All articles are carefully reviewed and reviewed by leading blockchain experts and industry experts.
Summary
- Ledger has opened its Agent Stack tools to the public, allowing AI agents to manage crypto wallets while private keys remain locked inside the hardware.
- Any transaction that moves value still requires manual verification by the Ledger signers before it can be executed.
- MoonPay and Shisa.ai already have production tools built on the new architecture.
- Ledger is planning to introduce automated assistants and authentication tools later in 2026.
Ledger opened its Agent Stack tools to the public on July 16, 2026, giving developers a sustainable way to allow AI agents to read crypto balances and analyze portfolios, and document potential currency moves, all without touching the private keys behind them. The hardware wallet manufacturer in Paris created the release around one obstacle: the agent can make an exchange or payment, but the decision to do so must go through a physical button on the Ledger device, verified by the owner of the wallet. Installation follows preview period that began on June 10 and ran with more than 1,000 testers, and is the first demonstration to be presented in the 2026 AI security industry group.
A Tool Designed to Stand on Signatures
Agentic AI has spent the last two years doing research, monitoring and writing for crypto users, and the obvious next step is to allow agents to move money on their own. That step involves a certain trust issue. Give the agent your private keys, and one hacking price, bad advice, or a successful injection can destroy an account in seconds. Close the agent from the entire wallet, and most of the promised content is missing. Ledger’s solution enables agents to calculate and analyze while drawing a hard line on execution. The company embodies this principle in three words that are used in all of its products: supporters think, people agree.
Four Modules, One Shared Limit
Agent Stack ships as four separate, mixed pieces rather than being a one-size-fits-all product, the designer is more responsive to the user’s needs.
| Module | Work |
|---|---|
| Equipment Control Skills | Instructions based on Markdown that integrates support tools such as Claude Code, Codex or Cursor into the Ledger signer without a wallet integration. |
| Ledger Wallet CLI | They allow the agent to check the balances and check their profile freely, because these are only calculators. Arranging a shipment or exchange also works, but anything that would move the price is subject to confirmation |
| Ledger Enterprise CLI | Coordinates support staff at Ledger Enterprise to document transactions and support business administration. |
| Ledger Enterprise Multisig CLI | They allow agents to log and query most of the company’s account actions, although full authentication and hardware signing automatically unlocks everything that’s being done. |
Why Fingerprint Scanner Wins Software License
The architecture is based on the principle Ledger calls WYSIWYS, what you see is what you sign. The agent prepares events within its own application, but the approval takes place outside of the entire environment, in the trusted display of the signer who shows the details of the transaction before anyone else verifies it. Because the private key never leaves the protected device, a malicious user, malicious software, or a quick injection can ask the signer to agree to something. None of them would agree without someone being present. Wallet permissions themselves, however well-designed, end up being in the same environment that attackers are trying to control. The hardware puts the final decision somewhere out of reach.
The Ledger of Numbers Says to Justify the Argument
Ledger supports an additional validation field with two external statistics. A risk of 26.1% is derived independent research, Agent Skills in the Wildwhich analyzed more than 31,000 published skills and found that the field contained one error. The number of human errors is a widely cited company number that the Ledger folded into its originals without claiming to have done any research.
| Metric | Picture | Source |
|---|---|---|
| AI assistant skills with one security risk | 26.1% | Wilderness Skills (arXiv, Jan 2026) |
| Security breaches are caused by human error | About 60% | The number of unaffiliated companies, listed by Ledger |
| Agents were tested during a private observation session | More than 1,000 | Ledger’s June 10 preview post |
Ledger argues that the AI attack surface is growing faster than most defense systems can keep up, which explains the first number. The second figure goes in the opposite direction: it is the case of the company that planning with the help of an assistant can reduce common errors even if it adds one manual step to the final line.
What Changes For Entrepreneurs, Investors And Developers From Here
MoonPay and Shisa.ai already have built-in tools, the MoonPay integration allows the agent to identify transactions and process them while the private keys remain on the hardware and everything still needs to press a button. The Enterprise Multisig CLI pushes the same logic to the enterprise economy, where quorum authentication already slows down execution for some reason and additional hardware authentication makes little difference. Products for sale and frequent use are more difficult with the brand. The trader who sees the arbitrage window in milliseconds cannot wait for a person to look at the screen of the device, and the design of the competing wallet that is created on the smart-contract account already allows the bots to act automatically within the limits set by the owner in advance. Ledger is betting that the security charge outweighs the speed cost for most users; whether it works for a latency-sensitive strategy is a unique question that the market will answer without this release.
Ledger has already explained what is going on. Agent Identity service later this year it will set each agent to a hardware-written identifier recorded on the chain, instead of the spoofable software strings agents are using to identify themselves to services and each other. Different Identity Proofs are designed to allow a counterparty to verify that a real person has agreed to an action, not that the signer has agreed to it. Currently, Ledger is funding $5,000 on college.xyz and donating $10,000 to ETHGlobal New York for payment construction teams and approved tools for the new stack, a short-term push to get more information for the construction team to help test hardware and display devices before they arrive.
