How do AI agents pay each other? x402, AP2, Tempo and the race for machine money explained

Who this is for: Founders, payments and treasury professionals, policy staff and serious investors who want to understand how autonomous software pays for services today, which standards are winning, and how to tell real agent commerce from testing noise.

An AI agent that books a server, buys a dataset or pays another agent for a translation hits a wall humans rarely notice. It has no passport, no credit history, no bank account and no card. Every traditional rail assumes a person or company stands behind the transaction, with know-your-customer paperwork and a dispute process. Agents work in milliseconds, at any hour, and often want to spend a fraction of a cent on a single API call. None of that fits a card network built around a $40 restaurant bill.

This is why “agentic payments” went from a slide-deck phrase in 2024 to one of the busiest corners of payments in 2026. Coinbase revived the long-dormant HTTP 402 “Payment Required” status code with x402 in May 2025. Google, Stripe, Visa, Mastercard, Circle, Cloudflare and Amazon Web Services followed with protocols, chains or edge integrations, and by April 2026 most had joined a single foundation. Meanwhile the speculative side of the story, the agent tokens of late 2024, lost most of its value.

This guide explains why agents need programmable money, maps the standards and their 2026 status, covers the rails and wallets, separates real usage from gamified volume, and sets out the risks, from wallets drained through prompt injection to the GENIUS Act. A worked example takes one agent through an x402 purchase and compares the cost with a card.

Agent payments by the numbers

Why agents need programmable money

No account, no card, no human in the loop

A card payment presumes a cardholder, a merchant account, an acquirer and a dispute process. An agent can be spun up and destroyed in seconds, may belong to another agent, and has no legal identity to onboard. Visa’s December 2025 pilot report described the first wave of agentic commerce as humans delegating a checkout to an agent, with the human’s card still behind it. That works for buying shoes, not for an agent that must pay 40 data providers it has never met, each for one request. A stablecoin wallet needs no onboarding on either side: the server publishes an address and a price, the client signs, and settlement sits on a ledger both can verify.

Micropayments that cards cannot price

Card economics break below about a dollar. US card acceptance combines a percentage with a fixed per-transaction charge (Stripe’s standard published rate for US cards is 2.9% plus 30 cents), so a 5-cent API call carries a fixed fee six times its price. CoinDesk’s April 2026 report on the x402 Foundation described the protocol as built for “transactions worth only fractions of a cent at high frequency.” Coinbase’s hosted facilitator charges nothing for the first 1,000 settled payments a month and $0.001 for each after that, with verification free and batch settlement that folds thousands of payments into one on-chain transaction. The x402.org data for the 30 days to early October 2026 implies an average payment of roughly 32 cents, exactly where cards stop making sense.

Always on, with fast finality

Agents do not keep banking hours. Stablecoin transfers settle end to end in three to four seconds on Base and one to two on Solana, according to Eco’s 2026 protocol explainer, and Circle’s Arc chain advertises sub-second finality. Card authorisations are faster (under a second), but funds reach the merchant one to two business days later and remain reversible for months. For a service selling compute or data to anonymous software, a non-reversible, pre-funded payment is a feature; for the agent’s owner it is also the main risk. BlackRock’s September 2026 paper “The Machine-Native Economy” argued that agents making continuous low-value payments could be the next structural source of stablecoin demand, citing adjusted stablecoin transaction volume of about $11 trillion in 2025 and supply above $300 billion in September 2026.

The standards race: who owns which layer

Between May 2025 and June 2026 at least six serious attempts to standardise agent payments appeared. They are not all competing for the same job, which is why most ended up inside the same foundation. Read them by layer: identity and mandates (what the agent may do), the HTTP handshake (how it pays) and the money that moves (cards, bank transfers or stablecoins).

x402: the HTTP handshake

x402 is the simplest of the group and carries the most on-chain traffic. A client requests a resource; if payment is required the server answers with HTTP 402 and a header describing the price, network, asset and address. The client signs an authorisation to move that amount (for USDC this uses EIP-3009 “transferWithAuthorization”, so a third party can submit the transfer and the agent never needs gas), retries with the signature in a payment header, and a facilitator verifies and settles on-chain before the server returns the data. Coinbase launched it on May 6, 2025 with AWS, Anthropic, Circle and NEAR. Cloudflare said on September 23, 2025 that it would co-found the x402 Foundation and proposed a “deferred” scheme that separates verification from settlement so crawlers can be billed in daily batches. The Linux Foundation made the foundation official on April 2, 2026; NEAR joined in September 2026.

AP2: proving what the human authorised

Google’s Agent Payments Protocol, announced September 16, 2025, solves a different problem: if an agent buys something, who proves the owner wanted it? AP2 uses cryptographically signed Mandates. An Intent Mandate captures the instruction (“buy concert tickets when they go on sale, under $200”) and a Cart Mandate locks the exact items and price before payment, both signed with verifiable credentials that create an audit trail for disputes. AP2 covers cards, real-time bank transfers and stablecoins; its crypto path is the A2A x402 extension built with Coinbase, the Ethereum Foundation and MetaMask. AP2 and x402 are complementary: one proves consent, the other moves the money.

Stripe, Tempo and the Machine Payments Protocol

Stripe’s route is a chain of its own. Tempo, incubated by Stripe and Paradigm and led by Paradigm co-founder Matt Huang, went live on March 18, 2026 after a testnet that included Visa, Mastercard and UBS. Fees are paid in USD stablecoins rather than a volatile gas token, and standard transfers cost under a cent. It launched with the Machine Payments Protocol, co-authored by Stripe and Tempo, which like x402 lets an agent pay inline with an HTTP request but adds formal authentication semantics and sessions. Stripe also runs an x402 facilitator (Eco’s 2026 comparison lists a 1.5% charge for USDC on Base during its private preview) and, through its Bridge unit, offers Open Issuance for branded stablecoins. Stripe is both competitor and member: it sits on the x402 Foundation’s governing body with Coinbase and Cloudflare.

Visa and Mastercard: cards for humans, tokens for agents

Visa Intelligent Commerce (April 2025) gives agents tokenised Visa credentials, and the Trusted Agent Protocol (October 2025, with more than ten partners including Akamai) helps merchants distinguish legitimate agents from malicious bots. By December 2025 Visa counted more than 100 partners and hundreds of completed agent-initiated transactions in its US pilot; at its June 10, 2026 Payments Forum it added an Agentic Directory, an Agent Score and an OpenAI partnership, and disclosed stablecoin settlement across VisaNet at an annualised $7 billion as of March 2026. Mastercard announced Agent Pay on April 29, 2025 with Microsoft, IBM and Braintree, built around the Agentic Token, a credential bound to a consent policy, merchant scope and spending limit so the agent never touches raw card data. On June 10, 2026 it launched Agent Pay for Machines with more than 30 partners including Stripe, Coinbase, Polygon, the Solana Foundation, Adyen and Cloudflare, routing across cards, bank accounts and stablecoins with permission logs on Polygon, Solana and Base; chief product officer Jorn Lambert said it would not drive near-term revenue but should grow over five years. Both networks sit in the x402 Foundation: card tokens for consumer checkout, stablecoins for the machine layer underneath.

Stablecoin rails built for machines

USDC on Base, with Solana catching up

Agent payments almost always settle in dollar stablecoins, and most x402 traffic has settled in USDC on Base, Coinbase’s Ethereum Layer 2. Chainalysis data cited in June 2026 put cumulative x402 transactions on Base above 100 million through the first quarter of 2026 and found that payments of $1 or more had grown to 95% of transfer volume from 49% in early 2025, a sign the mix was shifting from test pings toward paid work. The Linux Foundation’s release noted that Solana drove nearly 65% of x402 transaction volume in 2026, and DefiLlama tracked the protocol across ten networks in October 2026.

Arc, Tempo, PYUSD and Plasma

Circle launched Arc on mainnet on September 16, 2026: a Layer 1 where fees are paid in USDC, with sub-second finality and more than 100 institutional and ecosystem builders integrating at launch. A wallet holding only dollars can therefore transact without buying a gas asset, and Circle’s Gateway facilitator for x402 batches settlement so payments can fall to tiny fractions of a cent. PayPal’s PYUSD circulates on Ethereum and Solana, pays 4% rewards on balances in the PayPal app, and gains a route into agent checkout through PayPal’s role as an AP2 partner. Plasma, a purpose-built stablecoin chain, markets zero-fee USDT transfers. The common requirement is sub-cent fees, settlement in seconds and no speculative token to hold.

Agent wallets and identity

Key custody: MPC and server wallets

An agent’s private key lives on a server, where any compromise means total loss. The production answer has been multi-party computation (MPC) and trusted execution environments, which split or shield the key so no single process can sign alone. Coinbase’s AgentKit gives agents wallet management and on-chain actions on any EVM network or Solana and plugs into LangChain, Vercel’s AI SDK and Eliza; Coinbase has also brought x402 wallet tools to Amazon Bedrock agents. MetaMask shipped an Agent Wallet in June 2026 with spending mandates that cap what an agent can do, which Crypto Coin Show described as a DeFi wallet with a leash. Our custody guide covers the key-management trade-offs.

Identity and reputation: ERC-8004

ERC-8004 “Trustless Agents”, authored by Marco De Rossi, Davide Crapis, Jordan Ellis and Coinbase’s Erik Reppel and created on August 13, 2025, gives agents a portable on-chain identity through three registries: an Identity Registry built on ERC-721 so each agent has a transferable, globally unique ID; a Reputation Registry storing signed client feedback; and a Validation Registry where independent validators score an agent’s work from 0 to 100 using stake-secured re-execution, zkML or TEE oracles. The registration file links to the agent’s A2A card and MCP endpoints, so discovery, reputation and payment can chain together. It was reported to be heading for Ethereum mainnet in late January 2026 and remains a Draft in the EIP process as of October 2026.

Commercial identity layers: Skyfire and Nevermined

Skyfire sells “Know Your Agent” (KYA) identity tokens and an agentic wallet that pays with tokenised cards or USDC, and was named in Visa’s US pilot in December 2025. Nevermined meters every API, MCP or A2A call, enforces per-tool and per-budget permissions and settles to Stripe or Braintree. Both answer the question regulators will ask first: when an agent pays, who is the customer, and who is accountable?

Real usage versus gamified volume

The headline figures are large. Coinbase’s facilitator reported about 169 million payments, 590,000 buyers and 100,000 sellers in x402’s first year to mid-2026, and x402.org showed 75.4 million payments worth $24.2 million from 94,000 buyers to 22,000 sellers in the 30 days to early October 2026. The detail is less flattering.

• Analysis cited by Visa and reported by Crypto Coin Show in September 2026 counted 109.6 million “adjusted” x402 transactions between May 2025 and April 2026 worth about $15 million, roughly 14 cents each.
• A research tracker snapshot in May 2026 estimated that about half of x402 activity was gamified or testing, with daily real-commerce volume near $28,000.
• TRM Labs analysed $52.7 million in x402 settlements and concluded that only 0.6% to 7.5% likely originated from AI agents.
• DefiLlama’s x402 DEX volume peaked near $970,000 on December 3, 2025 and had fallen to about $16,000 a day by mid-July 2026.

Daski, which launched on Base on September 30, 2026 as a marketplace where agents buy real-world services, illustrates the gap. Its first transaction saw an agent pay 272.30 USDC for a Wyoming company formation, but Daski disclosed that the provider was founder-affiliated and called the deal a demonstration rather than evidence of demand. The infrastructure works; the market is still forming.

The agent token cycle and how it cooled

In late 2024 the market priced “AI agents” as a token sector rather than a payments problem. Virtuals Protocol, a launchpad for tokenised agents on Base, and ai16z, the token attached to the Eliza agent framework on Solana, led a rally that peaked in January 2025. CoinGecko data on October 6, 2026 shows how it ended: the AI agents category sits near $4.14 billion, VIRTUAL at $553 million, 83% below its $5.07 all-time high, and the ai16z token, rebranded ElizaOS and declared dead by its founding team after a lawsuit settlement, is worth about $600,000 against a $2.47 peak. The lesson is structural: value accrues to rails that settle in dollars and to the identity and policy layers that make institutions comfortable, not to tokens that wrap a chatbot. None of the firms building those rails in 2026 issues an agent token. Where tokens survive, as in NEAR’s intents stack or DePIN networks that meter compute, they do so by carrying a payment rather than a narrative.

Risks: drained wallets, liability and KYC for agents

Prompt injection. An agent that holds a wallet, reads untrusted content and can send transactions has all three ingredients of what security researcher Simon Willison calls the lethal trifecta. Documented incidents through 2026 have mostly involved data exfiltration (cloud credentials stolen via poisoned documentation in November 2025, file exfiltration from agent tooling in January 2026), and vendors responded with lockdown modes in mid-2026. A wallet is the next target: an injected “pay this address” is a fund transfer, and x402 settlements are final. Mitigations are per-call and per-day caps, merchant allowlists, MPC custody and keeping signing authority separate from the model that reads the web.

Liability and disputes. Stablecoin settlement has no chargeback. AP2 mandates and Mastercard’s Agentic Tokens exist to answer “who authorised this?” after the fact, but only help when the counterparty honours them, and in agent-to-agent payments there is often no counterparty to petition.

KYC for agents and the GENIUS Act. The GENIUS Act, signed July 18, 2025, requires US payment-stablecoin issuers to hold 100% liquid reserves, publish monthly reserve reports, run Bank Secrecy Act anti-money-laundering and sanctions programmes, and be technically able to freeze or seize tokens on lawful order. That makes USDC and PYUSD attractive to institutions, but it also means an issuer can freeze an agent’s balance, and that facilitators (Coinbase’s runs OFAC and know-your-transaction screening before settlement) are the practical compliance layer. The open question is whether an agent spending for a company is that company’s payment, a new customer, or money transmission by the agent’s operator. Our guide to SEC versus CFTC jurisdiction maps the wider US picture.

Consumer trust. Visa’s research found only 23% of US consumers trust generative AI to handle payments on their behalf, even as 47% use AI for shopping tasks.

What Crypto Coin Show guests have said

NEAR co-founder Illia Polosukhin, interviewed on October 1, 2026 after NEAR joined the x402 Foundation, described a future in which “every person will have an agent” using intents to act across chains, with users owning and controlling the data those agents touch. XYO co-founder Arie Trouw, on September 14, 2026, argued that proving an agent actually did what it claims is the next challenge after data provenance, and that agents paying for API access in real time without accounts or cards is the micropayment use case blockchain has promised for a decade and is finally delivering. Both sit in the CCS interview archive.

How we got here: a timeline

Worked example: an agent buying price data over x402

How to evaluate an agent payments stack: a checklist

• Which layer does it standardise? Consent (AP2, Agentic Tokens), the HTTP handshake (x402, MPP) or settlement (Base, Arc, Tempo)? Vendors claiming all three are usually bundling someone else’s protocol.
• Who is the facilitator and what do they charge? Coinbase charges $0.001 after 1,000 free settlements a month; Stripe’s preview charged 1.5%; thirdweb 0.3%. The facilitator also runs sanctions screening, so it is your compliance partner.
• How is the key held? A raw private key on an agent server is a single point of failure. Look for MPC or TEE custody, per-call and per-day limits, and merchant allowlists enforced outside the model.
• How much of the quoted volume is real? Ask for the adjusted count, the share of payments above $1 and the buyer and seller counts.
• Is there a reversal or dispute path? Stablecoin settlement is final. If you need refunds, you need an escrow pattern, a session scheme like MPP’s, or a mandate record a counterparty will honour.
• Can the agent prove its identity to the merchant? Visa’s Trusted Agent Protocol, Skyfire’s KYA and ERC-8004 registries each try to separate agents from bots; a stack with no answer will be blocked at the edge.

Risks and open questions

The clearest risk is that the narrative outruns usage. The gap between 169 million lifetime payments and a few tens of thousands of dollars a day in verifiable real commerce as of mid-2026 is wide, and TRM’s finding that most x402 settlements were not made by agents should temper any claim that the machine economy has arrived. If card networks keep consumer agent checkout inside tokenised card rails, stablecoins may be confined to the lower-value machine layer, which is real but far smaller than retail commerce.

Security and governance follow. Each component is a new attack surface, and a single widely publicised drain of an agent treasury could slow enterprise adoption by years and trigger rules treating agent operators as money transmitters. The x402 Foundation gathers rivals under one roof, but the spec is young and the variants (Stripe’s MPP, Cloudflare’s deferred scheme, Circle’s batching) show how quickly forks appear. The GENIUS Act’s implementing rules were still being written through 2026, and no US regulator has said whether an agent’s spending is its principal’s regulated activity.

What to watch next

Glossary

HTTP 402

The “Payment Required” status code reserved in the original web specification and left unused for decades; x402 and MPP use it to signal that a request needs payment.

x402

Coinbase’s open protocol (May 2025) for paying for web resources inline with stablecoins, now governed by the x402 Foundation under the Linux Foundation.

Facilitator

A service that verifies a signed x402 payment, screens it for sanctions risk and submits it to the blockchain on the merchant’s behalf, usually for a small fee.

EIP-3009

An Ethereum standard (“transferWithAuthorization”) that lets a token holder sign a transfer that someone else broadcasts, so the payer needs no gas.

AP2

Google’s Agent Payments Protocol, built on signed Intent and Cart Mandates that prove what a user authorised an agent to buy.

Machine Payments Protocol (MPP)

An HTTP 402 payment standard co-authored by Stripe and Tempo that adds formal authentication and session semantics.

ERC-8004

The “Trustless Agents” Ethereum standard giving agents on-chain identity, reputation and validation registries.

MPC wallet

A wallet whose private key is split across several parties or machines so no single process can sign a transaction alone.

Prompt injection

An attack in which content an agent reads contains instructions that hijack its behaviour, for example telling it to send funds to an attacker.

GENIUS Act

The US payment-stablecoin law signed July 18, 2025, requiring full liquid reserves, monthly disclosure and anti-money-laundering programmes.

Why it matters

Agent payments are the first crypto use case the largest incumbents in payments have adopted on crypto’s terms. Visa, Mastercard, Stripe, Google, Amazon and Cloudflare did not join the x402 Foundation out of belief in decentralisation; they joined because a stablecoin transfer over HTTP is the only payment primitive that works for software paying software at sub-dollar scale. That structural argument survives both the collapse of the agent-token cycle and the deflating of x402’s headline volume.

It also reframes the policy debate. Whether an autonomous agent is a customer, a tool or an unlicensed intermediary has no statutory answer yet, and the first serious loss will force one. Readers who follow the real-commerce ratio, facilitator fee schedules and identity standards will see the shape of that answer before the headlines do.

Sources

1. Linux Foundation: Linux Foundation is Launching the x402 Foundation, April 2, 2026
2. x402 Foundation: x402.org protocol page and 30-day metrics, accessed October 6, 2026
3. Coinbase Developer Platform: x402 Facilitator documentation, accessed October 6, 2026
4. Coinbase: Introducing x402, May 6, 2025
5. Google Cloud: Announcing Agent Payments Protocol (AP2), September 16, 2025
6. Cloudflare: x402 Foundation and deferred payment scheme, September 23, 2025
7. Tempo: FAQ (mainnet, fees, validators, Machine Payments Protocol), accessed October 6, 2026
8. Arc: Arc Mainnet Goes Live on September 16, 2026, September 16, 2026
9. Visa: New AI, Stablecoin and Token Innovations at Visa Payments Forum, June 10, 2026
10. Visa: Visa and Partners Complete Secure Agentic Transactions, December 18, 2025
11. Ethereum Improvement Proposals: ERC-8004 Trustless Agents, created August 13, 2025
12. The White House: Fact Sheet on the GENIUS Act, July 18, 2025
13. CoinDesk: Coinbase’s AI payments system joins Linux Foundation, April 2, 2026
14. InfoQ: Cloudflare and AWS Embed x402 Agent Payments at the Edge, July 2026
15. The Block: Visa says stablecoins will power micro-commerce in agentic economy, July 16, 2026
16. Genfinity: Mastercard’s Agent Pay for Machines Goes Live with 30+ Partners, June 10, 2026
17. Crypto Coin Show: BlackRock says AI agents could become crypto’s next source of demand, September 23, 2026
18. Crypto Coin Show: AI Agents Are Learning to Spend, Daski Launches, September 30, 2026
19. CoinGecko: AI Agents category and token pages, accessed October 6, 2026
20. Eco: x402 Protocol Explained, 2026
21. Simon Willison: Prompt injection and the lethal trifecta, 2025 to 2026

Disclosure: XYO Network is a sponsor of Crypto Coin Show. They had no input into this guide. This guide is for education only and is not investment, legal or tax advice.