Ledger launches Agent Stack to keep AI agents away from crypto keys
Ledger SAS today launched Ledger Agent Stack, an open-source toolkit that lets developers build artificial intelligence agents that can read balances and draft crypto transactions but cannot move funds without a human signing off on hardware.
The Paris-based company, maker of the widely used Ledger hardware wallets, is pitching the release as an answer to a basic problem in agentic AI. Agents can suggest a swap or prepare a payment, but letting them act on their own has meant handing software the keys. Ledger Agent Stack keeps those keys on a physical device. Its design rule is that agents propose, humans approve and the Ledger signer enforces.
Sensitive actions have to be confirmed on a Ledger signer before they execute. Read-only requests such as checking a balance or reviewing history run on their own. The company said the split means that even if an agent’s software environment is compromised, funds cannot move and secrets cannot be reached without a physical confirmation.
The kit ships as a set of open-source components. Device Management Kit Skills are instruction sets that teach any large language model runtime how to wire Ledger hardware into a workflow without rebuilding wallet logic. The Ledger Wallet CLI gives agents programmatic access to check balances, receive funds and prepare sends, swaps and staking. The Ledger Enterprise CLI and Ledger Enterprise Multisig CLI extend the same controls to institutional treasury teams, with policy enforcement anchored in hardware security modules.
