When software holds the wallet

Crypto and AI ran as separate waves of excitement for years. In 2026 they meet on one practical question: how does software pay. An agent that buys data, calls a paid service or books a trip needs money it can spend without a person typing in a card number. Crypto offers one answer: a wallet the agent can use, filled with stablecoins, tokens designed to hold the value of a dollar.

We build apps with wallets in Werk, our product for apps and digitalisation built with AI, so we know both the appeal and the ways it fails. Here is what exists, what the numbers show, what the rules now say and what a company should watch.

How an agent pays

The best known attempt is x402, an open protocol Coinbase released in May 2025. It builds on 402, Payment Required, a status code the web has carried for decades without a common way to use it. Cloudflare says sites on its network already send more than a billion 402 responses a day, mostly to bots and crawlers.

The flow is short. An agent asks for a paid resource. The server answers with a 402, the price and the recipient. The agent sends the request again with a signed payment, a facilitator checks and settles it, and the server hands over the resource with a receipt. There is no account, no subscription and no card form.

On 14 July the Linux Foundation declared the x402 Foundation operational, with 40 members. Its premier members include Visa, Mastercard, American Express, Stripe, Adyen, Google, AWS, Shopify, Cloudflare and Coinbase.

The wallet comes separately. Coinbase launched Agentic Wallets in February. An agent gets a wallet for stablecoins with spending caps per session and per transaction, transfers are screened against sanctions lists, and the private keys stay in Coinbase’s infrastructure, out of the agent’s reach. Google built a bridge from the other side. When it announced its Agent Payments Protocol in September 2025, it launched an extension for crypto payments with Coinbase, the Ethereum Foundation and MetaMask.

What is real and what is noise

Every count of this market needs a footnote. Coinbase said in February that x402 had handled 50 million transactions. Raw onchain totals are higher still, and they include wash trading and tests.

In July Visa published a study it had commissioned from the data firm Artemis. After removing identified wash and test activity, it counted about 15 million dollars across 109.6 million transactions from launch to 21 April 2026, mostly on Base, Solana and Polygon. The average payment was a fraction of a cent. Visa funded the work. Even so, the conclusion is plain: the machinery works, and the money is small so far.

The same report draws a useful line. Macro commerce is an agent buying for a person, a flight or a subscription, at ordinary prices, and it runs on the card rails that already exist. Micro commerce is software paying software for an API call or a slice of compute, usually well under a dollar, where fixed card fees make no sense. Stablecoins have a real case in the second. In the first, the card networks already carry the payment.

Bigger claims need more caution. The Bank for International Settlements found in its 2025 annual report that stablecoins perform poorly against the tests a monetary system has to pass, and that they have become a preferred instrument for illicit use. A token that holds a dollar is useful plumbing. It is not yet a new financial system.

The rules have arrived

In the United States, the GENIUS Act, signed on 18 July 2025, is the first federal law for payment stablecoins. Issuers must hold reserves of 100 percent in liquid assets such as dollars and short term Treasuries, publish their composition every month, pay holders no interest and run anti money laundering programmes. If an issuer fails, holders come first. Issuers must also be able to freeze tokens when the law requires it.

Regulators had a year to write the detailed rules and did not make it. On the deadline, 18 July 2026, the main packages from the OCC, the FDIC, the NCUA and the Treasury were still proposals, The Block reported. The law still takes effect on 18 January 2027 at the latest.

In the EU, MiCA has applied in full since December 2024 and covers electronic money tokens and asset referenced tokens, the categories stablecoins fall into. The last transitional period ended on 1 July 2026. ESMA told providers without authorisation to stop taking on EU clients and wind down, and warned their clients that they do not benefit from MiCA safeguards, including the protection of their assets.

For a company this is practical. Which token an agent holds, and who keeps it, now carries legal weight on both sides of the Atlantic.

Where it goes wrong

A wallet turns every weakness of an agent into a financial one. A research paper from 2025 showed that agents built on ElizaOS, a framework for agents that work with crypto, could be steered into unauthorised transfers by false records planted in their memory. Defences that filter prompts offered little protection once the stored context was poisoned, and the models were far more vulnerable to these memory attacks than to ordinary prompt injection.

Custody is the second risk. Whoever holds the keys holds the money. An agent with its own keys can be talked out of them. A wallet provider is a counterparty, with its own licence or the lack of one. And a stablecoin transfer, once settled, has no chargeback. The freeze the GENIUS Act requires is a tool for the authorities, not for a customer who paid the wrong address.

Scams are the third. Chainalysis estimates that crypto scams took in a record 17 billion dollars in 2025. Impersonation scams grew by more than 1'400 percent, and operations with onchain links to AI vendors took in about 4.5 times as much per operation as those without. An agent that pays on its own is a new target for the same people: a fake service, a fake invoice, a page written to persuade a machine rather than a person.

What a company should watch

Start with the job, not the coin. If an agent buys for a person, the card networks are the obvious route. Stablecoins earn their place where software pays software, in amounts too small for a card.

Keep the keys away from the model. Give every agent wallet a cap per transaction and per day, a list of services it may pay, and a person who approves anything above a threshold. Treat every paid service an agent uses like a new supplier. Know who holds custody and under which licence. And book every payment with the agent that made it and the person who authorised it.

That is how we build it. In Twin, a company’s AI brain, an action that moves money gets the same treatment as every other risky one: rules and approvals by role, the identity of the person who asked, and every step logged. Today Twin drafts and prepares, and people decide and send.

Agents are good at finding the cheapest data feed in seconds. Whether the company should pay for it at all, and who answers for the money, remains a judgement a person makes and signs for.

The plumbing for machine payments is being built in public, by the same companies that run today’s payments. It is worth learning now, on small amounts, with a person holding the limit.