Announcing Cloudflare Wallets: The programmable wallet for the agentic Internet
The Cloudflare Blog ● Covered by 2 sources
Cloudflare launched wallets built for AI agents, letting them pay for APIs on their own. It's the missing piece that could finally let bots shop the web without a human typing in a credit card.
Cloudflare has a problem it wants to fix: AI agents are terrible at signing up for things. Ask an agent to try a new API and it hits a wall almost immediately, because most sign-up flows assume there's a human with an email address and a credit card on the other end. No stable identity, no native way to pay, so the agent just punts the whole job back to a person. Cloudflare's answer, announced today, is something it's calling Cloudflare Wallets.
The idea is straightforward even if the plumbing underneath is not. Every Cloudflare account can now claim a wallet handle, and soon that account will be able to fund an actual wallet holding stablecoins. From there, you spin up Virtual Wallets for your agents, each one capped by rules you set: a weekly allowance, an allow list of approved services, a max transaction size. The agent gets its own API key tied to that Virtual Wallet and can start paying for things — APIs, MCP tools, content — without pinging a human every time it wants to try something new.
This builds directly on Cloudflare's Monetization Gateway, unveiled earlier this month, which lets sites get paid for AI traffic using the x402 protocol, a scheme for attaching micropayments to individual HTTP requests. Put the two together and you get a two-sided market: sellers expose priced endpoints through Monetization Gateway, buyers (increasingly, autonomous agents) settle up through a Wallet. Cloudflare's pitch is that spending limits, often thought of as restrictions, actually free agents up. Trusting a bot with $1,000 is nerve-wracking. Trusting it with $10 to sample a dozen APIs at a few cents each is a much easier sell, and lets the agent do what it's actually good at — trying lots of options fast.
There's an identity layer bolted onto this too, via something called cloudflare.pay, which lets an agent optionally reveal that it's acting on behalf of a specific account — say, research.example.cloudflare.pay. Cloudflare compares this to how it treats VPN traffic: unidentified isn't automatically suspicious, but it has to work harder to earn trust. The company is leaning on existing bot-detection infrastructure like Turnstile and Web Bot Auth, essentially making an already-existing cryptographic keypair human-readable rather than inventing a whole new identity scheme.
Cloudflare is careful to frame this as early and incremental — onramps and offramps will roll out in limited geographies first, with self-funded stablecoin wallets as a stopgap. But the framing is telling. With bots reportedly driving a majority of web traffic already, Cloudflare is betting that the next real growth market on the internet isn't more humans clicking checkout buttons, but agents quietly doing it for them.
My take
Handing bots a wallet with spending limits is a sane middle ground, and honestly overdue — the alternative was always going to be humans babysitting every API sign-up forever. What's worth watching is that Cloudflare, not a crypto-native startup or a browser maker, is the one building this rail; infrastructure companies keep quietly becoming the plumbing for agentic commerce while everyone argues about which chatbot is smartest. The identity layer is the sleeper feature here, not the payments — an internet where bots can optionally out themselves is a much healthier one than an internet where every scraper pretends to be a person.
Read more about this at: The Cloudflare Blog
