Cybersecurity

Agent Spending Without Controls: Demo Shows Risk

Edge & Node showed how Ampersend adds a compliance harness to x402 so AI agents can pay for tools but get blocked if wallets are sanctioned.

StartupHub.ai Staff

By StartupHub.ai Staff, reviewed by Daniel Singer, Editor

2 min read

Edge & Node CEO Rodrigo Coelho and engineer Pranav Maheshwari took the stage to demo what they call the missing layer for AI payments: agent spending without controls. The talk, posted by AI Engineer, showed Ampersand in action.

Agent Spending Without Controls: Demo Shows Risk - AI Engineer
Agent Spending Without Controls: Demo Shows Risk, AI Engineer

Ampersand is a new harness for agentic commerce built on Coinbase's x402 and Google's A2A. The affected systems are any agent that pays for MCP tools, APIs or Shopify checkouts via x402. An attacker needs only a remote wallet address with no identity attached.

How agent spending without controls actually works

Think of x402 like a vending machine that takes USDC for every API call. Ampersand is the badge reader in front of it.

Without screening, an agent with a sanctioned wallet paid 0.1 cent for a scraping service and checked out a Father's Day gift for under $10 through Shopify UCP without friction. With TRM Labs screening enabled, the same flow blocked the bad claw wallet while the good claw passed.

Why this matters and what remains unresolved

For builders, the risk is not the payment. It is policy. A chief legal officer must sign off that agents cannot overspend, hallucinate a purchase, or pay a blocked entity. Sanctions failures can bring fines reaching tens of millions.

Ampersand tries to solve this by adding spend limits, observability and wallet screening on top of x402. Edge & Node helped shape x402 with Coinbase and Google after building its own micropayment system for The Graph queries in 2021. Since 2018, The Graph has served 1.8 trillion queries, so the team knows metering at machine speed.

The unsolved part is adoption. Transaction growth on x402 is still experimental, mostly OpenClaw retail tests, not enterprise volume. The demo did not show latency for TRM checks, false positive rates, gas costs for nano payments after batching, or how merchants reconcile these receipts.

The signal is that Cloudflare is already opening a gateway for paid crawls via x402, and most MCP servers that are free today will be paid tomorrow. When that flips, agents without a payment and compliance harness will be blind.

Sources

Get the free daily brief every morning

Every morning the day's AI news, new AI startups and new funding rounds. Free and takes a few minutes to read, unsubscribe at any time.

Join 64,000 other subscribers.

TopicsEdge & NodeAmpersendThe GraphCoinbasex402TRM LabsShopifyMCP

StartupHub.ai Staff

Written by

StartupHub.ai Staff

Editorial team

The staff writers of StartupHub.ai, ranging from investment analysts to avid AI tool users, early adopters and critical enthusiasts. Backgrounds span engineering, business and the arts. We hold every piece to rigorous standards of research and review.

Daniel Singer

Written by

Daniel Singer

Editor, reviewed this article

Daniel Singer is an AI expert who has been writing about, covering and building AI technology since 2018.

Test your Agent Readiness now

Paste your website. How well ChatGPT, Claude and the other agents can read and use a site, in about a minute.

Watch

The videos behind the news, one flip at a time

The feed mixes the videos from our articles with startup demos and you flip through them like TV channels for free with no signup.