On September 20, 2026 at 19:04 UTC, an AI agent bought a $10 Amazon.com gift card. It did not use a credit card, a login, or anyone's private keys. It used an ordinary x402 payment client, paid in USDC, and about four and a half minutes later the card was sitting in its owner's SpendTheBits app.
No person approved the checkout. No platform held the money along the way. That combination is what makes this matter.
Today SpendTheBits Inc. announces that agent commerce is live in the STB Superapp, its self-custody wallet for iOS and Android. It is built on x402, the open standard that lets software pay for things over plain HTTP.
“Everyone is talking about AI agents that can spend money. The hard part isn't getting an agent to pay. It's making sure a mistake, a bug or a stolen key can't take more than you chose to risk. We built it so the owner sets the limits, the agent works within them, and nobody in the middle, including us, ever holds the funds.”
What happened, in plain terms
- 1
The owner set the rules. In the app, the owner created an agent with its own key, a separate spending float, and gift-card limits of $15 per card and $50 per month.
- 2
The agent asked for a price and paid it. It used the standard @x402/fetch client with no custom SpendTheBits code. The payment went to a single-use contract created for that one order. That contract has no owner, and its only possible actions are paying the card provider, paying the service fee, or refunding the agent.
- 3
The money crossed chains on its own. The agent paid on Base. The card provider takes payment on Ethereum. Circle's CCTP moved the USDC between the two networks in under a minute.
- 4
The card arrived in the owner's name. It appeared in the owner's app. The agent never saw the card code, because that setting is off by default.
The whole transaction is public and can be checked on-chain: the forwarding transaction on Base.
Why this is a turning point
Payment networks were designed for people: card numbers, checkout pages, one-time codes sent by text. Software agents can't use any of that without a human holding the card for them.
x402 changes the model. An agent asks for something. The server answers with a price, the agent pays in stablecoins, and it gets what it asked for, all in the same request. There is no account to open and no card on file.
Agents are already looking for places that work this way. Coinbase's x402 discovery crawler and more than a dozen independent x402 trust and uptime monitors check SpendTheBits' public payment endpoint every few minutes, around the clock. The infrastructure for agent commerce is being mapped right now. The apps that are live and verifiable today are the ones that get found.
What you can do in the STB Superapp today
- Give an agent a budget without handing over your wallet. Each agent gets its own key and only the USDC you choose to put there, with limits per card and per month. One tap pulls everything back.
- Or just ask Copilot. Type "buy me a $10 Amazon card" and Copilot, the in-app AI assistant, finds the card and fills in the order. Nothing moves until you confirm it yourself on your own device. Copilot prepares the order. You approve it.
- Turn your @handle into something agents can pay. Every STB handle is a standard x402 payment address. Any off-the-shelf x402 client can pay it with no special integration, and the money reaches your wallet on-chain, with no one holding it in between.
- Receive the card where you already are. Cards are issued in your name, show up under My orders, and carry no hidden custody along the way.
An agent budget, not your wallet
Or ask Copilot to prepare the order
The card arrives in your app
The risks, and how we handle them
Agent payments are new, and anyone who says they carry no risk isn't being straight with you. This is exactly how we handle each one.
What if the agent's key is stolen?
The agent's key is separate from your wallet and never comes from your recovery phrase. It can only spend the USDC at its own address. That balance is the most you can lose, and the blockchain enforces that limit, not our software. Keep the float small and top it up when needed.
What if someone tricks the agent into spending more?
Per-card limits, monthly limits and the allowed-brand list are checked on our servers when the agent asks for a price and again when it pays. The agent cannot raise them, even if it has been manipulated by a malicious prompt.
What if the purchase fails halfway through?
Each order has its own contract with the order's terms fixed permanently when it is created. The money can only go to the card provider, or back to the agent once the order's deadline passes. No one, including SpendTheBits, can redirect it.
Who holds my money?
You do. Your wallet's keys are created and stored only on your phone. The agent spends only from its own separate balance. SpendTheBits prepares transactions and relays ones your device has already signed. It never signs on your behalf.
Is the contract audited?
Not yet by an outside firm, so we are being deliberate about it. Agent gift-card orders are limited to $25 per card during early access, and we will raise that limit only after an independent review.
Can the agent read my gift-card codes?
Only if you switch that on for that specific agent. It is off by default.
Why now
Every STB @handle is unique, and every handle is also an address agents can pay. The good ones are claimed first come, first served, and once one is taken, it's gone.
Agents are already crawling the web for payable endpoints. The businesses and people who are reachable when they arrive will be the ones those agents keep coming back to.
Availability
The STB Superapp is free to download on the App Store (172 countries and regions) and Google Play (162 countries). Agent budgets, Copilot gift-card orders, and x402-payable handles are available now. Read the full story in the insight article, or see how agents pay a handle.
Give your AI agent a budget, not your wallet.
The STB Superapp is a free, self-custody wallet on iOS and Android.
- Get the app (opens the right store on your phone)
- Follow @SuperAppSTB on X
- Runnable x402 examples for developers
About SpendTheBits
SpendTheBits Inc. builds the STB Superapp, a self-custody wallet for stablecoins and crypto across more than ten blockchains. It offers yield on idle stablecoins, automatic payments, gift cards, Lightning, cross-chain transfers and AI-assisted money management, all without ever holding its users' keys. It is not an exchange and does not hold customer funds.
Media contact: hello@spendthebits.com
Gift cards are issued by a third-party provider and are subject to its terms and pricing, which include a small service fee. Small cards cost proportionally more. Nothing in this release is financial advice.