# How to let Claude manage a crypto wallet safely

> Claude cannot hold or trade crypto by itself. It can use a wallet you connect to it over MCP, as a custom connector in Claude or as a server in Claude Code. It asks before it uses a tool, and the safe setup keeps it asking for anything that moves money.

Page: https://ravenwallet.pro/blog/claude-crypto-wallet
Updated: 2026-11-03

## The short answer

Claude on its own has no wallet, no keys and no way to sign a transaction. What it can do is use outside tools through MCP, the Model Context Protocol, which its own site calls "an open-source standard for connecting AI applications to external systems". A wallet that offers an MCP server becomes one of those tools. Connect it, and you can ask Claude what you hold, ask it to swap or send, and it calls the wallet to do it.

Safety comes from three places: the wallet you pick, the approvals you leave on in Claude, and how much money that wallet can reach.

## Three ways to connect Claude

| Where | How you add a wallet | Where the server runs |
| --- | --- | --- |
| Claude on the web, Claude Desktop | Customize, then Connectors, then Add custom connector, with the wallet's MCP address | Anthropic's cloud reaches the wallet's server |
| Claude Desktop, local | An entry in `claude_desktop_config.json` | On your computer |
| Claude Code | `claude mcp add --transport http <name> <url>` | Wherever the address points |

_From Anthropic's help centre and Claude Code docs, read 3 November 2026._

**In Claude.** [Anthropic's help page on custom connectors](https://support.claude.com/en/articles/11175166-getting-started-with-custom-connectors-using-remote-mcp) gives the steps for Pro and Max: open Customize, then Connectors, press Add, pick Add custom connector, give it a name and paste the wallet's MCP address. Most wallets then send you to their own page to sign in and say yes. Free plans get one custom connector. On Team and Enterprise plans an owner adds it first, then each person connects their own account.

**In Claude Code.** One command adds a remote server: `claude mcp add --transport http`, a name, then the address. By default it is saved for the current project only. `claude mcp remove` with the name takes it out again.

Copy the MCP address from the wallet's own site or docs, never from a forum post, a reply or a search ad. A fake address puts a stranger's server between you and Claude, and Anthropic says plainly that custom connectors reach "arbitrary services that have not been verified by Anthropic".

## What Claude asks before it acts

In Claude, a connector's tools ask for your approval before they run. Anthropic's advice is to press **Allow always** only for a tool you trust to run unsupervised. For a wallet, that means reading balances, never sending or swapping. Read the address and the amount on every send before you say yes.

Two settings matter more than people expect:

- **Turn off the tools you do not want.** The search and tools menu in a chat lets you switch off single tools, or the whole connector for that chat.
- **Research mode does not ask.** Anthropic says Claude can use connector tools during Research without further approval, and advises turning off tools that can write to outside apps. A wallet's send and swap tools count. Turn them off before you run Research with a wallet connected.

In Claude Code, the default mode, called Manual, asks the first time each tool is used. You can add an ask rule for a wallet's moving tools, written as `mcp__<server>__<tool>`, so those prompt every time. Do not run a wallet in `bypassPermissions` mode: the docs say it skips permission prompts and should only be used in containers or virtual machines "where Claude Code can't cause damage". Your money is not in a container.

These prompts are Claude's. The wallet should have its own limits as well, because a yes in Claude is only as safe as what the wallet lets through.

## Wallets that work with Claude

Here is what each one's own page says, read on 3 November 2026. We have not tested these with money.

| Wallet | How it connects to Claude | Where the keys are | What limits the AI |
| --- | --- | --- | --- |
| MoonPay PayBox | A custom connector in the Claude app | Split by MPC and secure enclaves, so no single party, the AI included, has the full key | Always Ask, with a passkey for every move, or Autonomous inside limits you choose |
| Phantom MCP | Claude Desktop config or `claude mcp add` in Claude Code | A new wallet made just for the agent | It starts empty and can only use what you send it |
| Open source servers with a key in a file | Usually Claude Desktop or Claude Code, run on your machine | In a file or an environment variable | Usually none. Anything that reads the file can take the wallet |

PayBox works with Solana and several EVM chains, and MoonPay's launch post points to [paybox.sh](https://www.paybox.sh). Phantom's steps are on its [MCP server page](https://docs.phantom.com/phantom-mcp-server), and it says swaps through the agent's `buy` and `wallet_rebalance` tools are fee free. For a longer side by side, see [Solana MCP wallets compared](/compare/solana-mcp-wallets).

## Can Claude trade crypto for you?

Only as far as the wallet lets it. Phantom's agent wallet lists swaps and Hyperliquid perps, and PayBox can trade tokens on Solana. Claude does not see the future, and a bad trade signed on its own is still yours. Keep perps off any wallet Claude can use without asking. For what agents can reach and how they get tricked, see [AI trading agents on Solana](/blog/ai-trading-agents-solana).

## Keep it safe

- **Never paste your 12 words or a private key into Claude**, or any chat or config file. A wallet built for AI never needs them typed in.
- **Give Claude its own wallet.** Fund it with what you can afford to lose while you learn how it behaves. A [burner wallet](/blog/solana-burner-wallet) is the right shape.
- **Keep sends on ask.** Allow always for reading, never for moving money.
- **Watch for tricks in what it reads.** Coin names, descriptions and memos are written by strangers, and some are written to steer an AI. Anthropic warns that a bad server can hide instructions too.
- **Know how to cut it off.** In Claude, remove the connector under Customize, then Connectors. In Claude Code, run `claude mcp remove`. Then revoke access on the wallet's side as well.

## Where Raven fits

Raven is a Solana wallet manager that Claude, Claude Code, ChatGPT and Cursor can connect to. AI access is off until you connect one. Then you pick view only, ask me, on its own up to a daily limit, or full access. Claude never touches your keys, which are made and locked in your browser, and paying an address you have not saved always waits for you. Raven is invite only for now: join the [waitlist](/waitlist) and you get an email when it is your turn. More on the [about page](/about) and in [AI wallet for Solana](/solana-ai-wallet).

## Questions

### Can Claude hold crypto?

No. Claude has no wallet and cannot sign anything. It can only use a wallet you connect to it over MCP, and only the tools that wallet offers.

### Does Claude ask before it sends?

Yes, unless you told it not to. Connector tools ask for approval first. Never press Allow always on a tool that sends or swaps, and turn write tools off before using Research mode, which does not ask.

### Is it safe to give Claude my private key?

No. Never paste a private key or recovery phrase into any chat. Use a wallet whose server signs on its own side, so Claude never sees a key.

### Can I use a wallet with Claude on my phone?

Anthropic's setup steps are for Claude on the web and Claude Desktop. Add the connector there first.

## Sources

- [Claude help: Getting started with custom connectors using remote MCP](https://support.claude.com/en/articles/11175166-getting-started-with-custom-connectors-using-remote-mcp)
- [Claude Code docs: Connect Claude Code to tools via MCP](https://code.claude.com/docs/en/mcp)
- [Claude Code docs: Configure permissions](https://code.claude.com/docs/en/permissions)
- [Phantom docs: MCP server](https://docs.phantom.com/phantom-mcp-server)
- [MoonPay: PayBox launch](https://www.moonpay.com/newsroom/moonpay-paybox)
- [Model Context Protocol](https://modelcontextprotocol.io/)