Visa Pilots AI Agents With BILL and Billtrust to Execute Pre-Approved B2B Invoice Payments
Oct. 26, 2026 • Article • AI in Fintech
Visa launched a live pilot with BILL and Billtrust at Money20/20 USA in late October 2026 to test end-to-end B2B invoice payments executed by software agents. The agents act on invoices enterprise buyers have already approved; they do not decide which supplier payments to authorize. Visa’s Trusted Agent Protocol and Agentic Directory are designed to authenticate those agents when they access supplier and merchant portals without shared credentials or manual human login.
Separately, Visa has put Commercial Payment Controls into production for eligible issuers in supported regions, allowing businesses to set limits and restrictions on corporate spending. The company plans general availability of Commercial Virtual Authentication and Commercial Supplier Validation in 2027 after pilot completion. Its SESA 2.0 analytics platform has identified more than $600 billion in potentially cardable supplier spend. The pilot tests whether approved invoice payments can be executed through automated workflows while preserving buyer-defined controls.
Visa launched a live pilot with BILL and Billtrust at Money20/20 USA in late October 2026 to test end-to-end B2B invoice payments executed by software agents. The arrangement brings together BILL’s accounts payable services and Billtrust’s accounts receivable automation, connecting the buyer and supplier sides of an invoice-payment workflow.
The distinction at the heart of the pilot is between approving a payment and executing it. Enterprise buyers approve specific invoices through their financial workflows before an agent acts. The agents do not have unilateral authority to approve expenditures or decide which supplier invoices should be paid. Instead, they carry out payments within the permissions and constraints attached to an already approved obligation.
That boundary matters for corporate payments, where an automated process must still respect the buyer’s authorization. Visa’s pilot tests whether agents can perform the steps needed to complete a payment without turning the approval decision over to a software model.
How the agents establish trust
The pilot uses Visa’s Trusted Agent Protocol, developed with Cloudflare, alongside an Agentic Directory. Together, they allow authorized AI payment bots to be registered and authenticated when interacting with merchant and supplier portals. Authentication through the protocol is designed to satisfy security checks historically handled by CAPTCHA and other anti-bot systems, without shared portal credentials or a manual human login.
Those checks present a practical obstacle to an agent attempting to complete a transaction: a portal needs to distinguish an authorized payment bot from unwanted automated traffic. Registration and authentication provide a way to identify the agent without requiring a person to step into the workflow solely to pass a login or anti-bot check.
The payment credentials are also tied to the approved transaction. Visa’s agentic architecture uses context-bound dynamic tokens rather than standard static card credentials. The token is cryptographically bound to the specific approved invoice, the agent’s identity and the buyer’s policy constraints. This is intended to contain the agent’s spending authority and provide a record linking the payment to its authorization, rather than giving a bot a reusable credential for unrelated purchases.
Controls move into production
Alongside the pilot, Visa has deployed Visa Commercial Payment Controls into production across eligible issuing financial institutions in supported regions. Businesses can use the controls to enforce dynamic spending limits, restrictions by merchant category and location, and bounds on when a payment can be executed.
These controls address a different part of the same workflow from agent authentication. Identifying the bot establishes who is acting; payment controls define what the buyer permits it to do. An agent may be able to reach a supplier portal and authenticate itself, but the transaction still has to fit the limits attached to the business’s payment policy.
Visa has scheduled full general availability of two companion tools for 2027, following completion of the pilot. Commercial Virtual Authentication is a 3-D Secure tool for virtual cards, while Commercial Supplier Validation is intended to support checks on suppliers. Neither tool should be treated as generally available on the strength of the current pilot.
The wider commercial-payments opportunity
Visa’s updated Supplier Enablement Spend Analytics platform, SESA 2.0, uses AI supplier scoring and commercial-payment benchmarks to assess where suppliers may accept cards. Visa says the platform has identified more than $600 billion in cardable spend. That figure describes spending identified as potentially suitable for cards, not payment volume already processed by the agentic pilot.
Research cited in the verified data projects substantial growth for the underlying payment method. Juniper Research expects B2B virtual-card payment volume to reach $14.6 trillion by 2029, accounting for 83% of the global virtual-card market. The forecast offers context for Visa’s interest in automating approved commercial payments, but it does not establish how much volume this pilot will generate.
Visa Intelligent Commerce Connect is designed to work across non-Visa payment rails and multiple agent standards. That architecture points beyond a workflow confined to one card network, although the live announcement concerns this specific pilot with BILL and Billtrust. For now, the concrete developments are an operating test of agent-executed, pre-approved invoice payments; production availability of specified spend controls for eligible issuers; and a planned 2027 rollout of the companion tools.
The Linux Foundation appointed payments veteran Michael Hursta executive director of the x402 Foundation on October 1, 2026, as payment systems designed for autonomous AI agents gained attention. Foundation members reported more than 75 million agentic payment transactions in a 30-day period in September, and Coinbase and Amazon Web Services showcased production payment rails at Sibos 2026. Reported transaction counts, however, do not establish the value or commercial character of that activity. The emerging protocols address different obstacles. Coinbase’s x402 enables per-request USDC payments through HTTP, while Google’s Agent Payments Protocol uses signed mandates to connect an agent’s purchases to a user’s authorization. Stripe and Tempo have also proposed session-based billing through the Machine Payments Protocol. These approaches respond to card fees and interactive checkout checks that can impede small, automated transactions. Card networks are developing delegated-identity tools, leaving multiple potential paths for agent payments rather than a single replacement for existing rails.
Mastercard opened developer early access for Agent Pay for Machines (AP4M) on October 20, 2026, releasing buyer- and seller-side APIs, a sandbox and developer toolkits. In a Cloudflare Connect demonstration, marketing agency Hype tested an autonomous agent making nine payments to two merchants within a single budget, without manual billing or account setup. AP4M uses HTTP 402 payment challenges, but differs from crypto-native implementations of the x402 protocol. Its agents issue digitally signed vouchers off-chain; merchants can batch and redeem them later instead of settling every request on-chain. The pilot combined agent wallet infrastructure from Coinbase Developer Platform and BVNK, settlement on Base, and Mastercard’s multi-currency fiat and stablecoin settlement platform. Circle separately expanded its managed payments service to target AI-agent traffic using USDC. Together, the developments show competing approaches to machine-to-machine payments, with different choices about settlement, funding and who manages digital assets.
Visa launched a live pilot with BILL and Billtrust at Money20/20 USA in late October 2026 to test end-to-end B2B invoice payments executed by software agents. The agents act on invoices enterprise buyers have already approved; they do not decide which supplier payments to authorize. Visa’s Trusted Agent Protocol and Agentic Directory are designed to authenticate those agents when they access supplier and merchant portals without shared credentials or manual human login. Separately, Visa has put Commercial Payment Controls into production for eligible issuers in supported regions, allowing businesses to set limits and restrictions on corporate spending. The company plans general availability of Commercial Virtual Authentication and Commercial Supplier Validation in 2027 after pilot completion. Its SESA 2.0 analytics platform has identified more than $600 billion in potentially cardable supplier spend. The pilot tests whether approved invoice payments can be executed through automated workflows while preserving buyer-defined controls.
Mastercard and Visa are advancing different approaches to AI-initiated business payments. At Cloudflare Connect, Mastercard demonstrated an agent making nine payments across multiple service providers under one authorized budget. It also opened early developer access to Agent Pay APIs, a sandbox and toolkits. Visa expanded its commercial agentic suite around a BILL and Billtrust pilot, alongside spend analytics and fraud tools. The distinction is how each approach constrains the agent. Visa’s pilot lets an agent pay invoices that buyers have already approved, using its Trusted Agent Protocol to navigate supplier-portal security without sharing underlying login credentials. Mastercard is testing controls for machine-to-machine transactions, including signed vouchers, agent verification and a score intended to estimate whether an incoming transaction was AI-initiated. Both efforts leave a consequential question for business payments: how responsibility should be assigned when an authorized agent follows its technical instructions but breaches a procurement condition.
Mastercard opened developer APIs, SDKs and a sandbox for Agent Pay for Machines (AP4M) on October 21, 2026. The tools enable autonomous AI agents on Amazon Bedrock to make multi-merchant micropayments over x402 using off-chain signed vouchers. The launch follows Coinbase Developer Platform’s report that cumulative x402 payments across Base and Solana had exceeded 100 million by October. The x402 protocol uses an HTTP 402 response to tell an agent what a service costs and how to pay. Its growing infrastructure includes a Linux Foundation-governed foundation, while alternative approaches use Lightning payments or existing processor rails. Transaction counts, however, do not establish how much genuine agent-led commerce is taking place. TRM Labs found a much smaller pool of plausible commercial trade after screening out other activity. Security questions also remain, including whether a service can receive payment without delivering its output. Developers therefore face choices about settlement, spending controls and proof of service.
CapitalOS completed a $21.9 million Series A financing round on October 21, 2026, led by LGVP. The company plans to expand its engineering team and scale the infrastructure behind its AI-driven money orchestration platform. WEX Venture Capital, Group 11, Great North Ventures, Night Capital and existing early investors also participated. Founded in 2022, CapitalOS helps vertical SaaS and AI platforms offer embedded charge cards, digital wallets and automated bill payments without maintaining in-house licensing or risk operations. Its architecture uses five specialized AI agents across underwriting, capital, compliance, risk and fraud, and support. Property management platform Guesty is an active customer, and CapitalOS reports managing transactions for more than 25,000 active cardholders across dozens of integrated platforms. CapitalOS relies on infrastructure provider Increase and its chartered partner banks rather than replacing depository institutions. The announcement did not disclose a valuation, credit warehouse partner or the identities of its current primary sponsor banks.