Agent Spending Without Controls: Demo Shows Risk

Edge & Node CEO Rodrigo Coelho and engineer Pranav Maheshwari took the stage to demo what they call the missing layer for AI payments: agent spending without controls. The talk, posted by AI Engineer, showed Ampersand in action.

Companies in this story

StartupHub profiles of the companies this article names, with funding and a one-liner from our database.

Agent

Agent is building an AI-powered platform to automate complex workflows and tasks for businesses.

Bloomberg L.P.

$42.6B

Global financial, software, data, and media company providing real-time information and analytics.

Databricks

$190.0B

A unified data analytics and AI platform built on the lakehouse architecture.

Veeam Software Group

$15.0B

A global leader in data management and protection, now tackling AI risk and enabling secure AI agent scaling.

Ampersand is a new harness for agentic commerce built on Coinbase's x402 and Google's A2A. The affected systems are any agent that pays for MCP tools, APIs or Shopify checkouts via x402. An attacker needs only a remote wallet address with no identity attached.

How agent spending without controls actually works

Think of x402 like a vending machine that takes USDC for every API call. Ampersand is the badge reader in front of it.

Without screening, an agent with a sanctioned wallet paid 0.1 cent for a scraping service and checked out a Father's Day gift for under $10 through Shopify UCP without friction. With TRM Labs screening enabled, the same flow blocked the bad claw wallet while the good claw passed.

Why this matters and what remains unresolved

For builders, the risk is not the payment. It is policy. A chief legal officer must sign off that agents cannot overspend, hallucinate a purchase, or pay a blocked entity. Sanctions failures can bring fines reaching tens of millions.

Ampersand tries to solve this by adding spend limits, observability and wallet screening on top of x402. Edge & Node helped shape x402 with Coinbase and Google after building its own micropayment system for The Graph queries in 2021. Since 2018, The Graph has served 1.8 trillion queries, so the team knows metering at machine speed.

The unsolved part is adoption. Transaction growth on x402 is still experimental, mostly OpenClaw retail tests, not enterprise volume. The demo did not show latency for TRM checks, false positive rates, gas costs for nano payments after batching, or how merchants reconcile these receipts.

The signal is that Cloudflare is already opening a gateway for paid crawls via x402, and most MCP servers that are free today will be paid tomorrow. When that flips, agents without a payment and compliance harness will be blind.