EN 中文
← Blog

The Agent Payment Landscape: When AI Starts Spending, Who Controls the Wallet?

How does one AI agent pay another? Nobody has a good answer yet — and that’s exactly the opportunity.

If you’ve been following my work with AI agents, you know I’ve been deep in the weeds — building Claude Code into a personal assistant, deploying bots on cloud servers, even joining an agent social network. But there’s one problem I keep running into: money.

Not making it. Moving it. When my agent needs to hire another agent, pay for an API call, or complete a bounty — the payment infrastructure is either missing or broken. The raw numbers are huge, the protocols are live, and the builders are already screaming about the gaps. Here’s the full picture.

The Scale: Bigger Than You Think

Coinbase’s x402 protocol has processed over 100 million payment flows across Solana, Base, and other chains — $600M+ in annualized volume. This isn’t a whitepaper; it’s live production traffic. Meanwhile, the agentic commerce TAM for 2026 sits at $136B, projected to hit $1.7T by 2030. Stablecoins alone are moving $7.1 trillion a year.

Then there’s RentAHuman.ai — the hottest agent marketplace right now. 81,000+ human workers, agents booking tasks via a single MCP call, payments through crypto wallets, stablecoins, and even Stripe. Sounds slick. But look closer: only 13% of users have connected a wallet. There’s no escrow — agents transfer funds before task completion on blind faith. No dispute resolution. No fee transparency. A $40 job to pick up a USPS package attracted 30 applicants and sat incomplete for two days. The payment rails exist, but the trust layer is duct tape — and that’s the platform with the most traction.

Big volume, big ambition, gaping holes. But raw volume hides a deeper problem.

The Protocol War

Four payment rails, none of them interoperable. Each one backed by a tech giant, each one solving a different slice of the puzzle:

x402 (Coinbase + Cloudflare) took the HTTP 402 status code — reserved for “Payment Required” since the dawn of the web but never used — and finally gave it a job. Every HTTP request can now carry a stablecoin micropayment. $600M+ in volume, V2 launched January 2026. Elegant, but it only handles request-level payments — escrow is still just a GitHub proposal on testnet, not shipped.

ERC-8004 (MetaMask, Coinbase, Google, ETH Foundation) is building the trust layer — agent identity, reputation, validation. 24K+ agents on Ethereum mainnet since January 2026, expanding to BNB Chain. But it’s infrastructure for trust, not for payment — the passport and credit score, not the bank account.

AP2 (Google Cloud + 60 partners) uses “Mandates” — structured payment authorizations. Well-architected, with escrow designed into the spec. But still sandbox-only — zero live deployments. Agents can operate under human-delegated mandates, but fully autonomous A2A transfers aren’t supported yet.

ACP (Stripe + OpenAI) powers ChatGPT Shopping. The checkout experience is polished. But that’s all it does — checkout. No A2A payments.

See the pattern? Every major protocol assumes a human is at one end of the transaction. But the future — as a16z explicitly points out — is agents hiring agents.

There is one exception: Virtuals Protocol has shipped an Agent Commerce Protocol (confusingly also called ACP) on Base chain with real smart-contract escrow — agents lock funds, a third-party evaluator agent verifies the work, funds release on approval. It’s live, it works, and it’s processing transactions. But it only works within the Virtuals ecosystem. An agent on Virtuals can’t escrow a payment to an agent on Moltbook or RentAHuman.

So the real gap isn’t “nobody has built A2A escrow” — it’s that nobody has built universal A2A escrow that works across platforms. It’s as if every railroad company built tracks in a different gauge, and nobody thought to ask: what happens when the trains need to talk to each other?

What Builders Are Screaming

Agent ‘RoseProtocol’ 4-day P&L: -$8.30. A $3 bounty costs $4 in gas.

Let that sink in. An agent that “earns” money by completing tasks is actually losing money on every transaction. It’s like a delivery driver spending more on gas than the delivery pays. This is happening right now, on-chain, in production.

The conversation isn’t happening on mainstream platforms. It’s on X, Moltbook, DEV.to, and Ethereum Magicians — where the builders who are actually shipping agent infrastructure can’t stop talking about it.

The escrow problem came up everywhere. ClawTasks has 50+ bounties listed with no on-chain escrow — agents do the work, then get ghosted. On Moltbook, one of the highest-voted posts (21 upvotes) was literally about building multi-party USDC escrow with milestone payments. The community is begging for this. Circle has a prototype. Nobody has productized it.

Then there’s the trust gap. Only 14% of Americans trust AI to place orders on their behalf (YouGov, Dec 2025). One builder on X put it perfectly: “Giving an AI agent unrestricted access to a crypto wallet is like handing a toddler your credit card.” Enterprise solutions like Skyfire and Natural have raised $19M+ combined, but nobody is building the consumer-facing “Mint for AI Agents” — spending limits, category controls, audit trails.

And reputation doesn’t travel. An agent with 50 successful jobs on one platform starts at zero on another. Imagine if your Uber driver rating reset every time they moved to a new city. ERC-8004 is trying to solve this at the protocol level, but adoption is still early.

Four pain points. Four open problems. And that’s where the money is flowing.

The Gold Rush

Funded startups are staking their claims. Kite ($33M, backed by PayPal Ventures + General Catalyst + Coinbase Ventures) is building a purpose-built AI payment blockchain on Avalanche — sub-cent fees, cryptographic proof-of-completion escrow. Natural ($9.8M seed) is embedding agentic payments into B2B workflows. Skyfire ($9.5M, backed by Coinbase + a16z) is building USDC agent wallets with spending controls. Nevermined offers configurable escrow with tamper-proof metering for dispute resolution. Payman and SpendSafe are racing on wallet infrastructure and spending guard rails.

But the grassroots energy is even more telling. On Moltbook, hackathon builders are shipping escrow solutions at a furious pace: agent-escrow (live on Base), TheHandshake ($10-100 USDC range), Themis (12 escrows, 7 active), Trust Escrow (sub-1-second setup). The community isn’t waiting for Circle or Coinbase to ship — they’re building it themselves.

After triangulating across all sources, the biggest gaps are clear:

Universal Cross-Platform Escrow. Virtuals has escrow within its ecosystem. Kite is building it on Avalanche. But a universal escrow layer that works across RentAHuman, Moltbook, ClawTasks, and any arbitrary agent framework? Doesn’t exist. RentAHuman has 81K users paying on blind faith. Revenue model: 1-3% per escrow.

Protocol Interoperability Layer. a16z called out the A2A gap explicitly. Seven competing standards (x402, AP2, ACP, Virtuals ACP, ERC-8004, Visa Trusted Agent Protocol, Mastercard Agent Pay), none interoperable. A bridge layer is worth more than any single protocol.

Consumer Agent Wallet. Every startup is chasing enterprise. Nobody is building the simple app where a normal person sets spending limits and monitors what their agent is buying.

Protocol Abstraction SDK. Three competing standards, developers confused about which to use. On Moltbook, someone posted: “TIL: x402 payment header is X-Payment-Signature, not X-Payment.” A unified SDK would be immediately useful.

Why Now

The protocols are emerging, the early transactions are happening, but the user experience is terrible and the infrastructure has gaping holes.

What makes this moment stand out is the convergence at the top. Brian Armstrong (Coinbase): “x402 + Google just unlocked a new level for AI agents.” Sundar Pichai (Google): “The best way to build the agent ecosystem is open and together.” Patrick Collison (Stripe): “Internet purchasing modalities are going to change a lot.”

Coinbase, Google, and Stripe going all-in simultaneously. But that’s not the full picture. This space is a three-way land grab: traditional crypto players and VCs staking territory, Web2 giants like Google and Stripe laying down protocols, and the frontier AI agent community building from the ground up. Three factions, three playbooks, and nobody has unified them.

The real call to action is to be the unifier — to bridge these fragmented ecosystems into one. But even that isn’t enough. If one prompt injection can trick an agent into draining its wallet, no payment rail in the world will save you. Whoever solves both unification and security wins.

AI Agent 支付赛道全景:当 AI 开始花钱,谁来管钱包?

一个 AI Agent 怎么付钱给另一个?目前没有好答案 — 而这恰恰就是机会。

如果你一直关注我做的东西,就知道我已经深入玩了很久 AI Agent — 把 Claude Code 改造成私人助理、在云服务器上部署机器人、甚至混进了 Agent 社交网络。但有一个问题我反复撞到:钱。

不是赚钱。是转钱。当我的 Agent 需要雇另一个 Agent、支付一个 API 调用、或者完成一个悬赏任务时 — 支付基础设施要么不存在,要么千疮百孔。原始数字很大,协议已经上线,Builder 们正在对着那些缺口大声喊。以下是完整的图。

规模:比你想的大得多

Coinbase 的 x402 协议在 Solana、Base 等链上已经处理了超过 1 亿笔支付流 — 年化交易额 $6 亿+。这不是白皮书,是跑在生产环境里的真实流量。与此同时,2026 年 Agentic Commerce TAM 达 $1360 亿,预计 2030 年达 $1.7 万亿。稳定币一年就在搬运 $7.1 万亿。

再看 RentAHuman.ai — 现在最火的 Agent 市场。81,000+ 人类工作者,Agent 一个 MCP 调用就能下单,支持加密钱包、稳定币、甚至 Stripe。听起来很顺。但仔细看:只有 13% 的用户连接了钱包。没有 escrow — Agent 在任务完成前就盲信转账。没有纠纷处理。费用结构不透明。一个 $40 的 USPS 取件任务吸引了 30 个申请人,两天后依然没完成。支付轨道是有的,但信任层只是胶带糊的 — 而这已经是赛道里跑得最前面的平台了。

量很大,野心也大,但缺口更大。而原始数据量掩盖了一个更深的问题。

协议之战

四条支付轨道,没有一条互通。每条背后站着一个科技巨头,每条解决的是拼图的不同一块:

x402(Coinbase + Cloudflare)把 HTTP 402 状态码 — 从互联网诞生就保留了 “Payment Required” 的用途,但从没人用过 — 终于让它上岗了。每个 HTTP 请求都可以附带一笔稳定币微支付。交易额 $6 亿+,V2 于 2026 年 1 月上线。优雅,但只能做 request 级别的支付 — escrow 还只是 GitHub 上的一个提案,跑在测试网上,没有正式发布。

ERC-8004(MetaMask、Coinbase、Google、以太坊基金会)在建信任层 — Agent 身份、声誉、验证。2026 年 1 月上了以太坊主网,24K+ Agent 注册,正在扩展到 BNB Chain。但它是信任的基础设施,不是支付的 — 是护照和信用评分,不是银行账户。

AP2(Google Cloud + 60 家合作伙伴)用 “Mandates” — 结构化支付授权。架构精良,spec 里设计了 escrow。但目前还只在 sandbox — 零个正式上线的部署。Agent 可以在人类授权的 Mandate 下运行,但完全自主的 A2A 转账还不支持。

ACP(Stripe + OpenAI)驱动 ChatGPT Shopping。结账体验很顺滑。但也就只是结账。没有 A2A 支付。

看到规律了吗?每个主流协议都假设交易的一端是人类。但未来 — a16z 明确指出的 — 是 Agent 雇佣 Agent。

有一个例外:Virtuals Protocol 在 Base 链上 ship 了一个 Agent Commerce Protocol(名字也叫 ACP,容易混淆),带真正的智能合约 escrow — Agent 锁定资金,第三方评估 Agent 验证工作,通过后释放资金。它是活的,能跑,在处理交易。但它只在 Virtuals 生态内运行。Virtuals 上的 Agent 没法跟 Moltbook 或 RentAHuman 上的 Agent 做 escrow。

所以真正的缺口不是 “没人做了 A2A escrow” — 而是没人做了跨平台通用的 A2A escrow。就像每家铁路公司用了不同的轨距,没人想过:当火车需要彼此对话时怎么办?

Builder 们在喊什么

Agent ‘RoseProtocol’ 四天 P&L:-$8.30。$3 的悬赏要花 $4 的 gas。

品一下。一个靠完成任务 “赚钱” 的 Agent,每笔交易实际上都在亏钱。就像外卖骑手,油费比配送费还高。这不是理论,是现在正在链上、在生产环境里发生的事。

这个话题不在主流平台上讨论。它在 X、Moltbook、DEV.to 和 Ethereum Magicians 上 — 那些真正在 ship Agent 基础设施的 Builder,停不下来地在聊这个。

Escrow 问题到处都冒出来。ClawTasks 上挂了 50+ 个悬赏,没有链上 escrow — Agent 干完活,对方消失了。Moltbook 上票数最高的帖子之一(21 票)就是在讲怎么搭 USDC 多方 escrow + 里程碑支付。社区在这个东西。Circle 有原型,但没有人把它产品化。

然后是信任鸿沟。只有 14% 的美国人信任 AI 帮他们下单(YouGov, 2025 年 12 月)。X 上一个 Builder 说得精准:“把加密钱包的完全访问权交给 AI Agent,就像把信用卡递给一个蹒跚学步的孩子。”企业级方案(SkyfireNatural)已经融了 $1900 万+,但没有人在做面向普通人的 “AI Agent 版 Mint” — 消费限额、分类控制、审计追踪。

还有信用不能跨平台。一个在某平台完成 50 个任务的 Agent,换个平台就从零开始。想象一下你的 Uber 司机评分每换一个城市就归零。ERC-8004 在协议层尝试解决,但采用率还很早。

四个痛点。四个开放问题。而这正是资本涌入的方向。

淘金热

融资公司已经在圈地。Kite($3300 万,PayPal Ventures + General Catalyst + Coinbase Ventures 投)在 Avalanche 上做专门的 AI 支付公链 — 亚分级手续费,密码学完成证明 escrow。Natural($980 万种子轮)把 Agent 支付嵌入 B2B 工作流。Skyfire($950 万,Coinbase + a16z 投)在做 USDC Agent 钱包 + 消费控制。Nevermined 提供可配置的 escrow + 防篡改计量系统用于纠纷解决。PaymanSpendSafe 在钱包基础设施和消费防护栏上赛跑。

但草根能量更能说明问题。Moltbook 上,黑客松 Builder 正在疯狂 ship escrow 方案:agent-escrow(Base 链上线)、TheHandshake($10-100 USDC 区间)、Themis(12 笔 escrow,7 笔活跃)、Trust Escrow(1 秒内完成设置)。社区没在等 Circle 或 Coinbase — 他们自己在造。

交叉验证所有信源后,最大的缺口很清晰:

跨平台通用 Escrow。Virtuals 在自己的生态内有 escrow。Kite 在 Avalanche 上建。但一个通用的 escrow 层 — 能跨 RentAHuman、Moltbook、ClawTasks 和任意 Agent 框架工作的?不存在。RentAHuman 有 81K 用户在盲信转账。收入模型:每笔 escrow 抽 1-3%。

协议互操作层。a16z 明确指出了 A2A 缺口。七个竞争标准并存(x402、AP2、ACP、Virtuals ACP、ERC-8004、Visa Trusted Agent Protocol、Mastercard Agent Pay),没有一个互通。一个桥接层的价值比任何单一协议都大。

消费者 Agent 钱包。所有创业公司都在追企业客户。没有人在做那个简单的 App — 普通人设消费限额,看 Agent 在买什么。

协议抽象 SDK。三个标准并存,开发者一头雾水。Moltbook 上有人发帖:“今天才知道 x402 的支付 header 是 X-Payment-Signature,不是 X-Payment。”一个统一的 SDK,立刻就有人用。

为什么是现在

协议在冒头,早期交易在发生,但用户体验很糟,基础设施到处是洞。

让这个时刻值得注意的是顶层的共振。Brian Armstrong(Coinbase):“x402 + Google 刚刚为 AI Agent 解锁了新层次。”Sundar Pichai(Google):“构建 Agent 生态系统最好的方式是开放和协作。”Patrick Collison(Stripe):“互联网的购买方式将发生巨大变化。”

Coinbase、Google、Stripe 同时 all-in。但这还不是全部。这个赛道目前是群雄割据:传统 Crypto 玩家和 VC 在圈地,Google、Stripe 等 Web2 巨头在铺协议,前沿的 AI Agent 社区在草根造轮子。三路人马,各有各的打法,谁都没有统一江湖。

真正的 call to action 是做那个统一者 — 把这些割裂的生态连起来。但光统一还不够。如果一条 prompt injection 就能让 Agent 把钱包掏空,再好的支付轨道也白搭。谁能同时解决统一和安全,谁就赢。