An agent can plan the move, price it, and build the transaction, but on almost every tool available today, it cannot sign it, and the two largest agent-facing bridge servers do not carry Bitcoin at all. The limit is not routing. Routing is solved. The limit is that moving Bitcoin requires a key, and handing a key to an autonomous process is a decision nobody has found a safe default for.

This piece covers why the key is the constraint, what breaks on Bitcoin specifically, the working pattern people actually use, and the three providers whose tools an agent can call today.

Why can’t an AI agent just hold Bitcoin?

An agent has no way to hold Bitcoin that is meaningfully different from a script holding a private key, and that is the whole problem. A wallet is a keypair. Whatever holds the key controls the coins. There is no permission layer inside Bitcoin that lets you grant an agent the right to move 0.01 BTC on Tuesdays and nothing else.

Compare that with what an agent gets on an EVM chain. There, a token approval is a bounded grant — a spending cap on one contract for one token, revocable. Account abstraction goes further: session keys, spending limits, allowlisted destinations, a co-signer. None of that exists on Bitcoin. The key signs everything or it signs nothing.

So “agent holds Bitcoin” collapses into “some process on a machine has the seed.” That is a custody decision dressed up as an architecture decision, and it is why the serious tools decline to make it for you.

What breaks when an agent tries to move Bitcoin specifically?

Four things break, and they are all properties of Bitcoin rather than shortcomings of the agent.

There is no contract to approve against. Bitcoin Script can check a signature, enforce a timelock, and verify a hash preimage. It cannot hold the persistent state an allowance needs. The entire approve-then-spend pattern that agent tooling is built around has no Bitcoin equivalent.

Balances are UTXOs, not numbers. Spending requires selecting inputs, calculating change, and building a transaction. Send 0.05 BTC from a 0.4 BTC input, and the remainder comes back as change to an address you must control. Get that wrong, and the difference goes to miners.

Blocks are ten minutes. An agent loop expects a result in seconds. A Bitcoin confirmation is minutes, and most destinations want several. Anything holding a quote across that window is exposed to the price moving.

There is no native dollar. The reason to move Bitcoin at all is usually to reach something priced in dollars — a lending market, a perp venue, a payment. Bitcoin has no stablecoin, so the move and the conversion are the same action.

So what does the working pattern actually look like?

One supervised conversion, then the agent operates on the other side. Rather than giving an agent Bitcoin, you move the Bitcoin once — with a human signing — into an asset on a chain where bounded permissions exist. USDC on Base, USDC on Arbitrum, a wrapped BTC token if you want to keep the price exposure. From that point, the agent works inside an approval you set and can revoke.

This is a narrower claim than “agentic Bitcoin,” and it is the one that survives contact with the tooling. The agent’s job is research, routing, quoting, monitoring and execution on the destination side. The Bitcoin leg stays manual, once, at the start.

It is also where the demand is. Spark’s BTCFi research, published 29 May 2026, put Bitcoin’s entire DeFi footprint at 91,332 BTC — about 0.46% of circulating supply. The gap is a plumbing problem, and the plumbing is exactly what an agent is good at, right up to the signature.

Which providers let an AI agent move Bitcoin?

Three are worth knowing. Two of them are bigger than the third and neither touches native Bitcoin.

LI.FI - the widest coverage, explicitly read-only

LI.FI’s MCP server is the broadest route surface an agent can query, and it is deliberately incapable of moving anything. It exposes around fifteen tools across token and chain metadata, quotes, routing, gas, allowances, and transaction status, covering 58 chains, 27-plus bridges and 31-plus DEXes, and works with Claude, Cursor, Windsurf and VS Code Copilot.

The docs are blunt about the boundary: the server “provides read-only tools” and “does not sign or broadcast transactions.” A quote comes back with an unsigned transactionRequest that you sign and submit with your own wallet. Rate limits are 200 requests per two hours without an API key, 200 per minute with one.

The honest part: Bitcoin is not in the chain list. LI.FI is an EVM-and-Solana aggregator, and for an agent that already holds tokens on those chains it is the best research tool of the three. It is not a Bitcoin tool.

deBridge - execution-shaped, with the signature handed back to you

deBridge shipped its MCP server in February 2026 and designed it around handing the final step to a browser. The Block covered the launch on 16 February 2026. The server exposes six tools — get_instructions, search_tokens, get_supported_chains, create_tx, estimate_same_chain_swap and get_trade_dapp_url — across 24 to 28 networks and more than 40,000 tokens, with a hosted endpoint at agents.debridge.com so an agent can connect without installing anything.

The last tool is the interesting one. The agent produces a shareable deBridge App link, and the documentation describes the boundary plainly: the server “never touches private keys or signs transactions. The user always completes the swap themselves: open the generated link, connect their wallet, review, and sign.”

The honest part: same gap. Bitcoin is not a supported native chain — the coverage is EVM plus Solana. deBridge is the better of the two if you want an agent that gets you to a one-click confirmation, and it still starts from tokens you already hold off Bitcoin.

Garden - the one with the Bitcoin chain in it

Garden Finance is a Bitcoin-first cross-chain protocol, which makes it the only one of the three whose route set starts where Bitcoin actually is. Its catalogue on 8 September 2026 listed 26 assets across 15 chains, including Lightning, Solana, Starknet and Hyperliquid, 13 of those entries a form of Bitcoin across seven tickers. Settlement is by atomic swap: the swap completes on both sides or refunds on both, so there is no pooled balance for an agent to be wrong about.

It reaches agents through two formats, and the difference decides where the tool is reachable rather than what it can do. MCP is portable. The protocol is spoken by Claude Code, Cursor, Codex, Windsurf and VS Code alike, so one server covers every environment an agent might run in. A skill file is not. A .md skill is native to Claude and does nothing in Cursor or Copilot. Garden ships both: an MCP server for swaps, a Claude skill that drives the same flow conversationally, and a second Claude skill for developers embedding Garden into their own application.

Underneath either one the API is the same, and it is already agent-shaped: quote, create order, execute HTLC action, instant refund hash, available liquidity. A refund that is a script condition rather than a support ticket matters more when a machine is driving, and quotes are whole — Garden states it charges no fee of its own and that the quoted figure includes network costs, so an agent does not have to model fee layers separately to know what it will receive. In a nine-swap cost snapshot on 20 August 2026, Garden quoted lowest on all nine against Chainflip and Relay, the gap widest on $100 swaps.

How do the three compare?

Who actually signs, and why does every tool stop there?

All three stop at the signature, and they stop at the same place for the same reason: an agent that can sign is an agent that can lose everything on a bad inference. A hallucinated address, a decimal misread, a prompt-injected instruction inside a token name or a web page the agent read on the way — each of those is survivable when a human confirms and unrecoverable when nothing does.

This is not a Bitcoin-specific caution. Base shipped its MCP in May 2026 behind OAuth with user approval on every transaction. Bybit and BitGo both shipped agent servers in 2026 with the same shape. The pattern across the whole category is identical: agents propose, humans dispose.

On Bitcoin, the stakes of crossing that line are higher, because there is no revoke. An EVM approval can be pulled after the fact. A Bitcoin transaction cannot.

What should you check before letting an agent near your Bitcoin?

Keep the key out of the agent’s context. A key pasted into a chat is in the transcript, the logs and possibly a provider’s retention window. Anything holding a key should read it from an OS keystore at the moment of use.

Confirm the destination address out of band. The single highest-value target for prompt injection against a swap agent is the destination field.

Have gas on the destination chain. Arriving with a Bitcoin-denominated token and no ETH, SOL or STRK is the most common way a first attempt stalls, agent or not.

Size to the route, not to your balance. Caps exist on every route, and inside them the far side’s depth sets your slippage.

Assume the conversion is taxable. In most jurisdictions giving up BTC for a token is a disposal, and coming back is a second one. An agent running conversions on a schedule generates a lot of those.

FAQ

Can AI agents hold crypto?
They can hold a key, which is not the same as being trusted with one. On EVM chains bounded permissions exist — token approvals, session keys, spending caps — so an agent can be given limited authority. Bitcoin has no equivalent, so authority there is all or nothing.

Can Claude execute a crypto swap?
Claude can call an MCP server to search tokens, price a route and build an unsigned transaction. On LI.FI and deBridge the signature is handed back to a wallet you control. That handoff is deliberate, not a missing feature.

Does deBridge support Bitcoin?
Not as a native chain. Its MCP covers EVM networks and Solana. You can move a wrapped Bitcoin token across those chains; you cannot start from BTC on the Bitcoin chain.

Does LI.FI support Bitcoin?
Bitcoin is not in its 58-chain list either. LI.FI aggregates across EVM chains and Solana.

What is the safest way to give an agent access to funds?
Move a fixed amount to a dedicated wallet, on a chain where approvals are bounded and revocable, and grant nothing from your main holdings. Treat it as a float rather than an account.

Can an agent move Bitcoin without any human step at all?
Only if something in the loop holds the key and signs unattended, which every provider named here declines to do. If a tool offers it, that is the question to ask about it first.

Is a bridge cheaper than an exchange for this?
Often not, for common pairs. An exchange usually wins on BTC to USDC. Bridges win when the destination is a rollup that exchanges do not support as a withdrawal network, which is most of them.

Can an AI Agent Actually Move Bitcoin? was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

See what you missed in Daily Tech Insider from Sept. 7–11.

The post AI Agents, Foldables, Cyberthreats, and Chip Deals Define This Week in Tech appeared first on TechRepublic.

See what you missed in Daily Tech Insider from Sept. 7–11.

The post AI Agents, Foldables, Cyberthreats, and Chip Deals Define This Week in Tech appeared first on TechRepublic.

PaperCut flaws were exploited across 440 servers using hundreds of AI agents. Learn which versions are affected and what security teams should do now.

The post AI Agents Help Hackers Compromise 440 PaperCut Servers appeared first on TechRepublic.

PaperCut flaws were exploited across 440 servers using hundreds of AI agents. Learn which versions are affected and what security teams should do now.

The post AI Agents Help Hackers Compromise 440 PaperCut Servers appeared first on TechRepublic.

Hector Rivas spent a decade building ThriftBooks into one of the country’s largest used-book sellers, before an unlikely second act: co-founding a sports agency representing NFL players.

That career change led him to the problem behind his newest startup, and to the Las Vegas Raiders running back who just invested in it.

Nukleus, based in Issaquah, Wash., is building what Rivas calls an operating system for the business of sports. The idea is a single workspace for everyone in an athlete’s orbit: agent, lawyer, CPA, financial advisor, marketing team, and others. It lets them all work from the same contracts, deadlines and records, rather than each keeping a separate pile of emails and spreadsheets.

The idea came out of Rivas’s years at Disruptive Sports, the agency he co-founded in 2020 and left earlier this year.

Ashton Jeanty, who signed a four-year, $35.9 million rookie contract with the Raiders in 2025, has taken equity in the company and signed on to serve as its public face.

Nukleus has also named four strategic investors: Mat McBride, Microsoft’s executive vice president and CFO for commercial products and infrastructure; WaFd Bank President and CEO Brent Beardall; investor Skyler Nelson, previously of Vulcan Capital and its successor firm Cercano; and Dr. Brett Kindle of the Andrews Institute in Gulf Breeze, Fla.

The company has a team of 12 based out of its Issaquah office, plus a supporting engineering team in India. Most of the team is engineering.

Other executives include CTO Eric Ahlstrom, previously at Microsoft, Unity, Oracle and ESPN; chief creative officer Ben Miller, a former creative director at the University of Washington and CAA Sports; and CFO Matt Porter, who worked with Rivas at ThriftBooks, EcoGoodz and Disruptive.

Nukleus closed a pre-seed round from friends and family in 2025 and is raising again now. Rivas declined to disclose the amount raised by the company so far.

From books to football: Rivas was ThriftBooks’ first CEO, running the used-book seller for about a decade after it launched in 2003. Based in the Seattle area, the company grew during his tenure from a storage unit in Kirkland, Wash., to 10 distribution facilities in 10 states, by his account.

He went on to found EcoGoodz, a used-goods and overstock brokerage, and in 2020 co-founded Disruptive Sports Agency with agent Henry Organ.

Rivas, an NFLPA-certified contract advisor, worked the business side of the agency. He left earlier this year to build Nukleus full time.

The years inside the agency are what produced the idea.

Everyone in a player’s orbit was working off “their own version of the truth,” Rivas explained via email: the agent, the lawyer, the CPA, the financial advisor, the marketing team. The athlete, he said, “was the one absorbing the cost of that disconnect,” in slower decisions and deals that fell through the cracks.

The pitch in Las Vegas: Jeanty and Rivas knew each other from Rivas’s years at the sports agency, and Rivas said the running back had been tracking what he was building.

“Because Ashton and I already knew each other, and he’d been aware of what I was building, the conversation came together naturally,” Rivas said.

He flew to Las Vegas to walk Jeanty through the model, the team, and where the company was headed. Rivas said Jeanty’s equity reflects both money invested and his role promoting the platform.

In a statement, Jeanty described the job of running his own career.

“Coming into the NFL, you become a CEO, directing a team of agents, advisors, and marketers, whether you’re ready or not,” he said. “Nukleus is what finally gets them all on the same page, so I can actually run that team the way it should be run. That’s why I invested in it.”

Where things stand: The product is in a free beta with about 30 users, including athletes, agents, agencies, lawyers and marketing staff. Nukleus plans to charge $99 per user per month for a starter plan and $249 for a full-featured one, with custom enterprise pricing. Athletes join free.

Alongside contract storage, deadline tracking and a shared workspace, the company is building AI tools meant to answer questions about contract terms and league rules.

Others are working similar territory. Agent Live 360 sells software built specifically for sports agents, and Opendorse, which says it works with more than 1,000 sports agents, offers tools to negotiate, approve and track deals. Nukleus says it differs from narrower tools by serving everyone in an athlete’s orbit.

The bigger bet: The company is looking well past a single app.

“Long-term, I don’t see this as a tool athletes use, I see it as the infrastructure the entire business of sports runs on,” Rivas said. “Every athlete becomes the center of their own connected team, and every professional working with them, across every sport, at every level, operates on one shared system instead of a hundred disconnected ones.”

Amazon is adding the Activity Feed and other features from its Quick desktop app to the AI assistant’s mobile apps for iOS and Android.

The Activity Feed is the signature feature of Amazon Quick. It combines email, Slack messages, calendar invites and CRM updates into one prioritized list, and lets people act on items (opening and responding to emails, for example) without switching apps.

Amazon said Wednesday that the Quick desktop app, released in preview in April, is now generally available on Windows and macOS. The company also said Quick’s agents now run in the cloud, so they keep working after a laptop is closed and deliver results to the feed.

The desktop and mobile apps now sync, as well, so a task started on a laptop can be picked up on a phone, for example.

Quick has a free tier, with paid individual plans starting at $20 per user per month billed annually, and business plans running $20 to $40 per user per month.

Quick is Amazon’s entry in a crowded market for AI assistants at work, competing with Microsoft Copilot, Google Gemini, OpenAI, Anthropic and others. Amazon’s announcements cited business customers for Quick including Southwest Airlines, LabCorp and the PGA Tour.

The desktop app came together fast, as part of a new effort inside Amazon to use small teams to move quickly: Swami Sivasubramanian, the AWS vice president of agentic AI, told GeekWire in June that a team of about six engineers started in late January and shipped April 28.

CISA’s ChatGPT incident exposes a growing AI governance gap as enterprises struggle to define who is accountable for actions taken by AI agents.

The post CISA’s ChatGPT Incident Exposes a Bigger AI Governance Problem appeared first on TechRepublic.

CISA’s ChatGPT incident exposes a growing AI governance gap as enterprises struggle to define who is accountable for actions taken by AI agents.

The post CISA’s ChatGPT Incident Exposes a Bigger AI Governance Problem appeared first on TechRepublic.

GeekWire is profiling over the next few weeks some of the people and teams that are shaping the evolution of Microsoft in what we’re calling its “Microsoft 2.5” era.

Just Don’t Call It an ‘Agentic OS.’ Given Microsoft’s one-pointed AI focus these days, it’s not surprising that the Windows organization is on the agentic train.

But Executive Vice President of Windows + Devices Pavan Davuluri has learned the hard way not to call Windows an agentic OS. He did so back in November 2025, via a tweet and blog post, and the customer backlash was quick and biting.

But Davuluri has not done a complete U-turn because of the criticism. Instead, he has changed how he talks about where Windows is going — which is still in an agentic direction.

“The user of Windows going forward will continue to be users … but it’s also going to add these agentic workloads,” the nearly 26-year Microsoft veteran Davuluri told GeekWire in a recent interview.

During his time at Microsoft, he’s held a variety of roles, from intern to General Manager of Surface, to Corporate Vice President of Windows Silicon & Systems Integration. He was appointed Executive Vice President of Windows + Devices in March 2026, reporting directly to CEO Satya Nadella.

Windows needs to evolve to support agentic workloads through new platform capabilities that the team is building under the covers, Davuluri said. These low-level capabilities, or “primitives,” affect how Windows handles security, identity, governance, observability, and performance when it comes to building and running agents natively.

These coming changes likely will affect the Windows file system, security model, PowerShell, and other foundational components.

Microsoft already is working on Windows identity and manageability to make them better able to service agents. Windows can assign agents a local ID, or a cloud-provisioned identity backed by Entra.

And it also has an early preview of technology known as Microsoft Execution Containers, meant to help secure agents by running untrusted code in sandboxes or virtual machines. It’s these system-level areas where the team is focusing first in preparation for a human+agent future, Davuluri said, rather than the UX/UI level.

Going Back to Basics. Windows has had a lot of very different leaders over the years, with very different management styles and priorities.

For his part, Davuluri said he plans to run the Windows and Surface teams with four principles in mind: Maintaining customer obsession; treating Windows as a complete end-to-end system (“full stack”); focusing on complete user experiences and workflows rather than individual features; and building Windows openly and transparently, with clearer communication about plans and priorities.

On the heels of his promotion to EVP, Davuluri committed publicly to the much-needed goals of improving Windows quality and reliability. In a blog post, he outlined some of the requested changes that his team would be making to Windows, ranging from fixing the way the Insider test program works, to more granular improvements like allowing users to reposition the Windows task bar.

And since then, the team largely has been delivering to the surprise and delight of many long-time Windows users.

Davuluri has also been working to shift the conversation from which new features are coming to a specific build to what are the outcomes Microsoft wants to enable for specific groups of Windows users.

“There is no one single sort of ring for a billion-plus users on the platform,” Davuluri said. Windows users encompass people who use the product in a variety of different ways, so “we need to get clarity in our minds on the things that we do that lift all boats that raise the entire platform — and things that we have to go do that are specific and unique to each of our sets of users based on how they primarily or typically use the device.”

Full-Stack Thinking. Is there still a role for Microsoft as a PC maker in the coming agentic future? Not surprisingly, given his heavily hardware-focused background, Davuluri insisted there is.

When Microsoft debuted its first Surface devices in 2012, officials said the company needed to build its own hardware to create reference designs and innovative form-factor examples for other Windows PC makers.

These days, most Surfaces that ship arguably are not better, spec- or design-wise, than other PCs. But Microsoft still needs to keep a hand in hardware design to understand the full stack, Davuluri claimed.

Surface plays a key role in how Microsoft develops platform abstractions, incubates support for technologies like pen, facial-recognition, and neural-processing units that later spread across Windows, and optimizes for silicon-to-cloud, he said.

While the company’s attempt to create a distinct category of “Copilot+” AI PCs fizzled, Microsoft continues to try to find AI-centric reasons to convince customers to choose Windows devices. Davuluri and others have referred to the idea of “unmetered intelligence” to attempt to make the case for running AI models locally on PCs.

This fall, Microsoft (and other Windows PC makers) plan to roll out new PCs built on the Nvidia RTX Spark platform. The coming Surface Laptop Ultra, which will be optimized for RTX Spark, is aimed at creators, developers and AI builders, all of whom — Microsoft is hoping — will be fueling the growth of its next target user category: Agents.

OpenAI chief scientist Jakub Pachocki says AI labs may need to slow development as automated research advances and monitoring becomes less reliable.

The post OpenAI Scientist Urges Safety Limits as AI Research Accelerates appeared first on TechRepublic.

Microsoft Copilot and Google Gemini offer different paths beyond Claude, with ecosystem fit, governance, pricing, and workflows shaping the choice.

The post Best Claude Alternatives for Business: Microsoft Copilot vs Google Gemini in 2026 appeared first on TechRepublic.

OpenAI says its AI solved the Navier–Stokes problem in 88 hours, but questions about research credit and customer data have sparked a dispute.

The post OpenAI Claims Navier–Stokes Breakthrough, Sparking Research Dispute appeared first on TechRepublic.

OpenAI chief scientist Jakub Pachocki says AI labs may need to slow development as automated research advances and monitoring becomes less reliable.

The post OpenAI Scientist Urges Safety Limits as AI Research Accelerates appeared first on TechRepublic.

Microsoft Copilot and Google Gemini offer different paths beyond Claude, with ecosystem fit, governance, pricing, and workflows shaping the choice.

The post Best Claude Alternatives for Business: Microsoft Copilot vs Google Gemini in 2026 appeared first on TechRepublic.

OpenAI says its AI solved the Navier–Stokes problem in 88 hours, but questions about research credit and customer data have sparked a dispute.

The post OpenAI Claims Navier–Stokes Breakthrough, Sparking Research Dispute appeared first on TechRepublic.

Meta launches Muse in the US, a personal AI agent that can book travel, shop, send emails, and run tasks, with security controls and paid plans.

The post Meta Launches Muse AI Agent to Run Errands, Book Travel, and Shop appeared first on TechRepublic.

Meta launches Muse in the US, a personal AI agent that can book travel, shop, send emails, and run tasks, with security controls and paid plans.

The post Meta Launches Muse AI Agent to Run Errands, Book Travel, and Shop appeared first on TechRepublic.

Eight courses and over 25 hours walk your team through building AI agents with ChatGPT, Claude, and more.

The post Train Your Team to Build AI Agents for $20 appeared first on TechRepublic.