AI Agents That Pay: Visa, Mastercard, x402, AP2 and Stablecoins

Picture asking an assistant to rebook a cancelled flight, pay the fare difference and order a taxi to the airport, then putting your phone away. Each step involves a payment that you did not click. Payment companies have spent the past eighteen months building the plumbing for exactly this, and the race has produced a confusing alphabet of protocols. Here is what each one does, and how much is actually happening.

Why agents break today's payments

Online payments were designed around a human at a checkout page. Card networks assume a person typed the details, fraud systems look for human behaviour, and many merchants block automated traffic outright. When an AI agent shows up, the merchant cannot tell whether it is a helpful assistant or a bot running stolen cards. The bank cannot tell whether the cardholder really approved the purchase.

So every agentic payment scheme has to answer three questions. Who is this agent, and can it be trusted? What exactly did the human authorise? And who pays if it goes wrong?

The card networks: tokens with leashes

Mastercard Agent Pay was announced in April 2025. Agents register and are verified, then pay with agentic tokens, dynamically generated credentials that never expose the real card number. Mastercard said in September 2025 that all its US cardholders would be enabled by the 2025 holiday season, RTTNews reported. In February 2026 it completed what it called the first fully authenticated agentic transaction on its network in India, with Axis Bank and RBL Bank issuing and merchants including Swiggy and Zepto. It also worked with Cloudflare on a way for websites to tell verified agents from malicious bots.

Visa Intelligent Commerce follows the same logic: tokenised credentials, spending controls set by the user and authentication tied to the agent. By December 2025 Visa reported more than 100 partners and hundreds of controlled real-world agent transactions. In April 2026 it launched Intelligent Commerce Connect, a single integration supporting four agent protocols, including its own Trusted Agent Protocol, according to TechInformed.

The appeal of the card approach is that nothing changes for the merchant's bank or the customer's protections. Chargebacks, dispute rights and fraud liability carry over.

The protocols: checkout for machines

Agentic Commerce Protocol (ACP). Stripe and OpenAI released ACP in September 2025 alongside Instant Checkout in ChatGPT, starting with US Etsy sellers. Its key piece is a Shared Payment Token scoped to a single merchant and cart total, so the AI app can start a payment without seeing the buyer's card, Stripe said.

Agent Payments Protocol (AP2). Google announced AP2 in September 2025 with more than 60 partners, including Mastercard, American Express, PayPal, Adyen, Coinbase and Revolut, The Paypers reported. It uses cryptographically signed mandates that record what the user asked the agent to do, creating an audit trail if a purchase is disputed. It is payment-method neutral, and an extension built with Coinbase and others supports stablecoin payments.

The hard problem in agentic payments is not moving money. It is proving what the human actually wanted.

x402 and stablecoins: payments for software, by software

Coinbase launched x402 in May 2025. It revives the long-unused HTTP 402 Payment Required status code: when an agent requests a paid resource, the server replies with a price, and the agent pays in USDC within the same web request. No account, no checkout page, no card. Launch partners included Circle, AWS, Anthropic and NEAR, and Stripe, Cloudflare and Vercel later integrated it.

The model fits a different job from the card schemes. Card networks are built for an agent buying a jacket for a human. x402 is built for an agent paying a fraction of a cent for a data query, a web page or a burst of compute. Card economics break down at those sizes. A stablecoin transfer on a low-fee chain costs well under a cent, which makes a one-cent purchase viable.

How much is real?

Treat the numbers carefully. In June 2026 Coinbase's chief executive said x402 had handled more than 160 million autonomous transactions over the previous year, The Defiant reported. Dollar volume tells a smaller story. In March 2026, after a headline figure of $24 million in monthly x402 volume, an a16z partner estimated that real 30-day volume was closer to $1.6 million once wash activity was filtered out, Cointelegraph reported. Most of it was developer tooling such as scraping and image generation, with humans still in the loop.

On the card side, Visa spoke of hundreds of controlled transactions at the end of 2025. Consumers are wary too: a Morning Consult survey in April 2026 found 38% of US adults comfortable with AI completing a purchase, while 60% said they would not let it spend without approval.

So agentic payments in late 2026 are infrastructure looking for demand. The rails exist. The habits do not yet.

What decides who wins

• Liability. Card schemes carry a mature dispute system. Stablecoin payments are final, so mandate records like AP2's matter more.
• Ticket size. Cards suit purchases above a few dollars. Micropayments between machines favour stablecoins.
• Identity. Whoever runs the trusted register of verified agents gains a powerful position. Visa, Mastercard and Cloudflare are all bidding for it.
• Regulation. Clearer stablecoin rules in the US and EU, covered in our piece on GENIUS and MiCA, make machine payments in tokens easier for regulated firms to support.

Our view

We expect both camps to coexist. For consumer shopping, agents will mostly pay with tokenised cards, because that keeps existing protections and merchants do not have to change much. For software paying software, stablecoins and protocols like x402 have a structural cost advantage that cards cannot match. The interesting middle ground is bills and subscriptions, where an agent could compare, schedule and settle on whichever rail is cheapest. That is a theme in our outlook on the future of payments to 2030.

About this researchMuffinPay InsightsIndependent analysis of stablecoins, CBDCs, cross-border payments and digital public infrastructure. Every figure is linked to its source. Read our editorial standards →