TL;DR
MoonPay launched PayBox on July 29, 2026 — a non-custodial payment vault that connects Claude and ChatGPT to Solana, seven EVM chains, and real-world merchants. The AI prepares transactions; the user approves with a passkey; money moves. Wallet keys are split via MPC across secure enclaves, so no single party — not MoonPay, not the AI agent — can sign alone. Merchant payments run on the open x402 standard.
Introduction
Conversational AI assistants can answer questions, write code, and automate work — but until now they couldn’t move money for you unless you handed it to a terminal, a developer tool, or a third-party custodian. PayBox closes that gap: with a single custom connector inside Claude or ChatGPT, users can trade tokens, bridge assets, interact with DeFi, and pay merchants across the open internet. (Source : MoonPay — MoonPay Launches PayBox, a Payment Vault for Claude and ChatGPT)
The workflow is deliberately simple. A user types a plain-language instruction: “Onramp $100 into PYUSD,” “Swap $100 of PYUSD to SOL,” “Bridge funds to Robinhood Chain,” “Book my flight.” The AI researches, plans, and prepares the transaction. The user approves it with a passkey. The money moves. (Source : MoonPay — MoonPay Launches PayBox, a Payment Vault for Claude and ChatGPT)
The Security Architecture: Autonomy Without Custody
The core design principle is that existing products force a tradeoff between convenience and control: to let an agent transact autonomously, the user typically has to authorize it to take custody of funds outright. PayBox is built so no party — including MoonPay and the AI itself — can unilaterally access the user’s funds or credentials. (Source : MoonPay — MoonPay Launches PayBox, a Payment Vault for Claude and ChatGPT)
Three specific fraud vectors are addressed:
1. No single credential to steal. Wallet keys are split via threshold cryptography (MPC) across hardware-isolated secure enclaves (TEEs). A compromised phone doesn’t hand an attacker the ability to move funds — the missing key shards are never present on the device.
2. No reusable card numbers. Card payments route through Visa’s agentic commerce protocol, generating single-use virtual card numbers scoped to specific merchants and amounts. The raw card number is never stored or visible to the agent. (Source : Solana Compass — MoonPay Launches PayBox)
3. No reusable authorization. Every passkey approval is scoped to a single action and expires after use — a captured or replayed approval can’t be run again or expanded into broader access.
Under the hood, key management runs on Sodot’s infrastructure, which MoonPay acquired earlier this year — the same stack securing more than $50 billion in assets across 10 million wallets, assessed by Trail of Bits and NCC Group and PCI DSS 4.0.1 certified. (Source : Solana Compass — MoonPay Launches PayBox)
Two Spending Modes: Always Ask vs Autonomous
Every credential operates under user-defined permissions: (Source : MoonPay — MoonPay Launches PayBox, a Payment Vault for Claude and ChatGPT)
- Always Ask — every transaction requires a fresh passkey approval, scoped to that single action and expiring after use.
- Autonomous — the AI can act within limits the user chooses: a spending cap, a token allowlist, a per-transaction ceiling, or a combination.
Changing permissions always requires a new passkey approval by a human. Access can be revoked instantly, at any time. The distinction defines the trust boundary: Always Ask gives full per-transaction oversight; Autonomous delegates that oversight to a ruleset the user controls but does not actively monitor. (Source : Solana Compass — MoonPay Launches PayBox)
x402: The Open Standard for Agent Payments
Merchant payments route through x402, an open internet payment standard that revives the HTTP 402 “Payment Required” status code for agent-initiated transactions. The standard is now governed by the x402 Foundation under the Linux Foundation, launched July 14 with members including Visa, Anthropic, AWS, Mastercard, and Shopify. (Source : Solana Compass — MoonPay Launches PayBox)
At launch, PayBox’s x402 integrations cover restaurant reservations via AgentRes.dev, flight bookings via BRIJ.fi, and retail purchases via Purch.xyz. USDC is the primary settlement currency across x402 transactions. The x402 network logged 75 million transactions and $24 million in volume in the 30 days prior to launch, with Solana and Base the most active settlement chains. (Source : Solana Compass — MoonPay Launches PayBox)
Chains and What You Can Do
PayBox launches with Solana as its primary settlement chain alongside seven EVM-compatible networks: Ethereum, Hyperliquid, Tempo, Base, Robinhood Chain, Arbitrum, and Polygon. Supported on-chain actions include buying crypto with fiat, swapping tokens, bridging assets, and DeFi deposits. MoonPay plans to add token swaps, perpetual futures, and liquidity management within one month of launch. (Source : Solana Compass — MoonPay Launches PayBox)
Where PayBox Fits in the AI Payments Stack
PayBox is consumer-facing, which sets it apart from MoonPay’s existing developer product, MoonAgents (launched February 2026), which gives AI agents programmatic access to crypto tools via CLI or MCP server. PayBox targets people who already use Claude or ChatGPT daily and want to transact through those interfaces without configuring wallets or managing keys. (Source : Solana Compass — MoonPay Launches PayBox)
MoonPay Labs chief engineer Neeraj Prasad described the design choice to The Block as building agentic payments “inside their own walls, while PayBox uses open rails.” (Source : Solana Compass — MoonPay Launches PayBox)
The competitive landscape is forming fast. The Solana Foundation and Google Cloud operate Pay.sh, an open-standard AI payment gateway also built on x402 and Solana, launched June 2026 — focused on API-level micropayments and developer tooling rather than end-user commerce. MoonPay says it serves 30 million customers across 180 countries and 1,700 enterprise clients, holding a New York BitLicense and MiCA authorization in the EU. Gemini and Grok are listed as planned AI platform integrations. (Source : Solana Compass — MoonPay Launches PayBox)
What This Means for Agent Builders
The pattern PayBox establishes — agents propose, humans dispose — is a template for any autonomous system touching money:
- Separation of preparation and authorization. The agent can research, plan, compare, and prepare all day; money only moves according to the user’s rules. This is the agentic-commerce equivalent of two-man rule in banking.
- Custody is the wrong model for agents. Splitting keys via MPC removes the single point of failure that makes agent wallets dangerous. The agent holds capability, not custody.
- Open rails win. x402 under the Linux Foundation, with Visa, Anthropic, AWS, Mastercard, and Shopify as members, signals that agent payments will be a standard, not a proprietary moat.
The quote from MoonPay CEO Ivan Soto-Wright captures the thesis: “The card hid the cash. The phone hid the card. This is the era where money disappears into conversation. Billions of AI agents are coming online, and every one of them will need to hold, move, and spend money safely.” (Source : MoonPay — MoonPay Launches PayBox, a Payment Vault for Claude and ChatGPT)
FAQ
Q: Does MoonPay hold custody of my funds? A: No. PayBox is non-custodial. Wallet keys are split via MPC across hardware-isolated enclaves, so no single party — including MoonPay or the AI agent — can access the full private key or sign transactions independently.
Q: How do I approve a transaction? A: With a passkey. Each approval is scoped to a single action and expires after use, preventing replay attacks.
Q: What is the difference between Always Ask and Autonomous mode? A: Always Ask requires passkey approval for every transaction. Autonomous lets the AI act within limits you configure — spending caps, token allowlists, per-transaction ceilings.
Q: Which chains are supported? A: Solana plus Ethereum, Hyperliquid, Tempo, Base, Robinhood Chain, Arbitrum, and Polygon. USDC is the primary settlement currency for x402 merchant payments.
Q: Is PayBox only for crypto? A: No. Card payments route through Visa’s agentic commerce protocol, and x402 connects to real-world merchants — restaurant reservations, flight bookings, and retail purchases at launch.