Ledger launches Agent Stack to stop rogue AI and remove key handling

TL;DR

• Ledger launched Agent Stack, an open-source toolkit that allows AI agents to interact with wallets without executing transactions autonomously.
• Bots can read balances, suggest transactions, and prepare operations, but all execution requires physical confirmation from the user on the hardware.
• MoonPay and Shisa.ai have already integrated the tool, which also extends the use of Ledger devices as protection for API keys and agent credentials.

Ledger launched the Agent Stack, an open-source toolkit designed to allow artificial intelligence agents to interact with wallets and blockchain tools without ceding control of sensitive actions to automated systems. The proposal keeps the user as the final authority over any movement of funds.

Agents enabled by Agent Stack can read balances, suggest transactions, prepare swaps, and draft operations. However, no action can be executed without explicit confirmation from the user through their physical device. This limitation was deliberately configured and sets Agent Stack apart from more permissive solutions that already allow bots to act autonomously within user-defined parameters.

Clean build on the Ledger Agent Stack.

The hardware-as-final-approval pattern is exactly right. https://t.co/TIKAaphw76

— Ledger (@Ledger) July 16, 2026

Agent Stack: Humans in Command in the Age of Bots

The company justified the conservative approach with compelling data. According to its own analysis, 26.1% of all AI agent skills contain at least one security vulnerability, while human error accounts for approximately 60% of all recorded security breaches. A hybrid scheme combining human oversight with automated assistance aims to reduce risks on both fronts.

“By anchoring every signing decision in hardware, Ledger Agent Stack is designed to ensure that, even if an agent’s software environment is compromised, funds cannot be moved nor can sensitive information be accessed without explicit human confirmation,” the company stated in its press release.

Ledger as a Universal Key

The launch also extends the reach of the company’s physical devices into sectors beyond cryptocurrencies. Support for the open encryption standard OpenPGP allows any developer to use their hardware to protect API keys and AI agent credentials. The devices can also function as YubiKey-type authentication systems to access platforms such as GitHub, npm, 1Password, and Discord.

MoonPay and Shisa.ai have already integrated Agent Stack into their products. The launch is part of the company’s AI Roadmap 2026, which includes additional tools for agent identity, execution, and “proof of humanity” attestation in the coming months. Founded in 2014 and headquartered in Paris, Ledger is currently exploring an initial public offering that could value it at more than $4 billion.