Visa, BILL and Billtrust Begin Live Pilot of Authenticated AI Agent Invoice Payments
Oct. 22, 2026 • Article • AI in Fintech
Visa, BILL and Billtrust have begun a live pilot in which a payment agent executes end-to-end business invoice settlements between participating buyers on BILL and suppliers on Billtrust. The BILL Payment Agent acts only on buyer-approved payment instructions; it cannot choose invoices independently. Visa’s Trusted Agent Protocol lets Billtrust verify the agent’s cryptographic identity, while invoice-specific tokenized credentials replace exposed portal credentials and physical card data.
The pilot addresses a longstanding obstacle to accounts-payable automation: supplier portals often treat automated activity as a potential security threat. Visa also launched Commercial Fraud Solutions to authenticate virtual-card activity and validate supplier credentials before authorization. The companies plan to assess expansion across platforms after initial acceptance benchmarks. They have not disclosed pilot transaction volume or identified the participating enterprises, leaving the scale and broader applicability of the approach unproven.
Visa, BILL and Billtrust are running a live pilot that uses an authenticated payment agent to settle business invoices between participating buyers on BILL and suppliers on Billtrust. The transactions are being executed end to end, moving the companies’ approach beyond a proposed workflow and into live B2B payments.
The pilot targets a persistent gap in accounts-payable automation. A buyer’s payment instruction may be ready to execute, but a supplier’s portal can still require a separate login or challenge automated activity as a potential security threat. The companies are testing whether a verifiable agent can complete that step without exposing portal credentials or giving software independent authority to choose what gets paid.
Buyer approval sets the agent’s limits
The BILL Payment Agent is designed to execute only against payment instructions approved by the buyer. Its boundary constraints prevent it from autonomously selecting invoices. That distinction matters: the agent carries out an authorized task rather than making the underlying payment decision on the buyer’s behalf.
The framework uses tokenized credentials purpose-built for individual invoices in place of exposed portal credentials and physical card data. Tokenization substitutes a credential intended for the specific transaction, reducing the need to pass conventional credentials through the automated workflow. The pilot therefore combines payment execution with limits on both the agent’s authority and the credentials it uses.
Billtrust uses Visa’s Trusted Agent Protocol to verify the agent’s cryptographic identity. Cryptographic verification gives the receiving portal a way to check that an automated request comes from a recognized agent, rather than treating every non-human interaction as an unidentified bot. Under the pilot framework, that verification satisfies anti-bot protections such as CAPTCHAs without requiring a person to intervene or the agent to use a separate portal login.
Registration in the Visa Agentic Directory provides an additional governance mechanism: it enables receiving portals to cryptographically bind an agentic request to a regulated financial entity. Together, the directory and protocol address who is making a request, while the buyer-approved instruction determines what the agent is permitted to do.
Why supplier portals pose a challenge
Supplier portals have historically complicated straight-through accounts-payable processing. Controls including CAPTCHAs, web application firewalls and bot-mitigation tools are designed to block suspicious automated access. Those defenses can also stop an automation tool from completing a legitimate, buyer-authorized payment if the portal cannot distinguish it from an unauthorized script.
Earlier automation approaches sometimes relied on stored, unencrypted portal credentials or unauthorized screen-scraping bots. Such methods can conflict with supplier terms of service and create audit and compliance liabilities. The pilot’s authenticated-agent design seeks to address that operational problem without removing the supplier portal’s ability to challenge automated requests.
Visa paired the pilot with the launch of Visa Commercial Fraud Solutions, a suite designed to authenticate virtual-card activity and validate supplier credentials before payments are authorized. Those checks address a separate part of the transaction: verifying payment activity and the supplier before authorization, rather than only establishing the identity of the agent interacting with the portal.
Live processing, with scale still undisclosed
The companies have confirmed live, end-to-end transactions, but have not published the pilot’s total settlement volume or named the participating buyer and supplier enterprises. That limits what can be concluded about transaction throughput or performance beyond the participating group.
The networks involved are substantially larger than the disclosed pilot. BILL supports nearly 500,000 business customers, and Billtrust operates a supplier network connected to more than 20 million buyers that processes approximately $1 trillion in annual volume. Those figures describe the companies’ existing reach, not the number of businesses using the agent or the value of payments it has settled.
After the initial acceptance phase benchmarks are complete, the partners plan to assess an expansion of agentic B2B transactions across multiple platforms. They have not disclosed a broader rollout schedule. Following the pilot’s public unveiling, BILL Holdings shares rose 5.1% and Visa shares rose 1.4% in morning trading; those market moves do not establish how widely the payment workflow will be adopted.
The immediate test is narrower and more concrete: whether an agent can carry out a buyer-authorized invoice payment through a supplier-facing process while proving its identity and operating within defined limits. The disclosed live transactions show the workflow is operating in the pilot, while its volume and suitability for wider deployment remain to be demonstrated.
The Linux Foundation appointed payments veteran Michael Hursta executive director of the x402 Foundation on October 1, 2026, as payment systems designed for autonomous AI agents gained attention. Foundation members reported more than 75 million agentic payment transactions in a 30-day period in September, and Coinbase and Amazon Web Services showcased production payment rails at Sibos 2026. Reported transaction counts, however, do not establish the value or commercial character of that activity. The emerging protocols address different obstacles. Coinbase’s x402 enables per-request USDC payments through HTTP, while Google’s Agent Payments Protocol uses signed mandates to connect an agent’s purchases to a user’s authorization. Stripe and Tempo have also proposed session-based billing through the Machine Payments Protocol. These approaches respond to card fees and interactive checkout checks that can impede small, automated transactions. Card networks are developing delegated-identity tools, leaving multiple potential paths for agent payments rather than a single replacement for existing rails.
Mastercard opened developer early access for Agent Pay for Machines (AP4M) on October 20, 2026, releasing buyer- and seller-side APIs, a sandbox and developer toolkits. In a Cloudflare Connect demonstration, marketing agency Hype tested an autonomous agent making nine payments to two merchants within a single budget, without manual billing or account setup. AP4M uses HTTP 402 payment challenges, but differs from crypto-native implementations of the x402 protocol. Its agents issue digitally signed vouchers off-chain; merchants can batch and redeem them later instead of settling every request on-chain. The pilot combined agent wallet infrastructure from Coinbase Developer Platform and BVNK, settlement on Base, and Mastercard’s multi-currency fiat and stablecoin settlement platform. Circle separately expanded its managed payments service to target AI-agent traffic using USDC. Together, the developments show competing approaches to machine-to-machine payments, with different choices about settlement, funding and who manages digital assets.
Visa launched a live pilot with BILL and Billtrust at Money20/20 USA in late October 2026 to test end-to-end B2B invoice payments executed by software agents. The agents act on invoices enterprise buyers have already approved; they do not decide which supplier payments to authorize. Visa’s Trusted Agent Protocol and Agentic Directory are designed to authenticate those agents when they access supplier and merchant portals without shared credentials or manual human login. Separately, Visa has put Commercial Payment Controls into production for eligible issuers in supported regions, allowing businesses to set limits and restrictions on corporate spending. The company plans general availability of Commercial Virtual Authentication and Commercial Supplier Validation in 2027 after pilot completion. Its SESA 2.0 analytics platform has identified more than $600 billion in potentially cardable supplier spend. The pilot tests whether approved invoice payments can be executed through automated workflows while preserving buyer-defined controls.
Mastercard and Visa are advancing different approaches to AI-initiated business payments. At Cloudflare Connect, Mastercard demonstrated an agent making nine payments across multiple service providers under one authorized budget. It also opened early developer access to Agent Pay APIs, a sandbox and toolkits. Visa expanded its commercial agentic suite around a BILL and Billtrust pilot, alongside spend analytics and fraud tools. The distinction is how each approach constrains the agent. Visa’s pilot lets an agent pay invoices that buyers have already approved, using its Trusted Agent Protocol to navigate supplier-portal security without sharing underlying login credentials. Mastercard is testing controls for machine-to-machine transactions, including signed vouchers, agent verification and a score intended to estimate whether an incoming transaction was AI-initiated. Both efforts leave a consequential question for business payments: how responsibility should be assigned when an authorized agent follows its technical instructions but breaches a procurement condition.
Mastercard opened developer APIs, SDKs and a sandbox for Agent Pay for Machines (AP4M) on October 21, 2026. The tools enable autonomous AI agents on Amazon Bedrock to make multi-merchant micropayments over x402 using off-chain signed vouchers. The launch follows Coinbase Developer Platform’s report that cumulative x402 payments across Base and Solana had exceeded 100 million by October. The x402 protocol uses an HTTP 402 response to tell an agent what a service costs and how to pay. Its growing infrastructure includes a Linux Foundation-governed foundation, while alternative approaches use Lightning payments or existing processor rails. Transaction counts, however, do not establish how much genuine agent-led commerce is taking place. TRM Labs found a much smaller pool of plausible commercial trade after screening out other activity. Security questions also remain, including whether a service can receive payment without delivering its output. Developers therefore face choices about settlement, spending controls and proof of service.
CapitalOS completed a $21.9 million Series A financing round on October 21, 2026, led by LGVP. The company plans to expand its engineering team and scale the infrastructure behind its AI-driven money orchestration platform. WEX Venture Capital, Group 11, Great North Ventures, Night Capital and existing early investors also participated. Founded in 2022, CapitalOS helps vertical SaaS and AI platforms offer embedded charge cards, digital wallets and automated bill payments without maintaining in-house licensing or risk operations. Its architecture uses five specialized AI agents across underwriting, capital, compliance, risk and fraud, and support. Property management platform Guesty is an active customer, and CapitalOS reports managing transactions for more than 25,000 active cardholders across dozens of integrated platforms. CapitalOS relies on infrastructure provider Increase and its chartered partner banks rather than replacing depository institutions. The announcement did not disclose a valuation, credit warehouse partner or the identities of its current primary sponsor banks.