Published

Agent payments, week to 26 October 2026: Lightning wallets for agents on mainnet, x402 inside card networks

Weekly note for 19–26 October 2026: Lightning Labs opened Wavelength on Bitcoin mainnet with MCP and L402; Mastercard opened Agent Pay for Machines on x402; Circle, Visa and Stripe shipped agent payment and treasury products; AP2 and ACP had no repository changes.

  • Agents
  • Payments
  • lightning
  • l402
  • x402
  • Stablecoins
  • Protocols

This note covers 19–26 October 2026. Each item links to its primary source and gives its date. It reports what the sources say. It adds no forecasts, rankings or figures of its own. Where this site could not find public data, it says so.

Frame of reference: BlackRock's paper of 5 October 2026 (web page) states:

Blockchain rails are particularly well suited to high-frequency, sub-cent machine-to-machine (M2M) transactions, including API calls, on-demand data, and consumption-based compute.

The same paper also states:

The ecosystem remains nascent, with agentic payment activity and compute-market liquidity still limited.

Bitcoin and Lightning for agents

Wavelength on mainnet (Lightning Labs, 2026-10-23)

Source: https://lightning.engineering/posts/2026-10-23-wavelength-mainnet-launch/

  • What it is: a payments toolkit that Lightning Labs opened on Bitcoin mainnet for everyone on 23 October 2026. The release is still labelled alpha.
  • No node to run: the post says apps and agents need no node, no channels to manage, and no liquidity to source.
  • Settlement layer: the post describes it as "Ark-like". A coordination service settles transfers. The post says that service "never has unilateral control" of user funds.
  • Agent interface:
    • wavecli mcp serve exposes the wallet as typed MCP tool calls.
    • L402 handles pay-per-request access to APIs.
    • The same toolkit can charge agents per request.
  • Key handling:
    • Wallet creation and unlock stay on the command line, so seeds and passwords do not pass over the agent channel.
    • wavecli bakemacaroon issues a macaroon with only the permissions you grant. A receive-only macaroon cannot sign, recover or administer the wallet.
  • Limits in this release:
    • Up to 300,000 sats per mainnet account.
    • Up to 50,000 sats per VTXO.
  • Fees as published:
    • 0.25% service fee on Lightning sends and on Lightning receives, plus normal Lightning routing fees.
    • A dynamic service fee for moving funds between on-chain and Wavelength.
    • A unilateral exit pays only Bitcoin network fees.
  • Liveness requirement: funds need renewal roughly every two weeks. The wallet does this for free if it is opened inside the refresh window. If a wallet stays offline past that point, the post says the funds are recovered the next time the client comes online.
  • Stablecoins: described as "coming soon". No date is given.
  • Docs for agents:

Wavelength release tags

RepositoryTagPublished (UTC date)Link
lightninglabs/wavelengthv0.2.02026-10-23https://github.com/lightninglabs/wavelength/releases/tag/v0.2.0
lightninglabs/wavelength-sdkv0.2.02026-10-23https://github.com/lightninglabs/wavelength-sdk/releases/tag/v0.2.0

The wavelength-sdk v0.2.0 notes flag a behaviour change: invoice sends no longer use server credit unless you authorize it. Apps that pay invoices below 1,000 sats, or that spend credit the wallet holds, must pass maxCreditSat and maxCreditTopupSat on the invoice arm of SendRequest. On the CLI, the equivalent send flags are --max-credit and --max-credit-topup. The same release redacts wallet secrets from web SDK debug logs. Source: https://github.com/lightninglabs/wavelength-sdk/releases/tag/v0.2.0

L402 reference points

  • Protocol README: L402 combines macaroons with Lightning invoices behind HTTP 402 Payment Required. Scoped sub-credentials can be delegated to other agents through caveat attenuation. Source: https://github.com/lightninglabs/L402/blob/master/README.md
  • Endpoint supply: 402index.io listed 317 of 2,143 indexed L402 endpoints as verified, from 35 of 98 providers. The page showed "Last checked: 2026-10-26 08:07:41" with no time zone. Source: https://402index.io/
  • Payment volume: this site found no public source that reports L402 or Lightning payment volume by agents. The 402index figures count endpoints, not payments.

Lightning node software

x402

Mastercard Agent Pay for Machines (2026-10-20)

Source: https://www.mastercard.com/global/en/news-and-trends/press/2026/october/Mastercard-Agent-Pay-for-Machines-in-action.html

  • Basis: the service builds on x402.
  • Flow:
    1. A business gives an agent a task and a spending limit.
    2. A paid service answers with 402 Payment Required.
    3. The agent creates a "digitally signed payment voucher" within its limit.
    4. The provider verifies the voucher and delivers the service.
  • Settlement: vouchers are exchanged off-chain. Providers can combine vouchers and redeem them later.
  • Pilots named: Cloudflare, Ant International, AIsa, Base, BVNK, Coinbase and Hype.
  • Demo shown at Cloudflare Connect: nine payments to two merchants under one approved budget.
    • Coinbase Developer Platform provided the wallet infrastructure.
    • Base was the on-chain settlement network.
    • BVNK acted as the agent wallet and used Mastercard Global Money Platform for settlement, in fiat or stablecoins.
  • Early Access contents: first-version buyer-side and seller-side APIs, a toolkit, a sandbox, and developer documentation.

Cloudflare Monetization Gateway (context)

x402 reference implementation: changes merged 2026-10-22 to 2026-10-26

These were merged into x402-foundation/x402 main. On npm, the latest @x402/core version is 2.28.0, published 2026-09-29 (checked 2026-10-26), so a client on the latest npm release may not have these fixes yet.

Date (UTC)ChangeCommit
2026-10-22Paywall: prevent reflected XSS in v1 and v2 paywalls (#3855)https://github.com/x402-foundation/x402/commit/a9772e501f237913fecbf324c355f4e876b8c1dd
2026-10-22Core: enforce the settlement override ceiling against PaymentRequirements.amount (#3338)https://github.com/x402-foundation/x402/commit/fa5eb06c5f96f0d19752ceff8ccc71a3fb248d79
2026-10-22Go: reject non-canonical EIP-3009 ECDSA signatures (#2454)https://github.com/x402-foundation/x402/commit/fa1963af910a3a771f8135c05b7f73229e7eeef9
2026-10-22Core: do not treat an OPTIONS preflight as a paid request (#3738)https://github.com/x402-foundation/x402/commit/3bd3c1da03db63e19b14f900e78947e46bdce956
2026-10-22Core: validate CAIP-2 network syntax (#3285)https://github.com/x402-foundation/x402/commit/3ca54cb29c9b128972a621db956f4898d12a271d
2026-10-22Core/Express: include the error reason in the 402 JSON body for non-browser clients (#3795)https://github.com/x402-foundation/x402/commit/732c181f936eceb2a24fa2fac99ef9118b554b48
2026-10-22TS: bound HTTP response body reads (#3400)https://github.com/x402-foundation/x402/commit/76f2f289e82937244cc51901c9815ee656964583
2026-10-22Batch settlement: fail closed when a refund emits no Refunded amount (#3096)https://github.com/x402-foundation/x402/commit/470419dbcdb16388af596f35e470c7c0578fd0cd
2026-10-22Specs: add the upto scheme specification for XRPL (#3023)https://github.com/x402-foundation/x402/commit/2b06a54edf2b239c3bcf97aa5e514edcea63d777

Commit history: https://github.com/x402-foundation/x402/commits/main

Other x402 items

  • Endpoint supply: in the same 402index.io snapshot (2026-10-26 08:07:41, zone not stated), 105,887 of 192,752 indexed x402 endpoints were listed as verified, from 3,084 of 4,994 providers. Source: https://402index.io/
  • Algorand Global x402 Challenge (post dated 2026-10-22):
  • Base on-chain count (context, published 2026-10-14): Chainalysis reports that by the end of its 2026 period, over 138 million x402 transactions had occurred on Base. Source: https://www.chainalysis.com/blog/north-america-crypto-adoption-2026/

Stablecoins

Circle CPN Managed Payments for agent traffic (2026-10-19)

Source: https://www.circle.com/blog/turn-agent-traffic-into-revenue-with-cpn-managed-payments

  • Purpose: lets eligible businesses accept agentic stablecoin payments made over x402 or MPP without running their own custody, screening or payout stack.
  • How it works:
    • One API call to Circle creates a sub-account for each provider.
    • Circle screens and accepts each payment.
    • Circle records each payment with an onchain reference and sends webhooks.
    • Circle pays out to a bank account in local currency on request.
  • Worked example in the post: 0.002 USDC per API call.
  • Background: Circle says it launched CPN Managed Payments in April 2026 for PSPs, banks and fintechs.

BlackRock paper (2026-10-05)

Card networks, agent wallets and treasury

  • Visa, BILL and Billtrust (2026-10-20):
    • A live pilot lets an authorized AI agent pay approved B2B invoices through supplier portals.
    • The agent is registered through Visa's Trusted Agent Protocol and Agentic Directory, and uses tokenized credentials instead of shared portal logins.
    • Per Visa's FAQ, the agent executes only payments the buyer has already approved.
    • Source: https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.22856.html
  • Stripe Treasury for agents (2026-10-21):
    • Agents can check balances, pay invoices, transfer funds between accounts and convert currencies.
    • Stripe says creating cards and agent spending limits are coming. No date is given beyond "in the coming weeks" for limits.
    • Agents connect through Stripe's MCP server. Businesses choose read or act access and when money movement needs human approval.
    • Source: https://stripe.com/newsroom/news/treasury-for-agents
  • Hedera Agent Accounts (context, announced 2026-10-08):
    • Non-custodial spending accounts with on-chain rules: total limit, daily cap, per-transaction maximum and recipient allowlist.
    • Exposed through an MCP server and a REST API. Compatible with x402.
    • Testnet for limited partners is planned for Q4 2026, public testnet for Q1 2027, and mainnet is targeted for Q2 2027.
    • Source: https://hedera.com/blog/introducing-hedera-agent-accounts/

AP2 and ACP

Market context

Figures below are as reported in the linked sources. Prices are approximate. Times are UTC.

What is not known

  • Lightning and L402: no public data on agent payment volume.
  • Mastercard Agent Pay for Machines: no published pricing, country list or volume.
  • Circle, Visa and Stripe: none of these posts report agent payment volumes.
  • x402 fixes: whether the main-branch changes listed above have reached published SDK releases beyond those checked.
  • Strategy: its report on BTC purchases for 19–25 October 2026 was not yet out when this note was written.

Source

The Machine-Native Economy: AI and Digital Assets— Robert Mitchnick, BlackRock,

Published by Agent Paywire.

Not investment advice.