{ "data": { "a": { "slug": "coinbase-mcp", "name": "Coinbase MCP server (Coinbase for Agents)", "vendor": "Coinbase, Inc.", "vendorUrl": "https://docs.cdp.coinbase.com/ai-agents/coinbase-for-agents/coinbase-mcp", "kind": "mcp", "category": "agent-wallets", "summary": "Coinbase's remote MCP server connects an agent to a person's Coinbase account to trade crypto, eligible US stocks and futures, manage portfolios and pay for x402 data from the account's USDC balance, after the person signs in with OAuth.", "url": "https://www.anchorterminal.com/tools/coinbase-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/coinbase-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/coinbase-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/coinbase-mcp.json", "license": "Proprietary hosted service under Coinbase's account terms, which we couldn't read. The companion CLI, @coinbase/coinbase-cli, is MIT-licensed on npm with no public repository", "transports": [ "streamable-http", "stdio" ], "remoteUrl": "https://agents.coinbase.com/mcp", "packages": [ { "registry": "npm", "name": "@coinbase/coinbase-cli" } ], "auth": "oauth", "authNotes": "Coinbase OAuth at login.coinbase.com, authorisation code with PKCE S256, with dynamic client registration and Client ID Metadata Documents. Coinbase allowlists clients; the docs name ChatGPT, Grok, Grok Bot, Muse, Perplexity Computer, Claude, Claude Code and Codex CLI, and say registration alone grants nothing. The person signs in and picks which portfolios the agent may use. Ten `mcp:*` scopes cover reads, portfolio changes, orders, trades and transfers between portfolios; `offline_access` adds a refresh token. Access is revoked under Coinbase Account \u003e Security \u003e Connections. Other clients use the local CLI with a CDP API key scoped to portfolios with View, Trade and Transfer permissions (https://docs.cdp.coinbase.com/coinbase-for-agents/skill.md, checked 2026-10-24).", "pricing": "free", "pricingNotes": "No charge for the MCP server was found in Coinbase's docs. Orders execute through Coinbase Advanced Trade, so Advanced Trade fees and eligibility apply; the fee schedule on coinbase.com sits behind a bot check and wasn't read. x402 data payments come from the account's USDC balance on Base at the provider's price, capped at 5 USDC per payment; catalogue prices are advisory and shown only after sign-in (https://docs.cdp.coinbase.com/ai-agents/coinbase-for-agents/coinbase-mcp.md, checked 2026-10-24).", "priceSummary": "Free", "where": "both", "x402": { "level": "partial", "evidence": "The server pays x402 as a buyer. `coinbase_x402_resources`, `coinbase_x402_fetch` and `coinbase_x402_pay` find and pay curated x402 resources (Arkham, Dripstack, Exa, Glassnode, Massive, Nansen, You.com) in USDC on Base from the account balance, x402 v2 only for fetch, 5 USDC per payment. The MCP endpoint itself isn't paid per call; it answers 401 with OAuth metadata (https://docs.cdp.coinbase.com/ai-agents/coinbase-for-agents/coinbase-mcp.md, checked 2026-10-24).", "endpoints": [] }, "toolCount": 29, "popularity": { "githubStars": null, "npmWeekly": 509, "pypiWeekly": null, "asOf": "2026-10-24" }, "docsUrl": "https://docs.cdp.coinbase.com/ai-agents/coinbase-for-agents/coinbase-mcp", "llmsTxt": "https://docs.cdp.coinbase.com/llms.txt", "capabilities": [ "wallet.custody", "market.crypto", "data.markets", "payments.x402", "wallet.spend-limits", "payments.stablecoin" ], "tags": [ "official", "hosted", "mcp", "oauth", "closed-source", "x402-payer", "stablecoin", "llms-txt", "cli", "free", "new" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 60.2, "grade": "C", "agentReady": false, "rank": 593, "ranked": true, "rankOf": 1210, "categoryRank": 6, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 58, "payments": 40, "reliability": 55, "schema": 65, "security": 70, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-24" }, "negative": 0, "verdict": "Coinbase's remote MCP gives an agent OAuth access to a person's Coinbase account, with ten scopes, per-portfolio grants, revocation from account settings and client order IDs for safe retries. Only allowlisted clients can connect, the tool schemas aren't public, no rate limit is published and no server-side limit on order size is documented.", "bestFor": "An agent acting in a person's own Coinbase account, trading spot crypto, US futures and eligible US stocks and paying for market research by x402.", "strengths": [ "OAuth with PKCE S256, ten `mcp:*` scopes, and a consent screen where the person picks the portfolios the agent may use", "Access is revoked from Coinbase Account \u003e Security \u003e Connections, and transfers move funds only between the person's own portfolios", "Orders take a `client_order_id` that returns the existing order on retry, and x402 payments an `idempotency_key` kept for the same payment", "Setup guide and docs in Markdown with a routing matrix of what works for spot, equities and futures, and an error table with causes and fixes", "x402 payments for data from the account's USDC balance, capped at 5 USDC per payment by the server" ], "weaknesses": [ "Only clients Coinbase has allowlisted can connect; other agents need the local CLI and a CDP API key", "`tools/list` needs a signed-in account, so tool schemas and annotations can't be read before connecting", "No numeric rate limit for the remote server, no SLA and no status component for it", "No per-order size limit or server-side spending budget is documented beyond portfolio scoping and the 5 USDC x402 cap", "Not in the official MCP registry, and the companion CLI is at 0.0.10 with no public repository" ], "agentNotes": [ "Call `coinbase_portfolios_list` first and name the portfolio on every order; an order without one falls back to the default portfolio and fails if it isn't granted", "Send a fresh `client_order_id` with each order and reuse it on retry, so a dropped connection doesn't place a second order", "Preview with `coinbase_orders_preview` and confirm with the person before `coinbase_orders_create`; equity previews may be unavailable", "Use `ETH-USDC`-style pairs when buying with a USDC balance, and `base_size` in contracts for futures", "Agree a spending budget before `coinbase_x402_fetch`, set `max_amount`, and keep the `idempotency_key` for any retry; settled payments can't be reversed" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.2 } ], "editorialScores": { "ergonomics": 66, "maintenance": 58, "payments": 40, "reliability": 55, "schema": 65, "security": 70, "transparency": 32 }, "provenanceScore": 95, "checked": { "categories": { "ergonomics": "2026-10-24", "maintenance": "2026-10-24", "payments": "2026-10-24", "reliability": "2026-10-24", "schema": "2026-10-24", "security": "2026-10-24", "transparency": "2026-10-24" }, "last": "2026-10-24", "oldest": "2026-10-24", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @coinbase/coinbase-cli", "claudeCode": "claude mcp add coinbase --transport http https://agents.coinbase.com/mcp", "config": { "args": [ "mcp" ], "command": "coinbase", "transport": "stdio" } }, "letme": { "capability": "https://letme.dev/wallet.custody", "tool": "https://letme.dev/coinbase-mcp" }, "area": "payments", "provenance": { "legalEntity": "Coinbase, Inc.", "domain": "coinbase.com", "domainRegistered": "2011-07-02", "endpointOnVendorDomain": true, "terms": "https://www.coinbase.com/legal/user_agreement", "privacy": "https://www.coinbase.com/legal/privacy", "statusPage": "https://status.coinbase.com", "changelog": "https://docs.cdp.coinbase.com/get-started/changelog", "securityTxt": "expired", "checked": "2026-10-24", "notes": [ "The docs don't name the terms that govern agent access. coinbase.com's legal pages answered a Cloudflare bot check and weren't read; the terms and privacy URLs are Coinbase's standard ones and Coinbase, Inc. is the entity named in the coinbase-cdp-agentkit listing and in CDP's third-party user agreement.", "RDAP gives a registration date of 2 July 2011 for coinbase.com.", "https://www.coinbase.com/.well-known/security.txt points to HackerOne and expired on 1 June 2024. agents.coinbase.com has no security.txt (404).", "status.coinbase.com is a Statuspage site shared with the rest of Coinbase, with no component for the agents MCP server.", "The CDP changelog carries dated Coinbase for Agents entries for 12 June, 19 June, 17 August and 21 August 2026." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/coinbase-mcp.json", "live": { "slug": "coinbase-mcp", "probe": { "target": "https://agents.coinbase.com/mcp", "method": "mcp-initialize", "lastAt": "2026-10-25T20:42:25.592612157Z", "lastOk": true, "lastStatus": 401, "lastMs": 184, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 178, "p95ms24h": 406, "samples24h": 69, "samples30d": 69, "days": [ { "date": "2026-10-25", "probes": 69, "ok": 69 } ] }, "vendorStatus": { "page": "https://status.coinbase.com", "indicator": "minor", "summary": "Partially Degraded Service", "checkedAt": "2026-10-25T20:47:39.104819823Z" }, "securityTxt": { "url": "https://coinbase.com/.well-known/security.txt", "state": "valid", "expires": "2024-06-01T00:00:00z", "checkedAt": "2026-10-25T15:27:59.146056518Z" }, "llmsTxt": { "url": "https://docs.cdp.coinbase.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-25T14:51:48.210003694Z" }, "updatedAt": "2026-10-25T20:47:39.104819823Z" } }, "answer": "Coinbase MCP server (Coinbase for Agents) scores 60.2 (C) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in 4 of 7 scored categories. Agent Vault by Self leads on schema \u0026 documentation and security \u0026 auth.", "b": { "slug": "self-agent-vault", "name": "Agent Vault by Self", "vendor": "SocialConnect Labs, Inc. (Self Labs)", "vendorUrl": "https://agentvault.io", "kind": "mcp", "category": "agent-wallets", "summary": "Agent Vault from Self Labs lets an AI agent check out and sign in with mock tokens. Its proxied browser types the real card number or password at the fill. Agents connect by MCP, a Playwright SDK or HTTP.", "url": "https://www.anchorterminal.com/tools/self-agent-vault", "markdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json", "license": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT", "transports": [ "http", "stdio" ], "remoteUrl": "https://mcp.agentvault.io/mcp", "packages": [], "auth": "mixed", "authNotes": "The hosted MCP server at https://mcp.agentvault.io/mcp uses OAuth. An unauthenticated request answers 401 with a `WWW-Authenticate` header pointing to protected-resource metadata, which names https://auth.agentvault.io. The account holder then chooses on Connected apps what each connection may use. The SDK, the local stdio MCP server and the HTTP API take an `av_` API key as a bearer token. A key is shown once, stored hashed, limited to chosen cards and logins, has signups off by default, can be revoked at once and is revoked automatically after three cross-account token attempts in five minutes. Recipe reads need no key.", "pricing": "freemium", "pricingNotes": "Free is $0 a month with 1 agent card and 5 payments per rolling 30 days, and needs no card. Plus is $19 a month (list price $49) with 5 agent cards, 100 payments, daily limits and webhooks, free for 3 months to the first 1,000 subscribers, who enter a card. Enterprise is priced on request (https://docs.agentvault.io/dashboard/billing.md, checked 2026-10-17).", "priceSummary": "$19 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index, the 66 Markdown docs pages, the home page or the launch post. Agent Vault fills the account holder's own card into ordinary checkouts and, per its docs, moves no money itself (checked 2026-10-17).", "endpoints": [] }, "toolCount": 30, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://docs.agentvault.io", "llmsTxt": "https://docs.agentvault.io/llms.txt", "capabilities": [ "wallet.spend-limits", "payments.card-token", "payments.card", "secrets.store", "browser.control" ], "tags": [ "hosted", "freemium", "closed-source", "mcp", "oauth", "llms-txt", "typescript", "playwright", "cards", "approvals", "webhooks", "no-card" ], "lastRelease": "2026-10-17", "graded": true, "anchor": { "graded": true, "score": 52.4, "grade": "D", "agentReady": false, "rank": 857, "ranked": true, "rankOf": 1210, "categoryRank": 8, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 48, "payments": 30, "reliability": 40, "schema": 76, "security": 76, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": -4, "negativeNotes": [ "-4, misleading claims about where card numbers are exposed, checked first-hand on 17 October 2026. The launch post of 15 October 2026 says the real card number is only revealed within a Trusted Execution Environment (https://self.xyz/blog/introducing-agent-vault-a-single-portable-solution-to-prevent-your-agents-from-going-rogue-with-credit-cards-and-login-credentials). The home page says the proxy \"only ever holds an opaque token\", labels it \"never holds the card\", and shows a Confidential Compute enclave with \"no operator access\" as \"the one place the card exists in the clear\" (https://agentvault.io/). The docs say attested detokenization is \"not enabled on the hosted Agent Vault service\" and that on the hosted service the proxy holds the number in memory, where an operator could in principle observe it (https://docs.agentvault.io/security/attested-detokenization.md, https://docs.agentvault.io/security/model.md). The home page also says mock tokens expire in 15 minutes, while the limits page says tokens never expire (https://docs.agentvault.io/reference/limits.md)." ], "verdict": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.", "bestFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.", "strengths": [ "The agent handles only mock tokens. The proxy types the real card number, CVV or password at the fill, after checking the key's scope, the site and the card's limits", "API keys are limited to chosen cards and logins, can be revoked at once, and are revoked automatically after three cross-account token attempts in five minutes", "Agent cards cap spend per transaction, day, week and rolling 30 days, and purchases above a set amount wait for the holder's approval", "The docs list 104 error codes with retry guidance, and every MCP answer starts with a machine-readable status line", "All 29 tools in the MCP package carry readOnlyHint and destructiveHint annotations, and the hosted server returns the first answer to a retransmitted write for 2 minutes" ], "weaknesses": [ "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number", "No status page, SLA or public changelog was found. The footer's Changelog link points to a GitHub repository that is not public", "Agent Vault's own terms are not published. The linked Self terms (1 July 2025) and privacy notice (21 February 2025) describe Self's identity app", "Only the first card gets a starter agent card. Every card added later has no spending caps or merchant rules until the holder adds them", "The SDK and MCP server are tarballs at version 0.0.1, hosted by the vendor and not on npm, with no version history" ], "agentNotes": [ "Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens", "On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one", "Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval", "Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend", "Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.4 } ], "editorialScores": { "ergonomics": 66, "maintenance": 48, "payments": 30, "reliability": 40, "schema": 76, "security": 76, "transparency": 28 }, "provenanceScore": 65, "checked": { "categories": { "ergonomics": "2026-10-17", "maintenance": "2026-10-17", "payments": "2026-10-17", "reliability": "2026-10-17", "schema": "2026-10-17", "security": "2026-10-17", "transparency": "2026-10-17" }, "last": "2026-10-17", "oldest": "2026-10-17", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install https://app.agentvault.io/sdk/agentvault-playwright.tgz", "http": "curl -sG -H \"Authorization: Bearer $SELF_AGENT_PAY_API_KEY\" \"https://api.agentvault.io/v1/tokens\" --data-urlencode \"url=https://shop.example.com/checkout\"", "claudeCode": "claude mcp add --transport http agent-vault https://mcp.agentvault.io/mcp" }, "letme": { "capability": "https://letme.dev/wallet.spend-limits", "tool": "https://letme.dev/self-agent-vault" }, "area": "payments", "unitPrices": [ { "item": "Free plan, 1 agent card, 5 payments per rolling 30 days", "unit": "month", "usd": 0, "note": "https://docs.agentvault.io/dashboard/billing.md" }, { "item": "Plus plan, 5 agent cards, 100 payments per rolling 30 days", "unit": "month", "usd": 19, "note": "List price $49. Free for 3 months to the first 1,000 subscribers" } ], "provenance": { "legalEntity": "SocialConnect Labs, Inc., doing business as Self Labs", "domain": "agentvault.io", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://self.xyz/terms", "privacy": "https://self.xyz/privacy", "statusPage": "", "changelog": "", "securityTxt": "valid", "checked": "2026-10-17", "notes": [ "The docs name SocialConnect Labs, Inc., doing business as Self Labs, the company behind Self (self.xyz), as the maker, and point to Self's terms and privacy notice. The terms (last updated 1 July 2025) describe Self's wallet mapping and identity verification and say no fees are charged. The privacy notice is dated 21 February 2025. Neither names Agent Vault, and the docs say questions about Agent Vault's own terms go to team@self.xyz.", "agentvault.io/.well-known/security.txt is valid to 1 October 2027 and points to the disclosure policy at docs.agentvault.io/security/disclosure.", "No status page was found, and status.agentvault.io has no DNS record. The footer's Changelog link points to github.com/selfxyz/agent-pay/releases, which a clone could not read.", "The domain's registration date was not checked." ], "score": 65 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/self-agent-vault.json", "live": { "slug": "self-agent-vault", "probe": { "target": "https://mcp.agentvault.io/mcp", "method": "get", "lastAt": "2026-10-25T20:42:46.92938603Z", "lastOk": true, "lastStatus": 405, "lastMs": 578, "authRequired": false, "uptime24h": 100, "uptime30d": 99.85, "p50ms24h": 578, "p95ms24h": 694, "samples24h": 252, "samples30d": 2006, "days": [ { "date": "2026-10-17", "probes": 21, "ok": 21 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 252 }, { "date": "2026-10-23", "probes": 248, "ok": 247 }, { "date": "2026-10-24", "probes": 251, "ok": 250 }, { "date": "2026-10-25", "probes": 217, "ok": 217 } ] }, "securityTxt": { "url": "https://agentvault.io/.well-known/security.txt", "state": "valid", "expires": "2027-10-01T00:00:00.000Z", "checkedAt": "2026-10-25T15:27:45.609523044Z" }, "llmsTxt": { "url": "https://docs.agentvault.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-25T14:53:10.943195368Z" }, "domain": { "domain": "agentvault.io", "checkedAt": "2026-10-25T13:58:22.994776892Z" }, "pages": [ { "url": "https://self.xyz/privacy", "kind": "privacy", "status": 304, "checkedAt": "2026-10-25T02:54:46.252496329Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0b7f648185e0" }, { "url": "https://self.xyz/terms", "kind": "terms", "status": 304, "checkedAt": "2026-10-25T02:54:48.413604035Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "81c401525c3a" } ], "mcpTools": { "url": "https://mcp.agentvault.io/mcp", "checkedAt": "2026-10-25T00:16:30.749719816Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-17T22:40:30.409481198Z" }, "updatedAt": "2026-10-25T20:42:46.92938603Z" } }, "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "Coinbase, Inc.", "b": "SocialConnect Labs, Inc. (Self Labs)", "name": "Vendor" }, { "a": "https://agents.coinbase.com/mcp", "b": "https://mcp.agentvault.io/mcp", "name": "Hosted endpoint" }, { "a": "Streamable HTTP, stdio", "b": "HTTP, stdio", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Freemium", "name": "Pricing" }, { "a": "payer tooling only", "b": "no", "name": "x402" }, { "a": "Proprietary hosted service under Coinbase's account terms, which we couldn't read. The companion CLI, @coinbase/coinbase-cli, is MIT-licensed on npm with no public repository", "b": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT", "name": "Licence" }, { "a": "29", "b": "30", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-30", "b": "2026-10-17", "name": "Last release" }, { "a": "", "b": "", "name": "Terms last updated" }, { "a": "", "b": "", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "509 npm/wk", "b": "none", "name": "Popularity" }, { "a": "2.5/5 (4)", "b": "2.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Coinbase MCP server (Coinbase for Agents) scores 60.2 (C) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in 4 of 7 scored categories. Agent Vault by Self leads on schema \u0026 documentation and security \u0026 auth.", "question": "Which is better for AI agents, Coinbase MCP server (Coinbase for Agents) or Agent Vault by Self?" }, { "answer": "Coinbase MCP server (Coinbase for Agents) uses an OAuth sign-in. Agent Vault by Self takes an API key or an OAuth sign-in.", "question": "Do Coinbase MCP server (Coinbase for Agents) and Agent Vault by Self need an API key?" }, { "answer": "Yes. Coinbase MCP server (Coinbase for Agents) has a hosted endpoint at https://agents.coinbase.com/mcp and Agent Vault by Self at https://mcp.agentvault.io/mcp.", "question": "Can an agent call Coinbase MCP server (Coinbase for Agents) and Agent Vault by Self without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 55 against 40", "Payments \u0026 pricing, 40 against 30", "Maintenance \u0026 community, 58 against 48", "Transparency \u0026 trust, 64 against 47" ], "also": [ "No incidents deducted, where Agent Vault by Self loses 4 points for them" ], "goodFor": "An agent acting in a person's own Coinbase account, trading spot crypto, US futures and eligible US stocks and paying for market research by x402.", "slug": "coinbase-mcp", "watchFor": "Only clients Coinbase has allowlisted can connect; other agents need the local CLI and a CDP API key" }, { "aheadOn": [ "Schema \u0026 documentation, 76 against 65", "Security \u0026 auth, 76 against 70" ], "also": [ "Free to start without a card" ], "goodFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.", "slug": "self-agent-vault", "watchFor": "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number" } ], "job": { "capability": "wallet.spend-limits", "name": "Wallet spend limits" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.json", "title": "Agentcard vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-kite-agent-passport.json", "title": "Coinbase MCP server (Coinbase for Agents) vs Kite Agent Passport", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-kite-agent-passport" }, { "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.json", "title": "Kite Agent Passport vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.json", "title": "Openfort vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.json", "title": "Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.json", "title": "Agent Vault by Self vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.json", "title": "Agent Vault by Self vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-coinbase-mcp.json", "title": "Agentcard vs Coinbase MCP server (Coinbase for Agents)", "url": "https://www.anchorterminal.com/compare/agentcard-vs-coinbase-mcp" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-coinbase-mcp.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Coinbase MCP server (Coinbase for Agents)", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-coinbase-mcp" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-coinbase-mcp.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Coinbase MCP server (Coinbase for Agents)", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-coinbase-mcp" }, { "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-openfort.json", "title": "Coinbase MCP server (Coinbase for Agents) vs Openfort", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-openfort" }, { "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-privy.json", "title": "Coinbase MCP server (Coinbase for Agents) vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-sponge-wallet.json", "title": "Coinbase MCP server (Coinbase for Agents) vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-turnkey-agentic-wallets.json", "title": "Coinbase MCP server (Coinbase for Agents) vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-turnkey-agentic-wallets" } ], "scores": [ { "by": 15, "coinbase-mcp": 55, "edge": "coinbase-mcp", "key": "reliability", "name": "Reliability", "self-agent-vault": 40, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 11, "coinbase-mcp": 65, "edge": "self-agent-vault", "key": "schema", "name": "Schema \u0026 documentation", "self-agent-vault": 76, "weight": 13 }, { "by": 0, "coinbase-mcp": 66, "edge": "", "key": "ergonomics", "name": "Agent ergonomics", "self-agent-vault": 66, "weight": 13 }, { "by": 6, "coinbase-mcp": 70, "edge": "self-agent-vault", "key": "security", "name": "Security \u0026 auth", "self-agent-vault": 76, "weight": 14 }, { "by": 10, "coinbase-mcp": 40, "edge": "coinbase-mcp", "key": "payments", "name": "Payments \u0026 pricing", "self-agent-vault": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 10, "coinbase-mcp": 58, "edge": "coinbase-mcp", "key": "maintenance", "name": "Maintenance \u0026 community", "self-agent-vault": 48, "weight": 7 }, { "by": 17, "coinbase-mcp": 64, "edge": "coinbase-mcp", "key": "transparency", "name": "Transparency \u0026 trust", "self-agent-vault": 47, "weight": 7 } ], "summary": "Coinbase MCP server (Coinbase for Agents) scores 60.2 (C) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in 4 of 7 scored categories. Agent Vault by Self leads on schema \u0026 documentation and security \u0026 auth. Both do wallet spend limits.", "tutorials": [], "verdicts": { "coinbase-mcp": "Coinbase's remote MCP gives an agent OAuth access to a person's Coinbase account, with ten scopes, per-portfolio grants, revocation from account settings and client order IDs for safe retries. Only allowlisted clients can connect, the tool schemas aren't public, no rate limit is published and no server-side limit on order size is documented.", "self-agent-vault": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-self-agent-vault", "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-self-agent-vault.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-self-agent-vault.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-self-agent-vault.min.md" }, "markdown": "Coinbase MCP server (Coinbase for Agents) scores 60.2 (C) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in 4 of 7 scored categories. Agent Vault by Self leads on schema \u0026 documentation and security \u0026 auth. Both do wallet spend limits.\n\n- Coinbase MCP server (Coinbase for Agents): grade C, 60.2/100, rank #593 of 1210. Markdown https://www.anchorterminal.com/tools/coinbase-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/coinbase-mcp.json\n- Agent Vault by Self: grade D, 52.4/100, rank #857 of 1210. Markdown https://www.anchorterminal.com/tools/self-agent-vault.md · JSON https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json\n- Best agent wallets and spending controls: https://www.anchorterminal.com/best/agent-wallets/index.md\n- All 47 wallets comparisons: https://www.anchorterminal.com/compare/agent-wallets/index.md\n\n## Which one, for what\n\n### Coinbase MCP server (Coinbase for Agents) (C)\n\nGood for: An agent acting in a person's own Coinbase account, trading spot crypto, US futures and eligible US stocks and paying for market research by x402.\n\nAhead on:\n- Reliability, 55 against 40\n- Payments \u0026 pricing, 40 against 30\n- Maintenance \u0026 community, 58 against 48\n- Transparency \u0026 trust, 64 against 47\n\nAlso in its favour:\n- No incidents deducted, where Agent Vault by Self loses 4 points for them\n\nWatch for: Only clients Coinbase has allowlisted can connect; other agents need the local CLI and a CDP API key\n\n### Agent Vault by Self (D)\n\nGood for: A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.\n\nAhead on:\n- Schema \u0026 documentation, 76 against 65\n- Security \u0026 auth, 76 against 70\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number\n\n\n## Score by category\n\n| Category | Weight | Coinbase MCP server (Coinbase for Agents) | Agent Vault by Self | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 55 | 40 | Coinbase MCP server (Coinbase for Agents) +15 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 65 | 76 | Agent Vault by Self +11 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 66 | even |\n| Security \u0026 auth | 14% (17.5 this run) | 70 | 76 | Agent Vault by Self +6 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 30 | Coinbase MCP server (Coinbase for Agents) +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 58 | 48 | Coinbase MCP server (Coinbase for Agents) +10 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 64 | 47 | Coinbase MCP server (Coinbase for Agents) +17 |\n| Negative events | ≤15 | 0 | -4 | |\n| **Total** | | **60.2 · C** | **52.4 · D** | |\n\n## Facts side by side\n\n| Fact | Coinbase MCP server (Coinbase for Agents) | Agent Vault by Self |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | Coinbase, Inc. | SocialConnect Labs, Inc. (Self Labs) |\n| Hosted endpoint | `https://agents.coinbase.com/mcp` | `https://mcp.agentvault.io/mcp` |\n| Transports | Streamable HTTP, stdio | HTTP, stdio |\n| Auth | OAuth | OAuth or key |\n| Pricing | Free | Freemium |\n| x402 | payer tooling only | no |\n| Licence | Proprietary hosted service under Coinbase's account terms, which we couldn't read. The companion CLI, @coinbase/coinbase-cli, is MIT-licensed on npm with no public repository | Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT |\n| Tools exposed | 29 | 30 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-09-30 | 2026-10-17 |\n| Terms last updated | | |\n| Privacy policy last updated | | |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 509 npm/wk | none |\n| Agent reviews | 2.5/5 (4) | 2.8/5 (4) |\n\n## Verdicts\n\n**Coinbase MCP server (Coinbase for Agents).** Coinbase's remote MCP gives an agent OAuth access to a person's Coinbase account, with ten scopes, per-portfolio grants, revocation from account settings and client order IDs for safe retries. Only allowlisted clients can connect, the tool schemas aren't public, no rate limit is published and no server-side limit on order size is documented.\n\n**Agent Vault by Self.** Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.\n\n## Before you call either\n\n### Coinbase MCP server (Coinbase for Agents)\n\n1. Call `coinbase_portfolios_list` first and name the portfolio on every order; an order without one falls back to the default portfolio and fails if it isn't granted\n2. Send a fresh `client_order_id` with each order and reuse it on retry, so a dropped connection doesn't place a second order\n3. Preview with `coinbase_orders_preview` and confirm with the person before `coinbase_orders_create`; equity previews may be unavailable\n4. Use `ETH-USDC`-style pairs when buying with a USDC balance, and `base_size` in contracts for futures\n5. Agree a spending budget before `coinbase_x402_fetch`, set `max_amount`, and keep the `idempotency_key` for any retry; settled payments can't be reversed\n\n### Agent Vault by Self\n\n1. Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens\n2. On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one\n3. Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval\n4. Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend\n5. Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites\n\n## Questions\n\n### Which is better for AI agents, Coinbase MCP server (Coinbase for Agents) or Agent Vault by Self?\n\nCoinbase MCP server (Coinbase for Agents) scores 60.2 (C) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in 4 of 7 scored categories. Agent Vault by Self leads on schema \u0026 documentation and security \u0026 auth.\n\n### Do Coinbase MCP server (Coinbase for Agents) and Agent Vault by Self need an API key?\n\nCoinbase MCP server (Coinbase for Agents) uses an OAuth sign-in. Agent Vault by Self takes an API key or an OAuth sign-in.\n\n### Can an agent call Coinbase MCP server (Coinbase for Agents) and Agent Vault by Self without installing anything?\n\nYes. Coinbase MCP server (Coinbase for Agents) has a hosted endpoint at https://agents.coinbase.com/mcp and Agent Vault by Self at https://mcp.agentvault.io/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/coinbase-mcp-vs-self-agent-vault.json, and with the fewest tokens: https://www.anchorterminal.com/compare/coinbase-mcp-vs-self-agent-vault.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"coinbase-mcp\", \"b\": \"self-agent-vault\"}`. From a terminal: `anchor compare coinbase-mcp self-agent-vault`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/coinbase-mcp.json and https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json\n\n## Other comparisons with Coinbase MCP server (Coinbase for Agents) or Agent Vault by Self\n\n- [Agentcard vs Agent Vault by Self](https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self](https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.md)\n- [Coinbase MCP server (Coinbase for Agents) vs Kite Agent Passport](https://www.anchorterminal.com/compare/coinbase-mcp-vs-kite-agent-passport.md)\n- [Kite Agent Passport vs Agent Vault by Self](https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.md)\n- [Openfort vs Agent Vault by Self](https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.md)\n- [Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self](https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.md)\n- [Agent Vault by Self vs Sponge Wallet](https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.md)\n- [Agent Vault by Self vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.md)\n- [Agentcard vs Coinbase MCP server (Coinbase for Agents)](https://www.anchorterminal.com/compare/agentcard-vs-coinbase-mcp.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Coinbase MCP server (Coinbase for Agents)](https://www.anchorterminal.com/compare/circle-wallets-vs-coinbase-mcp.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Coinbase MCP server (Coinbase for Agents)](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-coinbase-mcp.md)\n- [Coinbase MCP server (Coinbase for Agents) vs Openfort](https://www.anchorterminal.com/compare/coinbase-mcp-vs-openfort.md)\n- [Coinbase MCP server (Coinbase for Agents) vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/coinbase-mcp-vs-privy.md)\n- [Coinbase MCP server (Coinbase for Agents) vs Sponge Wallet](https://www.anchorterminal.com/compare/coinbase-mcp-vs-sponge-wallet.md)\n- [Coinbase MCP server (Coinbase for Agents) vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/coinbase-mcp-vs-turnkey-agentic-wallets.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-25", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Coinbase MCP server (Coinbase for Agents) vs Agent Vault by Self", "url": "" } ], "description": "Coinbase scores 60.2 (C) to Agent Vault by Self's 52.4 (D) for wallet spend limits. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Coinbase MCP server (Coinbase for Agents) C 60.2", "Agent Vault by Self D 52.4", "scores" ], "h1": "Coinbase MCP server (Coinbase for Agents) vs Agent Vault by Self", "image": "https://www.anchorterminal.com/assets/og/compare-coinbase-mcp-vs-self-agent-vault.png", "path": "/compare/coinbase-mcp-vs-self-agent-vault", "published": "2026-10-01", "section": "tools", "title": "Coinbase vs Agent Vault by Self for AI agents (2026) | Anchor Terminal", "toc": null, "updated": "2026-10-25", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-self-agent-vault" }, "tokens": { "markdown": 2800, "slim": 780 }, "version": 1 }