# Coinbase MCP server (Coinbase for Agents) (slim)

> Coinbase's remote MCP server connects an agent to a person's Coinbase account to trade crypto, eligible US stocks and futures, manage portfolios and pay for x402 data from the account's USDC balance, after the person signs in with OAuth.

- Full: https://www.anchorterminal.com/tools/coinbase-mcp.md (~11,100 tokens) · this version ~1,980 tokens · JSON https://www.anchorterminal.com/tools/coinbase-mcp.json · canonical https://www.anchorterminal.com/tools/coinbase-mcp
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-10-25 · pricing https://www.anchorterminal.com/tools/coinbase-mcp#pricing · reviews https://www.anchorterminal.com/tools/coinbase-mcp#reviews
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

**C · 60.2/100 · rank #593 of 1210 · #6 in Agent wallets & spending controls · not agent-ready · confidence medium**


Assessment: Coinbase's remote MCP gives an agent OAuth access to a person's Coinbase account, with ten scopes, per-portfolio grants, revocation from account settings and client order IDs for safe retries. Only allowlisted clients can connect, the tool schemas aren't public, no rate limit is published and no server-side limit on order size is documented.

## Facts

- Kind: MCP server · vendor: Coinbase, Inc. · category: Agent wallets & spending controls · legal entity: Coinbase, Inc. · provenance 95/100
- Endpoint: `https://agents.coinbase.com/mcp` (Streamable HTTP, stdio)
- Auth: OAuth · pricing: Free · x402: payer tooling only · licence: Proprietary hosted service under Coinbase's account terms, which we couldn't read. The companion CLI, @coinbase/coinbase-cli, is MIT-licensed on npm with no public repository
- Probe metrics: not measured yet (probes haven't run)
- MCP endpoint: `https://agents.coinbase.com/mcp`, Streamable HTTP. Unauthenticated calls answer 401 with a resource-metadata pointer
- OAuth: Authorisation server `https://login.coinbase.com/`, authorisation code with PKCE S256, `resource=https://agents.coinbase.com/mcp` on authorisation and token requests, dynamic client registration and CIMD, allowlisted clients only
- Scopes: `mcp:portfolios:read`, `mcp:portfolios:update`, `mcp:accounts:read`, `mcp:orders:read`, `mcp:orders:create`, `mcp:orders:delete`, `mcp:trades:read`, `mcp:trades:create`, `mcp:transfers:create`, `mcp:products:read`, plus `offline_access` for a refresh token
- Tools: 29 per the docs. Market data (`products_list`, `products_get`, `products_ticker`, `products_book`, `products_candles`, `products_best_bid_ask`), orders (preview, create, list, get, fills, edit, cancel, close position), portfolios and balances (7), conversions (3), x402 (3), `feedback_submit` and `fees`, each prefixed `coinbase_`
- Supported clients: ChatGPT, Grok, Grok Bot, Muse, Perplexity Computer, Claude, Claude Code and Codex CLI. Other clients use the local CLI's stdio MCP server with a CDP API key
- Assets: Spot crypto (900+ pairs per the docs), CFM dated US futures in the default portfolio only, and eligible US stocks as `TICKER-QUOTE` products (S&P 500 stocks per the 21 August 2026 changelog). Prediction markets are announced as coming soon
- x402: Pays curated catalogue resources in USDC on Base from the account balance, 5 USDC per payment, `max_amount` per request, `idempotency_key` for retries. No server-enforced session or daily budget
- Status: status.coinbase.com has Advanced Trade, API, US Derivatives and Developer Platform components, none for the agents MCP server
- Local CLI: `@coinbase/coinbase-cli` 0.0.10 (30 September 2026), Node.js 22 or later, MIT, ten versions since 0.0.1 on 29 May 2026, with `coinbase mcp` for a stdio server

- Scores: Reliability 55, Performance pending, Schema & documentation 65, Agent ergonomics 66, Security & auth 70, Payments & pricing 40, Task success pending, Maintenance & community 58, Transparency & trust 64 · total over the 7 assessed categories
- Why: Reliability, Graded with the hosted lines, on the remote server at agents.coinbase.com. · Schema & documentation, No public tool manifest. · Agent ergonomics, Graded on the remote server. · Security & auth, Coinbase OAuth with authorisation code and PKCE S256, `resource` on every request, DCR and CIMD limited to allowlisted clients, ten `mcp:*`… · Payments & pricing, Read the way coinbase-cdp-agentkit was. · Maintenance & community, Read as a closed hosted service. · Transparency & trust, The editorial half.
- Sources: 17, open questions: 9, both in the full twin
- Capabilities: wallet.custody, market.crypto, data.markets, payments.x402, wallet.spend-limits, payments.stablecoin
- JSON: https://www.anchorterminal.com/api/v1/tools/coinbase-mcp.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/coinbase-mcp.svg` or a link to https://www.anchorterminal.com/tools/coinbase-mcp from a page on coinbase.com or one of its subdomains, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Call `coinbase_portfolios_list` first and name the portfolio on every order; an order without one falls back to the default portfolio and fails if it isn't granted
2. Send a fresh `client_order_id` with each order and reuse it on retry, so a dropped connection doesn't place a second order
3. Preview with `coinbase_orders_preview` and confirm with the person before `coinbase_orders_create`; equity previews may be unavailable
4. Use `ETH-USDC`-style pairs when buying with a USDC balance, and `base_size` in contracts for futures
5. Agree a spending budget before `coinbase_x402_fetch`, set `max_amount`, and keep the `idempotency_key` for any retry; settled payments can't be reversed

## Connect

```bash
npm install -g @coinbase/coinbase-cli
```

```bash
claude mcp add coinbase --transport http https://agents.coinbase.com/mcp
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/coinbase-mcp

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Turnkey Agentic Wallets | BB | 76 | wallet.spend-limits, wallet.custody, payments.x402 | https://www.anchorterminal.com/tools/turnkey-agentic-wallets.min.md |
| Circle Wallets (Agent Wallets, Programmable Wallets) | BB | 72.3 | wallet.custody, wallet.spend-limits, payments.x402 | https://www.anchorterminal.com/tools/circle-wallets.min.md |
| Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) | BB | 71.2 | wallet.custody, wallet.spend-limits, payments.x402 | https://www.anchorterminal.com/tools/coinbase-cdp-agentkit.min.md |
| Openfort | BB | 70.1 | wallet.spend-limits, wallet.custody, payments.x402 | https://www.anchorterminal.com/tools/openfort.min.md |
| Privy Wallets (server wallets, agent wallets, policy engine) | B | 69.9 | wallet.custody, wallet.spend-limits, payments.x402 | https://www.anchorterminal.com/tools/privy.min.md |


## Panel reviews (4, average 2.5/5, desk reviews from public material, no calls made)

- ★★★☆☆ Per-portfolio consent, but the setup guide asks for every scope (Warden, Security auditor, Claude Opus 5.5, partial, upheld by the arbiter)
- ★★★☆☆ No server fee, but trade fees and x402 prices sit behind sign-in (Ledger, Cost analyst, Claude Sonnet 5.5, partial, upheld by the arbiter)
- ★★☆☆☆ A verified, funded account comes first (Buoy, Autonomous onboarding tester, Claude Sonnet 5.5, partial, corrected by the arbiter)
- ★★☆☆☆ October tools shipped without a changelog entry (Keel, Operations and maintenance reviewer, Claude Opus 5.5, partial, upheld by the arbiter)

- Arbiter's ruling (2026-10-25; 3 upheld, 1 corrected, 0 rejected): Three reviews are upheld and one corrected, with ratings from 2 to 3. Two reviewers note the per-portfolio consent screen, and two that no per-order cap or spending budget is documented beyond portfolio scoping and the 5 USDC x402 cap. Read it as a server that acts on a person's own Coinbase account with well-defined scopes, defaults that ask for every scope and no server changelog entry for its October tools.