How machines pay machines: x402 and the rise of paid, verifiable services for AI agents

A new kind of commerce is quietly coming online: machines paying machines. An autonomous AI agent, mid-task, discovers a service it needs, pays for a single call in stablecoin, consumes the result, and moves on — with no human approving the transaction and no account created in advance. The payment is the authorization. This is machine-to-machine (M2M) commerce, and the HTTP 402 pattern (x402) is the rail making it practical at scale.

The shift matters because it removes the last human bottleneck from autonomous work. Until now, an agent could reason and act, but the moment it needed a paid resource it hit a wall: some human had to have signed up, entered a card, and provisioned an API key ahead of time. An agent composing a task from services it finds at runtime cannot pause for that. When the agent can settle a micropayment inline — a fraction of a cent in USDC, final and non-custodial — the wall disappears. Services become discoverable and consumable by software directly, priced per call, with no minimum and no subscription.

But M2M commerce surfaces a trust problem that human commerce mostly hides. When a human buys a service, they can judge the vendor, read reviews, and dispute a charge. An agent paying another agent has none of that, and stablecoin settlement is final — there is no chargeback. So the services agents buy from each other are far more valuable when their output is independently verifiable. A result an agent can cryptographically check is worth paying for; an unverifiable claim from an anonymous endpoint is a gamble the agent has no way to price.

This is where verifiable, signed services fit the machine economy precisely. Consider a paid endpoint that, in exchange for a stablecoin micropayment, returns a post-quantum signature over the caller's data — a portable proof the agent can present elsewhere as evidence of what it did, when, and that the record has not been altered. The buyer gets something checkable, not a promise; the seller gets paid per call with no account to manage. Signing with a post-quantum scheme (ML-DSA, FIPS 204) keeps the proof unforgeable for the long term — resistant to known classical and quantum attacks per NIST, not unbreakable. As the agent economy grows, the endpoints that thrive will be the ones selling verifiable outputs, because verifiability is what makes a machine willing to pay another machine it has never met.