MoonPay Launches PayBox for Claude and ChatGPT

MoonPay launched PayBox on July 29, a payment vault that connects to Claude and ChatGPT through custom connectors to prepare and approve crypto and online-commerce transactions. According to The Block, users approve standard transactions with a passkey, while an optional autonomous mode can complete transactions within user-set limits. PayBox supports Solana and several EVM-compatible networks, and uses the x402 agent-payment standard for compatible services.
MoonPay launched PayBox on July 29, a payment vault that connects to Anthropic's Claude and OpenAI's ChatGPT through custom connectors. The product enables users to instruct an AI assistant in natural language to prepare transactions, including token swaps, asset bridges, DeFi interactions, travel bookings, restaurant reservations, and online purchases.
Under the default flow described in MoonPay's announcement, the assistant prepares a transaction and the user approves it with a passkey before funds move. The Block reports that PayBox also offers an autonomous mode in which an AI can complete transactions inside limits set by the user.
MoonPay describes PayBox as non-custodial, meaning users retain control over funds rather than transferring custody to the company or the AI assistant. The company said that no party, including MoonPay or the assistant, can independently access a user's funds or credentials. Those are company security claims, not independently verified findings.
Payment rails and initial integrations
PayBox supports Solana and EVM-compatible networks including Ethereum, Hyperliquid, Tempo, Base, Robinhood Chain, Arbitrum, and Polygon, according to MoonPay. The service can transact with services that accept x402, an open standard for agent-initiated payments.
The Block reports that current integrations include restaurant reservations via AgentRes.dev, shopping through Purch.xyz, and flight bookings through BRIJ.fi. MoonPay named travel, dining, shopping, crypto trading, bridging, and DeFi as supported transaction categories.
According to The Block, x402 was originally developed by Coinbase and is now governed by the Linux Foundation. The publication reports that AWS, Cloudflare, Visa, Mastercard, Stripe, Shopify, and Anthropic are among more than 20 organizations backing the standard.
What agentic payments change
PayBox joins a growing set of efforts to move AI assistants beyond recommendation and workflow execution into financial authorization. The relevant technical boundary is not simply whether a model can select an action, but how a system constrains authorization, confirms transaction parameters, and records the resulting action across payment rails.
In comparable agent-payment systems, security review typically centers on permission scope, transaction-value limits, destination verification, revocation paths, and resistance to prompt injection. Those controls are especially consequential when an assistant can interact with third-party merchant or DeFi endpoints, where an erroneous instruction can have an immediate financial consequence.
For AI engineers, the launch is a concrete example of a connector-based architecture that pairs an LLM interface with an external transaction authority. The user confirmation step and the reported bounded autonomous mode illustrate two distinct operating models: human approval for each action, and delegated execution under predefined policy constraints. Production deployments of either model generally require auditable logs and explicit handling of failures or ambiguous instructions.
MoonPay launched PayBox as an available product on July 29. Its broader utility depends on merchant adoption of agent-compatible payment interfaces and on whether the product's authorization safeguards perform reliably across its supported chains and services.
Key Points
- 1MoonPay's PayBox connects Claude and ChatGPT to payment execution, extending conversational AI from transaction preparation into authorized financial actions.
- 2Passkey approval remains the default reported control, while bounded autonomous execution introduces policy design and audit requirements for agent builders.
- 3Agent-payment standards such as x402 can reduce integration friction, but broad adoption depends on merchant support and robust authorization controls.
Scoring Rationale
PayBox is a notable product release at the intersection of LLM connectors, crypto wallets, and agentic commerce. It is relevant to practitioners building tool-using agents because it exposes concrete authorization and delegated-execution patterns, though its real-world reach depends on x402 and merchant adoption.
Sources
Primary source and supporting public references used for this report.
View 3 more sources
Practice with real FinTech & Trading data
90 SQL & Python problems · 15 industry datasets
250 free problems · No credit card
See all FinTech & Trading problems
