Mike Hale MoonPay launched PayBox, a non-custodial payment vault that lets Claude and ChatGPT users trade on Solana and pay merchants through plain conversation. Wallet keys are split across hardware-isolated enclaves, so neither the AI agent nor MoonPay can sign a transaction alone.
The flow is three steps: prompt, approve, pay.
Ask for something like swap $100 PYUSD to SOL, the agent assembles the transaction, and you approve it with a passkey before any funds move. Solana is the primary chain at launch, joined by Ethereum, Base, Arbitrum, Polygon, Hyperliquid, Tempo, and Robinhood Chain.
MoonPay serves 30 million customers across 180 countries and counts more than 1,700 enterprise integrations, which gives PayBox a distribution footprint most agentic wallet experiments don't start with.
“The card hid the cash. The phone hid the card. This is the era where money disappears into conversation.”
— Ivan Soto-Wright, CEO, MoonPay
What can PayBox actually do?
PayBox exposes a defined set of financial tools to the agent through an MCP server. Once Claude or ChatGPT connects, the agent can swap tokens, bridge assets between supported chains, check balances, and send payments. The agent works from that fixed toolset rather than getting open access to your funds.
Card payments run through Visa's agentic commerce protocol, which issues one-time virtual cards scoped to a specific merchant and amount. The raw card number never reaches the agent or gets stored by it.
MoonPay says perpetual futures, liquidity management, and support for additional AI platforms are due within about a month of launch.
Can an AI agent drain your wallet?
Signing a PayBox transaction takes a quorum of key fragments, and the agent holds none of them. The vault runs on multi-party computation from Sodot, the key management firm MoonPay acquired in April 2026 for roughly $100 million in stock. Sodot's infrastructure splits each wallet's private key across multiple hardware-isolated trusted execution environments, so no single party holds enough material to move funds, MoonPay included. That infrastructure has secured more than $50 billion in transactions across 10+ million wallets for clients including eToro, BitGo, and Flow Traders.
Users pick one of two permission modes:
Always Ask requires a passkey confirmation before every payment.
Autonomous lets the agent transact inside spending limits you set, and changing those limits requires passkey re-approval.
Every authorization is single-use and revocable, which blocks replay attacks against a captured approval. Trail of Bits and NCC Group audited the cryptography, and the product meets PCI DSS standards. The agent proposes and the passkey approves, so a compromised AI session, phone, or MoonPay backend still can't sign on its own.
x402 is the open rail underneath
PayBox runs on x402, an open payment standard that repurposes the long-dormant HTTP 402 Payment Required status code for machine-to-machine stablecoin payments. Coinbase contributed the protocol to the Linux Foundation, which brought the x402 Foundation online on July 14, 2026 with 40 member organizations. MoonPay and the Solana Foundation are both Premier members, alongside AWS, Google, Cloudflare, Visa, Mastercard, American Express, Stripe, Shopify, and Circle.
In the 30 days to mid-July 2026, x402 processed roughly 75 million transactions moving about $24 million between 94,000 buyers and 22,000 sellers, an average of about 32 cents per payment. No card network can process charges that small profitably, which is the gap x402 is built for.
Neeraj Prasad, chief engineer at MoonPay Labs, has framed this as the difference between PayBox and its competitors. Rival agentic payment products tend to be built inside closed ecosystems, while PayBox runs on open rails that reach everything from a restaurant booking to an Aave position. An agent limited to one company's checkout can only spend where that company already does business. An agent that speaks x402 can pay any endpoint that implements it.
Getting started with MoonPay PayBox
PayBox is live at paybox.sh. Connecting it to Claude or ChatGPT is an MCP server connection, so no code is required to start using it as an end user.
Developers have a separate path in. MoonAgents, which MoonPay launched in February 2026, is the infrastructure layer that gives AI agents programmatic access to these crypto tools through either a CLI or an MCP server.
Trying it as a user: connect the MoonPay MCP server to Claude or ChatGPT, fund the vault, and start in Always Ask mode until you're comfortable with what the agent proposes.
Building on it: use MoonAgents to wire agent-initiated payments into your own app, and support x402 on any endpoint you want agents to be able to pay.
Accepting agent payments: the Solana Foundation maintains an open-source x402 implementation for letting agents pay for API access.
MoonPay is betting with PayBox that agentic payments run on open standards rather than one platform's checkout, and it has 30 million existing customers to test that on. How many of them switch on Autonomous mode and hand an agent real spending authority is still unknown.