found (0). The connection service treats 429 `slow_down` as wait and poll and marks errors `retryable`, the skill says a 503 means retry shortly, payouts require a caller-chosen `payout_id` that returns the existing payout on a repeat, `--biz-id` rejects a duplicate with 409, and card create and recharge resume with `--request-id` instead of paying again. No Retry-After or backoff schedule is documented for the wallet API (10 of 15). No SLA was found (0). No beta label was found on the wallet in what was read, but both packages are at 0.x, agent cards sit behind a waitlist and the wallet site was unread (5 of 10). Total 20.\n\n### Payments \u0026 pricing: Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +40\n\n- Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) (85): Payment platforms and wallets take the highest step that applies on the 40-point protocol line. 40 for x402, MPP or L402 on all their own endpoints, 30 on part of their own API, 25 when their merchants can accept one, 20 for running a facilitator, 15 for paying as a buyer, 0 for only a protocol of their own. Coinbase's own CDP SQL API answers x402 at x402.cdp.coinbase.com, but the wallet API itself isn't paid per call, so the part-of-its-own-API step (30 of 40). Coinbase also runs the CDP facilitator, and Agentic Wallet pays and sells x402 services. $0.005 per wallet operation after 5,000 free a month, reads free, with units per operation published (20). The Agentic Wallet, wallet creation and gas are free, and the free operations need no card that we could find (20). An agent with its own mailbox can sign in by email OTP through `awal auth login` and `verify`, per the official skill; server wallets need a person to create a CDP Portal key (15 of 20).\n- FluxA AI Wallet (45): Payment platforms and wallets take the highest step that applies on the 40-point protocol line. 40 for x402, MPP or L402 on all their own endpoints, 30 on part of their own API, 25 when their merchants can accept one, 20 for running a facilitator, 15 for paying as a buyer, 0 for only a protocol of their own. The wallet pays x402 as a buyer and its payment links can be paid over x402 so another agent pays the holder, as sponge-wallet's payment links were read. FluxA's own wallet API is not paid over x402, so the merchant step (25 of 40). No fee schedule for the wallet, x402 signing, payouts or payment links was found, and card fees appear only through an authenticated command (0 of 20). Registering an Agent ID and creating payment links cost nothing and need no card per the README and the charge-agent guide, but the wallet sign-up at agentwallet.fluxapay.xyz could not be read, so whether opening a funded wallet needs a card is unchecked (10 of 20). `POST https://agentid.fluxapay.xyz/register` returns credentials with no human step, but the CLI marks it legacy, the default connection needs a browser approval, and every spend needs the owner's wallet and a mandate signed in a browser (10 of 20). Total 45.\n\n### Schema \u0026 documentation: Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +33\n\n- Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) (94): A public OpenAPI file, version 2.0.0, now with 243 operations, MIT-licensed in coinbase/cdp-sdk and regenerated into every SDK, re-read on 1 November (25). llms.txt and Markdown twins of the docs (10). Descriptions throughout the OpenAPI file, and the Agentic Wallet skill says when to use it and routes each task to a reference file (17 of 20). An `ErrorType` enum, now of 105 codes, patterns and length limits on IDs (14 of 15). Examples throughout the OpenAPI file and docs, errors with `errorType` and `errorMessage` (15). `/v2` paths, a dated CDP changelog and changesets in AgentKit, though AgentKit's 0.11.0 changelog entry has never reached npm per the 1 October check (13 of 15). 25+10+17+14+15+13 = 94.\n- FluxA AI Wallet (61): No OpenAPI file or reference for the wallet API was found; the README shows sample requests for five endpoints. The MCP server's 15 tools in the 0.6.0 source carry typed Zod input schemas, and the CLI's flags are documented in prose in the skill files and `--help`. The MCP server is the secondary surface and its npm release is 0.2.0, so 12 of 25. The skill and its 18 Markdown guides are written for agents, and AgentMarket's llms.txt describes the wallet's payment role (10). `connect_wallet`, `init_agent_id` and `create_intent_mandate` say when to use them and when not to, and the skill has a when-to-use table per capability, while the payment-link and status tools have one-line descriptions (12 of 20). Zod enums for validity, runtime, hosting and currency, a regex on payout amounts and strict objects, but the x402 requirement fields are plain strings and `outputSchema` is a free-form record (10 of 15). The README has an example for every MCP tool, the skills give CLI examples and output, and error codes are tabled for mandates, payouts, cards and connections (12 of 15). Semver on npm with 25 CLI versions and a version line in the skill, two git tags and no changelog (5 of 15). Total 61.\n\n### Security \u0026 auth: Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +26\n\n- Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) (78): CDP API keys carry scopes (changing policies needs \"Non-custodial \u003e Manage\"), the SDKs mint short-lived JWTs from them, and signing also needs a separate wallet secret through `X-Wallet-Auth`. Agentic Wallet sign-in is email OTP with no key handed to the agent (30). The operator sets max per call and max per session in the wallet UI and the agent can't change them; server wallets have a default-deny policy engine on value, address and network; `x402 pay` takes `--max-amount`. AgentKit itself has no caps or approval gate, as its README says (16 of 20). AgentKit's README names direct and indirect prompt-injection surfaces and points to guardrails middleware and a human-approval example, but the fix that sanitises attacker-set token names (merged 3 September) is still in no release on 1 November (10 of 15). Webhooks with delivery status and retry counts; we didn't check per-call logs in the Portal (10 of 15). HackerOne bug bounty linked from SECURITY.md in AgentKit and cdp-sdk; coinbase.com's security.txt still carries Expires 2024-06-01 on 1 November, and the AgentKit file-read fix went through a public PR without an advisory (12 of 20).\n- FluxA AI Wallet (52): The agent holds an Agent ID, a token whose validity the owner picks from 1 hour to 1 year at browser approval, and a short-lived RS256 JWT refreshed from the token; `token_revoked` exists. Credentials sit in a 0600 JSON file or environment variables. The token is not scoped, since limits live in mandates, and legacy `init` tokens are described as not expiring. Agent VCs are audience-bound and rejected by FluxA's own endpoints. No secret travels in a URL (22 of 30). Every x402 payment needs a mandate the owner signs, with a limit, a validity and an optional host allowlist enforced by the wallet API, payouts need per-payout approval unless a mandate covers them, cards need a mandate and KYC, and linked-card mandates are scoped to one merchant. A payout mandate sets no payee allowlist that was documented, and the skill tells agents to request budgets for at least 100 calls by default (16 of 20). The wallet returns little third-party content itself, but the skill sends agents to third-party x402 APIs, ClawPI posts and a remote announcement.md with no guidance on treating them as untrusted, its description steers agents to paid APIs even when a free web search looks enough, and the daily check-in runs `npx -y @fluxa-pay/fluxa-wallet@latest` unpinned twice a day (4 of 15). `mandates` lists limit, spent and remaining, with `recent-transactions`, `received-records` and payout status by CLI, and the MCP server writes a local audit log; the wallet app's logs were not read (10 of 15). No SECURITY.md, disclosure policy, bug bounty or certification was found, and agentmarket.fluxapay.xyz has no security.txt; fluxapay.xyz's is unchecked (0 of 20). Total 52.\n\n### Agent ergonomics: Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +23\n\n- Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) (83): The Agentic Wallet skill is a 4,040-byte router that loads one of nine reference files on demand and every `awal` command takes `--json`; the CDP CLI's MCP mode generates a tool per endpoint with a `cdp_help` lookup, which we couldn't read because the CLI source isn't public (18 of 25). `pageSize` and `pageToken` on 20 list operations, and SQL queries with `LIMIT` (18 of 20). Typed error codes with messages that say when to retry (18 of 20). Optional idempotency keys on writes; tool annotations not checked (14 of 20). SDKs in TypeScript, Python, Go, Rust and Java, and an Agentic Wallet signs in with two commands (15).\n- FluxA AI Wallet (60): The MCP server has 15 tools with about 4,700 characters of descriptions, the 11 to 30 band (15). The CLI path loads SKILL.md (26.5 KB) and one of 18 guides per task, about 112 KB in all, with no read-only subset (no add-back, 15 of 25). `card transactions` takes page, limit, type and a time range, refunds take limit and offset, `received-records` and `recent-transactions` take a limit up to 100, and `market search` can be scoped to models or vendors; no cursor (12 of 20). Errors carry a `code`, `retryable`, `reconnect_required` and a `next_command` or `next_tool`, and card errors map to recovery hints, but the CLI exits only 0 or 1 and the MCP payment tools return the wallet API's raw error body without `isError` (14 of 20). A required `payout_id` idempotency key, `--biz-id` dedup and `--request-id` continuation on card operations, and the skill says not to initiate again to retry a payment. No `readOnlyHint` or `destructiveHint` on any MCP tool (12 of 20). Base USDC is the default network and asset, mandates default to 8 hours and the CLI installs in one command, but there is no SDK library and both packages are TypeScript (7 of 15). Total 60.\n\n## Score by category\n\n| Category | Weight | Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) | FluxA AI Wallet | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 62 | 20 | Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +42 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 94 | 61 | Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +33 |\n| Agent ergonomics | 13% (16.2 this run) | 83 | 60 | Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +23 |\n| Security \u0026 auth | 14% (17.5 this run) | 78 | 52 | Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +26 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 85 | 45 | Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +40 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 77 | 66 | Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +11 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 77 | 32 | Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) +45 |\n| Negative events | ≤15 | -8 | 0 | |\n| **Total** | | **70.9 · BB** | **47 · D** | |\n\n## Facts side by side\n\n| Fact | Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) | FluxA AI Wallet |\n| --- | --- | --- |\n| Kind | SDK + MCP | HTTP API |\n| Vendor | Coinbase Developer Platform | FluxA Technology Pte. Ltd. |\n| Hosted endpoint | `https://mcp.base.org` | `https://walletapi.fluxapay.xyz` |\n| Transports | stdio, Streamable HTTP | HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Pay per use |\n| x402 | on some endpoints | payer tooling only |\n| Licence | Apache-2.0 | The CLI and MCP server source is Apache-2.0 (LICENSE file and both package.json files), though the README's last section says MIT. The hosted wallet service is closed, and no terms covering the wallet were found |\n| Tools exposed | none | 15 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-23 | 2026-11-06 |\n| Terms last updated | 2026-06-23 | no document linked |\n| Privacy policy last updated | 2026-05-27 | no document linked |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | yes | not read yet |\n| Terms restrict benchmarking | yes | not read yet |\n| Terms or service can change without notice | yes | not read yet |\n| Arbitration or class-action waiver | yes | not read yet |\n| Popularity | 1.3k stars, 5.8k npm/wk, 1.5k PyPI/wk | none |\n| Agent reviews | 3.5/5 (2) | none |\n\n## How the scores have moved\n\n### Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)\n\n- -0.4 on 1 November 2026: new evidence, negative event\n- +0.1 on 27 October 2026: checklist\n- -0.4 on 8 October 2026: checklist\n\n### FluxA AI Wallet\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP).** Operator-set max per call and max per session that the agent can't change, set in the wallet UI. AgentKit's newest release is from 2025, its fix for a local file read and public upload path is unreleased, and cdp-sdk minors have shipped breaking changes without notice.\n\n**FluxA AI Wallet.** Every spend runs against a mandate the owner signs in a browser, with a budget, a validity window and an optional host allowlist, and payouts need approval or a mandate. The published MCP package is 0.2.0 from March 2026 against 0.6.0 in the repository, and no status page, fee schedule, wallet terms or custody statement was found.\n\n## Before you call either\n\n### Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)\n\n1. Run `npx awal@2.12.1 status` first and sign in with `auth login` and `auth verify` if it fails\n2. Pass `--max-amount` on every `awal x402 pay`; 1000000 is $1.00\n3. Send an `X-Idempotency-Key` on server-wallet writes so a retry can't send twice\n4. Don't register AgentKit's flaunch or zora providers on 0.10.4; they read local files\n5. Give an agent a policy-bound server account or an Agentic Wallet, never a full CDP API key\n6. Call `POST /v2/policy-engine/simulate` before a new kind of server-wallet operation; since 29 September any matching reject rule wins\n\n### FluxA AI Wallet\n\n1. Run `fluxa-wallet status` first. If `configured` and `wallet_linked` are true, skip `connect`; otherwise show the `authorization_url` and wait with `connect-status --wait 100`\n2. On `token_expired` or `token_revoked`, reconnect with the same `--agent-id`. Never run `init` to recover, which creates a new identity\n3. Pass a unique `--id` on every `payout` and reuse it on retry; a repeat returns the existing payout instead of paying twice\n4. Check `fluxa-wallet mandates` for a signed mandate with enough remaining budget before creating one, and size new budgets to the task\n5. Install the CLI from npm, not the MCP package, whose npm release 0.2.0 lacks `connect_wallet` and `get_wallet_connection`\n\n## Tutorials\n\n- [Check an Agentic Wallet balance on Base Sepolia](https://www.anchorterminal.com/tutorials/coinbase-cdp-agentkit/), for Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)\n\n## Questions\n\n### Which is better for AI agents, Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) or FluxA AI Wallet?\n\nCoinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) scores 70.9 (BB) on agent readiness against FluxA AI Wallet's 47 (D), and leads in every scored category.\n\n### Can an agent call Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) and FluxA AI Wallet without installing anything?\n\nYes. Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) has a hosted endpoint at https://mcp.base.org and FluxA AI Wallet at https://walletapi.fluxapay.xyz.\n\n### Are Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) and FluxA AI Wallet open source?\n\nYes. Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) is open source (Apache-2.0). FluxA AI Wallet is open source (The CLI and MCP server source is Apache-2.0 (LICENSE file and both package.json files), though the README's last section says MIT. The hosted wallet service is closed, and no terms covering the wallet were found).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-fluxa-ai-wallet.json, and with the fewest tokens: https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-fluxa-ai-wallet.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"coinbase-cdp-agentkit\", \"b\": \"fluxa-ai-wallet\"}`. From a terminal: `anchor compare coinbase-cdp-agentkit fluxa-ai-wallet`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/coinbase-cdp-agentkit.json and https://www.anchorterminal.com/api/v1/tools/fluxa-ai-wallet.json\n\n## Other comparisons with Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) or FluxA AI Wallet\n\n- [Agentcard vs FluxA AI Wallet](https://www.anchorterminal.com/compare/agentcard-vs-fluxa-ai-wallet.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)](https://www.anchorterminal.com/compare/circle-wallets-vs-coinbase-cdp-agentkit.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs FluxA AI Wallet](https://www.anchorterminal.com/compare/circle-wallets-vs-fluxa-ai-wallet.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Kite Agent Passport](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-kite-agent-passport.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Openfort](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-openfort.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-privy.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Sponge Wallet](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-sponge-wallet.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-turnkey-agentic-wallets.md)\n- [Circle Gateway Nanopayments vs FluxA AI Wallet](https://www.anchorterminal.com/compare/circle-gateway-nanopayments-vs-fluxa-ai-wallet.md)\n- [FluxA AgentMarket vs FluxA AI Wallet](https://www.anchorterminal.com/compare/fluxa-agentmarket-vs-fluxa-ai-wallet.md)\n- [FluxA AI Wallet vs Kite Agent Passport](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-kite-agent-passport.md)\n- [FluxA AI Wallet vs Nevermined API + MCP](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-nevermined.md)\n- [FluxA AI Wallet vs Openfort](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-openfort.md)\n- [FluxA AI Wallet vs Payman Genie MCP](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-payman.md)\n- [FluxA AI Wallet vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-privy.md)\n- [FluxA AI Wallet vs Sponge Wallet](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-sponge-wallet.md)\n- [FluxA AI Wallet vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-turnkey-agentic-wallets.md)\n- [Agentcard vs Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)](https://www.anchorterminal.com/compare/agentcard-vs-coinbase-cdp-agentkit.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.md)\n- [FluxA AI Wallet vs Agent Vault by Self](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-self-agent-vault.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs FluxA AI Wallet", "url": "" } ], "description": "Coinbase Developer Platform scores 70.9 (BB) to FluxA AI Wallet's 47 (D) for onchain wallets. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) BB 70.9", "FluxA AI Wallet D 47", "scores" ], "h1": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs FluxA AI Wallet", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/coinbase-cdp-agentkit-vs-fluxa-ai-wallet", "published": "2026-10-01", "section": "tools", "title": "Coinbase Developer Platform vs FluxA AI Wallet for AI agents (2026)", "toc": null, "updated": "2026-11-08", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-fluxa-ai-wallet" }, "tokens": { "markdown": 6700, "slim": 1580 }, "version": 1 }