Machine payments protocol: Stripe MPP explained for agents
The Machine Payments Protocol (Stripe MPP) explained: the 402 flow, shared payment tokens, Link's wallet for agents, and what a seller must build to accept it.
The looot team · , updated · 6 min read
On this page
The Machine Payments Protocol, MPP for short, is an open standard from Stripe and Tempo that lets an AI agent pay for an API inside the HTTP request. The server answers 402 with a payment challenge, the agent pays with stablecoins or a card token and retries, and the server returns the data with a receipt. Stripe settles the money into the seller's Stripe balance.
This post covers the three Stripe pieces people mix up: MPP itself, shared payment tokens, and Link's wallet for agents. Then it lists what a seller must build, and what looot does today. Every fact comes from Stripe's and mpp.dev's own pages, read on 2026-10-14.
What the machine payments protocol is
Stripe announced MPP on March 18, 2026 as "an open standard, internet-native way for agents to pay", co-authored with Tempo (Stripe blog). It accepts "stablecoins as well as fiat with cards and buy now, pay later payment methods". For a Stripe business, the funds "settle into a business's existing balance, in their default currency, and on their standard payout schedule".
The protocol lives at mpp.dev, with IETF drafts and official SDKs maintained by Tempo Labs and Wevm. It names three kinds of payment, charge, session and subscription, and runs over HTTP, MCP and JSON-RPC, and WebSocket.
How an MPP payment works
The mpp.dev overview gives the flow in five steps:
- The agent requests the resource, for example `GET /resource`.
- The server returns `402 Payment Required` with a `WWW-Authenticate: Payment` header, the challenge.
- The agent pays: it signs a transaction, pays an invoice or completes a card payment.
- The agent retries with an `Authorization: Payment` header that carries the credential.
- The server checks the payment and answers `200 OK` with a `Payment-Receipt` header.
That is the same shape as x402, which uses its own header names. Our x402 explainer walks through those. mpp.dev says the SDK added "x402 exact flows" on June 8, 2026, so one client can speak both.
Shared payment tokens: how cards travel in Stripe MPP
A shared payment token, or SPT, is how a card reaches a seller without the card number. Stripe's docs say SPTs "grant sellers scoped access to customers' payment methods for agent-initiated purchases" (Stripe SPT docs). Each token carries usage limits: a maximum amount, a currency and an expiry.
SPTs are available "in the US, Canada, and select European countries". Since March 3, 2026, they also carry Mastercard Agent Pay and Visa Intelligent Commerce, and Stripe says "any seller already processing payments with Stripe automatically supports these new payment methods for agentic transactions" (Stripe blog). That covers Stripe's agentic checkout flows. An MPP endpoint is still code the seller writes.
Link's wallet for agents: the buyer side
On April 29, 2026 Stripe launched Link's wallet for agents, built on its Issuing for agents (Stripe blog). An agent connected to your Link account asks for money with a spend request. You approve it in the Link app, and Link returns a one-time card or an SPT.
Stripe says "each request requires the person's review before the credential is shared with your agent". Spending limits that let an agent act without approval are planned, not available yet. Stripe's `link-cli` makes these one-time SPT credentials from a terminal, which is one way an agent gets a card token to answer an MPP challenge.
What a seller must build to accept MPP
Stripe's MPP guide lists the seller steps (Stripe MPP docs):
- Create a Stripe profile in the Dashboard and keep its id.
- Install the SDK with `npm install mppx stripe`.
- Write an endpoint that returns a 402 challenge until it gets a valid payment.
- For stablecoins, create a crypto deposit address. Stripe "automatically offramps these payments and settles them into your Stripe balance".
- Test with `mppx validate`, which checks discovery, challenge formats and errors.
The guide uses a preview API version, `2026-07-29.preview`. Minimums apply: a card payment through an SPT is at least 0.50 USD and a stablecoin payment at least 0.01 USDC (Stripe MPP docs, read 2026-10-14). A data call that costs a cent cannot go over a card SPT one call at a time.
Stripe MPP vs a prepaid balance
| Stripe MPP | Prepaid balance | |
|---|---|---|
| Who pays | The agent, per request | A person, once per top-up |
| Card minimum | 0.50 USD per SPT payment | The top-up minimum |
| Small calls | Stablecoins or a session | Drawn from the balance |
| Seller work | An MPP endpoint and a Stripe profile | A hosted checkout and a ledger |
The agentic payments roundup ranks the wallets an agent can pay with, MPP clients included. For one-time cards outside MPP, see agent cards explained.
What it cannot do
MPP is new and partly in preview. The seller must build and run the endpoint, so an agent can only pay sellers that did. Card SPTs have a minimum and a country list. Link still asks a person for every request. looot does not accept MPP or SPTs today: an agent on looot needs a person to pay the Checkout link once. Last checked 2026-10-14.
Try it
Prompt for your agent
Spend a prepaid balance from your agent
Questions
Keep reading
Agentic payments: 7 ways an AI agent can pay for an API
Agentic payments in 2026, ranked by setup steps: Stripe Link, x402, MPP, Slash, Ramp, AgentCard and Crossmint, and how each one would pay an API seller.
The looot team · · 10 min read
What is x402? How an AI agent pays with HTTP 402
What is x402: the open protocol that lets an AI agent pay an API inside the HTTP request, with stablecoins. The headers, the facilitator, who accepts it.
The looot team · · 6 min read
Agent card: one-time virtual cards for AI agents, explained
What an agent card is: a one-time or capped virtual card an AI agent pays with. Who issues them, limits, 3D Secure, and why single-use cards fail later.
The looot team · · 6 min read
Try it with the agent you already use
Start your workspace, top up, and paste one prompt into your agent.