Coinbase for Agents alternatives
Coinbase for Agents is custodial, and its own setup guide suggests funding a separate portfolio to limit what an agent can reach rather than documenting a cap you can set. People look for alternatives over one of those two things: who holds the money, or what stops a bad order.
What Coinbase for Agents does well
Coinbase is the largest US exchange and it blocks withdrawals at the agent layer, which is the single most important control and one plenty of products here do not have. If custody is not your concern, it is a reasonable place to run an agent.
The limit people run into
Custodial, and no per-order cap is documented. Its guidance is to isolate funds in a separate portfolio, which limits the damage rather than preventing it.
Five alternatives
1Gate MCP
Still custodial, and the closest swap if what you wanted was an exchange with better control of what the agent may do. Gate authorises over OAuth with a separate read-only scope, so you can grant market data and withhold trading entirely, which Coinbase does not offer.
GitHub repo2tastytrade MCP
The answer if your concern was the second one rather than the first. Its order tools refuse to submit without a token from their own dry run, single use and expiring in 60 seconds, which is the only enforced confirmation we found anywhere. Still custodial, US only, and it runs locally so ChatGPT cannot reach it.
GitHub repo3Webull
One of only two products in our comparisons that documents a hard dollar limit an agent cannot exceed. Custodial, and the hosted and self-hosted products are different things worth telling apart.
Webull agentic trading4Open-source Hyperliquid servers
Non-custodial, and the trade is severe: all seven expect a raw private key in a file. A leaked brokerage key can be rotated, and a leaked private key means the wallet is emptied with nothing to revoke. Listed because it is the honest end of the custody spectrum, not because we recommend it.
erscoder/hyperliquid-mcp5FensoryOurs
Ours, and it answers both concerns at once, which is why it is on this page and why you should weigh that. Non-custodial, with a kill-switch, allow-list and per-order cap enforced on the account. Not available to US persons, and our cap bounds one order rather than a losing run.
The Fensory MCP server
Side by side
| Option | Who holds the funds | What stops a bad order | What it trades | Where you can open it |
|---|---|---|---|---|
| Gate MCP | Gate, in your exchange account. The DEX surface is a separate wallet | The scopes are the control, and they are the only ones here shaped like ours. Five of them: market for public data, profile for read-only account access, trade before any order can be placed, account for the unified and sub-accounts, and wallet, which covers transfers, deposits and withdrawals. No cap on the size of a single order | Crypto spot, futures, options, delivery, margin, earn, plus DEX swaps across 20+ chains | Not documented on the repository |
| tastytrade MCP | tastytrade, in your brokerage account | The most enforced confirmation in this comparison. The five order-submitting tools refuse to act without a token from their own dry-run; the token is single-use, expires in 60 seconds, and is bound to the arguments and the endpoint, so you cannot dry-run one share and submit a thousand. Under it sit per-leg quantity checks against the account’s own ceilings, a notional cap on buying-power impact, and a refusal to send orders into frozen or closing-only accounts | US equities and options | United States. A US brokerage account is required |
| Webull | Webull Financial | Order size and value caps, a symbol allow-list, an optional read-only mode, order preview and disconnect | Equities, options, futures, event contracts and crypto | US at launch. The self-hosted server documents nine regions including the UK, Japan and Singapore |
| Open-source Hyperliquid servers | You, in your own Hyperliquid account | None enforced by any of them. Every one offers advice in the README instead | Hyperliquid perpetual futures and spot | Self-hosted, so whatever Hyperliquid allows |
| Fensory | You. Tokens settle to a wallet you control, perp margin sits at the venue | Kill-switch, market allow-list and a per-order cap, all enforced on the account. An order above the cap is rejected rather than trimmed | Tokenized US equities and treasuries, gold, crypto spot, perpetual futures | Not available to US persons |
Questions people ask
- Is Coinbase for Agents non-custodial?
- No. Coinbase holds the funds, as it does for any exchange account. It does block withdrawals at the agent layer, so the agent cannot move money off the platform, which is a different and narrower protection than you holding the assets yourself.
- What is the difference between a cap and blocking withdrawals?
- Blocking withdrawals stops funds leaving. A cap stops a single order being larger than you intended. They protect against different failures, and a product can have one without the other. Coinbase documents the first and not the second.
- Which of these are non-custodial?
- The open-source Hyperliquid servers and Fensory. The first expects a private key in a file, which is its own risk. The others are custodial and the table says so for each.
- Every fact in the table is pulled from our MCP server comparison by reference rather than retyped, so the cells cannot disagree between pages. Only the paragraph explaining each swap is written here.
- The five are ordered by which of the two concerns they answer, control first and custody second, rather than by which we think is best.
- Fensory publishes this page and is on it, fifth. It answers both concerns, which is exactly the claim a reader should be most sceptical of on a page we wrote, so the entry states our limits alongside.