MoonPay launched PayBox on July 29, a payment vault that connects to Claude and ChatGPT through custom connectors to prepare and approve crypto and online-commerce transactions. MoonPay says standard transactions require a passkey, while an optional autonomous mode can complete actions within user-set limits. The service supports Solana and seven EVM-compatible networks and uses the x402 agent-payment standard for compatible services.
MoonPay launched PayBox on July 29, a payment vault that connects to Anthropic's Claude and OpenAI's ChatGPT through custom connectors. The product enables users to instruct an AI assistant in natural language to prepare transactions, including token swaps, asset bridges, DeFi interactions, travel bookings, restaurant reservations, and online purchases.
Under the default flow described in MoonPay's announcement, the assistant prepares a transaction and the user approves it with a passkey before funds move. MoonPay’s launch announcement describes an optional Autonomous mode in which the AI can complete transactions within limits chosen by the user.
MoonPay describes PayBox as non-custodial, meaning users retain control over funds rather than transferring custody to the company or the AI assistant. The company said that no party, including MoonPay or the assistant, can independently access a user's funds or credentials. Those are company security claims, not independently verified findings.
Payment rails and initial integrations
PayBox supports Solana and EVM-compatible networks including Ethereum, Hyperliquid, Tempo, Base, Robinhood Chain, Arbitrum, and Polygon, according to MoonPay. The service can transact with services that accept x402, an open standard for agent-initiated payments.
MoonPay says the first integrations cover restaurant reservations, travel bookings and shopping across major online retailers; Decrypt independently reported the same launch categories. MoonPay named travel, dining, shopping, crypto trading, bridging, and DeFi as supported transaction categories.
Decrypt reports that Coinbase developed x402 and later donated the protocol to the Linux Foundation. The publication reports that AWS, Cloudflare, Visa, Mastercard, Stripe, Shopify, and Anthropic are among more than 20 organizations backing the standard.
What agentic payments change
PayBox joins a growing set of efforts to move AI assistants beyond recommendation and workflow execution into financial authorization. The relevant technical boundary is not simply whether a model can select an action, but how a system constrains authorization, confirms transaction parameters, and records the resulting action across payment rails.
In comparable agent-payment systems, security review typically centers on permission scope, transaction-value limits, destination verification, revocation paths, and resistance to prompt injection. Those controls are especially consequential when an assistant can interact with third-party merchant or DeFi endpoints, where an erroneous instruction can have an immediate financial consequence.
For AI engineers, the launch is a concrete example of a connector-based architecture that pairs an LLM interface with an external transaction authority. The user confirmation step and the reported bounded autonomous mode illustrate two distinct operating models: human approval for each action, and delegated execution under predefined policy constraints. Production deployments of either model generally require auditable logs and explicit handling of failures or ambiguous instructions. MoonPay launched PayBox as an available product on July 29. Its broader utility depends on merchant adoption of agent-compatible payment interfaces and on whether the product's authorization safeguards perform reliably across its supported chains and services.
Key Points #
- 1MoonPay's PayBox connects Claude and ChatGPT to payment execution, extending conversational AI from transaction preparation into authorized financial actions.
- 2Passkey approval remains the default reported control, while bounded autonomous execution introduces policy design and audit requirements for agent builders.
- 3Agent-payment standards such as x402 can reduce integration friction, but broad adoption depends on merchant support and robust authorization controls.
Scoring Rationale #
PayBox is a notable product release at the intersection of LLM connectors, crypto wallets, and agentic commerce. It is relevant to practitioners building tool-using agents because it exposes concrete authorization and delegated-execution patterns, though its real-world reach depends on x402 and merchant adoption.
Sources #
Primary source and supporting public references used for this report.
Practice with real FinTech & Trading data
90 SQL & Python problems · 15 industry datasets
[Active Verified Users by Income TierEasy](/problems/sql/active-verified-users-by-income)
[Technology Stocks with High BetaMedium](/problems/sql/technology-stocks-with-high-beta)
[Portfolio Performance ScorecardHard](/problems/sql/portfolio-performance-scorecard)
250 free problems · No credit card
See all FinTech & Trading problems