Cloudflare announced programmable wallets that allow AI agents to pay for APIs, content and data using stablecoins through a new system.

Wallets and access model

The system separates control between a human-managed Account Wallet and an agent-bound Virtual Wallet issued via an API key.

The Account Wallet belongs to a person who funds balances and configures spending rules, permissions and allowed recipients.

The Virtual Wallet is assigned to an agent and is constrained to the owner’s limits, including a weekly budget and a maximum transaction size.

• Administrators can set a weekly budget, transaction caps and whitelist destinations for agent spending.
• Virtual wallets consume funds strictly within the boundaries defined by the associated account wallet.

Identification and bot protection

Cloudflare added reservation of human-readable handles so services can identify which human-issued agent interacts with them.

Agents without reserved handles retain access but are routed through more stringent bot protection and verification checks by default.

Payments protocol and rollout

Payments are routed via the x402 protocol, which embeds micropayments directly into HTTP requests to enable seamless value transfer.

At launch, Cloudflare supports handle-based interactions; wallet top-ups and fiat rails are scheduled to arrive in the coming months.

The company positions the feature set to let automated agents manage their own payments while keeping human operators in control of budgets and limits.