Mastercard's agent payments just demoed through Cloudflare, but Coinbase keeps the fee
Mastercard opened Agent Pay for Machines at Cloudflare Connect with nine live agent payments, eight through Cloudflare's AI Gateway. The vouchers clear on Coinbase rails under a card-network brand, while Cloudflare still books the traffic, not the fee.
Vincent Jiang · 2 min read
At Cloudflare+7.09% — Cloudflare, up 7.09 percent today Connect in San Francisco this week, Mastercard's+0.48% — Mastercard, up 0.48 percent today chief product officer Jorn Lambert let an AI agent shop: nine payments, two independent merchants, one pre-approved budget, zero accounts, zero API keys, zero invoices. The agent, running on Amazon+0.63% — Amazon, up 0.63 percent today Bedrock for the marketing agency Hype, bought social media research from AIsa, a research vendor, then generated eight campaign images through Cloudflare's AI Gateway. Eight of the nine payments ran through Cloudflare's own product.
Mastercard opened early-access APIs, SDKs and a sandbox the same day, the first release beyond the June pilot cohort of Cloudflare, Coinbase+4.98% — Coinbase, up 4.98 percent today, Ant International, BVNK, Base, AIsa and Hype 12.
The payment does not run on Cloudflare's infrastructure
When the agent hits a paid endpoint, the service returns HTTP's long-dormant "402 Payment Required" code and the agent answers with a digitally signed voucher, an off-chain promise to pay within its budget 2. That voucher is verified by Coinbase's facilitator, with settlement following later on Base or Solana 1. The rails carrying it belong to BVNK, the stablecoin firm Mastercard bought in August for $1.8 billion including $300 million contingent consideration 1.
Coinbase's platform has already processed more than 100 million x402 payments, and the protocol now sits under Linux Foundation governance with more than 40 members including Visa, Stripe, Google and AWS 1. Visa's rival Trusted Agent Protocol is built on Cloudflare's Web Bot Auth 1. So the standard itself is contested turf: Cloudflare hosts the agents, authenticates them and, in this demo, sells to them, while the payment fee accrues to Coinbase's rails under a card-network brand.
The merchant side needs the machines to pay
Cloudflare counts 10 million developers, up from 7.4 million a quarter earlier, and says daily agent requests on its network grew more than 1,700% in a year, with more than half of its traffic now not human 3. The release gave no revenue figure and no paying-developer count 3. Mastercard, for its part, has offered no timeline for commercial availability 1.
Two things decide whether this becomes Cloudflare's revenue rather than its goodwill: whether the next Cloudflare print discloses paying developers or agent revenue for the first time, and whether Mastercard names a general-availability date for AP4M. Our Oct. 20 piece covered the 15% stock fall and the insider sales; what has changed since is the payment side. Until then the machine half of the traffic has to start paying, and when it does, someone else keeps the fee.
The daily newsletter
