Cloudflare Wallets Launch as CLARITY Act Stalls in Senate

All news is rigorously fact-checked and reviewed by leading blockchain experts and seasoned industry insiders.

Summary

• Cloudflare launched Wallets and cloudflare.pay, giving AI agents an identity and a stablecoin balance they can spend without a human approving each payment.
• The launch completes a two-sided market for agent payments, adding the buyer side to the seller tools Cloudflare shipped in July.
• Payments run over x402, a protocol that revives the long-dormant HTTP 402 status code for machine micropayments.
• The CLARITY Act that would make this stablecoin setup clearly legal faces a Senate vote it is unlikely to win before recess.

Cloudflare opened a new front in machine-to-machine commerce on August 4, handing the software agents that run on its network their own stablecoin balance and a readable name to show when they buy things. The launch, branded Cloudflare Wallets and cloudflare.pay, lets an AI agent pay for an API call or a paywalled document without a person typing in a card number or clicking through a login screen. It also arrives in the middle of a fight in Washington over the exact law that would make this kind of payment unambiguously legal in the first place.

How an agent pays for a single line of data

The mechanism runs on x402, an open payment protocol Coinbase built and Cloudflare has backed since the two set up a foundation around it in September 2025. What x402 does is small and slightly nostalgic. It revives HTTP 402, a “Payment Required” status code that sat unused in the web’s original specifications for roughly three decades. When an agent asks a server for something priced, the server answers with a 402 and the amount owed. The agent signs a stablecoin payment out of its wallet, attaches proof, and gets the data back in the same exchange. No account, no subscription, no API key handed off to a human.

The wallet itself splits in two. Account Wallets belong to the person or company, who funds them with stablecoins, and Coinbase’s USDC is the default across Cloudflare’s own examples. Virtual Wallets get carved out of that balance through API keys and assigned to individual agents. On top sits cloudflare.pay, the identity layer that turns a long cryptographic key into something a merchant can actually read, such as research.example.cloudflare.pay, so a business can verify which human stands behind the bot before it ships anything. For now only the handle reservation is live. Funding, offramps and the machinery for moving real money are due over the coming months, and Cloudflare has not yet said which chains it will settle on, who will custody the funds, or what it will charge.

The spending limits live in the wallet, not the prompt

The detail security researchers keep circling back to is where Cloudflare put the guardrails. They sit in the wallet’s API layer instead of inside the language model’s instructions, which are trivially easy to talk an agent out of. An operator can cap an agent at $100 a week, set a ceiling on any single payment, and lock spending to a list of approved merchants. If an agent runs into a malicious prompt or falls into a loop that starts burning money fast, the wallet freezes and bounces the decision back to a person. The reasoning is blunt: an agent trusted with $10 is a far smaller problem than one trusted with $1,000.

x402 has already settled 160.6 million payments

Sources: Cloudflare infrastructure data; Agent Economy, which tracks x402 transfers across seven chains.

That average payment explains the entire choice of crypto rails over cards. At 26 cents a transaction, a standard card fee of around 30 cents plus a couple of percent would swallow the whole payment and then some. Sub-cent machine payments simply cannot exist on the traditional system, which is why the agent economy reaches for stablecoins in the first place.

Thune forces a floor vote unlikely to pass

None of this answers the question a general counsel asks first, which is whether funding an autonomous agent’s crypto wallet is clearly legal in the United States. That answer is supposed to come from the CLARITY Act, formally the Digital Asset Market Clarity Act, which cleared the House in July 2025 and has been sitting in the Senate ever since. The bill sorts digital assets between two regulators, routing most decentralized tokens to the CFTC as commodities while leaving investment-contract assets with the SEC. For a company laying payment infrastructure, that line separates building freely from building under the constant threat of a surprise enforcement action.

Senate Majority Leader John Thune confirmed on August 3 that the bill will get a floor vote before lawmakers leave for the August recess this Friday, and he was frank about the odds. “We’ll see where the votes are,” he told reporters. Republicans hold 53 seats and need about seven Democrats to reach the 60 votes that break a filibuster, yet as of his comments no cloture motion had even been filed. The betting markets are unconvinced. Polymarket has put 2026 passage near 33%, and Galaxy Research trimmed its own estimate to 30%.

A $636 million disclosure is holding seven Democratic votes

The holdup has less to do with crypto policy than with one man’s crypto income. On August 4, Senators Elizabeth Warren and Richard Blumenthal asked the SEC to investigate the $TRUMP memecoin, telling chair Paul Atkins the project “may constitute an illegal scam.” They pointed to the president’s 2025 financial disclosure, which showed roughly $636 million in fees tied to the token, set against nearly $3.8 billion in losses spread across close to a million buyers after the coin fell about 97% from its peak. It now carries a market value under $400 million. Democrats have chained their votes to airtight conflict-of-interest language that would bar sitting officials from profiting off tokens they can influence, and until that language satisfies them, the seven votes are not coming.

BlackRock wants the bill, JPMorgan fights its stablecoin clauses

Coinbase has been the loudest industry voice trying to push the vote across. CEO Brian Armstrong argued on X that one in four Americans now hold crypto and that voters are roughly twice as likely to back a candidate who supports the bill, framing the fight as a test for Senate leadership heading into the midterms.

1 in 4 Americans hold crypto – and passing CLARITY is a priority for them.

American voters are 2x more likely to support a candidate that backs CLARITY (vs those less likely), regardless of party preference. So the stakes are high for Senate leadership.

CLARITY isn’t only a… https://t.co/xjxXTVfT5e

— Brian Armstrong (@brian_armstrong) August 3, 2026

September becomes the fallback if this week’s vote fails

If the bill clears, enterprises finally get the legal cover to fund agent wallets at scale, and Cloudflare’s product stops being an experiment for early adopters and turns into something a compliance department can actually approve. A stall pushes everything into September, the next real window before campaign season eats the Senate calendar, with a post-election lame-duck session as the fallback and worse odds attached to it. Failure in 2026 leaves every company building agent payments to operate under the current patchwork of guidance well into 2027.

AWS and MoonPay have already wired the same rails

The infrastructure is moving faster than the law meant to govern it. Amazon and Coinbase wired x402 into CloudFront back in June, and MoonPay open-sourced a shared wallet standard alongside PayPal and the Ethereum Foundation in March. The rails for agents to pay one another are being poured across the industry regardless of what the Senate does before Friday, which leaves Cloudflare building toward a legal framework that may not exist until 2027.