07.04 · Concept
Agents That Spend Money
Explain how an agent is granted a bounded authority to pay rather than a card, and name the two protocols competing to define what that grant looks like.
Agent payments are safest when the agent receives a scoped payment grant, not a reusable card or account credential. The grant defines what may be bought, under which limits, and for how long. ACP and x402 are the main protocol directions competing to standardise these machine-readable payment authorisations.
What this lesson answers
- how should agents be allowed to spend money
- ACP versus x402 for agent payments
- why not give an AI agent a card
Notes
An agent that spends money should not be handed a user’s card number, wallet seed, or unrestricted account credential. The safer model is a delegated payment grant: the user, merchant, wallet, or payment provider gives the agent permission to perform a specific class of purchase under explicit limits. Those limits might include merchant, amount, currency, expiration time, item category, approval requirement, or refund rules. The agent is not “trusted with money” in general; it is authorized to execute a bounded transaction intent.
The mental model is closer to a signed purchase order or scoped…
Common questions
- What is a payment grant for an agent?
- A payment grant is a bounded authorisation that lets an agent complete a defined kind of transaction. It can restrict the merchant, amount, currency, expiry, product type, approval flow, and refund behaviour. The agent presents the grant at payment time, and the payment layer checks whether the attempted purchase fits the delegated authority.
- Why is a grant safer than giving an agent a card?
- A card is a reusable payment instrument, so exposing it gives the agent broad spending capability and creates credential risk. A grant is policy-bound and purpose-specific. If the agent is manipulated, goes off-task, or attempts a payment outside its scope, enforcement happens in the payment system rather than in the model prompt.
- What are ACP and x402 trying to define?
- ACP focuses on structured agentic commerce flows, including intent, merchant interaction, checkout, and payment authorisation. x402-style protocols apply the HTTP 402 Payment Required idea to machine-to-machine web and API access. Both aim to make payment requests and delegated authorisations readable and enforceable by machines.
Short definition: what is Agents That Spend Money?