Last month, an AI agent in Denmark booked a coffee tasting and paid for it. Danske Bank and Mastercard called it the country's first payment made entirely by an agent. The customer still had to approve the purchase and confirm it with a passkey. Days later, Block brought Bitcoin Lightning to x402, the open standard that lets agents pay for APIs and data on their own.
The banks noticed. Six of them, including Bank of America and Capital One, published a set of principles for shopping agents. Their worries include impersonated agents and merchants, privacy leaks, and nobody clearly on the hook when an agent buys something it shouldn't.
Most of that comes down to identity. Who is the agent? Who sent it? What is it allowed to spend?
Today at 3:30 in Sutton, Kim Maida and Mason Egger run Secure, Durable Agents with Keycard and Temporal.
The thread picks up again Tuesday. The Intent Based Auth panel takes the Simons stage at 11:30. Kamil Potrec covers Agent Auth 101 at 2:30 in McCarthy. At 2:55 in Turing, Ishween Kaur walks through six attacks on x402 payments.
Sure, agents may have wallets, but someone still has to check their ID.
Comment below!