The agent can pay now — and that's the easy part

A payment network built a rail for machines. The plumbing for autonomous commerce has arrived. The authorization model to govern it has not, and that gap is the whole risk.

Mastercard launched Agent Pay for Machines, a commercial rail for always-on, machine-initiated transactions. It closes the loop agents could not complete: one that plans and acts can now also pay, with delegated authority and no human at the checkout. A payment network building agent-native rails is the signal that machine commerce has left the lab.

The demand is real

This is not speculative infrastructure. 43% of companies now put over half their AI budgets into agentic work, and 85% of financial-services respondents expect agents to initiate and execute payments for consumers. Mastercard is building for a shift the industry already believes is inevitable.

But the plumbing is the easy half. Two-thirds of those same respondents say agent payments will require an entirely new authorization model, and a ChatGPT-linked hack showed how autonomy expands the attack surface. Who approved this purchase, what may the agent spend, who is liable when it errs — the rail does not answer any of it.

Governance is the gate

Once an agent can move money, a governance failure costs money, not just data. That is why scoped spending authority, derived identities, and audit trails are the real gating work — and why the next competitive front in agents is control, not capability.

Mastercard — Mastercard launches Agent Pay for Machines → · Cloud Security Alliance — Is financial services ready for agentic payments? →