At a press briefing on the 11th, Oh Sun-young, a principal solutions architect at AWS, described the commercial ambition behind Amazon’s new payment system: “Now, not only people but also software with a purpose and a budget will become customers.”
That is the strategic choice behind Bedrock AgentCore Payments. Amazon has made infrastructure for autonomous purchasing available before it has established who bears the loss when an agent’s purchase goes wrong. The service became generally available on 18 August 2026, after a preview launched in May 2026, with Coinbase and Stripe integrated as payment providers using stablecoins and the x402 protocol.
AgentCore Payments allows artificial intelligence agents to find paid services, authenticate themselves and make payments under preset spending limits. Shopping agents have begun placing orders across the open internet using the payment infrastructure.
The system’s controls are based on prior authorisation rather than a universal, platform-enforced human approval immediately before every payment. Each PaymentSession has an expiry time and can carry an optional budget. Once either limit is reached, further payments are denied.
AWS has also warned customers against giving one role both the power to write PaymentSessions and to process payments. A caller with both permissions could create new sessions with higher budgets and bypass the intended limits.
Several boundaries remain unclear. AWS has not established whether behaviour, limits and proofs are the same across its Coinbase and Stripe Privy integrations. It has not documented a universal maximum transaction limit beyond the configured session budget, and downstream merchant audit records have not been established.
The commercial question becomes sharper once an agent has completed a payment within the rules it was given. Payment itself does not resolve a dispute under AgentCore, and the outstanding issue is who receives money back when a buyer asks for a refund after an agent has paid correctly.
On 6 October, the Reserve Bank of Australia published findings that flagged unclear liability when an agent exceeds a buyer’s authority. Edgars Nemse, chief executive of GenLayer, has commented on the unresolved refund and dispute questions in AI-agent payments.
The lack of a neutral recourse process creates a distribution problem as well as a legal one. Merchants may raise fees or refuse agents altogether, potentially favouring dominant platforms over neutral payment systems.
AWS has continued to build out the wider AgentCore platform. It shipped new features nearly every month throughout 2026, including a managed consent portal in the first week of September 2026. The original Bedrock Agents feature has been retired and replaced by AgentCore.
The payments system is already being used in production. Anchor Browser integrated it to unlock paywalled web content for customers. Travala added it to its Travala Travel MCP servers, enabling customers using agentic platforms such as Claude to book hotels conversationally.
SpreadX used AgentCore Payments in its new AI product, Incarna, to pay for inference through BlockRun. Elsa AI and Heurist AI use the system to provide financial research and advisory services by accessing pay-per-use application programming interfaces over x402.
AWS projected that the share of agents integrated into corporate applications would grow from under 5% at the end of 2025 to 40% by the end of 2026. The payment layer gives those agents a way to transact. Its unresolved rules determine what happens when the transaction has to be unwound.
Comments (0)