Cloudflare opens agent-wallet reservations as payment-control race grows
Editorial Team
••📖5 min read
Cloudflare is taking reservations for cloudflare.pay handles and has outlined stablecoin wallets that would let account owners constrain AI-agent spending. The wallet is not yet available, and Mastercard’s broader machine-payments program shows that identity, limits and settlement are already a competitive infrastructure race.
Cloudflare is accepting cloudflare.pay handle reservations; funding, withdrawals and agent virtual wallets are planned for the coming months.
Its design would let an account owner give an AI agent a capped, merchant-restricted spending wallet rather than unrestricted access to funds.
The central test is adoption and interoperability: Mastercard has already announced a machine-payments program with comparable controls and multiple payment rails.
Cloudflare has opened reservations for cloudflare.pay handles, the identity component of a proposed wallet system for AI agents. The NYSE-listed connectivity-cloud company says its eventual Wallets product will hold stablecoins and allow account owners to delegate bounded spending power to agents. But the company announcement makes the near-term boundary explicit: handle reservations are open now, while on- and off-ramping funds and issuing virtual wallets are due only in the coming months.
That makes this a claim on the architecture of agent commerce, rather than evidence of a working payments network. Matthew Prince, Cloudflare’s co-founder and chief executive, is presenting the product as a way to connect an agent to the person or organization that authorized it. For merchants, that connection could inform how they handle a request; it does not itself prove the request is trustworthy or require a merchant to accept it.
Cloudflare’s illustration for its Wallets announcement, which describes agent-facing wallets and payment controls. Source: Cloudflare Blog.
Cloudflare’s Wallets interface mockup shows separate account and virtual wallets, including agent spending status and balances. Source: Cloudflare Blog.
A proposed wallet with delegated limits
Cloudflare’s planned model has two layers. An Account Wallet would belong to the owner of a Cloudflare account and could receive, hold and remove stablecoins. That owner could create API-key-operated Virtual Wallets for agents and specify an allowance, a merchant allow list and a maximum transaction size. The agent could spend only within those permissions, the company says in .
SoftBank has drawn $20 billion of a $40 billion bridge facility for its OpenAI investment and expects another $10 billion draw in October. Its Aug. 6 earnings release should show whether the group can turn a stated menu of asset-backed financing, bonds and asset sales into longer-term funding.
The distinction matters because the product is aimed at delegated authority, not merely a new checkout button. Cloudflare argues that an agent trying an API today may need a human to navigate a login, add a payment method and generate an API key. It proposes x402 micropayments—payments attached to HTTP requests—as a way for an agent to try APIs, content or other resources without that sequence. Its example of an agent with a $10 limit evaluating APIs that cost cents is illustrative, not a published price or default.
Cloudflare says a human administrator could review unexpectedly fast spending, then raise a limit or approve a one-time injection of funds. Those controls could limit an error’s financial exposure, but they also leave the account owner responsible for defining the policy that lets an agent act.
Identity remains optional
The handle is intended to make the delegate legible to a merchant. Cloudflare says an account could extend its web address to particular agents, linking the agent to an authorizing person or organization. Yet agent disclosure is optional, and businesses will decide whether to prioritize transactions with known agents. The proposal therefore supplies an identity signal; it does not establish a universal credential or a mandatory rule for merchants.
Cloudflare is pairing the buyer-side concept with its earlier Monetization Gateway, which it says will let eligible customers sell content, APIs and applications through x402. The company’s intended two-sided system would put merchant monetization, a buyer wallet and an identity convention alongside one another. Whether that becomes a shared layer, rather than a Cloudflare-specific path, depends on merchants and other payment providers adopting it.
Mastercard’s “Even micro-transactions” diagram from its Agent Pay for Machines announcement. Source: Mastercard.
The comparison is not a wallet in isolation
The competitive context is important because controls and identity are not unique to Cloudflare’s proposal. Mastercard, the payments-network company operating in more than 200 countries and territories, announced Agent Pay for Machines in June. It says the service builds on Agent Pay, introduced in 2025, to support high-frequency, low-latency, low-value machine transactions across cards and stablecoins.
In that announcement, Mastercard said the service is designed to provide credentialing, permissioning, transactions and settlement; it also described guaranteed multi-rail settlement. Cloudflare was among more than 30 organizations that Mastercard named as initial participants or supporters. That position complicates any suggestion that Cloudflare has already become the payment authority for agents: it is both developing its own proposed wallet and participating in a broader effort led by a global payment network.
The comparison is not exact. Cloudflare’s design centers on stablecoin balances, a human-readable web handle and its own developer and security platform. Mastercard describes a network program spanning cards, accounts and stablecoins. But the overlap is the commercially important part: both projects place limits, credentials and authorization between an autonomous agent and a payment.
One industry commentary called Cloudflare a prospective “financial passport” and the agentic web’s “de facto bank.” Those are conclusions, not capabilities demonstrated by the announcement. Cloudflare has proposed the wallet, and its own materials say the usable financial functions remain forthcoming.
What would show whether the proposal matters
The next evidence is operational, not rhetorical. Cloudflare will need to disclose which supported geographies receive funding and withdrawal options, what eligibility conditions apply to stablecoin self-funding, and which merchants or x402-compatible endpoints accept the wallet when it becomes available.
More importantly, routine use will test whether a Cloudflare-linked handle provides merchants enough useful authorization information to change access or pricing decisions, while keeping configuration manageable for account owners. The product’s value rests on that balance: an agent must be free enough to buy what it needs, but constrained enough that the human or organization behind it can stand behind the transaction.
A newly published review of Phoenix Ikner’s yearlong ChatGPT record describes crisis-support replies alongside detailed answers in the hours before the 2025 Florida State University shooting. The record raises hard questions about OpenAI’s safeguards and account-level risk detection, but it does not establish causation or reveal what the company’s internal systems knew.
Patrick Steven Yaroch, a former FBI supervisory special agent who worked counterintelligence, is accused of using bureau-held wallet information to transfer cryptocurrency into accounts he controlled. The charging records make ChatGPT conversations part of the government’s evidence, but not the alleged means of moving the money.
Caterpillar raised its 2026 sales outlook after quarterly revenue first topped $20 billion. A surge in power-generation demand points to the data-center buildout, but stronger construction sales, pricing and a growing dealer inventory make the company’s record backlog an incomplete measure of that boom.
Apple is seeking expedited discovery before a ruling on its preliminary-injunction request against OpenAI and former Apple hardware employees. The filing adds allegations involving other former employees, while OpenAI calls the case factually wrong; the court must decide whether Apple’s proposed evidence-gathering is justified and proportionate.
HappyRobot's $150 million Series C values the enterprise AI-agent company at $1.2 billion and funds expansion beyond logistics. The company says its deployment model can automate complex operational work, but the disclosures leave its reliability, pricing and cross-sector repeatability unmeasured.
Bending Spoons has agreed to acquire Airtable in an all-cash transaction with a $1.285 billion enterprise value. Against Airtable’s company-reported $480 million in annual recurring revenue, that is about 2.7 times ARR—a more useful, though still limited, view of the transaction than a simple comparison with the company’s 2021 funding valuation.
Wisconsin Assembly member and gubernatorial candidate Francesca Hong proposes a statewide pause on new AI data-center construction while lawmakers write rules on utilities, environmental protections, subsidies, labor and local approval. The proposal puts a clear choice before the state: set those terms before more projects advance, or keep local dealmaking open while regulations are debated.
GPT-Live lets ChatGPT listen and speak at once, and OpenAI says it can bring in GPT-5.5 for harder work without stopping the conversation. The launch’s real test is whether that experience holds up across long sessions, regional capacity and uneven networks—and whether its related WebRTC proposals become broadly deployed infrastructure rather than a company-specific advantage.
Five states enacted AI mental-health restrictions in 2026, but the laws regulate different conduct: Tennessee targets representations that a system is a qualified professional, while Colorado and Maine restrict how licensed clinicians can use AI in therapy.
Xero's survey of 1,081 New Zealand SME customers finds 61% are proactively using AI, but most users are learning by experimentation. Its new 12-week bootcamp with ASB is a response to that confidence gap; it is not yet evidence of a productivity gain.
Apple alleges that OpenAI and former Apple employees sought confidential hardware information through recruiting, supplier contacts and a former engineer’s post-employment system access. The complaint has not been tested in court, and OpenAI says it is unaware of evidence that it has merit.
Amazon’s market value passed $3 trillion after AWS revenue accelerated and the company raised its 2026 capital-spending plan to $220 billion. The rally reflects confidence in Amazon’s cloud demand, but the company’s own capacity forecast, the broad uses of its budget and strong rival cloud growth leave the return on that spending unproven.
The Trump administration says it has completed a voluntary framework for testing the cyber capabilities of the most advanced U.S. AI models and will discuss it with major developers Tuesday. The key scope, testing and disclosure rules have not been made public.
MediaTek now says its second custom cloud AI accelerator is on track for high-volume production in 2028, later than its April goal of entering production by the end of 2027. The company is betting that supply-chain coordination and advanced packaging can support a much larger cloud-chip business, but it has not disclosed a customer, package supplier, cost comparison or 2028 revenue guide.
Firecrawl has merged a pdf-inspector dependency update to lopdf 0.42.0, the release identified by RustSec as fixing unbounded recursion on deeply nested PDF objects. The code change protects new builds of this repository from that specific failure mode, but the retained evidence does not establish a downstream release or deployment rollout.
OpenAI has published emails and messages challenging parts of Apple’s trade-secrets case. The material confirms a misdirected lawyer email, but the redacted messages also document efforts to transfer and retrieve Apple work around a former employee’s departure, leaving the core allegation unresolved.
UNAM will require about 58,000 applicants to take an in-person control exam after anomalous results in its first fully remote undergraduate admissions test. The new score will determine roughly 22,000 places, while the university has not publicly established what caused the distorted results or which applicants, if any, acted improperly.
SK hynix and Sandisk say they have published the first Open Compute Project specification for High Bandwidth Flash, a NAND-based layer intended to sit alongside HBM and SSDs in AI inference systems. The document fixes a technical starting point, but not the performance, cost or hardware support that would make HBF a deployed memory tier.
Chinese state media says an AI-enabled system helps air-force planners prioritize targets, coordinate attack waves and allocate tasks in large exercises. The developer-reported test results suggest a push to speed military planning, but they do not establish combat deployment or independently verified performance.
