MoonPay Launches PayBox, a Payment Vault That Runs Inside Claude and ChatGPT

MoonPay announced on 29 July 2026 that it has launched PayBox, a payment vault a user installs as a custom connector inside Claude or ChatGPT so the assistant can prepare and execute payments without leaving the conversation. According to MoonPay’s release, the user describes what they want in natural language, the assistant prepares the transaction, and the user approves it with a passkey before any funds move. An optional autonomous mode lets the assistant act within limits the user sets. PayBox pays online services over the x402 standard and, MoonPay says, makes card payments through Visa’s agentic commerce protocol. It is one of the first general-purpose consumer payment credentials available inside both major AI assistants, and it places payment authority with the customer rather than with an AI platform’s checkout or a merchant’s storefront.

What was announced

MoonPay describes PayBox as “the first payment vault built for AI.” The company says it is live at paybox.sh as of the announcement.

Setup, per MoonPay, is: install PayBox inside Claude or ChatGPT, create an account, register a passkey, then create or import a wallet and optionally add payment cards. Funding comes from an existing wallet or from a card after MoonPay’s one-time identity verification.

Every credential then operates under one of two user-selected permission models:

• Always Ask, where every transaction requires a passkey approval.
• Autonomous, where the AI can act within limits the user chooses.

MoonPay says changing those permissions always requires a new passkey approval from a person, every authorization is scoped to a single action and cannot be reused, and access can be revoked instantly at any time.

On the payment side, PayBox holds both card credentials and wallet keys. Cards are stored so that, according to MoonPay, the assistant can pay with them without ever seeing card details, and card transactions run through Visa’s agentic commerce protocol so the raw number is not seen or stored. For online services, PayBox pays over x402, the HTTP-native agent payment standard Coinbase incubated and which now sits under the Linux Foundation. MoonPay says the first x402 integrations are live for restaurant reservations, travel bookings, and shopping.

PayBox launches with support for Solana and EVM-compatible chains including Ethereum, Hyperliquid, Tempo, Base, Robinhood Chain, Arbitrum, and Polygon.

On key security, MoonPay says wallet keys are protected by threshold cryptography (MPC) and secure enclaves (TEEs), so no single party, including MoonPay and the assistant itself, can access a complete private key or sign a transaction alone. The company attributes the underlying key management to Sodot, which MoonPay says it acquired earlier in 2026.

MoonPay says support for additional AI platforms is coming, along with deeper decentralized finance capability such as routing swaps and managing liquidity under the same approval rules.

Why it matters

The agentic commerce build-out through 2026 has concentrated payment authority in two places. One is the AI platform: a checkout inside the assistant, with the platform brokering the transaction, as in the OpenAI and Stripe Agentic Commerce Protocol and Google’s Universal Commerce Protocol work with merchants and payment providers. The other is the merchant: an agent-readable storefront, a checkout API, and a payment credential the merchant accepts, which is the model covered in AI shopping agent payment authorization.

PayBox is a third position. The payment credential belongs to the customer, sits in a vault they control, and moves with them between assistants. Reach comes from x402 acceptance on the service side rather than from a bilateral integration with any one platform or merchant.

For merchants and operators, the practical consequence is a question that sits alongside “which agentic checkout should we support?”: can an agent that arrives already holding a funded payment method complete a purchase with us? Supporting one platform’s checkout answers a narrower version of that question than accepting an open payment standard does. The trade-offs between the card-network route and the HTTP-native route are compared in x402 vs MPP and How AI agents pay.

Two caveats belong with this. First, MoonPay’s core business is crypto, and a large share of the examples in its own release are onramping, swapping, bridging, and yield rather than buying goods, so the shopping use case is real but early. Second, the named commerce integrations at launch are small services, not major retailers. The pattern worth watching is whether a mainstream wallet or card issuer releases an equivalent customer-side agent payment credential.

Editor’s note: the product claims above are MoonPay’s own, taken from its 29 July 2026 release and corroborated by a Digital Transactions news brief the same day. The reference to “Visa’s agentic commerce protocol” is MoonPay’s wording; the release does not name the specific Visa program, so this page attributes rather than asserts it. Company-provided scale figures in the release (Sodot securing more than $50 billion in assets and over 10 million wallets, and MoonPay serving more than 1,700 enterprise clients) have not been independently verified and are omitted from the body above.