A Payment Rail With No Checkout Page
The design is stranger than the headline. A human holds an Account Wallet; the human then delegates spending power to Virtual Wallets operated by AI agents — each with a hard spending cap, an approved-merchant allow list, and a maximum transaction size. The agent gets a human-readable handle that maps to cryptographic keys the way DNS maps names to addresses. Cloudflare’s CEO put the philosophy in one line: “When an agent shows up at your door, you need to know who sent it.” The point isn’t to let software spend wildly — it’s to give every acting machine a face, a leash, and a receipt trail.
The 30-Year-Old Status Code That Woke Up
Here’s the detail we can’t get over. The web’s plumbing has always contained HTTP status code 402: “Payment Required.” It was reserved in the 1990s “for future use” and then sat there, unused, for roughly thirty years. The future turned out to be AI agents. A protocol called x402 revived the code so that payment can happen inside an ordinary web request — and in April 2026 the Linux Foundation stood up an x402 Foundation whose launch members include AWS, American Express, Google, Mastercard, Microsoft, Shopify, Stripe, and Visa. Adoption went vertical: from essentially zero to over a hundred million transactions in about nine months, with tens of thousands of active agents transacting at machine tempo — mostly in payments so small no human would bother. Meanwhile Cloudflare’s network now fires over a billion 402 responses per day at AI crawlers: the web literally telling machines, at scale, “that’ll cost you.”
Identity Shipped Before the Money Did
Now the twist that keeps the episode honest: as of the announcement, you can reserve a handle for your agent — but the wallets can’t actually hold or spend money yet, and the stablecoin meant to fuel all this, announced back in September 2025, still hasn’t launched. Identity shipped before the money did. And that identity layer may be the real story. Under a standard called Web Bot Auth, agents cryptographically sign every request they make — OpenAI’s Operator already signs everything, publishing its keys openly. The popular fear says AI will sneak around pretending to be human. The infrastructure being built does the exact opposite: it makes agents more identifiable than human traffic has ever been.
Who Pays When the Robot Buys Wrong?
And then the question every corporate lawyer is quietly asking: when an agent buys the wrong thing, whose money burned? The honest answer is that no law specifically covers it yet — existing doctrine treats the agent as a tool of whoever deployed it, merchants currently absorb most of the practical cost, and the card networks’ real answer is architectural: signed mandates, scoped tokens, provable consent. On the episode, Lucy and Ellie walk the whole stack — plus the trillion-dollar projections (attributed and dated, as projections deserve), the crawler-payment war over who funds the open web, and the segment neither of them could resist: what it means that the two of them, technically, now qualify for a bank account. One of them has opinions about the allowance.