Stripe enables AI agents to buy goods using Link

Stripe has launched a new capability for its Link wallet in the United States, allowing AI agents to complete online checkouts. By utilizing Stripe's open-source Link CLI, which functions as a Model Context Protocol (MCP) server, developers can integrate payment capabilities into any agent framework. When an agent initiates a transaction, Link generates a disposable, single-use virtual card. This ensures that the agent never accesses or stores the user's actual payment credentials.

To prevent runaway spending, Stripe has established strict guardrails. Individual transaction requests and daily spending are capped at $5,000, with a monthly limit of $20,000. Virtual cards remain valid for 12 hours, and users have a 10-minute window to approve or deny transactions via push notifications. The system enforces rate limits of 50 spend requests per hour and 200 requests every 60 days. Developers can use a test mode to return mock card numbers or write card details to a local file using 0600 permissions to keep sensitive data out of LLM logs.

This release intensifies a growing agentic commerce race. Stripe is already assisting OpenAI with ChatGPT Instant Checkout, which lets US users buy from Etsy and Shopify merchants. Meanwhile, Perplexity is competing directly, and Amazon is defending its market share with its Rufus chatbot. While some platforms push for machine-readable payment protocols, Stripe's virtual card approach works on any website accepting Visa, meaning bot-detection systems cannot easily block agents acting as human buyers.

For developers, this shift removes the final hurdle of human handoff in autonomous workflows. AI agents can now independently manage SaaS subscription renewals, book travel across multiple sites, or operate within multi-agent architectures where each bot has a strict, isolated budget. Although security challenges like prompt injection and payment liability remain unresolved, the checkout button is no longer a barrier to fully autonomous AI operations.