Cloudflare Gives AI Agents a Name, a Balance and a Ceiling

Cloudflare, Inc. (NYSE: NET) will give every AI agent running on its network a name and a bank balance. The company announced Cloudflare Wallets and cloudflare.pay on Wednesday, handing agents a persistent identity and the ability to buy online within limits set by the people and organisations that deploy them. Handle reservation opened the same day. Full wallet access, including fiat onramping and offramping and the issuing of wallets to individual agents, follows in the coming months.

The two products solve identity and payment as one problem. Every Cloudflare account receives a unique web address that functions as a stable identifier, and owners extend that identifier down to individual agents, so any business receiving a request can trace who authorised it. A research agent belonging to a given organisation would sit at an address such as research.example.cloudflare.pay.

An Account Wallet holds and manages stablecoins as a central balance, from which owners assign Virtual Wallets to individual agents. Each Virtual Wallet carries guardrails set at creation: a spending cap, an approved merchant list, and a maximum transaction size the agent cannot exceed without human approval.

“The Internet is shifting from human-driven browsing to agent-driven commerce, and the infrastructure needs to keep up,” said Matthew Prince, Co-founder and Chief Executive Officer of Cloudflare. “When an agent shows up at your door, you need to know who sent it.”

Software that browses, queries APIs and buys autonomously has become routine traffic, and the verification tooling most businesses run was built for a different era of machine visitor. A merchant receiving an agent request has no reliable way to determine whether it comes from a real customer’s assistant or from an operator gaming a promotion. Systems designed to separate search crawlers from human readers were never designed to classify software that transacts on behalf of a named person or company.

The gap leaves businesses choosing between locking everything down and taking their chances, and Cloudflare argues neither survives contact with scale. It also breaks ordinary commercial mechanics. A one-week trial or a sign-up credit is simple to extend to a person and close to meaningless when a single user can spin up dozens of anonymous agents to claim it repeatedly. “Cloudflare can give agents a face, a link to the human or organization that owns them, so that trust, accountability, and real commerce can follow,” Prince added.

The company has spent a year rebuilding its network for machines that transact rather than read

The sequence began in July 2025, when Content Independence Day gave site owners one-click control over which AI crawlers could reach their content, and Pay Per Crawl let them charge for the privilege. Web Bot Auth followed, allowing agents to register an identity through a cryptographic keypair, extending classification work already running through Turnstile and Bot Management.

The pace accelerated through 2026. Agents Week in April produced more than 20 launches across compute, connectivity and developer tooling, including Dynamic Workers, general availability for Sandboxes, the Cloudflare Mesh private networking layer, the Artifacts versioned file system, Browser Run, and a preview of the next Agents SDK.

In July, the company opened its Monetization Gateway waitlist, allowing customers to charge any caller for any resource behind Cloudflare, from a web page to a dataset to an MCP tool call, with settlement in stablecoins over the x402 protocol across a network spanning more than 330 cities. Cloudflare develops x402 through the x402 Foundation, hosted by the Linux Foundation alongside a coalition of more than 25 industry participants. Wednesday’s announcement came during the company’s second Agents Week of the year, which runs through Friday.

Spending caps are the mechanism that makes autonomous purchasing commercially defensible

Cloudflare’s design logic treats constraint as the thing that grants autonomy. An agent responsible for $10 can test dozens of APIs at a few cents a call without a human approving each transaction, and the same latitude over $1,000 becomes a risk no operator would sign off. The company describes provisioning an Account Wallet and issuing every employee a weekly inference budget through Virtual Wallets, with anyone hitting their ceiling able to request a manual override from an authorised administrator.

Unusual behaviour, such as spending that accelerates without explanation, escalates to human review rather than failing silently. An administrator who recognises the spend as intentional raises the limit or approves a one-time injection of funds. An administrator who does not has caps that already did the work. Cloudflare said it is building toward “an agent-first Internet with Internet-scale settlement built in”, supplying the buy side of a market whose sell side the Monetization Gateway already serves.

Control of agent identity will set the commercial terms of the agentic web

Cloudflare describes its identity layer as a naming convention rather than a standard, comparing the pairing of a readable handle to an underlying keypair with the relationship between URLs and IP addresses in DNS. The company said it is proposing an identifier rather than defining a verification schema, and intends to adopt richer schemas as the x402 Foundation produces them. Declaring identity stays optional for agents, and merchants decide for themselves whether to favour those that do.

The restraint accompanies a formidable structural advantage. Cloudflare now occupies both sides of the agentic transaction, sitting as the proxy layer where an agent gets verified, a pricing rule gets applied and a payment gets checked before any request reaches an origin server. Google, Visa, Mastercard, OpenAI and Stripe are advancing competing protocols for agent-initiated payment, and enterprise buyers face open questions on which geographies support fiat onramps at launch, how stablecoin settlement sits with regional payments regulation, and whether merchants beyond Cloudflare’s network will recognise handles issued by one infrastructure provider. For businesses absorbing agent traffic today, the practical consequence is simpler: the identity signals they choose to trust over the next 12 months will decide which agents can transact with them at all.