Cloudflare and Stripe have opened the door to a new kind of internet plumbing: one where the buyer is software. On April 30, the two companies launched an open protocol that lets AI coding agents create Cloudflare accounts, register domains, start paid subscriptions, fetch API tokens, and push code to production — without a human clicking through a single dashboard.
The capability ships as part of Stripe Projects, currently in open beta, and arrives alongside Cloudflare's Agents Week. It is the clearest signal yet that the agent economy is moving past chat-window demos into provisioning real, billable infrastructure.
How the protocol works
The protocol has three components, according to Cloudflare's launch post and reporting from Computerworld and InfoWorld: discovery via a REST/JSON service catalog, authorization via OAuth-based identity attestation, and payment via tokenization. Together they let an agent walk up to a provider, prove it's acting for a specific user, and pay — without ever holding a credit card number or a long-lived secret.
Users install the Stripe CLI with the Stripe Projects plugin, log in once to Stripe, and then prompt an agent to build something new. The agent provisions the Cloudflare account, buys the domain, subscribes to whatever services the build needs, retrieves API tokens, and deploys. "No human steps are otherwise required from start to finish," Cloudflare wrote. "There's no need to go to the dashboard, copy and paste API tokens, or enter credit card details."
Guardrails and partners
To keep an autonomous buyer from running up an unbounded bill, the protocol applies a default $100-per-month cap per provider, with adjustable budget alerts. Cloudflare is also offering $100,000 in credits to startups that incorporate through Stripe Atlas — an incentive aimed squarely at agent-native companies whose first "founder" may well be a coding agent.
The protocol is open, and the launch lineup goes well beyond Cloudflare. PlanetScale is named in Cloudflare's own announcement as a launch and co-design partner, and Stripe's broader Projects catalog already lists more than 30 providers — including Vercel, Supabase, Clerk, PostHog, Sentry, Inngest, Hugging Face, and Twilio — most of the standard SaaS stack a modern web app would need from day one.
Why it matters
For the past year, agent stories have mostly been about reasoning, tool use, and benchmarks. The Cloudflare-Stripe move is different: it standardizes the boring but blocking steps — identity, authorization, and billing — that have kept agents from actually shipping things on their own.
That opens an obvious upside for developers, who can now ask an agent for a deployed app rather than a half-finished repo. It also opens an obvious risk surface. An agent with a budget and a domain registrar is an agent that can buy infrastructure on the open internet, and the security industry is already asking how identity attestation, scoped tokens, and the per-provider cap will hold up under adversarial prompting and supply-chain attacks.
For now, the cap is $100 a month and the protocol is open beta. The principle behind it — that software customers deserve the same primitives as human ones — is likely to outlast both numbers.
