Payments. AI. Commerce. Decoded. 236 articles and counting.
Showing 1–24 of 236 articles
A 57-page research report covering every protocol, every theme, and every gap in agentic payments. Six competing protocols mapped against the full transaction lifecycle. Thirteen themes that defined the past 12 months. Ten falsifiable predictions for the next 12. Free to read.
Apple has stayed out of the enterprise AI infrastructure debate while hyperscalers, model labs, and chipmakers fought over it. This month it entered, via a commissioned Omdia survey of 1,584 enterprise leaders arguing the Mac is a fourth pillar of AI infrastructure alongside cloud, on-premises, and hybrid. Apple paid for the research and it points at hardware Apple sells, so read it as an opening position. The data behind it is specific, and the argument it makes is one the cloud-first story has mostly ignored.
Starting July 8, some Claude users will be asked to upload a passport, a selfie, and the biometric geometry of their face. The same week, Anthropic moved Claude into design work and into the systems that run banks and insurers. The three announcements are connected, and the thread is identity. As a model company starts behaving like a platform, verifying who is on the other end stops being optional.
SpaceX bought Cursor for $60 billion, four days after the largest IPO ever recorded. The coverage called it a coding deal. Read the rest of the company and it is the final piece of a stack that already holds the network, the audience, a wallet, stablecoin settlement, and the model. One public company now owns every layer commerce runs on, and the part that should worry payment networks is X Money.
On June 16, Moody's connected its intelligence to Amazon Quick through a dedicated MCP server. It did not build an app or a chatbot. It wrapped its ratings as a tool and plugged that tool into someone else's assistant. MCP is quietly becoming the wholesale syndication layer for premium financial data. The gap nobody closed: the protocol solves access, not accountability. Nothing proves the rating an agent quotes is genuine, current, and unaltered.
Microsoft patched SearchLeak, a one-click attack that stole two-factor codes through Copilot, as CVE-2026-42824. The patch closes the instance, not the class. The attack chained three behaviors every tool-using assistant is designed to have: reading outside input, holding access to private data, and rendering results. That combination is a data-exfiltration engine, and you cannot align your way out of it.
Buried in a 21-product launch, Coinbase shipped Coinbase for Agents, which lets third-party AI trade and pay within user-defined limits, plus an SEC, CFTC, and NFA registered AI adviser. Those user-defined limits are mandates, the exact primitive the agent-safety world has been arguing about, now live to consumers inside a regulated venue. The catch is that the limit only works inside Coinbase. It does not travel.
A single US national security order switched off Anthropic's Fable 5 and Mythos 5 for every European user overnight. The European Commission is now assessing the implications, and Europe's long-running AI sovereignty debate has turned from a subsidy story into a live procurement question. We look at the build-your-own versus secure-access split and why model continuity is now a board-level dependency for European banks and governments.
The Fable 5 ban has a name attached to it now. The export-control order that pulled Anthropic's best model offline was reportedly triggered in part by cybersecurity research from Amazon, one of Anthropic's largest investors, and by Andy Jassy's talks with the White House. The continuity risk we flagged last week now has a mechanism: a competitor can help lobby your model offline.
The US ordered Anthropic to suspend Claude Fable 5 and Mythos 5 for every customer, three days after launch. The lesson for anyone building on a single model is about who can turn it off.
The fear is that AI agents turn every product into a commodity and erase brands. The history of distribution says agents move discovery, not loyalty. The merchant who should worry is the one who only ever competed on being found.
A former CardX founder just launched an AI tool that wins chargebacks for merchants. Banks are deploying the same kind of automation to fight back. Nobody has fixed who owns the dispute when an AI agent made the purchase.
In one week of June, Visa, Stripe and PayPal each shipped a way to let an AI agent pay. The real contest is not checkout. It is whose credential lives inside the agent, and whether the permission attached to it can travel.
Mistral is raising about $3.5 billion to sell European institutions an AI they control. European fintechs already run agentic payments on US infrastructure. The pitch only works if sovereignty becomes something banks actually buy.
Every agent-payment rail now lets an AI agent spend. We read the primary specs behind eight of them and asked one question: when a human authorizes an agent to pay, can anyone outside the issuing network verify what was allowed? Seven rails fail the test. The one that passes has a catch.
Google DeepMind just put $10 million toward research into what happens when millions of AI agents interact. We are already wiring those agents into the payment system. Single-agent safety is the wrong frame: the risk is emergent, it lives in the interaction, and the liability layer for a multi-agent cascade is still empty.
In one week Visa, OpenAI, and PayPal all shipped ways for agents to pay. They solved the part that was never hard. The constraint on agentic commerce is permission, not payments: whether an agent can prove it was authorized to spend, and whether the merchant can trust that proof before the charge clears.
x402 crossed 100 million transactions on Base while the most-quoted public number was still $0.11 of marketplace revenue. Articles freeze; the protocol does not. So we built the record instead: every member, every live integration, every verified number, on one page that stays current at majormatters.co/x402.
Claude Fable 5 is state of the art on nearly every benchmark, but the leaderboard is the least interesting thing about it. The story is the safety design: a frontier model that does not refuse dangerous questions, it hands them to a weaker model. Capability is outrunning control, and the labs know it.
The agentic commerce conversation has been all buy side: assistants that shop, wallets that pay. Santander's Getnet just armed the sell side, letting merchants accept agent-initiated payments. The merchant side is where agentic commerce has been stuck, and where the trust layer becomes a product.
A Major Labs Signal Read on WWDC 2026, graded across the five layers of the agentic web. Apple commoditized the model and took the execution surface above it. The one layer it shipped nothing for is trust at the action boundary, and that is a network function.