MoonPay has launched PayBox, a payment vault that allows ChatGPT and Claude users to initiate and approve cryptocurrency and card payments directly within conversations, while keeping users in full control of their funds through passkey approvals or predefined spending limits. The platform addresses a fundamental friction point in AI agent commerce: until now, when you asked an AI assistant to book a flight or make a purchase, the conversation would end and you'd have to leave the chat to complete payment on a separate website. PayBox eliminates that handoff entirely.

What Problem Does PayBox Actually Solve?

The core issue PayBox tackles is both practical and security-focused. AI assistants have become capable enough to prepare transactions, but no one wanted to hand over wallet keys or credit card numbers to an AI system. Previous attempts failed because they required either trusting the AI platform with your funds or trusting the AI assistant itself not to be compromised by prompt injection attacks. OpenAI's own Instant Checkout feature, launched in 2025, shut down in March 2026 after barely a dozen merchants went live, suggesting the market wasn't ready for AI-controlled payments.

PayBox takes a fundamentally different approach. Instead of giving the AI or MoonPay direct access to your wallet keys, the system uses multi-party computation (MPC), a cryptographic technique that splits your private keys into encrypted fragments stored across separate hardware-isolated secure environments. No single party, not MoonPay, not the AI assistant, and not even your own device alone, holds enough key material to authorize a transaction independently.

"PayBox combines crypto wallets and payment cards within a non-custodial vault. The platform supports blockchain transactions, decentralized finance applications, and services using the x402 payment standard without requiring users to surrender custody of their assets," explained Neeraj Prasad, Chief Engineer at MoonPay Labs.

Neeraj Prasad, Chief Engineer, MoonPay Labs

How Does the Security Architecture Actually Work?

The technical foundation relies on Sodot, an Israeli cryptographic infrastructure company that MoonPay acquired earlier this year for roughly $100 million. Sodot's technology distributes wallet security across isolated environments, ensuring that no single device or party can move funds alone.

For cryptocurrency transactions, PayBox uses threshold cryptography, a method where signing a transaction requires a minimum number of encrypted key shares to cooperate without any share being revealed to another party during computation. This approach follows the NIST threshold cryptography standard finalized in January 2026. For traditional card payments, PayBox routes transactions through Visa's agentic commerce protocol, a tokenization layer that allows an AI to spend with a linked card without the card number ever being exposed to or stored by the agent.

Every passkey approval is scoped to a single, specific transaction and expires immediately after use. If you change the recipient address, the amount, or the destination network, PayBox requires a fresh passkey approval. This design prevents captured or replayed authorizations from being extended to other transactions. The cryptographic design was audited by Trail of Bits and NCC Group before launch, and the product meets PCI DSS standards, the security framework used by payment card processors.

What Can You Actually Do With PayBox?

At launch, PayBox supports two permission models that give users complete control over how much autonomy the AI has. The "Always Ask" mode requires passkey approval for every single transaction, maximizing security but adding friction. The "Autonomous" mode allows the AI to complete transactions within spending limits you define, without approving each individual action.

The platform works with services that accept the x402 agent payment standard, an open protocol originally developed by Coinbase and now governed by the Linux Foundation. More than 20 organizations support x402, including AWS, Cloudflare, Visa, Mastercard, Stripe, Shopify, and Anthropic.

• Restaurant Reservations: AgentRes.dev integrations allow Claude or ChatGPT to book tables and process payments within the conversation.
• Travel Bookings: BRIJ.fi enables flight bookings where the AI prepares the transaction and you approve it with a passkey.
• Online Shopping: Purch.xyz supports e-commerce purchases directly from chat, with payment approval happening in-conversation.
• Decentralized Finance: Token swaps, asset bridging, and yield strategies through protocols like Aave are already live at launch.

PayBox launches with support for Solana and seven Ethereum Virtual Machine-compatible blockchains: Ethereum, Hyperliquid, Tempo, Base, Robinhood Chain, Arbitrum, and Polygon. MoonPay plans to expand blockchain support and add features like perpetual futures trading and liquidity management under the same user-defined approval framework.

How to Set Up PayBox in ChatGPT or Claude

• Install the Connector: Add the MoonPay PayBox custom connector to your ChatGPT or Claude account through the app's integration menu.
• Create Your Account: Set up a PayBox account and register a passkey, which serves as your transaction approval mechanism.
• Link Your Wallet or Card: Import an existing crypto wallet or add a payment card through MoonPay's identity verification process.
• Set Your Permissions: Choose between "Always Ask" mode for maximum security or "Autonomous" mode with spending limits for convenience.
• Start Making Payments: Use natural language to ask Claude or ChatGPT to book flights, make reservations, or shop online, then approve transactions with your passkey.

What's the Catch With Autonomous Mode?

While PayBox's security architecture is genuinely sound, the Autonomous mode introduces a different kind of risk that users need to understand. MPC ensures MoonPay cannot steal your money. It does not ensure the AI makes the choices you would have made. An agent operating autonomously within a $500 monthly limit can spend that $500 poorly, on a badly timed cryptocurrency swap, a DeFi position that moves against you, or a merchant transaction you would have declined. Every such transaction, executed under valid permissions, is authorized under MoonPay's terms.

Cryptocurrency transfers are irreversible, unlike credit card transactions that can be disputed through chargebacks. Stablecoin payments over x402 fall outside card-network chargeback protections, and the Electronic Fund Transfer Act assumes a human initiated each transaction, creating a regulatory gap. The solution is straightforward: set spending caps conservatively in Autonomous mode, review transaction histories regularly, and remember that changing permission levels always requires a new human passkey sign-off. Access can be revoked instantly at any time.

Where Does PayBox Fit in the Broader AI Payment Landscape?

PayBox occupies a distinct position in a rapidly consolidating agentic payment market. Ledger's Agent Stack, released July 16, uses a physical Secure Element chip where the key never leaves the hardware device and a physical button press is required to sign any transaction, providing maximum adversarial resistance but requiring users to own and carry a Ledger device. Stripe's Link agent wallet issues single-use virtual cards scoped to each transaction so the agent never sees the raw card number, but targets companies building AI products rather than individual ChatGPT and Claude users.

PayBox is the first product in this space designed for non-developers using existing AI consumer interfaces. Rather than building a closed payment garden inside one AI assistant, PayBox connects Claude and ChatGPT to open rails including the x402 machine-to-machine payment standard, Visa's agentic commerce tokenization protocol, and eight supported blockchains, while keeping users in full control of their funds.

MoonPay's broader strategy reflects this commitment to open infrastructure. The company acquired AI accounting startup Entendre and AI trading startup Dawn Labs, launched MoonPay Agents as a command-line tool for developers, introduced the Open Wallet Standard, and released the MoonAgents Card. PayBox represents the consumer-facing culmination of these initiatives, bringing agentic commerce to the millions of people already using ChatGPT and Claude daily.

Support for additional AI platforms beyond ChatGPT and Claude is expected within the next month, extending the service while preserving its security model. As the x402 standard gains adoption across major technology and financial services companies, PayBox's position as a bridge between consumer AI assistants and open payment rails positions it as a potential standard for how AI agents will handle money in the years ahead.