MoonPay Launches PayBox: AI Agents Pay on Solana Without Getting the Key

What happened

MoonPay has launched PayBox — a non-custodial payment vault that lets AI assistants pay and trade on Solana. The user states the intent in chat, the agent executes. Claude and ChatGPT are named among the assistants that can be connected. The official Solana account picked up the launch.

The core: scoped permissions instead of key access

The real problem with paying agents is authority. Give a program your private key and you have given it everything. PayBox uses graduated permissions instead:

• The private key stays with the user. The agent never receives it.
• Scoped access: the agent may only do what it has been granted.
• Approvals via passkeys or limits: either the user confirms individually, or sets a budget within which the agent acts on its own.

Among the payment rails, MoonPay names x402 — the standard for payments directly over HTTP, which has been developed under the Linux Foundation since July.

Context

Agent payments shift a security question: it used to be “who has my key?” — going forward it is “what may my agent do, and how tight is the limit?” That makes the permission setting the actual protective layer: an agent can err or be manipulated, and the limit caps the damage.

Background on how agents, wallets, and payments interact is in AI agents on Solana: x402 explained; how keys and wallets relate in general is in How a Solana wallet works

Note: This is reporting, not investment advice. Anyone granting agents payment rights is responsible for limits and approvals themselves.

What to watch

• How finely permissions can actually be scoped in practice
• Whether other wallet providers build comparable agent models
• How manipulated inputs (prompt injection) affect payment approvals

Sources

• MoonPay — PayBox
• MoonPay — Announcement on X