Cloudflare Gave AI Agents a Wallet and an ID: How Agentic Commerce Actually Works

The buy-side announcement followed the launch of Cloudflare's Monetization Gateway in July 2026, which lets websites, APIs, and MCP tools charge AI agents for access . Together, the two products give Cloudflare both the sell side and the buy side of agent payments .

How the system works

The Cloudflare payment system has three main components: wallet architecture, payment protocols, and identity.

Two-tier wallet architecture. An Account Wallet, owned by the human, holds stablecoins and sets overall policy. From it, users issue Virtual Wallets to individual agents, each with a spending cap, a merchant allow list, and a maximum per-transaction limit . An agent cannot spend beyond the rules set by its owner .

Payment protocols. Cloudflare's Agents SDK supports the x402 protocol (which revives the HTTP 402 Payment Required status code, pioneered by Coinbase) and the Machine Payments Protocol (MPP) . Both use stablecoin micropayments over HTTP, enabling sub-cent transactions for API calls, data access, and content . The flow works like this: a client requests a resource, the server responds with 402 and a payment challenge, the client fulfills the payment and retries with a payment credential, and the server verifies and serves the resource .

Identity and trust. Merchants see the agent's cloudflare.pay handle and can verify the agent is authorized — solving the "is this bot legitimate?" problem that has blocked agent-to-merchant commerce . Users can optionally remain pseudonymous .

The bigger picture: agentic commerce

The Cloudflare announcement reflects the rise of agentic commerce — an internet where AI agents (research bots, shopping assistants, coding agents) browse, negotiate, and purchase on behalf of humans without requiring a person to manually enter a credit card each time . Cloudflare is positioning itself as the infrastructure layer that provides both identity (who sent this agent?) and payment (how does it pay?) for this emerging economy .

The announcement completes a year-long buildout for Cloudflare in agentic commerce :

1. Authentication layer — Web Bot Auth (October 2025), co-developed with Visa, Mastercard, American Express, Microsoft, Shopify, Checkout.com, Worldpay, and Adyen .
2. Sell side — Monetization Gateway (July 2026) for websites to charge agents .
3. Buy side — Cloudflare Wallets + cloudflare.pay (August 2026) for agents to pay .

Who Cloudflare is working with

Cloudflare has been collaborating deeply with the incumbent payments industry. Key partners include:

• Visa — Co-developed the Visa Trusted Agent Protocol (TAP), announced October 2025, which signs agent identity into HTTP request headers using HTTP Message Signatures (RFC 9421). Visa positions TAP as complementary to ACP and x402 .
• Mastercard — Launched Agent Pay for Machines in June 2026, with Cloudflare among 30+ launch partners including Adyen, Ant International, BVNK, Checkout.com, Coinbase, OKX, Stripe, Tempo, and others .
• American Express — Part of the initial Web Bot Auth collaboration in October 2025 .
• Other Web Bot Auth co-developers — Microsoft, Shopify, Checkout.com, Worldpay, and Adyen .

Who else is building in agentic commerce

The agentic commerce space is crowded across several layers. Here are the main players:

Payment protocols and wallets

• Coinbase — Originator of the x402 protocol; launched Agentic Wallets in February 2026 for agents to hold and spend USDC .
• Stripe — Integrated x402 for USDC agent payments; co-developed the Agentic Commerce Protocol (ACP) with OpenAI .
• PayPal — Rolled out its own agent commerce program in 2026 .
• Skyfire — Pure-play x402 infrastructure startup (cumulative funding ~$15M) focused on agent-to-service micropayments .
• Halliday — Agent escrow and multi-hop settlement on x402 (~$10M cumulative) .
• Nekuda — Secure Agent Wallet SDK .
• Basis Theory — PCI-compliant vault for agent payments .

Protocols and standards

• ACP (OpenAI + Stripe) — Checkout conversation protocol between agents and merchants .
• UCP (Google + Shopify) — Universal checkout protocol .
• AP2 (Google + payment networks) — Agent payment protocol .
• MCP (Anthropic) — Model Context Protocol for tool access .
• A2A (Google) — Agent-to-agent communication .

AI platforms driving agent shopping
ChatGPT, Google AI Mode, Perplexity, Microsoft Copilot, Meta AI, and Amazon Rufus are all building the shopping-side interfaces that agents will use .