The Linux Foundation appointed payments veteran Michael Hursta executive director of the x402 Foundation on October 1, 2026, as payment systems designed for autonomous AI agents gained attention. Foundation members reported more than 75 million agentic payment transactions in a 30-day period in September, and Coinbase and Amazon Web Services showcased production payment rails at Sibos 2026. Reported transaction counts, however, do not establish the value or commercial character of that activity. The emerging protocols address different obstacles. Coinbase’s x402 enables per-request USDC payments through HTTP, while Google’s Agent Payments Protocol uses signed mandates to connect an agent’s purchases to a user’s authorization. Stripe and Tempo have also proposed session-based billing through the Machine Payments Protocol. These approaches respond to card fees and interactive checkout checks that can impede small, automated transactions. Card networks are developing delegated-identity tools, leaving multiple potential paths for agent payments rather than a single replacement for existing rails.
Mastercard and Visa are advancing different approaches to AI-initiated business payments. At Cloudflare Connect, Mastercard demonstrated an agent making nine payments across multiple service providers under one authorized budget. It also opened early developer access to Agent Pay APIs, a sandbox and toolkits. Visa expanded its commercial agentic suite around a BILL and Billtrust pilot, alongside spend analytics and fraud tools. The distinction is how each approach constrains the agent. Visa’s pilot lets an agent pay invoices that buyers have already approved, using its Trusted Agent Protocol to navigate supplier-portal security without sharing underlying login credentials. Mastercard is testing controls for machine-to-machine transactions, including signed vouchers, agent verification and a score intended to estimate whether an incoming transaction was AI-initiated. Both efforts leave a consequential question for business payments: how responsibility should be assigned when an authorized agent follows its technical instructions but breaches a procurement condition.
CapitalOS completed a $21.9 million Series A financing round on October 21, 2026, led by LGVP. The company plans to expand its engineering team and scale the infrastructure behind its AI-driven money orchestration platform. WEX Venture Capital, Group 11, Great North Ventures, Night Capital and existing early investors also participated. Founded in 2022, CapitalOS helps vertical SaaS and AI platforms offer embedded charge cards, digital wallets and automated bill payments without maintaining in-house licensing or risk operations. Its architecture uses five specialized AI agents across underwriting, capital, compliance, risk and fraud, and support. Property management platform Guesty is an active customer, and CapitalOS reports managing transactions for more than 25,000 active cardholders across dozens of integrated platforms. CapitalOS relies on infrastructure provider Increase and its chartered partner banks rather than replacing depository institutions. The announcement did not disclose a valuation, credit warehouse partner or the identities of its current primary sponsor banks.
Visa, BILL and Billtrust announced a live commercial pilot on October 20, 2026, that lets AI agents initiate and execute approved business invoice payments through supplier portals. The BILL Payment Agent uses tokenized payment credentials restricted to buyer-authorized invoices and predefined rules. Billtrust authenticates the agent through Visa’s Agentic Directory and Trusted Agent Protocol without requiring shared login credentials. The pilot tests how an agent can establish its identity and payment authority, but it does not give the agent authority to approve invoices independently. Visa’s protocol uses cryptographic signatures to bind requests to a particular merchant domain and page. The distinction matters for liability: commercial payment protections may be altered by contract, while AI software agreements may limit vendor exposure. Visa separately announced expanded commercial capabilities on October 21, with supplier validation and authentication controls scheduled for general availability in 2027. The EU’s draft Payment Services Regulation does not directly address autonomous agent payments.
Visa, BILL and Billtrust have begun a live pilot in which a payment agent executes end-to-end business invoice settlements between participating buyers on BILL and suppliers on Billtrust. The BILL Payment Agent acts only on buyer-approved payment instructions; it cannot choose invoices independently. Visa’s Trusted Agent Protocol lets Billtrust verify the agent’s cryptographic identity, while invoice-specific tokenized credentials replace exposed portal credentials and physical card data. The pilot addresses a longstanding obstacle to accounts-payable automation: supplier portals often treat automated activity as a potential security threat. Visa also launched Commercial Fraud Solutions to authenticate virtual-card activity and validate supplier credentials before authorization. The companies plan to assess expansion across platforms after initial acceptance benchmarks. They have not disclosed pilot transaction volume or identified the participating enterprises, leaving the scale and broader applicability of the approach unproven.


