What Is Agent Payment, and Why Is Everybody Rushing to Provide It?
Agent payment lets AI agents spend with scoped, revocable authority. Inside Stripe's Link wallet for agents, Mercury's agent cards, and the 2025–26 rush.
- ai-agents
- payments
- explainer
In the span of sixteen months, both major card networks, Google, OpenAI, and Stripe have all announced or shipped infrastructure for the same thing: letting an AI agent spend money. Mastercard announced Agent Pay on April 29, 2025. Visa unveiled Intelligent Commerce the next day. Google published its Agent Payments Protocol (AP2) with more than 60 partner organizations in September 2025. That same month, OpenAI switched on Instant Checkout inside ChatGPT. And in April 2026, Stripe launched Link's wallet for agents, a consumer wallet an agent can borrow one purchase at a time. Even Mercury, a business banking platform, now leads its spend-management pitch with "cards for teams and agents."
This piece explains what "agent payment" actually is, walks through two instructive implementations — Stripe's consumer-side wallet and Mercury's business-side agent cards — and then looks at why so many companies decided, almost simultaneously, that they could not afford to sit this one out.
What "agent payment" actually means
Agent payment is infrastructure that lets a software agent spend money on a person's or company's behalf — with authority that is scoped (this much, at this merchant, for this purpose), provable (the merchant can tell the agent was in fact authorized), and revocable (the owner can shut it off), instead of the blunt instrument of handing the agent a raw card number.
That last clause is the whole point. Nothing has ever stopped you from pasting your Visa number into a bot's config file. What stops most people is that a card number is unscoped authority: whoever holds it can charge anything, anywhere, until you notice and cancel the card. Google's AP2 announcement states the underlying problem plainly: today's payment systems generally "assume a human is directly clicking 'buy' on a trusted surface", and an autonomous agent initiating a payment "breaks this fundamental assumption". AP2 frames the gap as three questions every agent transaction must answer: authorization (did the user grant the agent authority for this purchase?), authenticity (does the agent's request reflect the user's actual intent?), and accountability (who eats the loss when something goes wrong?).
Every product in this space — card-network token programs, open protocols, wallets, agent cards — is an attempt to answer those three questions well enough that letting an agent spend money becomes a normal, boring thing to do.
Stripe: a wallet your agent can borrow, one purchase at a time
Stripe's entry, announced April 29, 2026, is Link's wallet for agents, built on top of a new Issuing for agents layer. Link is Stripe's consumer wallet — the "save my info for faster checkout" product — with a customer base Stripe puts at more than 200 million consumers. The agent flow works like this:
- The consumer grants an agent access to their Link wallet through a standard OAuth flow — the same consent pattern used to connect any third-party app.
- When the agent wants to buy something, it creates a spend request carrying context: merchant name, URL, amount, and a human-readable description of what it's buying and why.
- The consumer reviews and approves the request on the web or in Link's mobile apps. Today, each request requires the person's review before any credential is shared; Stripe says spending limits and pre-approved autonomy are planned next.
- On approval, the agent receives either a one-time-use card or a Shared Payment Token (SPT) — a credential that can be scoped with controls like amount, currency, and merchant. As Stripe puts it: "The agent never gets access to your raw payment credentials."
The design is worth reading closely because it inverts the card-on-file model. A stored card is standing authority the merchant (or agent) can draw on again and again, bounded by agreements that are enforced after the fact rather than by the credential itself; a spend request is a single grant of authority, created at the moment of purchase, bounded to that purchase, and dead afterward. Stripe also exposes the layer underneath — Issuing for agents — so businesses can build their own agentic wallets: single-use virtual cards, fund storage, card-level permissions, transaction monitoring, and fraud controls at authorization time.
Mercury: the corporate card meets the agent
Stripe's wallet answers the consumer question — how do I let a shopping agent buy things with my money? Mercury's spend management answers the business version, and its answer is revealing: treat agents like employees.
Mercury describes the product as "self-enforcing expense management with intelligent budgets, employee reimbursements, and cards for teams and agents". The mechanics are the familiar spend-management toolkit — budgets and guardrails scoped to specific purposes, per-category limits, real-time tracking, policies that enforce themselves — extended to non-human spenders: businesses can issue dedicated agent cards for approved transactions, each with its own limits.
The page even demos it: an agent fills out a checkout form with "Jane's agent card," places a $100 advertising order, and reports back that the card carries a $1,000-per-month spend limit and that the card details were used only for that checkout — never stored. Mercury Spend is included for all Mercury business banking customers, with a standalone version planned for teams that bank elsewhere.
The framing matters more than the feature list. For a business, an agent that spends money is not an exotic new payment problem — it's headcount. It gets a card, a budget, a purpose, a monthly limit, and an audit trail, exactly like a new hire in the finance system. Where Stripe built a consent loop for consumers, Mercury built an org chart slot for software.
Sixteen months of announcements
Put the timeline in one place and the land rush is hard to miss:
| Date | Company | What was announced |
|---|---|---|
| Apr 29, 2025 | Mastercard | Agent Pay: Agentic Tokens; agents must be registered and verified to transact |
| Apr 30, 2025 | Visa | Intelligent Commerce: opening Visa's network to AI agents via tokenized credentials |
| Sep 16, 2025 | Agent Payments Protocol (AP2): an open protocol with 60+ partners, from Amex to Coinbase to PayPal | |
| Sep 29, 2025 | OpenAI + Stripe | Instant Checkout in ChatGPT, powered by the open-sourced Agentic Commerce Protocol (ACP) |
| Jan 15, 2026 | Universal Commerce Protocol (UCP): an open commerce-interoperability standard designed to work alongside AP2 | |
| Apr 29, 2026 | Stripe | Link's wallet for agents + Issuing for agents: consumer wallet access and issuing primitives for agent spend |
| 2026 | Mercury | Spend management with agent cards: budgets, guardrails, and dedicated cards for agents |
Why the stampede? Three forces, and this part is interpretation rather than anything the announcements say outright:
The buyer is moving, and the wallet wants to move with them. OpenAI notes that more than 700 million people turn to ChatGPT each week, and it now handles purchases in-chat. If discovery and checkout both happen inside an agent conversation, whoever supplies the agent's wallet sits between every merchant and every customer. Stripe's pitch to developers is explicit about the prize — build on Link and reach its 200-million-consumer base. Payment companies watched search and social intermediate commerce for two decades; none of them intends to watch agents do it from the sidelines.
Unscoped credentials don't survive contact with automation. Without purpose-built rails, people hand agents stored cards and shared logins — standing authority with no scope, the exact pattern fraud systems exist to catch. Visa's product chief framed the requirement as trust that extends beyond users: agents "will need to be trusted with payments, not only by users, but by banks and sellers as well". Networks that can tell an authorized agent from a card-testing bot get to approve more good transactions and block more bad ones; networks that can't will do both badly.
Protocols are a land grab. ACP, AP2, Mastercard's Agentic Tokens, and Visa's tokenized credentials all want to be the default grammar of machine purchases. Open standards tend to win these races by being adoptable — which is exactly why OpenAI open-sourced ACP and Google recruited 60 launch partners for AP2, then followed up in January 2026 with the Universal Commerce Protocol to standardize the shopping workflow around the payment. Nobody wants to integrate the losing standard twice.
One design pattern, many logos
Strip away the branding and every serious agent-payment product converges on the same four properties:
- Never expose the raw credential. One-time-use cards (Stripe), Shared Payment Tokens (Stripe/ACP), Agentic Tokens (Mastercard), tokenized credentials (Visa). The agent carries a purpose-built instrument, not your PAN.
- Scope the authority. Amount, currency, merchant, and time bounds on the credential itself — OpenAI's version: encrypted payment tokens "only authorized for specific amounts and specific merchants".
- Keep a human in the approval loop — at least for now. Stripe requires per-request review today; Mercury's budgets pre-authorize spend within limits a human set. The autonomy dial moves, but it starts near zero.
- Make agent spend legible. Registered agents (Mastercard), spend-request context strings (Stripe), real-time tracking and receipts-or-your-card-locks enforcement (Mercury). Every transaction should answer "which agent, on whose authority, for what?"
If those properties sound familiar to crypto-native readers, they should. A signature-authorized stablecoin transfer under x402's exact-payment scheme — an exact amount, to an exact recipient, valid only in a time window, signed by the payer's own wallet at the moment of purchase — is the same design arrived at from the other direction, with the scoping enforced by cryptography instead of an issuer's policy engine. Stripe itself lists stablecoins as a coming payment method for agent wallets. The card world and the crypto world are converging on the same answer: authority per transaction, not authority on file.
Where domains fit in
Domains are turning out to be one of the first things agents buy on their own — they're pure API objects, no shipping address required, and every deployed agent product eventually needs a name it controls. We've written about how agents buy domains without a human, what an agent-native registrar looks like, and how an agent registers a domain on Namefi step by step.
Namefi's own answer to the payment question is the wallet-signed checkout covered in depth in Pay for Domains with a Crypto Wallet: No Account Needed: an agent's wallet answers an x402 challenge by signing a USDC transfer authorization for one exact registration, at one exact price, with no account and no stored credential anywhere — and receives the domain as a tokenized asset to that same wallet. It is agent payment in precisely the sense this article has been describing, live today on a real product, for the thing agents most predictably need to buy.
The rush to provide agent payment, in the end, is a rush to be trusted. More than two hundred million Link consumers, more than seven hundred million weekly ChatGPT users, and every corporate card program are all converging on the same bet: the next billion buyers won't all be human, and the infrastructure that gives their software safe, scoped, accountable spending authority will be as foundational as the card network was to the last era of commerce.
Sources and further reading
- Stripe — Giving agents the ability to pay (Link's wallet for agents + Issuing for agents, April 29, 2026)
- Mercury — Spend Management (budgets, guardrails, and dedicated agent cards)
- Google Cloud — Announcing the Agent Payments Protocol (AP2) (September 16, 2025)
- OpenAI — Buy it in ChatGPT: Instant Checkout and the Agentic Commerce Protocol (September 29, 2025)
- Mastercard — Mastercard unveils Agent Pay (April 29, 2025)
- Visa — Find and Buy with AI: Visa Unveils New Era of Commerce (Visa Intelligent Commerce, April 30, 2025)
- Namefi — Pay for Domains with a Crypto Wallet: No Account Needed (x402 wallet-signed checkout)
Contributors
Aileen Wright is a student in her twenties living in New York City, where the distance between a museum wall and a library reading room is a short walk and a long afternoon. She came to name writing through art and history — the way a single portrait, coin, or manuscript margin can carry a name across centuries and change its meaning on the way.
Most weeks you can find her in Central Park with a paperback, or in the quiet of a public reading room chasing down where a name actually comes from rather than what a name-list says it means. She is also teaching herself to code, which has made her oddly precise about spelling, sorting, and the small details that decide whether a name ages well.
For Namefi she writes about the history and culture behind domain names, the stories brands carry as they rename, and the difference between a good story and a verified source.
Victor Zhou is a technology founder and standards editor focused on digital identity and trust. He founded Namefi, edits Ethereum Improvement Proposals, and previously led smart-contract architecture work at Google Labs.
His work sits at the intersection of naming, ownership, and the systems people use to establish identity online. That perspective makes him especially interested in the way names move between personal meaning, public recognition, and digital infrastructure.
For Namefi, Victor edits and writes about domains as durable digital identity: how names become ownable onchain assets, how tokenization changes custody and trust, and what naming can learn from the systems people use to establish identity online.
Related guides
- Why MCP Exists When We Already Have REST APIs and CLIsAgents can already call REST and run shell commands. The design case for MCP — runtime discovery, typed tools, auth — and where curl is still right.
- What Is an Agent-Native Domain Registrar?Registrars have had APIs for decades, but an API alone isn't agent-native. The checklist: discovery, docs, errors, payment, and policy hooks.
- How AI Agents Buy Domains Without a Human (2026)In April 2026, domain registration moved into the agent layer. How AI agents search, price, and register domains — and the guardrails that still matter.
- "AI Domain Search" Means Two Different Things in 2026"AI domain search" can mean an assistant that suggests or an agent that buys. A two-column test to know which you need and where to get each.