# Solana MCP wallets compared: who can sign, what limits exist, where keys live

> For an AI wallet on Solana you can use today, MoonPay PayBox has the fullest public limits. Phantom MCP gives the AI its own empty wallet, so your limit is what you fund. Demos with a key in an env file are for test money. Raven sets rules per move beside your keys, but is invite only.

Page: https://ravenwallet.pro/compare/solana-mcp-wallets
Updated: 2026-10-30

**Raven makes this page and competes with these products.** Raven is not the only wallet with limits for an AI, and it is not the one you can try today. Read each maker's docs in Sources before you fund anything.

## Side by side

| | Who signs | What limits exist | Where keys live | On Solana | Works with |
| --- | --- | --- | --- | --- | --- |
| MoonPay PayBox | Split-key signing, after your passkey or inside your limits | Always Ask, or Autonomous with limits you set. Changing permissions takes a new passkey | Split with MPC across secure enclaves, through Sodot | Trade, bridge, pay | Claude, ChatGPT, Grok, Codex, Claude Code, Cursor |
| Phantom MCP | Phantom's KMS, after checking a stamp and policy | A new wallet that starts at zero. The MCP docs list no user-set cap or per-move approval | Enclaves at Phantom. Stamper keys in a local session file | Send, swap, sign | Claude Desktop, Claude Code, Cursor |
| Coinbase Agentic Wallet CLI | Not spelled out. The agent never touches the key | Caps per session and per transaction | "Private keys stay in Coinbase infrastructure" | Send USDC. Trading is Base only | Agent skills and the `awal` command line |
| Env file demo (solana-mcp) | The server on your machine, with the raw key | None stated in its README | Plain text in `.env` and the AI app's config | Transfer, trade, deploy a token | Claude Desktop |
| Raven | The key worker in your browser, while Raven is open | Per move: off, ask me, or on its own up to an amount. A daily total and a never-touch list | Locked in your browser. The server keeps a copy it cannot open | Send, split, consolidate, swap, clean up, new wallets | Claude, ChatGPT, Claude Code, Cursor |

_From each maker's own docs, as of 30 October 2026. We did not test any of them with money._

## What each one is good at

### MoonPay PayBox

Open today, and the fullest set of public limits we found. In Always Ask, every transaction needs your passkey. In Autonomous, the AI acts inside limits you set, and Solana Compass lists those as a spending cap, a token allowlist and a per-transaction ceiling. MoonPay says no single party, itself and the AI included, can reach a complete key.

One thing to treat with care: Solana Compass reports that the security stack was assessed by Trail of Bits and NCC Group. MoonPay's launch post does not mention them and we did not find the reports, so that claim is reported, not confirmed.

### Phantom MCP

The design is the point. Agents get "a new dedicated wallet, not your existing personal wallet", and signing in with the same email gives no access to your main one. The wallet starts at zero and can spend only what you send it. Swaps through its `buy` and `wallet_rebalance` tools carry no fee, and sends can preview changes first.

What to watch: the MCP docs describe no cap you set and no approval per move. Phantom's KMS guide says its policy engine can enforce spending limits, but we did not find how a user sets one for an agent wallet. Spending limits in Phantom's docs are written for Phantom Connect apps. The local file `~/.phantom-mcp/session.json` holds stamper keys and lasts until you delete it.

### Coinbase

Three products share the name, and it is easy to mix them up:

- **Agentic Wallet CLI:** the one with Solana. It can send USDC there, with caps per session and per transaction, though its page gives no default amounts. It screens transfers. Trading is only on Base.
- **Agentic Wallet MCP:** works with MCP apps, but "MCP agents discover and pay for services only". No send, no trade.
- **Coinbase Wallet MCP:** you approve every write in Coinbase Wallet, which is a strong rule. Its page does not mention Solana.

So for Solana today, Coinbase is narrow but clear.

### Demos with a key in an env file

Several Solana MCP repos work this way. SendAI's `solana-mcp` README puts `SOLANA_PRIVATE_KEY` in a `.env` file and again in the Claude Desktop config. It states no spending limit. It does say to use a dedicated wallet and test on devnet first, and that is the right use: learning, on test money. Anything that can read that file can take the wallet.

### Raven

Each kind of move gets its own setting: off, ask me, or on its own up to an amount from $10, all under a [daily total](/docs/ai-rules). Tightening a rule saves at once. Loosening one needs your password. Each ask is decided in your browser, beside the keys, and the server only carries it.

The weak points are real:

- You cannot try it today. Raven is invite only.
- [Raven has to be open somewhere](/docs/ai) for an AI's move to run, so it does not suit an agent that runs unattended.
- To answer an AI, [Raven's server sees your wallet list](/docs/server): names, addresses and folders, never keys.
- Its docs name no outside security review. Solana only.

## The worst case, side by side

Three questions cut through the marketing. Can it sign with nobody watching? What is the most it can lose on a bad day? Who else holds or sees anything?

| | If the AI is tricked, the most that can go |
| --- | --- |
| PayBox, Always Ask | Nothing moves without your passkey |
| PayBox, Autonomous | Up to the limits you set |
| Phantom MCP | What you funded the agent wallet with |
| Coinbase CLI | Up to your session and per-transaction caps |
| Env file demo | Everything in that wallet |
| Raven | What you let it do alone, up to your daily total. Wallets on the never-touch list stay out |

_Read from each maker's docs as of 30 October 2026, not tested. A bug in any of them could change the answer._

Whichever you use, the habit is the same: fund a separate wallet with what you can afford to lose, and start with the most asking you can stand. More on that in [how to give an AI a Solana wallet with limits](/blog/ai-solana-wallet-mcp).

## Which to pick

- **You want to try it today, in Claude or ChatGPT:** PayBox.
- **You already use Phantom and want a walled-off wallet for an agent:** Phantom MCP.
- **You build agents that pay in USDC:** Coinbase's CLI.
- **You are learning on devnet:** an env file demo.
- **You run many Solana wallets and want rules per move, with Raven open while the AI works:** Raven, once you have an invite.

## How we checked

On 30 October 2026 we read Phantom's and Coinbase's developer docs, MoonPay's launch post and PayBox's site, The Block's and Solana Compass's reports, The Paypers on Grok, and the `solana-mcp` README. Raven's row comes from its own [AI docs](/docs/ai). We did not run any of these with money, so limits here are what the makers state. Coinbase's CLI is not an MCP product. We include it because it is the Coinbase agent wallet that reaches Solana.

The official Solana MCP at mcp.solana.com is left out of the table. Its page describes docs and Rust checks for coding agents and does not mention wallets or signing.

## Questions

### Which Solana MCP wallet is safest?

We have not tested them, so we will not name a winner. On paper, PayBox in Always Ask stops every move at your passkey, and Phantom's design limits a mistake to what you funded.

### Is the official Solana MCP a wallet?

No. By its own page, mcp.solana.com gives coding agents current Solana docs and Rust checks. It does not mention wallets or signing.

### Does the AI see my private key?

Not in PayBox, Phantom MCP, Coinbase's wallet or Raven, by their own descriptions. In an env file demo, the key sits in plain text on your machine, in reach of the server the AI talks to.

### Can Phantom MCP use my main Phantom wallet?

No. Phantom's docs say agents get a separate wallet and that the same email gives no access to your personal one. You send it funds yourself.

## Sources

- [MoonPay: PayBox launch](https://www.moonpay.com/newsroom/moonpay-paybox)
- [PayBox](https://paybox.sh)
- [The Block: MoonPay launches PayBox](https://www.theblock.co/news/business/2026-07-29-moonpay-paybox-chatgpt-claude-410032)
- [Solana Compass: PayBox for Claude and ChatGPT](https://solanacompass.com/news/moonpay-launches-paybox-letting-claude-and-chatgpt-users-trade-on-solana-through-conversation)
- [The Paypers: PayBox expands to Grok](https://thepaypers.com/crypto-web3-and-cbdc/news/moonpay-expands-paybox-payment-tool-to-grok)
- [Phantom docs: MCP server](https://docs.phantom.com/phantom-mcp-server)
- [Phantom docs: Agent wallets and your existing accounts](https://docs.phantom.com/phantom-mcp-server/account-types)
- [Phantom docs: MCP setup](https://docs.phantom.com/phantom-mcp-server/setup)
- [Phantom docs: How KMS works](https://docs.phantom.com/sdks/guides/how-kms-works.md)
- [Phantom docs: Spending limits](https://docs.phantom.com/spending-limits)
- [Phantom docs: Updates](https://docs.phantom.com/updates)
- [Coinbase docs: Agentic Wallet overview](https://docs.cdp.coinbase.com/agentic-wallet/welcome)
- [Coinbase docs: Agentic Wallet CLI](https://docs.cdp.coinbase.com/agentic-wallet/cli/welcome)
- [Coinbase docs: Trade tokens](https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/trade)
- [Coinbase docs: Coinbase Wallet MCP](https://docs.cdp.coinbase.com/get-started/build-with-ai/base-mcp)
- [SendAI: solana-mcp](https://github.com/sendaifun/solana-mcp)
- [Solana Developer MCP](https://mcp.solana.com/)