Loading story…
Cloudflare has opened a closed beta of Monetization Gateway, allowing domain owners to charge AI agents for access to APIs, Model Context Protocol (MCP) tools, websites, and datasets. The service uses HTTP 402 Payment Required and x402 payment authorization; requested resources are released after USDC payments settle on the Base blockchain. The beta is limited to eligible U.S.-based buyers and sellers.
The rollout makes agent-spending governance a critical implementation concern. Cloudflare recommends enforcing authorization in the agent runtime rather than trusting the model, with Virtual Wallet allowances, merchant allowlists, transaction limits, and user-confirmation callbacks. Organizations deploying paid agent workflows must also account for variable prices and ambiguous retries, retaining payment-aware telemetry and idempotency records to distinguish failed requests, completed payments whose responses were lost, and legitimate new purchases; planned transaction logs are primarily intended for sellers.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Cloudflare opened a closed beta of Monetization Gateway, allowing eligible U.S. domain owners to charge AI agents for access to APIs, MCP tools, websites, and datasets through x402 payment authorization. Protected resources are released after USDC payments settle on the Base blockchain.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cloudflare announced **Cloudflare Wallets**, a forthcoming service designed to let AI agents make payments for APIs, content, and online services using programmable digital wallets tied to Cloudflare accounts. The offering includes **Account Wallets** for individuals and organizations and **Virtual Wallets** for AI agents, alongside human-readable wallet identities through **`cloudflare.pay`** so websites and services can verify which person or organization an agent represents. The company said the wallets will include owner-defined guardrails such as spending caps, approved merchants, and transaction limits, aiming to let agents transact without requiring manual approval for every purchase. Cloudflare also said the service is built to work with its **x402-based Monetization Gateway** and support micropayments, allowing agents to buy low-cost services without creating separate accounts, while handle reservations are open ahead of broader availability in the coming months.
Aug 27, 2026
Cloudflare has introduced **WriteGuard**, a private beta security layer for Model Context Protocol (**MCP**) servers that intercepts agent requests, enforces tool-specific policies, and logs blocked or failed actions for centralized auditing. The service is designed to curb the risk of AI agents using existing OAuth-backed access to perform sensitive write operations across databases, internal APIs, GitHub, GitLab, Jira, Google Workspace, SaaS platforms, and internal wikis. Cloudflare said WriteGuard can apply consistent controls across multiple MCP servers without requiring changes to each server, while preserving attribution by tying MCP client and session context to the human user and scrubbing sensitive values before audit events are stored. The launch comes as MCP-connected tools are gaining direct write access to production workflows. ElevenLabs recently introduced a hosted MCP connector that lets Claude inspect and modify **ElevenAgents** configurations, including changing prompts, voices, languages, retrieving transcripts, generating sample speech, estimating costs, and even deleting agents from a chat interface. ElevenLabs said it uses OAuth plus organization- and session-level controls and urged users to review tool calls before approval, warning that approval alone does not guarantee safe or correct downstream behavior; the company also pointed teams to testing, versioning, and CLI/API-based rollout practices for stronger governance.
Aug 20, 2026
Cloudflare has open sourced **Cloudflare OS**, an internal platform built to control, isolate, and audit how AI agents access sensitive data and external tools. The system uses capability-based access controls and **Gatekeeper** services that hold credentials on an agent’s behalf, allowing policies to be enforced without exposing secrets directly to agent code. Cloudflare said the platform was designed to address security gaps in agent frameworks by limiting what agents can reach and by making their actions attributable and reviewable. A central feature is an observation log that records every resource an agent reads and uses that history to re-check whether downstream actions should still be allowed, extending beyond tool-permission models such as **Model Context Protocol**. Cloudflare said agent execution is isolated through **Dynamic Workers**, sandboxed browser frames, **Durable Object Facets**, and SQLite-backed application state, while model traffic is routed through **Cloudflare AI Gateway** for attribution, rate limiting, and budget controls. The company said Cloudflare OS is being released as open source before a broader managed product launch, with dashboard, development container, and Slack-integrated workspace features still in development.
Aug 23, 2026