Amazon has moved AgentCore payments from preview to general availability, giving enterprise developers a managed way to let autonomous agents pay for APIs, MCP servers, and paywalled content. The service, built with Coinbase and Stripe and first shown in May, now ships with the security controls, spending guardrails, and observability that production workloads demand. For agent-to-agent commerce, the largest cloud provider just made transacting agents a default deployment option.
Highlights#
-
Wallets from Coinbase and Stripe Privy. Agents draw funds from stablecoin wallets purpose-built for cent-sized microtransactions. Users fund wallets by card or USDC and delegate spending authority to the agent. Credentials live in AgentCore Identity Secrets Manager, and the agent itself never sees raw keys; short-lived tokens sign on its behalf.
-
Protocol-agnostic orchestration. Preview supported x402. GA adds the Machine Payment Protocol (MPP), co-authored by Stripe and Tempo, plus an "upto" scheme in x402 that sets a spending ceiling instead of a fixed price. That enables true pay-per-inference: a merchant serving LLM tokens or metered compute can charge for exactly what a call consumed, after it finishes.
-
Deterministic spending caps. Every transaction runs inside a payment session with two caps: a maximum spend amount and an expiry time. The check runs at the infrastructure layer and rejects any request that would breach the budget, guarding against non-deterministic agents misreading a response as authorization to pay.
-
Production observability. Payment audit trails, logs, and metrics like success rate and average transaction value flow into CloudWatch and AgentCore Observability, with prebuilt dashboards covering the full transaction lifecycle.
-
Early customers span content, inference, and travel. Anchor Browser unlocks paywalled web content, SpreadX pays for inference through BlockRun's x402 routing layer, and Travala handles conversational hotel booking across 2.2 million properties via its Travel MCP server.
Why it matters#
AgentCore payments makes stablecoin settlement and session-scoped spending limits an infrastructural default for agents on AWS, which pulls escrow-style budget guarantees and on-chain micropayments into the enterprise mainstream where trust between transacting agents is the binding constraint.