# Agent Spending Without Controls: Demo Shows Risk
_Edge & Node showed how Ampersend adds a compliance harness to x402 so AI agents can pay for tools but get blocked if wallets are sanctioned._
**Published:** 2026-09-01
**Source:** https://www.startuphub.ai/cybersecurity/agent-spending-without-controls-demo-shows-risk
---
Edge & Node CEO Rodrigo Coelho and engineer Pranav Maheshwari took the stage to demo what they call the missing layer for AI payments: agent spending without controls. The talk, posted by [AI Engineer](https://www.youtube.com/watch?v=ZyGMqdIpPoE), showed Ampersand in action.

Ampersand is a new harness for agentic commerce built on Coinbase's x402 and Google's A2A. The affected systems are any agent that pays for MCP tools, APIs or Shopify checkouts via x402. An attacker needs only a remote wallet address with no identity attached.

## How agent spending without controls actually works

Think of x402 like a vending machine that takes USDC for every API call. Ampersand is the badge reader in front of it.

Without screening, an agent with a sanctioned wallet paid 0.1 cent for a scraping service and checked out a Father's Day gift for under $10 through Shopify UCP without friction. With TRM Labs screening enabled, the same flow blocked the bad claw wallet while the good claw passed.

## Why this matters and what remains unresolved

For builders, the risk is not the payment. It is policy. A chief legal officer must sign off that agents cannot overspend, hallucinate a purchase, or pay a blocked entity. Sanctions failures can bring fines reaching tens of millions.

Ampersand tries to solve this by adding spend limits, observability and wallet screening on top of x402. Edge & Node helped shape x402 with Coinbase and Google after building its own micropayment system for The Graph queries in 2021. Since 2018, The Graph has served 1.8 trillion queries, so the team knows metering at machine speed.

The unsolved part is adoption. Transaction growth on x402 is still experimental, mostly [OpenClaw](https://www.startuphub.ai/ai-news/artificial-intelligence/2026/openclaw-s-viral-launch-lessons-for-ai-maintainers) retail tests, not enterprise volume. The demo did not show latency for TRM checks, false positive rates, gas costs for nano payments after batching, or how merchants reconcile these receipts.

The signal is that Cloudflare is already opening a gateway for paid crawls via x402, and most MCP servers that are free today will be paid tomorrow. When that flips, agents without a payment and compliance harness will be blind.
---
Original analysis from [startuphub.ai](https://www.startuphub.ai), the #1 AI startup directory.