MoonPay PayBox turns AI prompts into payments without custody
MoonPay, the fintech infrastructure company with more than 30 million customers across 180 countries, has launched PayBox, a payment vault designed to let AI agents transact on the open internet on a user's behalf without taking custody of their funds, credentials, or private keys. The product is live today and connects directly into Claude and ChatGPT via a custom connector, positioning itself at the intersection of agentic AI, stablecoin infrastructure, and consumer payments.
PayBox is built around a single interaction loop: a user describes a financial action in natural language, the AI prepares the transaction, and the user approves it with a passkey before any money moves. Supported operations at launch span the full spectrum of the onchain economy, from onramping fiat into PayPal's PYUSD stablecoin, to swapping tokens on Solana, bridging assets to Robinhood Chain, and deploying capital into Aave's lending pools. First-party integrations also cover everyday commerce, including restaurant reservations, flight bookings, and purchases across major online retailers.
The trust architecture
The security model is the product's core differentiating claim. Wallet private keys are split using multi-party computation (MPC) and stored across hardware-isolated trusted execution environments, meaning no single device, session, or party, including MoonPay itself or the AI agent, ever holds a complete key or can authorise a transaction unilaterally. Card payments are routed through Visa's agentic commerce protocol so raw card numbers are never seen or stored by PayBox. Every passkey approval is scoped to a single action and cannot be replayed, closing the replay-attack vector that typically plagues delegated-access systems.
The underlying key management infrastructure was acquired when MoonPay bought Sodot earlier this year. Sodot's platform reportedly secures more than $50 billion in assets and over 10 million wallets for crypto-native clients. That infrastructure now runs beneath every PayBox vault. Card and wallet credentials operate under two user-defined permission modes: Always Ask, which requires explicit passkey approval on every transaction, and Autonomous, where the agent can act within user-set limits without interrupting the workflow.
"The card hid the cash. The phone hid the card. This is the era where money disappears into conversation," said Ivan Soto-Wright, CEO and Founder of MoonPay. "Billions of AI agents are coming online, and every one of them will need to hold, move, and spend money safely. Someone had to build the trust layer for that world."
The convergence read-across
PayBox is a concrete product expression of a broader structural shift that cross-sector strategists have been watching accumulate across several sectors simultaneously. The move from AI-as-advisor to AI-as-actor has been anticipated in enterprise automation and robotics for several years, but the payments layer has consistently been the missing trust primitive. MoonPay is betting that the company which solves non-custodial agentic payments at scale wins a critical piece of the infrastructure stack before incumbents in banking and card networks can move.
The implications extend well beyond the crypto-native user base. Agentic commerce at scale restructures the relationship between consumer intent, merchant discovery, and payment authorisation. Retailers, travel operators, and DeFi protocols that integrate the x402 open standard for agent-initiated payments effectively become reachable by AI operating on behalf of millions of users, without those users ever navigating a conventional checkout flow. That compression of the discovery-to-purchase funnel has material consequences for retail platforms, travel distribution, and any marketplace business model built on conversion friction.
For capital allocators, the space is maturing quickly. MoonPay's existing regulatory footprint, a New York BitLicense, a Limited Purpose Trust Charter, and MiCA authorisation in the EU, gives it a compliance runway that pure-crypto infrastructure providers lack. Whether that moat holds as larger fintech incumbents and card networks build their own agentic payment layers is the open strategic question. PayBox is live at paybox.sh today, with expanded AI platform support and deeper DeFi routing capabilities the company says are coming soon.