AWS Bedrock AgentCore Payments Enable Autonomous Agent Transactions
AWS ML Blog · rss · 2026-08-18
AWS and the OpenClaw Foundation introduced a solution for building OpenClaw agents that transact via Amazon Bedrock AgentCore payments, addressing the need for autonomous agents to handle paid services.
Problem & Solution
- Scenario: Agents performing long-running tasks may encounter paid APIs (HTTP 402) requiring immediate payment without human intervention.
- Design: Isolates wallet credentials and session creation authority from the model-facing runtime. Agents can only initiate payments within pre-approved bounds (recipient, amount, expiry), mitigating risks from prompt injection.
- Architecture:
- Uses HTTP-native protocols like x402 v2 and Machine Payments Protocol (MPP).
- AgentCore Identity securely stores credentials (supporting Coinbase or Stripe Privy wallets).
- The aws-agents-pay plugin exposes tools for checking status and requesting paid content within policy limits.
- Flow: Agent receives 402 challenge -> Validates against policy -> Calls payment -> Replays request with auth.
Benefits
- Enables sub-cent transactions in stablecoins, avoiding high card processing fees.
- Integrates with observability tools like CloudWatch and X-Ray.
More from coding & agent
- Research: Are LLM agents time-aware and can they estimate task duration? — xeophon · 2026-08-18
- Dev trick: Visualizing codebases into interactive diagrams with Claude — round · 2026-08-18
- Intangible MCP Lets Agents Build Scenes Before You Polish — umesh_ai · 2026-08-18
- Testing MCP Apps with three contracts: jsdom, Playwright, and manual checks — philrox_ · 2026-08-18
- New research: are LLM agents time-aware? Can they estimate task duration? — maksym_andr · 2026-08-18
- OpenAI's steipete on coding agents expanding into observability and long-running ops — steipete · 2026-08-18