A CDN giant is issuing per-agent wallets with spending caps and merchant allow-lists, betting it can own the settlement pipe before agents start spending real money.
Cloudflare has entered the agent commerce race with a two-tier wallet architecture designed to give developers programmable control over how AI agents spend money. The company’s new AI Agents platform, announced August 4, introduces Account Wallets for funding and Virtual Wallets for individual agents, each equipped with configurable guardrails including periodic spending allowances, merchant allow-lists, and per-transaction size caps.
The move positions Cloudflare alongside Visa, Mastercard, Stripe, Google, and AWS as a premier member of the x402 Foundation, the open-protocol consortium building the settlement infrastructure for machine-initiated transactions. Cloudflare’s entry is notable because it brings network-layer control to a stack that has so far been dominated by payment processors and financial institutions.
The wallet architecture reveals Cloudflare’s bet on where the margin will live. Account Wallets serve as the funding source, while Virtual Wallets act as per-agent spending containers with three types of guardrails. Periodic Allowances set recurring spend limits per time window. Merchant Allow-lists restrict which vendors an agent can transact with. Maximum Transaction Size caps individual payment amounts. These controls are configurable by the Account Wallet owner, creating a trust layer that operates at the network level rather than the application level.
Cloudflare is also introducing cloudflare.pay, a human-readable stablecoin identifier that uses the x402 protocol for settlement. This positions the company as both a payment rail and an identity layer for agents, a combination that existing x402 participants have not yet combined in a single product.
The settlement architecture for agent commerce is now converging on three competing approaches. Google’s Universal Checkout Protocol routes through card rails via Shopify. The x402 Foundation uses crypto-native stablecoin settlement on Base. Mastercard’s AP4M supports multi-rail including stablecoins. Cloudflare’s bet is that the identity and money layer should live at the network infrastructure level, not the payment processor level.
The timing matters. x402 Foundation has processed over 200 million transactions, but more than 95 percent are protocol signaling, not actual commercial exchange. Real daily volume remains near $28,000 according to Artemis Analytics. Cloudflare is entering a market where the infrastructure is being built but commercial adoption has not yet followed.
