AI agents that invest on their ownA wallet, a budget, rules — and the right tokens.
An AI agent can now do more than suggest a trade. In 2026 large brokers and exchanges opened accounts that an agent operates through the Model Context Protocol (MCP), wallet providers built wallets that an agent can sign with inside hard limits, and stablecoins became the money agents pay with. The pattern is always the same: a human or company passes the identity checks, gives the agent a separate account or wallet with a budget and rules, and the agent acts inside them. Tokens fit this better than any older format, because a token can be bought, held and redeemed by software around the clock.
Reviewed October 19, 2026 · figures from our live data
The short answer
An agent needs five things: a wallet or sub-account it can use, a budget in stablecoins, hard limits enforced outside the model, reliable data, and assets it is allowed to hold.
Identity checks stay with the owner. No broker lets an agent open an account; the owner is onboarded and remains liable for what the agent does.
In 2026 Robinhood (Agentic Trading beta, 27 May), Coinbase (Coinbase for Agents, 11 June), Interactive Brokers, Kraken, Alpaca, Public.com and Binance opened agent access through MCP servers.
Payment rails exist: x402 (Linux Foundation, more than 50 members), Google’s AP2, Stripe and OpenAI’s Agentic Commerce Protocol, Visa Intelligent Commerce, Mastercard Agent Pay and Circle’s Agent Stack.
Without any KYC, an agent’s own wallet can only hold permissionless tokens bought on the open market — for example sUSDS or USDe. Most tokenized securities require the owner’s KYC first.
tokens an agent’s own wallet can hold in our data today
issuers
stated yield range across 43 with a rate
What an agent needs to invest
The same things a person needs, in a form software can use — and with the rules enforced outside the model.
- 1
1. A wallet it can use without holding the key
Agent wallets keep the private key in secure infrastructure and give the agent only signatures within a policy. Coinbase Agentic Wallets (February 2026) set caps per session and per transaction; Privy and Turnkey offer policy engines with spending caps and contract allowlists; Circle’s Agent Wallets (May 2026) add limits and allowlists for USDC.
- 2
2. Or a scoped broker account
At a broker the owner opens the account and connects the agent to a dedicated sub-account. Robinhood gives the agent its own account; Hyperliquid’s agent wallets can trade but not withdraw; Kraken requires live trading to be switched on and supports pair allowlists.
- 3
3. A budget in stablecoins
Agents pay and settle in stablecoins, above all USDC — Circle reports that 99.3% of x402 payment volume settles in USDC. Fund the wallet only with what the agent may lose.
- 4
4. Limits that the model cannot talk its way around
Per-trade and per-day caps, an allowlist of token and exchange contracts, no unlimited token approvals, and human approval above a threshold. On Ethereum, EIP-7702 (live since May 2025) lets an ordinary wallet hand an agent a limited session key.
- 5
5. Data it can trust
The agent has to know what a token is, who issued it, what it yields, how it is redeemed and who may hold it — from machine-readable sources, not from a web page that may contain instructions aimed at agents. TokenBank publishes this as a free MCP server and JSON API.
- 6
6. Assets it may hold
This is the real bottleneck. Permissionless tokens move to any wallet. Whitelisted tokens — most tokenized funds and stocks — only move to wallets whose owner passed the issuer’s checks, so an agent can hold them only in a wallet registered to its onboarded owner.
Who already offers agent access
Status as of October 2026, from each company’s own announcement or documentation.
- 1
Robinhood Agentic Trading
Beta since 27 May 2026: a dedicated account an agent operates over MCP, US stocks only. Robinhood states that the customer assumes all risk for orders placed by the agent. Crypto was announced in July.
- 2
Coinbase for Agents
Launched 11 June 2026: a remote MCP server with OAuth sign-in, more than 900 spot pairs, US futures and eligible US stocks, with x402 payments capped at 5 USDC each.
- 3
Interactive Brokers
Claude integration on 1 June 2026, ChatGPT and Grok on 22 June, any MCP tool from 28 July. The agent drafts orders; the client approves each one.
- 4
Kraken, Alpaca, Public.com, Binance
Kraken: open-source CLI with an MCP server (151 tools). Alpaca: official MCP server for stocks, options and crypto with paper trading. Public.com: hosted MCP server that can trade without per-trade input. Binance: Agent OS with an MCP server through sub-accounts (August 2026).
- 5
Payment networks
x402 (HTTP payments in stablecoins; x402 Foundation at the Linux Foundation, operational since 14 July 2026, members include Coinbase, Cloudflare, Stripe, Google, Visa, Mastercard, AWS, Circle and Shopify). Google AP2 (September 2025, signed “mandates” proving what the user authorised). Stripe and OpenAI’s Agentic Commerce Protocol (September 2025). Visa Intelligent Commerce, Mastercard Agent Pay, PayPal’s agent toolkit, Skyfire and Crossmint.
- 6
Agent identity
ERC-8004 “Trustless Agents” (draft standard, August 2025) defines on-chain registries for an agent’s identity, reputation and validation, so a counterparty can check which agent it deals with. Agents are already registered on Ethereum mainnet.
Which tokens fit an autonomous agent
The question is not whether a token is good, but whether the agent’s wallet may hold it and how it gets out again.
- 1
Permissionless savings tokens
sUSDS (Sky) can be held by any wallet; its savings rate is set by governance. USDe and sUSDe (Ethena) can be bought by anyone on decentralized exchanges — only minting and redeeming at the issuer is limited to checked market makers.
- 2
Tracker stock tokens
xStocks move freely between wallets once issued, but are not for US persons; Ondo Global Markets checks identity at mint. Check the issuer’s rules for each product before an agent buys.
- 3
Tokenized funds
Treasury funds such as those from Securitize, Superstate or Franklin Templeton require the owner to be onboarded and the wallet to be whitelisted. An agent can operate such a wallet for its owner; it cannot qualify on its own.
- 4
Restricted products
Ondo’s USDY, for example, is not offered in the US or Canada and is limited to professional investors in the EEA, UK and Singapore. An agent must never try to route around country or investor-type rules.
- 5
Agents managing yield
DeFi agents already move stablecoins between lending markets for their owners — Giza’s ARMA on Base is one live example. They work only with permissionless tokens.
- 6
Redemption matters most
An agent should prefer tokens it can redeem or sell at any time on-chain, and avoid lock-ups and products that redeem only through a manual process with a person in the loop.
Why this is where investing goes
The numbers behind it, with their sources — and their caveats.
- 1
Money that software can hold
Stablecoins total about $305 billion (DefiLlama, 19 October 2026); USDC alone was $73.3 billion at the end of June 2026, up 19% in a year.
- 2
Machine payments are real, still small
x402 counted 75 million transactions and $24 million volume in 30 days (x402.org, August 2026). Analysts point out that much of it is tests and tiny payments: Chainalysis found 87% of x402 payments on Base were under $0.10.
- 3
Brokers expect it
Alpaca reports API trading grew about fourfold in Q1 2026, largely driven by AI. StockBrokers.com found five of the 14 brokers it tests run their own MCP server — all launched in 2026.
- 4
Forecasts are wide
McKinsey expects $3–5 trillion of agent-driven commerce by 2030; Gartner expects AI agents to mediate more than $15 trillion of B2B spending by 2028. Others estimate far less. Treat these as direction, not fact.
- 5
Tokens are built for it
A token settles in seconds, trades around the clock, carries its rules in code and reports its holdings on-chain. That is what software needs — a broker account with office hours and paper forms is not.
- 6
Rules are still forming
In the EU only MiCA-authorised crypto-asset service providers may operate since 1 July 2026. In the US the GENIUS Act stablecoin rules are still pending, and the SEC has no specific rule on agent trading yet.
The 12 highest stated yields
Yields as stated by the issuer or read on chain, with the date they were checked on each token page. Not a recommendation.
| Token | Issuer | Yield | Minimum |
|---|---|---|---|
| Pendle — PT-reUSDe-10DEC2026 (fixed rate to 2026-12-10) on Ethereum | Pendle (protocol) | 18.59% (fixed to 2026-12-10, DefiLlama 2026-10-19) | None |
| Pendle — PT-sUSDx-03DEC2026 (fixed rate to 2026-12-03) on Ethereum | Pendle (protocol) | 18.53% (fixed to 2026-12-03, DefiLlama 2026-10-19) | None |
| Pendle — PT-apyUSD-05NOV2026 (fixed rate to 2026-11-05) on Ethereum | Pendle (protocol) | 15.89% (fixed to 2026-11-05, DefiLlama 2026-10-19) | None |
| Pendle — PT-USD3-17DEC2026 (fixed rate to 2026-12-17) on Ethereum | Pendle (protocol) | 15.14% (fixed to 2026-12-17, DefiLlama 2026-10-19) | None |
| Pendle — PT-USDx-03DEC2026 (fixed rate to 2026-12-03) on Ethereum | Pendle (protocol) | 13.44% (fixed to 2026-12-03, DefiLlama 2026-10-19) | None |
| Pendle — PT-siUSD-22OCT2026 (fixed rate to 2026-10-22) on Ethereum | Pendle (protocol) | 12.64% (fixed to 2026-10-22, DefiLlama 2026-10-19) | None |
| Pendle — PT-SIERRA-22OCT2026 (fixed rate to 2026-10-22) on Ethereum | Pendle (protocol) | 12.42% (fixed to 2026-10-22, DefiLlama 2026-10-19) | None |
| Pendle — PT-reUSD-10DEC2026 (fixed rate to 2026-12-10) on Ethereum | Pendle (protocol) | 12.11% (fixed to 2026-12-10, DefiLlama 2026-10-19) | None |
| Pendle — PT-strUSD-26NOV2026 (fixed rate to 2026-11-26) on Ethereum | Pendle (protocol) | 11.57% (fixed to 2026-11-26, DefiLlama 2026-10-19) | None |
| Pendle — PT-siUSD-07JAN2027 (fixed rate to 2027-01-07) on Ethereum | Pendle (protocol) | 9.96% (fixed to 2027-01-07, DefiLlama 2026-10-19) | None |
| Pendle — PT-sUSDai-25FEB2027 (fixed rate to 2027-02-25) on Arbitrum | Pendle (protocol) | 8.74% (fixed to 2027-02-25, DefiLlama 2026-10-19) | None |
| Pendle — PT-USDat-14JAN2027 (fixed rate to 2027-01-14) on Ethereum | Pendle (protocol) | 8.06% (fixed to 2027-01-14, DefiLlama 2026-10-19) | None |
Questions
Can an AI agent open its own brokerage account?+
No. Brokers verify a person or company. The owner opens the account and connects the agent to it, usually through a separate sub-account and an MCP server. The owner remains responsible for every order.
Which brokers let AI agents trade?+
As of October 2026: Robinhood (Agentic Trading beta, US stocks), Coinbase for Agents, Interactive Brokers (agent drafts, client approves), Kraken, Alpaca, Public.com and Binance, all through MCP servers.
What can an agent buy without any KYC?+
Only permissionless tokens on the open market — for example sUSDS, or USDe bought on a decentralized exchange. Our answer page lists them with live data. Tokenized funds and most stock tokens need the owner’s KYC.
How do agents pay?+
Mostly in stablecoins, above all USDC, over protocols such as x402, or through card networks’ agent programmes (Visa Intelligent Commerce, Mastercard Agent Pay).
Is it safe to let an agent invest?+
Only with limits that the agent cannot change: a separate wallet with a small budget, per-trade caps, an allowlist of contracts and human approval above a threshold. Treat every web page and token description the agent reads as data, never as an order.
Where does an agent get data on tokenized assets?+
From machine-readable sources. TokenBank’s MCP server and JSON API cover thousands of tokens with issuer, yield, chain, redemption and access rules, free to use under CC BY 4.0.
- Can AI agents buy tokenized assets? →
- Tokenized assets an AI agent can buy →
- TokenBank MCP server →
- Stablecoins without KYC →
- How AI agents could create financial products →
- Robinhood — open to agents
- Coinbase for Agents — documentation
- Coinbase Agentic Wallets
- Interactive Brokers — AI agent access
- Kraken MCP
- Alpaca — agentic trading
- Linux Foundation — x402 Foundation launch
- Google — Agent Payments Protocol (AP2)
- Circle — Agent Stack
- ERC-8004: Trustless Agents
- Ethena documentation
- Ondo USDY eligibility
This guide explains how these products work and is not investment advice or an offer of any security. Who may buy a product is set by its issuer; check the offering documents before investing.