Skip to content

Agent Payments

An agent hits an HTTP 402 and has to pay for what it wants, without holding a wallet key or an unlimited budget. Amazon Bedrock AgentCore Payments makes that a governed action instead of a stored credential — here's what I ran against it.

Calling an API is easy compared with letting a non-human actor spend money without handing it private keys, an unlimited budget, or a prompt-level spending rule it can be talked out of. AgentCore Payments makes spend a governed action — session budgets, Cedar policy, and a real audit trail — instead of a stored card number. This is the order I actually verified it in: the payment lifecycle and the guardrails first, then the browser-specific wrinkle, then how it compares to the competing protocol.