MoonPay Launches PayBox Letting ChatGPT and Claude Trade on Solana

HypeMeter

High attention and emotional sentiment detected.

The pitch is simple. You tell your AI to onramp cash, swap a token, or book a flight, and PayBox handles the payment. Crucially, the AI never holds your private keys or takes custody of your funds.

How MoonPay PayBox Works

PayBox runs on a flow MoonPay describes as “prompt, approve, pay.” First, you connect PayBox once inside your AI app through a custom connector. Then you fund it with a wallet or a card, with a one-time identity check.

After that, the prompts do the work. MoonPay’s own examples include “Onramp $100 into PYUSD” and “Swap $100 of PYUSD to SOL.” The AI prepares the transaction, but it cannot send it on its own.

Instead, you approve each action with a passkey or a biometric step. That approval signs a scoped, single-use authorization that expires quickly. As a result, the agent only ever gets permission for one specific action.

Two Policy Modes and an Instant Kill Switch

PayBox offers two policy settings. “Always Ask” prompts you for a passkey on every transaction. “Autonomous” lets the AI spend within limits you define ahead of time.

Because you set those limits, an autonomous agent still cannot drain the vault. Access is also revocable instantly, so you can cut the connection whenever you want.

Ivan Soto-Wright, MoonPay’s CEO and founder, framed the launch in sweeping terms. “Billions of AI agents are coming online, and every one of them will need to hold, move, and spend money safely,” he said in the launch release. “Someone had to build the trust layer for that world. We just did.”

Which AI Models and Chains PayBox Supports

At launch, Claude and ChatGPT are the primary integrations. MoonPay’s product site also lists Gemini and Grok, though those appear as supported models rather than confirmed live connectors.

On the asset side, Solana takes top billing for trading “anything.” PayBox also reaches EVM chains, including Ethereum, Base, Arbitrum, Polygon, Hyperliquid, Tempo, and Robinhood Chain, with more planned.

The feature list runs wide. It covers onramps, swaps, bridging, yield through protocols like Aave, virtual cards, bookings, shopping, and even gas top-ups. So the same vault meant to buy SOL can, in theory, reserve a dinner table.

The Security Model Behind the Vault

The whole design hinges on never letting the AI see a full key. To do that, PayBox uses multi-party computation and trusted execution environments from Sodot, a firm MoonPay acquired in April 2026.

With this setup, the private key is never fully assembled in one place. Neither MoonPay nor the AI can reconstruct it alone. The agent receives only a temporary grant tied to an amount, a recipient, and a time window.

For agent-initiated payments, PayBox leans on x402, the open standard Coinbase pushed for stablecoin transfers over HTTP. MoonPay explicitly names x402 in its materials. It frames the choice as a bet on open rails, not a closed ecosystem.

Where MoonPay PayBox Fits in the Agentic Payments Race

PayBox does not arrive in a vacuum. Google shipped its Agent Payments Protocol alongside x402 in 2025. Skyfire built agent identity and spend controls, while Stripe, PayPal, Visa, and Mastercard all ran agentic pilots.

PayBox is also the payoff of a long buying spree. MoonPay picked up Solana processor Helio, stablecoin firm Iron, and key-security firm Sodot. It also bought AI shop Dawn Labs. In effect, each acquisition supplied one piece of the final product.

Neeraj Prasad, chief engineer of MoonPay Labs, drew the line against big-tech rivals. “The giants are building agentic payments inside their own walls; we’re the opposite bet,” he told Fortune ahead of launch.

The Open Questions PayBox Has Not Answered

Plenty remains unclear. MoonPay has not published a fee schedule, default spending limits, or a full list of supported countries. It also has not released a security audit specific to PayBox, though Sodot’s underlying stack claims prior audits.

The risk surface is real, too. Prompt-injection attacks could craft malicious transaction intents, and a badly set policy could authorize a larger spend than intended. So the passkey step remains the last line of defense.

Regulation is another gap. Nobody has settled who counts as the money transmitter when an agent spends. Liability for an autonomous mistake is unclear too. For now, those questions sit open across the whole industry.

What Comes Next for MoonPay PayBox

The market reaction was muted at launch. SOL traded in a tight $72.87 to $74.15 range on July 29, with no visible spike after MoonPay’s announcement. No PayBox-specific on-chain data or volume dashboards were available yet.

Still, the direction is clear. If agents really start finishing tasks that end in a payment, PayBox offers one template. It pairs a non-custodial vault with a human approval gate. Watch for MoonPay to publish fees, audits, and the first real usage numbers next.

None of this is financial advice. Agent-driven trading and yield carry real risk, so treat any autonomous spending limit as money you could lose.