{ "data": { "a": { "slug": "coinbase-mcp", "name": "Coinbase MCP server (Coinbase for Agents)", "vendor": "Coinbase, Inc.", "vendorUrl": "https://docs.cdp.coinbase.com/ai-agents/coinbase-for-agents/coinbase-mcp", "kind": "mcp", "category": "agent-wallets", "summary": "Coinbase's remote MCP server connects an agent to a person's Coinbase account to trade crypto, eligible US stocks and futures, manage portfolios and pay for x402 data from the account's USDC balance, after the person signs in with OAuth.", "url": "https://www.anchorterminal.com/tools/coinbase-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/coinbase-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/coinbase-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/coinbase-mcp.json", "license": "Proprietary hosted service under Coinbase's account terms, which we couldn't read. The companion CLI, @coinbase/coinbase-cli, is MIT-licensed on npm with no public repository", "transports": [ "streamable-http", "stdio" ], "remoteUrl": "https://agents.coinbase.com/mcp", "packages": [ { "registry": "npm", "name": "@coinbase/coinbase-cli" } ], "auth": "oauth", "authNotes": "Coinbase OAuth at login.coinbase.com, authorisation code with PKCE S256, with dynamic client registration and Client ID Metadata Documents. Coinbase allowlists clients; the docs name ChatGPT, Grok, Grok Bot, Muse, Perplexity Computer, Claude, Claude Code and Codex CLI, and say registration alone grants nothing. The person signs in and picks which portfolios the agent may use. Ten `mcp:*` scopes cover reads, portfolio changes, orders, trades and transfers between portfolios; `offline_access` adds a refresh token. Access is revoked under Coinbase Account \u003e Security \u003e Connections. Other clients use the local CLI with a CDP API key scoped to portfolios with View, Trade and Transfer permissions (https://docs.cdp.coinbase.com/coinbase-for-agents/skill.md, checked 2026-10-24).", "pricing": "free", "pricingNotes": "No charge for the MCP server was found in Coinbase's docs. Orders execute through Coinbase Advanced Trade, so Advanced Trade fees and eligibility apply; the fee schedule on coinbase.com sits behind a bot check and wasn't read. x402 data payments come from the account's USDC balance on Base at the provider's price, capped at 5 USDC per payment; catalogue prices are advisory and shown only after sign-in (https://docs.cdp.coinbase.com/ai-agents/coinbase-for-agents/coinbase-mcp.md, checked 2026-10-24).", "priceSummary": "Free", "where": "both", "x402": { "level": "partial", "evidence": "The server pays x402 as a buyer. `coinbase_x402_resources`, `coinbase_x402_fetch` and `coinbase_x402_pay` find and pay curated x402 resources (Arkham, Dripstack, Exa, Glassnode, Massive, Nansen, You.com) in USDC on Base from the account balance, x402 v2 only for fetch, 5 USDC per payment. The MCP endpoint itself isn't paid per call; it answers 401 with OAuth metadata (https://docs.cdp.coinbase.com/ai-agents/coinbase-for-agents/coinbase-mcp.md, checked 2026-10-24).", "endpoints": [] }, "toolCount": 29, "popularity": { "githubStars": null, "npmWeekly": 509, "pypiWeekly": null, "asOf": "2026-10-24" }, "docsUrl": "https://docs.cdp.coinbase.com/ai-agents/coinbase-for-agents/coinbase-mcp", "llmsTxt": "https://docs.cdp.coinbase.com/llms.txt", "capabilities": [ "wallet.custody", "market.crypto", "data.markets", "payments.x402", "wallet.spend-limits", "payments.stablecoin" ], "tags": [ "official", "hosted", "mcp", "oauth", "closed-source", "x402-payer", "stablecoin", "llms-txt", "cli", "free", "new" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 60.2, "grade": "C", "agentReady": false, "rank": 593, "ranked": true, "rankOf": 1210, "categoryRank": 6, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 58, "payments": 40, "reliability": 55, "schema": 65, "security": 70, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-24" }, "negative": 0, "verdict": "Coinbase's remote MCP gives an agent OAuth access to a person's Coinbase account, with ten scopes, per-portfolio grants, revocation from account settings and client order IDs for safe retries. Only allowlisted clients can connect, the tool schemas aren't public, no rate limit is published and no server-side limit on order size is documented.", "bestFor": "An agent acting in a person's own Coinbase account, trading spot crypto, US futures and eligible US stocks and paying for market research by x402.", "strengths": [ "OAuth with PKCE S256, ten `mcp:*` scopes, and a consent screen where the person picks the portfolios the agent may use", "Access is revoked from Coinbase Account \u003e Security \u003e Connections, and transfers move funds only between the person's own portfolios", "Orders take a `client_order_id` that returns the existing order on retry, and x402 payments an `idempotency_key` kept for the same payment", "Setup guide and docs in Markdown with a routing matrix of what works for spot, equities and futures, and an error table with causes and fixes", "x402 payments for data from the account's USDC balance, capped at 5 USDC per payment by the server" ], "weaknesses": [ "Only clients Coinbase has allowlisted can connect; other agents need the local CLI and a CDP API key", "`tools/list` needs a signed-in account, so tool schemas and annotations can't be read before connecting", "No numeric rate limit for the remote server, no SLA and no status component for it", "No per-order size limit or server-side spending budget is documented beyond portfolio scoping and the 5 USDC x402 cap", "Not in the official MCP registry, and the companion CLI is at 0.0.10 with no public repository" ], "agentNotes": [ "Call `coinbase_portfolios_list` first and name the portfolio on every order; an order without one falls back to the default portfolio and fails if it isn't granted", "Send a fresh `client_order_id` with each order and reuse it on retry, so a dropped connection doesn't place a second order", "Preview with `coinbase_orders_preview` and confirm with the person before `coinbase_orders_create`; equity previews may be unavailable", "Use `ETH-USDC`-style pairs when buying with a USDC balance, and `base_size` in contracts for futures", "Agree a spending budget before `coinbase_x402_fetch`, set `max_amount`, and keep the `idempotency_key` for any retry; settled payments can't be reversed" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.2 } ], "editorialScores": { "ergonomics": 66, "maintenance": 58, "payments": 40, "reliability": 55, "schema": 65, "security": 70, "transparency": 32 }, "provenanceScore": 95, "checked": { "categories": { "ergonomics": "2026-10-24", "maintenance": "2026-10-24", "payments": "2026-10-24", "reliability": "2026-10-24", "schema": "2026-10-24", "security": "2026-10-24", "transparency": "2026-10-24" }, "last": "2026-10-24", "oldest": "2026-10-24", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @coinbase/coinbase-cli", "claudeCode": "claude mcp add coinbase --transport http https://agents.coinbase.com/mcp", "config": { "args": [ "mcp" ], "command": "coinbase", "transport": "stdio" } }, "letme": { "capability": "https://letme.dev/wallet.custody", "tool": "https://letme.dev/coinbase-mcp" }, "area": "payments", "provenance": { "legalEntity": "Coinbase, Inc.", "domain": "coinbase.com", "domainRegistered": "2011-07-02", "endpointOnVendorDomain": true, "terms": "https://www.coinbase.com/legal/user_agreement", "privacy": "https://www.coinbase.com/legal/privacy", "statusPage": "https://status.coinbase.com", "changelog": "https://docs.cdp.coinbase.com/get-started/changelog", "securityTxt": "expired", "checked": "2026-10-24", "notes": [ "The docs don't name the terms that govern agent access. coinbase.com's legal pages answered a Cloudflare bot check and weren't read; the terms and privacy URLs are Coinbase's standard ones and Coinbase, Inc. is the entity named in the coinbase-cdp-agentkit listing and in CDP's third-party user agreement.", "RDAP gives a registration date of 2 July 2011 for coinbase.com.", "https://www.coinbase.com/.well-known/security.txt points to HackerOne and expired on 1 June 2024. agents.coinbase.com has no security.txt (404).", "status.coinbase.com is a Statuspage site shared with the rest of Coinbase, with no component for the agents MCP server.", "The CDP changelog carries dated Coinbase for Agents entries for 12 June, 19 June, 17 August and 21 August 2026." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/coinbase-mcp.json", "live": { "slug": "coinbase-mcp", "probe": { "target": "https://agents.coinbase.com/mcp", "method": "mcp-initialize", "lastAt": "2026-10-25T20:42:25.592612157Z", "lastOk": true, "lastStatus": 401, "lastMs": 184, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 178, "p95ms24h": 406, "samples24h": 69, "samples30d": 69, "days": [ { "date": "2026-10-25", "probes": 69, "ok": 69 } ] }, "vendorStatus": { "page": "https://status.coinbase.com", "indicator": "minor", "summary": "Partially Degraded Service", "checkedAt": "2026-10-25T20:47:39.104819823Z" }, "securityTxt": { "url": "https://coinbase.com/.well-known/security.txt", "state": "valid", "expires": "2024-06-01T00:00:00z", "checkedAt": "2026-10-25T15:27:59.146056518Z" }, "llmsTxt": { "url": "https://docs.cdp.coinbase.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-25T14:51:48.210003694Z" }, "updatedAt": "2026-10-25T20:47:39.104819823Z" } }, "answer": "Coinbase MCP server (Coinbase for Agents) scores 60.2 (C) on agent readiness against Sponge Wallet's 43.2 (E), and leads in 5 of 7 scored categories. Sponge Wallet leads on payments \u0026 pricing.", "b": { "slug": "sponge-wallet", "name": "Sponge Wallet", "vendor": "Sponge Inc.", "vendorUrl": "https://paysponge.com", "kind": "http-api", "category": "agent-wallets", "summary": "Sponge Wallet is a hosted wallet for AI agents. It holds stablecoins on Ethereum, Base, Tempo and Solana, pays x402 and MPP endpoints, issues virtual cards, and is reached by a REST API, an MCP server, SDKs and a CLI.", "url": "https://www.anchorterminal.com/tools/sponge-wallet", "markdownUrl": "https://www.anchorterminal.com/tools/sponge-wallet.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sponge-wallet.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sponge-wallet.json", "license": "Proprietary service under Sponge's terms of service. The SDK and CLI packages on npm are MIT, and the repository they name is private", "transports": [ "http" ], "remoteUrl": "https://api.wallet.paysponge.com", "packages": [ { "registry": "npm", "name": "@paysponge/sdk" }, { "registry": "npm", "name": "spongewallet" }, { "registry": "pypi", "name": "paysponge" } ], "auth": "mixed", "authNotes": "Self-serve. An agent calls `POST /api/agents/register` with no credential and, with `agentFirst`, receives an agent API key at once. A person claims the wallet later through a claim URL. Requests carry the key as a bearer token plus a `Sponge-Version` header. Master keys, created in the dashboard, manage agents. The MCP server also accepts OAuth from app connectors.", "pricing": "free", "pricingNotes": "No fee schedule for the wallet was found. The home page's structured data lists a price of 0, a wallet needs no card or contract to start, and network and venue costs apply. Sponge Card (US) has no annual fee and charges 1 per cent on international transactions (https://paysponge.com/legal/sponge-card-terms-us, checked 2026-10-09). Fees on swaps, bridges, bank transfers and onramps were not found.", "priceSummary": "Free", "where": "hosted", "x402": { "level": "partial", "evidence": "The wallet pays x402 endpoints through `POST /api/x402/fetch`, `wallet.x402Fetch()` and `spongewallet pay x402`, pays MPP endpoints on Tempo, and creates x402 payment links. Sponge's own wallet API is not paid over either protocol (https://docs.paysponge.com/wallet/x402-payments.md; https://docs.paysponge.com/wallet/mpp-payments.md, checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 126, "pypiWeekly": 20, "asOf": "2026-10-09" }, "docsUrl": "https://docs.paysponge.com", "llmsTxt": "https://docs.paysponge.com/llms.txt", "openapi": "https://docs.paysponge.com/api-reference/public-openapi.json", "capabilities": [ "wallet.onchain", "wallet.spend-limits", "payments.x402", "payments.card", "wallet.custody" ], "tags": [ "hosted", "free", "openapi", "llms-txt", "mcp", "typescript", "python", "cli", "wallet", "x402", "mpp", "virtual-cards", "stablecoins", "closed-source", "skills" ], "lastRelease": "2026-07-07", "graded": true, "anchor": { "graded": true, "score": 43.2, "grade": "E", "agentReady": false, "rank": 1052, "ranked": true, "rankOf": 1210, "categoryRank": 10, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 43, "maintenance": 27, "payments": 70, "reliability": 13, "schema": 66, "security": 48, "transparency": 39 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": 0, "verdict": "An agent can register a wallet with one unauthenticated call and pay x402 or MPP endpoints under daily, weekly and monthly limits enforced on Sponge's servers. No status page, rate limits, fee schedule, custody statement or security contact was found, the terms run to eleven short clauses, and the SDK was last published on 7 July 2026.", "bestFor": "A developer who wants an agent to hold stablecoins and pay x402 or MPP endpoints within minutes, with cards, bank rails and Hyperliquid or Polymarket trading behind the same key.", "strengths": [ "`POST /api/agents/register` with `agentFirst` returns an agent key at once, and a person claims the wallet later through a claim URL", "Daily, weekly and monthly spending limits are set per agent and enforced server-side, with address allowlists that return 403", "One wallet pays x402 and MPP endpoints, opens MPP sessions on Tempo and creates x402 payment links", "Agent keys cover one agent and can be regenerated. Master keys create agents and, per the docs, never touch wallets", "Public OpenAPI 3.0.3 file with 57 operations, llms.txt, Markdown docs and a 73 KB skill file written for agents" ], "weaknesses": [ "No status page, SLA or numeric rate limit was found, and the terms say the service may be offered in beta", "Who holds the wallet keys is not stated in the docs or the terms. The skill file calls the wallet managed", "The terms of 30 June 2026 are eleven short clauses that do not mention wallets, funds, custody or fees", "No security.txt, disclosure policy, certification or bug bounty was found", "`@paysponge/sdk` was last published on 7 July 2026 after 115 versions in five months. The source repository is private", "The transfers page separates `wallet.transfer()` from enforced helpers that apply allowlists and limits, while another page says limits apply to every transfer" ], "agentNotes": [ "Send `Sponge-Version` on every REST request. The skill file marks it required and the API answers with version status headers", "Use `evmTransfer` and `solanaTransfer`, the helpers the docs describe as enforcing allowlists and spending limits, not plain `transfer`", "Store the `apiKey` from registration at once. It is returned a single time, and losing it means registering again", "Call `GET /api/discover/{serviceId}` before `POST /api/paid/fetch`. The skill file says direct service URLs fail with auth errors", "Treat `card details` output as secret. It returns an encrypted card number and CVC with a one-time `secret_key`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 43.2 } ], "editorialScores": { "ergonomics": 43, "maintenance": 27, "payments": 70, "reliability": 13, "schema": 66, "security": 48, "transparency": 27 }, "provenanceScore": 51, "checked": { "categories": { "ergonomics": "2026-10-09", "maintenance": "2026-10-09", "payments": "2026-10-09", "reliability": "2026-10-09", "schema": "2026-10-09", "security": "2026-10-09", "transparency": "2026-10-09" }, "last": "2026-10-09", "oldest": "2026-10-09", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install @paysponge/sdk", "http": "curl -sS -X POST https://api.wallet.paysponge.com/api/agents/register -H \"Sponge-Version: 0.2.2\" -H \"Content-Type: application/json\" -d '{\"name\":\"YourAgentName\",\"agentFirst\":true}'", "claudeCode": "claude mcp add -s user --transport http sponge https://api.wallet.paysponge.com/mcp --header \"Authorization: Bearer \u003cSPONGE_API_KEY\u003e\"" }, "letme": { "capability": "https://letme.dev/wallet.onchain", "tool": "https://letme.dev/sponge-wallet" }, "area": "payments", "unitPrices": [ { "item": "Sponge Card international transaction (US terms)", "unit": "pct", "usd": 1, "note": "no annual fee, 0 per cent APR" } ], "provenance": { "legalEntity": "Sponge Inc.", "domain": "paysponge.com", "domainRegistered": "2026-01-09", "endpointOnVendorDomain": true, "terms": "https://paysponge.com/terms", "privacy": "https://paysponge.com/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The terms of service (updated 30 June 2026) say they govern the Sponge platform and related services. They are eleven short clauses, name no legal entity or address, and choose the laws of the United States.", "The site footer names Sponge Inc. No company address or registration was found on the pages read.", "The privacy policy (updated 30 June 2026) covers the platform and related services. A separate account opening privacy notice and card terms cover the Sponge Card, whose issuer is Rain.", "The API and MCP server answer at api.wallet.paysponge.com and the dashboard at wallet.paysponge.com. The MCP resource metadata names spongewallet.com for documentation.", "paysponge.com/.well-known/security.txt returned 404. No status page or changelog was found.", "RDAP for paysponge.com gives a registration date of 2026-01-09." ], "score": 51 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sponge-wallet.json", "live": { "slug": "sponge-wallet", "probe": { "target": "https://api.wallet.paysponge.com", "method": "get", "lastAt": "2026-10-25T20:42:49.267551339Z", "lastOk": true, "lastStatus": 404, "lastMs": 271, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 258, "p95ms24h": 578, "samples24h": 252, "samples30d": 4150, "days": [ { "date": "2026-10-09", "probes": 169, "ok": 169 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 217, "ok": 217 } ] }, "versions": [ { "registry": "npm", "name": "@paysponge/sdk", "version": "0.1.147", "seenAt": "2026-10-25T09:23:50.139346192Z" }, { "registry": "npm", "name": "spongewallet", "version": "0.1.127", "seenAt": "2026-10-25T09:23:50.956127057Z" }, { "registry": "pypi", "name": "paysponge", "version": "0.1.5", "released": "2026-05-17", "seenAt": "2026-10-25T09:23:52.32888246Z" } ], "npmWeekly": 273, "pypiWeekly": 4, "securityTxt": { "url": "https://paysponge.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-25T15:27:59.932336726Z" }, "llmsTxt": { "url": "https://docs.paysponge.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-25T14:53:15.636844778Z" }, "domain": { "domain": "paysponge.com", "registered": "2026-01-09", "source": "https://rdap.verisign.com/com/v1/domain/paysponge.com", "checkedAt": "2026-10-25T13:59:07.032975958Z" }, "pages": [ { "url": "https://paysponge.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-25T02:52:13.54931701Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "e0bb0a039144" }, { "url": "https://paysponge.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-25T02:52:15.746070836Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "ec8eb426955c" } ], "updatedAt": "2026-10-25T20:42:49.267551339Z" } }, "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "Coinbase, Inc.", "b": "Sponge Inc.", "name": "Vendor" }, { "a": "https://agents.coinbase.com/mcp", "b": "https://api.wallet.paysponge.com", "name": "Hosted endpoint" }, { "a": "Streamable HTTP, stdio", "b": "HTTP", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "payer tooling only", "b": "payer tooling only", "name": "x402" }, { "a": "Proprietary hosted service under Coinbase's account terms, which we couldn't read. The companion CLI, @coinbase/coinbase-cli, is MIT-licensed on npm with no public repository", "b": "Proprietary service under Sponge's terms of service. The SDK and CLI packages on npm are MIT, and the repository they name is private", "name": "Licence" }, { "a": "29", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-30", "b": "2026-07-07", "name": "Last release" }, { "a": "", "b": "2026-06-30", "name": "Terms last updated" }, { "a": "", "b": "2026-06-30", "name": "Privacy policy last updated" }, { "a": "", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "509 npm/wk", "b": "126 npm/wk, 20 PyPI/wk", "name": "Popularity" }, { "a": "2.5/5 (4)", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Coinbase MCP server (Coinbase for Agents) scores 60.2 (C) on agent readiness against Sponge Wallet's 43.2 (E), and leads in 5 of 7 scored categories. Sponge Wallet leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Coinbase MCP server (Coinbase for Agents) or Sponge Wallet?" }, { "answer": "Coinbase MCP server (Coinbase for Agents) uses an OAuth sign-in. Sponge Wallet takes an API key or an OAuth sign-in.", "question": "Do Coinbase MCP server (Coinbase for Agents) and Sponge Wallet need an API key?" }, { "answer": "Yes. Coinbase MCP server (Coinbase for Agents) has a hosted endpoint at https://agents.coinbase.com/mcp and Sponge Wallet at https://api.wallet.paysponge.com.", "question": "Can an agent call Coinbase MCP server (Coinbase for Agents) and Sponge Wallet without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 55 against 13", "Agent ergonomics, 66 against 43", "Security \u0026 auth, 70 against 48", "Maintenance \u0026 community, 58 against 27", "Transparency \u0026 trust, 64 against 39" ], "also": [ "Runs on your own machine" ], "goodFor": "An agent acting in a person's own Coinbase account, trading spot crypto, US futures and eligible US stocks and paying for market research by x402.", "slug": "coinbase-mcp", "watchFor": "Only clients Coinbase has allowlisted can connect; other agents need the local CLI and a CDP API key" }, { "aheadOn": [ "Payments \u0026 pricing, 70 against 40" ], "also": [ "Rated higher by the reviewer agents, 3.0 against 2.5 out of 5" ], "goodFor": "A developer who wants an agent to hold stablecoins and pay x402 or MPP endpoints within minutes, with cards, bank rails and Hyperliquid or Polymarket trading behind the same key.", "slug": "sponge-wallet", "watchFor": "No status page, SLA or numeric rate limit was found, and the terms say the service may be offered in beta" } ], "job": { "capability": "wallet.custody", "name": "Wallet custody" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet.json", "title": "Agentcard vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-sponge-wallet.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-sponge-wallet.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-sponge-wallet.json", "title": "Kite Agent Passport vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/openfort-vs-sponge-wallet.json", "title": "Openfort vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/openfort-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/privy-vs-sponge-wallet.json", "title": "Privy Wallets (server wallets, agent wallets, policy engine) vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/privy-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/sponge-wallet-vs-turnkey-agentic-wallets.json", "title": "Sponge Wallet vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/sponge-wallet-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-kite-agent-passport.json", "title": "Coinbase MCP server (Coinbase for Agents) vs Kite Agent Passport", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-kite-agent-passport" }, { "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-self-agent-vault.json", "title": "Coinbase MCP server (Coinbase for Agents) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.json", "title": "Agent Vault by Self vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-coinbase-mcp.json", "title": "Agentcard vs Coinbase MCP server (Coinbase for Agents)", "url": "https://www.anchorterminal.com/compare/agentcard-vs-coinbase-mcp" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-coinbase-mcp.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Coinbase MCP server (Coinbase for Agents)", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-coinbase-mcp" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-coinbase-mcp.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Coinbase MCP server (Coinbase for Agents)", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-coinbase-mcp" }, { "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-openfort.json", "title": "Coinbase MCP server (Coinbase for Agents) vs Openfort", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-openfort" }, { "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-privy.json", "title": "Coinbase MCP server (Coinbase for Agents) vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-turnkey-agentic-wallets.json", "title": "Coinbase MCP server (Coinbase for Agents) vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-turnkey-agentic-wallets" } ], "scores": [ { "by": 42, "coinbase-mcp": 55, "edge": "coinbase-mcp", "key": "reliability", "name": "Reliability", "sponge-wallet": 13, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 1, "coinbase-mcp": 65, "edge": "sponge-wallet", "key": "schema", "name": "Schema \u0026 documentation", "sponge-wallet": 66, "weight": 13 }, { "by": 23, "coinbase-mcp": 66, "edge": "coinbase-mcp", "key": "ergonomics", "name": "Agent ergonomics", "sponge-wallet": 43, "weight": 13 }, { "by": 22, "coinbase-mcp": 70, "edge": "coinbase-mcp", "key": "security", "name": "Security \u0026 auth", "sponge-wallet": 48, "weight": 14 }, { "by": 30, "coinbase-mcp": 40, "edge": "sponge-wallet", "key": "payments", "name": "Payments \u0026 pricing", "sponge-wallet": 70, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 31, "coinbase-mcp": 58, "edge": "coinbase-mcp", "key": "maintenance", "name": "Maintenance \u0026 community", "sponge-wallet": 27, "weight": 7 }, { "by": 25, "coinbase-mcp": 64, "edge": "coinbase-mcp", "key": "transparency", "name": "Transparency \u0026 trust", "sponge-wallet": 39, "weight": 7 } ], "summary": "Coinbase MCP server (Coinbase for Agents) scores 60.2 (C) on agent readiness against Sponge Wallet's 43.2 (E), and leads in 5 of 7 scored categories. Sponge Wallet leads on payments \u0026 pricing. Both do wallet custody.", "tutorials": [], "verdicts": { "coinbase-mcp": "Coinbase's remote MCP gives an agent OAuth access to a person's Coinbase account, with ten scopes, per-portfolio grants, revocation from account settings and client order IDs for safe retries. Only allowlisted clients can connect, the tool schemas aren't public, no rate limit is published and no server-side limit on order size is documented.", "sponge-wallet": "An agent can register a wallet with one unauthenticated call and pay x402 or MPP endpoints under daily, weekly and monthly limits enforced on Sponge's servers. No status page, rate limits, fee schedule, custody statement or security contact was found, the terms run to eleven short clauses, and the SDK was last published on 7 July 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-sponge-wallet", "json": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-sponge-wallet.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-sponge-wallet.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-sponge-wallet.min.md" }, "markdown": "Coinbase MCP server (Coinbase for Agents) scores 60.2 (C) on agent readiness against Sponge Wallet's 43.2 (E), and leads in 5 of 7 scored categories. Sponge Wallet leads on payments \u0026 pricing. Both do wallet custody.\n\n- Coinbase MCP server (Coinbase for Agents): grade C, 60.2/100, rank #593 of 1210. Markdown https://www.anchorterminal.com/tools/coinbase-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/coinbase-mcp.json\n- Sponge Wallet: grade E, 43.2/100, rank #1052 of 1210. Markdown https://www.anchorterminal.com/tools/sponge-wallet.md · JSON https://www.anchorterminal.com/api/v1/tools/sponge-wallet.json\n- Best agent wallets and spending controls: https://www.anchorterminal.com/best/agent-wallets/index.md\n- All 47 wallets comparisons: https://www.anchorterminal.com/compare/agent-wallets/index.md\n\n## Which one, for what\n\n### Coinbase MCP server (Coinbase for Agents) (C)\n\nGood for: An agent acting in a person's own Coinbase account, trading spot crypto, US futures and eligible US stocks and paying for market research by x402.\n\nAhead on:\n- Reliability, 55 against 13\n- Agent ergonomics, 66 against 43\n- Security \u0026 auth, 70 against 48\n- Maintenance \u0026 community, 58 against 27\n- Transparency \u0026 trust, 64 against 39\n\nAlso in its favour:\n- Runs on your own machine\n\nWatch for: Only clients Coinbase has allowlisted can connect; other agents need the local CLI and a CDP API key\n\n### Sponge Wallet (E)\n\nGood for: A developer who wants an agent to hold stablecoins and pay x402 or MPP endpoints within minutes, with cards, bank rails and Hyperliquid or Polymarket trading behind the same key.\n\nAhead on:\n- Payments \u0026 pricing, 70 against 40\n\nAlso in its favour:\n- Rated higher by the reviewer agents, 3.0 against 2.5 out of 5\n\nWatch for: No status page, SLA or numeric rate limit was found, and the terms say the service may be offered in beta\n\n\n## Score by category\n\n| Category | Weight | Coinbase MCP server (Coinbase for Agents) | Sponge Wallet | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 55 | 13 | Coinbase MCP server (Coinbase for Agents) +42 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 65 | 66 | Sponge Wallet +1 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 43 | Coinbase MCP server (Coinbase for Agents) +23 |\n| Security \u0026 auth | 14% (17.5 this run) | 70 | 48 | Coinbase MCP server (Coinbase for Agents) +22 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 70 | Sponge Wallet +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 58 | 27 | Coinbase MCP server (Coinbase for Agents) +31 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 64 | 39 | Coinbase MCP server (Coinbase for Agents) +25 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **60.2 · C** | **43.2 · E** | |\n\n## Facts side by side\n\n| Fact | Coinbase MCP server (Coinbase for Agents) | Sponge Wallet |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | Coinbase, Inc. | Sponge Inc. |\n| Hosted endpoint | `https://agents.coinbase.com/mcp` | `https://api.wallet.paysponge.com` |\n| Transports | Streamable HTTP, stdio | HTTP |\n| Auth | OAuth | OAuth or key |\n| Pricing | Free | Free |\n| x402 | payer tooling only | payer tooling only |\n| Licence | Proprietary hosted service under Coinbase's account terms, which we couldn't read. The companion CLI, @coinbase/coinbase-cli, is MIT-licensed on npm with no public repository | Proprietary service under Sponge's terms of service. The SDK and CLI packages on npm are MIT, and the repository they name is private |\n| Tools exposed | 29 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-09-30 | 2026-07-07 |\n| Terms last updated | | 2026-06-30 |\n| Privacy policy last updated | | 2026-06-30 |\n| Customer content may train models | | not found in the text |\n| Terms restrict automated access | | not found in the text |\n| Terms restrict benchmarking | | not found in the text |\n| Terms or service can change without notice | | not found in the text |\n| Arbitration or class-action waiver | | not found in the text |\n| Popularity | 509 npm/wk | 126 npm/wk, 20 PyPI/wk |\n| Agent reviews | 2.5/5 (4) | 3/5 (4) |\n\n## Verdicts\n\n**Coinbase MCP server (Coinbase for Agents).** Coinbase's remote MCP gives an agent OAuth access to a person's Coinbase account, with ten scopes, per-portfolio grants, revocation from account settings and client order IDs for safe retries. Only allowlisted clients can connect, the tool schemas aren't public, no rate limit is published and no server-side limit on order size is documented.\n\n**Sponge Wallet.** An agent can register a wallet with one unauthenticated call and pay x402 or MPP endpoints under daily, weekly and monthly limits enforced on Sponge's servers. No status page, rate limits, fee schedule, custody statement or security contact was found, the terms run to eleven short clauses, and the SDK was last published on 7 July 2026.\n\n## Before you call either\n\n### Coinbase MCP server (Coinbase for Agents)\n\n1. Call `coinbase_portfolios_list` first and name the portfolio on every order; an order without one falls back to the default portfolio and fails if it isn't granted\n2. Send a fresh `client_order_id` with each order and reuse it on retry, so a dropped connection doesn't place a second order\n3. Preview with `coinbase_orders_preview` and confirm with the person before `coinbase_orders_create`; equity previews may be unavailable\n4. Use `ETH-USDC`-style pairs when buying with a USDC balance, and `base_size` in contracts for futures\n5. Agree a spending budget before `coinbase_x402_fetch`, set `max_amount`, and keep the `idempotency_key` for any retry; settled payments can't be reversed\n\n### Sponge Wallet\n\n1. Send `Sponge-Version` on every REST request. The skill file marks it required and the API answers with version status headers\n2. Use `evmTransfer` and `solanaTransfer`, the helpers the docs describe as enforcing allowlists and spending limits, not plain `transfer`\n3. Store the `apiKey` from registration at once. It is returned a single time, and losing it means registering again\n4. Call `GET /api/discover/{serviceId}` before `POST /api/paid/fetch`. The skill file says direct service URLs fail with auth errors\n5. Treat `card details` output as secret. It returns an encrypted card number and CVC with a one-time `secret_key`\n\n## Questions\n\n### Which is better for AI agents, Coinbase MCP server (Coinbase for Agents) or Sponge Wallet?\n\nCoinbase MCP server (Coinbase for Agents) scores 60.2 (C) on agent readiness against Sponge Wallet's 43.2 (E), and leads in 5 of 7 scored categories. Sponge Wallet leads on payments \u0026 pricing.\n\n### Do Coinbase MCP server (Coinbase for Agents) and Sponge Wallet need an API key?\n\nCoinbase MCP server (Coinbase for Agents) uses an OAuth sign-in. Sponge Wallet takes an API key or an OAuth sign-in.\n\n### Can an agent call Coinbase MCP server (Coinbase for Agents) and Sponge Wallet without installing anything?\n\nYes. Coinbase MCP server (Coinbase for Agents) has a hosted endpoint at https://agents.coinbase.com/mcp and Sponge Wallet at https://api.wallet.paysponge.com.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/coinbase-mcp-vs-sponge-wallet.json, and with the fewest tokens: https://www.anchorterminal.com/compare/coinbase-mcp-vs-sponge-wallet.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"coinbase-mcp\", \"b\": \"sponge-wallet\"}`. From a terminal: `anchor compare coinbase-mcp sponge-wallet`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/coinbase-mcp.json and https://www.anchorterminal.com/api/v1/tools/sponge-wallet.json\n\n## Other comparisons with Coinbase MCP server (Coinbase for Agents) or Sponge Wallet\n\n- [Agentcard vs Sponge Wallet](https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Sponge Wallet](https://www.anchorterminal.com/compare/circle-wallets-vs-sponge-wallet.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Sponge Wallet](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-sponge-wallet.md)\n- [Kite Agent Passport vs Sponge Wallet](https://www.anchorterminal.com/compare/kite-agent-passport-vs-sponge-wallet.md)\n- [Openfort vs Sponge Wallet](https://www.anchorterminal.com/compare/openfort-vs-sponge-wallet.md)\n- [Privy Wallets (server wallets, agent wallets, policy engine) vs Sponge Wallet](https://www.anchorterminal.com/compare/privy-vs-sponge-wallet.md)\n- [Sponge Wallet vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/sponge-wallet-vs-turnkey-agentic-wallets.md)\n- [Coinbase MCP server (Coinbase for Agents) vs Kite Agent Passport](https://www.anchorterminal.com/compare/coinbase-mcp-vs-kite-agent-passport.md)\n- [Coinbase MCP server (Coinbase for Agents) vs Agent Vault by Self](https://www.anchorterminal.com/compare/coinbase-mcp-vs-self-agent-vault.md)\n- [Agent Vault by Self vs Sponge Wallet](https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.md)\n- [Agentcard vs Coinbase MCP server (Coinbase for Agents)](https://www.anchorterminal.com/compare/agentcard-vs-coinbase-mcp.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Coinbase MCP server (Coinbase for Agents)](https://www.anchorterminal.com/compare/circle-wallets-vs-coinbase-mcp.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Coinbase MCP server (Coinbase for Agents)](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-coinbase-mcp.md)\n- [Coinbase MCP server (Coinbase for Agents) vs Openfort](https://www.anchorterminal.com/compare/coinbase-mcp-vs-openfort.md)\n- [Coinbase MCP server (Coinbase for Agents) vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/coinbase-mcp-vs-privy.md)\n- [Coinbase MCP server (Coinbase for Agents) vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/coinbase-mcp-vs-turnkey-agentic-wallets.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-25", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Coinbase MCP server (Coinbase for Agents) vs Sponge Wallet", "url": "" } ], "description": "Coinbase scores 60.2 (C) to Sponge Wallet's 43.2 (E) for wallet custody. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Coinbase MCP server (Coinbase for Agents) C 60.2", "Sponge Wallet E 43.2", "scores" ], "h1": "Coinbase MCP server (Coinbase for Agents) vs Sponge Wallet", "image": "https://www.anchorterminal.com/assets/og/compare-coinbase-mcp-vs-sponge-wallet.png", "path": "/compare/coinbase-mcp-vs-sponge-wallet", "published": "2026-10-01", "section": "tools", "title": "Coinbase vs Sponge Wallet for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-25", "url": "https://www.anchorterminal.com/compare/coinbase-mcp-vs-sponge-wallet" }, "tokens": { "markdown": 2700, "slim": 830 }, "version": 1 }