---
title: "Agentic Commerce Pt 2: The Door Is Free, the Spend Isn't"
source: https://www.second-breakfast.co/blog/agentic-commerce-pt2
site: "Second Breakfast"
author: "Marc"
date: "2026-10-03"
tags: ["ai", "agents", "crypto", "agentic-commerce", "finance", "investing"]
reading_time_minutes: 14
word_count: 2636
series: "Agentic Commerce"
series_part: 2
---

# Agentic Commerce Pt 2: The Door Is Free, the Spend Isn't

> Part 1 mapped what the incumbents are building for. This piece looks for the holes they leave. The door is free and the meter is going free, so I'd back what agents buy and the risk of what they do, at prices a realistic exit can repay.

In [Part 1](https://www.second-breakfast.co/blog/agentic-commerce-pt1) I mapped agentic commerce to understand what the incumbents are building for. The answer: free protocols that route the money back to them. About [94% of the fee pool](https://www.second-breakfast.co/blog/agentic-commerce-pt1#fig-4) I modeled for 2030 goes to card networks, issuers and processors.[^part1] This piece looks at what they've left open, the holes an early-stage startup could fill. That's where I'll be looking for investments.

Part 1 found one hole: evidence for agent errors that aren't fraud. Following what agents spend widens it to agent trust, the risk of what agents do, and adds a second: what agents buy. Incumbents are filling two others for free. The door (charging an agent per request at the edge) is free, and the meter (tracking and billing what agents use) is going free. The spend isn't. At seed or Series A, I'd back what agents buy that a platform can't give away, and agent trust, at prices a realistic exit repays.

Agents mostly look; they rarely pay. In August, HUMAN counted [80% of agentic activity](https://www.humansecurity.com/learn/blog/state-of-agentic-traffic-august-2026-agentic-traffic-grows-27-reaches-new-high-as-codex-debuts-strongly/) on product and search pages and 2.1% on checkout and payment (company-reported). Per-request money hasn't followed ([Figure 1](#fig-1)): x402stats counted [USD 793,308 of organic x402 payments](https://x402stats.io/llms-full.txt) in the 30 days to September 28th. The money that did follow runs through accounts and monthly bills, as Part 1 found.

My base case through 2027: no edge or bot vendor publishes a take of 5% or more on paid agent requests, and organic x402 stays under USD 10M a month. By 2027-12-31, at least two of the next three priced acquisitions of companies whose main product serves agents, in the two open holes, land at five times capital raised or more. So far it's two of three (Tavily and SGNL yes, Stytch no), or one of two without SGNL, which also governs human access.

[^part1]: Two corrections to Part 1: x402stats' wash-filtered series (since July) is now my series of record; its 19.2 bp fraud rate is [Australia's](https://www.kansascityfed.org/research/payments-system-research-briefings/new-data-on-card-present-and-card-not-present-fraud-rates-in-the-united-states/), not the US's (about 20.2 bp of card-not-present value on dual-message debit, my calculation from the [Fed Board's 2023 data](https://www.federalreserve.gov/paymentsystems/files/debitfees_costs_2023.pdf)).


**Figure 1 — From March to August, AI agent traffic rose 41% while x402 payments fell 40% · Change since March 2026, month by month, with the two series side by side; darker cells mean faster growth. Traffic is HUMAN's measure of AI agent activity on its customers' sites, chained from its monthly reports (company-reported; HUMAN changed its stated scope in May and had not published September, marked 'not out', at the data freeze). Payments are the total value settled over x402 each month, with the dollar amount in brackets (measured; includes wash and test traffic, so it overstates real agent spending). The cleaner, wash-filtered series starts only in July: USD 0.37M per 30 days in mid-July, USD 1.17M at the end of August and USD 0.79M at September 28th. · Sources: HUMAN Security, State of Agentic Traffic, April to August 2026 editions; x402stats daily data and weekly record (accessed 2026-10-02). Author's calculation.**


| 2026 | Agent traffic | x402 payments |
|---|---|---|
| Mar | 0% | 0% (USD 2.42M) |
| Apr | +5% | -15% (USD 2.05M) |
| May | +1% | -52% (USD 1.15M) |
| Jun | +16% | -59% (USD 1.00M) |
| Jul | +11% | -70% (USD 0.73M) |
| Aug | **+41%** | **-40% (USD 1.45M)** |
| Sep | not out | -59% (USD 0.98M) |




## The opportunity map

Four holes, ranked: two open, one closing, one already filled. Part 1's pass list (protocol tokens, standalone wallets, API catalogs, new chains) still holds.

| Area | What's being built | Who | Stage and funding | What has to be true |
|---|---|---|---|---|
| What agents buy (open) | Search, data and tools sold per call | Linkup; Exa, Parallel; Tavily (sold) | Linkup: USD 10M seed (2026-02). Parallel: USD 2B valuation (2026-04) | Builders pay outside vendors above the free tiers |
| Agent trust (open) | Proof of whom an agent acts for, insurance, error evidence | Baselayer, AIUC, Cymphony, t54 Labs | AIUC: USD 40M Series A; Baselayer: USD 35M Series A (both 2026-09). t54 Labs: USD 5M seed (2026-02) | A network, bank, insurer or security platform pays |
| The meter (closing) | Metering and billing agent usage | Orthogonal, Nevermined; OpenRouter, Orb (sold) | Orthogonal: USD 4.3M seed (2026-06) | A processor buys before platforms give it away |
| Pass: the door (filled at zero) | Per-request charges on agents at the edge | TollBit; Cloudflare and AWS in-house | TollBit: USD 31M raised | Sites can charge agents they can't afford to block |

Most of the money for what agents buy, USD 350M of 460M, went into [Exa](https://exa.ai/blog/announcing-series-c) at USD 2.2B and [Parallel](https://parallel.ai/blog/series-b) at USD 2B; trust's is still seed and Series A ([Figure 2](#fig-2)).


**Figure 2 — In my ledger, investors put more than six times as much into what agents buy as into agent trust · Disclosed equity rounds in my ledger, 2025-10-01 to 2026-10-02, USD millions, grouped by each company's main product. Not exhaustive. USD 350M of the first bar is Exa's Series C at USD 2.2B and Parallel's Series B at USD 2B; trust's is seed and Series A (Cymphony's earlier seed falls outside the window). Baselayer's USD 35M Series A is left out: its main product is business verification, though it launched an agent identity suite with the round. Settlement, in italics, is the payment layer Part 1 covered; Catena Labs, which Part 1 counted under trust, sits there because it is applying for a national trust bank charter. · Sources: company and investor announcements and Form D filings; Exa (2026-05-20); Parallel (2025-11, 2026-04); Linkup (2026-02); AIUC (2026-09-15); The Block on Catena Labs (2026-05). Author's calculation.**


- What agents buy · Exa, Linkup, Parallel: 460
- **Agent trust · AIUC, Cymphony, t54 Labs: 70**
- The meter · OpenRouter, Orthogonal: 117.3
- *Settlement · Tempo, Catena Labs: 530*




## What agents buy

Agents spend most of their effort finding things, so I think their money lands here first. Exa says more than 400,000 developers use its search (company-reported). The one priced exit paid ([Figure 3](#fig-3)): Nebius agreed to buy Tavily, an agent search API, for a reported [USD 275M](https://siliconangle.com/2026/02/10/ai-infrastructure-giant-nebius-buys-agentic-search-startup-tavily/), about 11 times the USD 25M it had raised. One deal is no base rate.

The price of filling this hole has moved. Linkup raised a [USD 10M seed](https://www.accessnewswire.com/newsroom/en/business-and-professional-services/linkup-raises-10m-seed-round-led-by-gradient-to-build-web-search-1132439) led by Gradient in February. Assume a seed investor's stake halves by exit. Then a Tavily-sized sale returns 10x only if the seed post-money was about USD 14M or less: USD 19M at 30% dilution, USD 8M at 70%, before preferences. A USD 10M seed that sells 20% to 25% of a company prices it at USD 40M to 50M, and the same sale returns about 3x.

At that price, a 10x needs a USD 0.8B to 1B exit, not another Tavily. Exa and Parallel are the likeliest buyers of a seed company here, and the likeliest to crush one selling general search.

The risk is the bundle. Perplexity [sells its own index](https://www.perplexity.ai/hub/blog/introducing-the-perplexity-search-api) to developers. Anthropic [bills USD 10 per 1,000 searches](https://platform.claude.com/docs/en/agents-and-tools/tool-use/web-search-tool) inside its API. Neither gives search away; the danger is that search rides inside the model call, where the agent never picks a supplier.

What I'm looking for: specialized data an agent re-buys on every task, priced per call, that no lab or search company gives away.

## Agent trust, priced by who buys it

It's the area I'm closest to, so I'd price it hardest. This hole sits in the rules: the IETF's [Web Bot Auth charter](https://datatracker.ietf.org/wg/webbotauth/about/) leaves end-user authentication out of scope, so proving whom an agent acts for is open, and card rules leave non-fraud agent errors unallocated (Part 1's seam).

Enterprise buyers already pay. Cymphony, which controls what enterprise agents can access, says it reached [seven figures of annual recurring revenue](https://techcrunch.com/2026/09/09/sequoia-doubles-down-on-cymphony-as-ai-agents-create-new-enterprise-security-risks/) in its first year of sales (company-reported); Sequoia co-led its USD 25M Series A at more than USD 100M post-money. Acquirers pay too: CrowdStrike agreed to pay about [USD 740M for SGNL](https://www.securityweek.com/crowdstrike-to-buy-identity-security-firm-sgnl-for-740-million-in-cash/), which governs access for people and AI agents inside companies. Ribbit led AIUC's [USD 40M Series A](https://www.prnewswire.com/news-releases/aiuc-raises-40m-series-a-from-ribbit--first-harmonic-to-build-confidence-infrastructure-for-frontier-ai-302879036.html) to certify and insure agents, a business built on the liability Part 1 left open.

Customer-facing trust is thinner. Twilio's [10-K](https://www.sec.gov/Archives/edgar/data/1447669/000144766926000021/R19.htm) puts Stytch, "an identity platform for AI agents", at USD 104.1M, below the USD 120M it [raised in 2021](https://techcrunch.com/2021/11/18/stytch-api-passwordless-unicorn/), when it was valued at USD 1B. t54 Labs[^disclosure-t54-labs] pitches itself in Mastercard's [Agent Pay for Machines](https://www.businesswire.com/news/home/20260610911796/en/Mastercard-Launches-Agent-Pay-for-Machines-to-Unlock-Super-Fast-Always-On-Payments) as "a clear evidence layer" for chargebacks and disputes.

[^disclosure-t54-labs]: PL Capital, where I lead capital formation, co-led t54 Labs' seed round, so I have a reason to want it to do well.

On the same half-diluted stake, a 10x needs a seed post-money of about USD 5M against a Stytch-sized exit and USD 37M against an SGNL-sized one. Cymphony's round is already past that: an SGNL-sized sale makes at most about 3.7x on it.

What kills the customer side: free agent verification at the edge (AWS checks signed agents [at no extra cost](https://aws.amazon.com/about-aws/whats-new/2025/11/aws-waf-web-bot-auth-support/)) and bank sales cycles of 12 to 18 months, [per Baselayer's CEO](https://news.crunchbase.com/ai/verifying-ai-agents-baselayer-35m-raise/). So could the networks' know-your-agent work, which Ant International, Mastercard and Visa [began](https://www.businesswire.com/news/home/20260909003891/en/Ant-International-Mastercard-and-Visa-Initiate-Collaboration-on-Know-Your-Agent-Interoperability-to-Scale-Agentic-Commerce) in September.

What I'm looking for: agent controls, insurance and error evidence sold to buyers already paying for security or disputes, early enough that an SGNL-sized sale still returns 10x.


**Figure 3 — Buyers agreed to pay 8 to 18 times capital raised for search, billing and enterprise agent identity, and less than capital raised for Stytch · Price over capital raised (2021 rounds for Stytch), before dilution and preferences, for exits in these holes with both numbers public. Tavily's price is press-reported and SGNL's company-stated, not filed; SGNL's funding is USD 42M or USD 75M by different counts, so its range runs 9.9x to 17.6x. Net of the USD 45.6M of cash Twilio acquired, Stytch's multiple is about 0.49x. Not charted: OpenRouter (reported USD 7B to 7.5B; total funding not disclosed in one place) and Visa's USD 2.4B BioCatch deal (a mature, Permira-backed company, not a venture comp). · Sources: SiliconANGLE and Bloomberg on Tavily (2026-02-10); SecurityWeek on SGNL (2026-01-08); Adyen on Orb (2026-06-11); Twilio Form 10-K (2026-02-24) and TechCrunch (2021-11-18) on Stytch. Author's calculation.**


- Tavily to Nebius · search, reported: 11
- SGNL to CrowdStrike · enterprise agent identity: 9.9 to 17.6
- Orb to Adyen · usage billing: 7.6
- **Stytch to Twilio · customer-facing agent identity: 0.87**




## The meter on agent spend

The meter produced the largest exit, and the window is closing. Stripe agreed to buy [OpenRouter](https://stripe.com/newsroom/news/stripe-agrees-to-acquire-openrouter) at a reported USD 7B to 7.5B, more than five times its May valuation ([Forbes](https://www.forbes.com/sites/zennonkapron/2026/09/15/why-stripe-paid-a-reported-75-billion-for-a-company-that-routes-ai-prompts/)). Adyen agreed to pay [USD 335M for Orb](https://www.adyen.com/press-and-media/jtrg4qd7j3p4rj), which bills usage for sellers, 7.6 times what Orb had raised.

Now platforms are giving it away. Ramp's router is [free through 2026](https://www.prnewswire.com/news-releases/ramp-launches-routercom-to-cut-companies-rising-ai-bills-302855572.html) and Cloudflare's AI gateway is [on all plans](https://developers.cloudflare.com/ai-gateway/). Its [Auto Router](https://developers.cloudflare.com/ai-gateway/features/auto-router/), like [OpenRouter](https://openrouter.ai/docs/quickstart), puts many models behind one API, falls back when a provider fails and weighs cost per request. Unlike OpenRouter, which offers hundreds of models for a 5.5% fee on credits, it grades each request's difficulty and picks from a Cloudflare-managed pool. Vercel's gateway charges [no markup](https://vercel.com/ai-gateway) and on September 30th started offering [Browserbase's search and fetch tools](https://vercel.com/changelog/ai-gateway-adds-browserbase-search-and-fetch-tools) through the same key.

Pantera led Orthogonal's [USD 4.3M seed](https://panteracapital.com/investing-in-orthogonal/) for a single account and invoice across 50+ API vendors; Nevermined [takes](https://nevermined.ai/pricing/) 1% of settled volume on stablecoin rails and 2% on cards. If their money is a cut of agent spend, they aren't Part 1's API catalogs.

I'd back one only with a processor sale inside two years in view.

## Why I'd pass on the door

AWS fills this hole at zero: it lets a site charge an agent as little as USD 0.001 a request and [takes no cut](https://aws.amazon.com/waf/pricing/). Cloudflare's [Monetization Gateway](https://blog.cloudflare.com/monetization-gateway-beta/), in closed beta since September 30th, has no price yet. You can't undercut zero. At AWS's floor the rail eats the whole charge: Coinbase's x402 facilitator [charges USD 0.001](https://docs.cdp.coinbase.com/x402/seller/facilitator) a settlement after the first 1,000 a month. TollBit, the independent door, counts [7,000+ publishers](https://www.business-standard.com/companies/people/tollbit-is-about-monetising-ai-bot-traffic-says-cofounder-and-ceo-126030201054_1.html) and discloses no revenue.

## The case against

The strongest case against me: the door gets a price. Cloudflare plans for the gateway to be [widely available by early 2027](https://fortune.com/2026/09/30/cloudflare-tool-businesses-ai-agents-stablecoins/), and its [Q2 deck](https://cloudflare.net/files/doc_financials/2026/q2/Q2-2026-Cloudflare-Investor-Presentation.pdf) pitches "monetizing trusted automated demand". More than 20% of the web [sits behind Cloudflare](https://blog.cloudflare.com/agentic-web/), so a published take there would prove the price for the rest of the web, exactly where an independent door would sell. If it does, I reopen the pass (watch item 1); until then AWS anchors the price at zero. Incumbents also pay real prices for trust: Visa agreed to pay [USD 2.4B for BioCatch](https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.22626.html), a mature, Permira-backed company. If that's the pattern, a seed check in trust is a long hold to a growth-stage exit, and Stytch's 0.87x is the more relevant price. And independents can stand alone: Baselayer books eight figures of revenue without a network buyer (company-reported), though from business verification.

## What I'm watching

1. **The door's price.** A published take of 5% or more on paid agent requests at a major edge or bot vendor by 2027-12-31, and I'm wrong to pass.
2. **Per-request payments, Part 1's item 2.** Organic x402 above USD 10M a month for two consecutive months before 2027-12-31, with no counterparty above 25% of a month, means agents pay per request at scale.
3. **What agents buy.** OpenAI or Anthropic selling a standalone search API, or Exa's auto-search list price (USD 0.007 for 10 results) falling below USD 0.0035, by 2027-06-30, and I move off this hole.
4. **The meter.** Stripe dropping OpenRouter's 5.5% fee, or a second free gateway billing third-party tools, by 2027-12-31, and the meter has gone the way of the door.
5. **Trust's price.** By 2027-12-31, an independent identity or dispute company discloses USD 10M of annualized agent-payment revenue (Part 1's early signpost), or a customer-facing one sells for three times its funding or more in a deal announced after 2026-10-02. Either, and I'd back customer-facing trust, not only enterprise control. Neither, and Part 1's reading holds: identity is a feature.

## A note on the numbers

I calculated the three figures, the 10x arithmetic and the Part 1 corrections; the 20% to 25% seed stake is my assumption. Everything else is someone else's, named and dated. Data freeze: 2026-10-02; Anthropic's price and the router docs were checked on 2026-10-03. Just ask for the companion data and scripts.

## References

**Primary data**

- [x402stats](https://x402stats.io/llms-full.txt) (2026-10-02); [Coinbase facilitator](https://docs.cdp.coinbase.com/x402/seller/facilitator) (accessed 2026-10-02); [AWS WAF pricing](https://aws.amazon.com/waf/pricing/) (2026-09-25); [AWS Web Bot Auth](https://aws.amazon.com/about-aws/whats-new/2025/11/aws-waf-web-bot-auth-support/) (2025-11-21)
- Cloudflare: [agent traffic](https://blog.cloudflare.com/agentic-web/), [Monetization Gateway](https://blog.cloudflare.com/monetization-gateway-beta/) (2026-09-30); [Q2 2026 deck](https://cloudflare.net/files/doc_financials/2026/q2/Q2-2026-Cloudflare-Investor-Presentation.pdf) (2026-08-06); [AI Gateway](https://developers.cloudflare.com/ai-gateway/) (2026-04-20), [Auto Router](https://developers.cloudflare.com/ai-gateway/features/auto-router/) (2026-10-02)
- [HUMAN Security](https://www.humansecurity.com/learn/blog/state-of-agentic-traffic-august-2026-agentic-traffic-grows-27-reaches-new-high-as-codex-debuts-strongly/), April to August 2026
- [Twilio 10-K](https://www.sec.gov/Archives/edgar/data/1447669/000144766926000021/R19.htm) (2026-02-24); [Federal Reserve Board](https://www.federalreserve.gov/paymentsystems/files/debitfees_costs_2023.pdf) (2025-12); [IETF charter](https://datatracker.ietf.org/wg/webbotauth/about/)

**Analysis and market**

- [SiliconANGLE](https://siliconangle.com/2026/02/10/ai-infrastructure-giant-nebius-buys-agentic-search-startup-tavily/) (2026-02-10); [Linkup](https://www.accessnewswire.com/newsroom/en/business-and-professional-services/linkup-raises-10m-seed-round-led-by-gradient-to-build-web-search-1132439) (2026-02-03); [Parallel](https://parallel.ai/blog/series-b) (2026-04-29); [Exa](https://exa.ai/blog/announcing-series-c) (2026-05-20)
- [SecurityWeek](https://www.securityweek.com/crowdstrike-to-buy-identity-security-firm-sgnl-for-740-million-in-cash/) (2026-01-08); [AIUC](https://www.prnewswire.com/news-releases/aiuc-raises-40m-series-a-from-ribbit--first-harmonic-to-build-confidence-infrastructure-for-frontier-ai-302879036.html) (2026-09-15)
- [TechCrunch](https://techcrunch.com/2026/09/09/sequoia-doubles-down-on-cymphony-as-ai-agents-create-new-enterprise-security-risks/) (2026-09-09); [TechCrunch, 2021](https://techcrunch.com/2021/11/18/stytch-api-passwordless-unicorn/) (2021-11-18); [Crunchbase News](https://news.crunchbase.com/ai/verifying-ai-agents-baselayer-35m-raise/) (2026-09-22)
- Mastercard, [Agent Pay for Machines](https://www.businesswire.com/news/home/20260610911796/en/Mastercard-Launches-Agent-Pay-for-Machines-to-Unlock-Super-Fast-Always-On-Payments) (2026-06-10); [Ant, Mastercard and Visa](https://www.businesswire.com/news/home/20260909003891/en/Ant-International-Mastercard-and-Visa-Initiate-Collaboration-on-Know-Your-Agent-Interoperability-to-Scale-Agentic-Commerce) (2026-09-09); [Visa](https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.22626.html) (2026-08-03)
- Stripe on [OpenRouter](https://stripe.com/newsroom/news/stripe-agrees-to-acquire-openrouter) (2026-08-19); [Forbes](https://www.forbes.com/sites/zennonkapron/2026/09/15/why-stripe-paid-a-reported-75-billion-for-a-company-that-routes-ai-prompts/) (2026-09-15); [Adyen](https://www.adyen.com/press-and-media/jtrg4qd7j3p4rj) (2026-06-11); [Pantera](https://panteracapital.com/investing-in-orthogonal/) (2026-06-25)
- [Business Standard](https://www.business-standard.com/companies/people/tollbit-is-about-monetising-ai-bot-traffic-says-cofounder-and-ceo-126030201054_1.html) (2026-03-02); [Fortune](https://fortune.com/2026/09/30/cloudflare-tool-businesses-ai-agents-stablecoins/) (2026-09-30); [Kansas City Fed](https://www.kansascityfed.org/research/payments-system-research-briefings/new-data-on-card-present-and-card-not-present-fraud-rates-in-the-united-states/) (2026-02-25)

**Prices and current conditions**

- [Perplexity Search API](https://www.perplexity.ai/hub/blog/introducing-the-perplexity-search-api) (2025-09-25); [Anthropic web search](https://platform.claude.com/docs/en/agents-and-tools/tool-use/web-search-tool) (2026-10-03); [OpenRouter quickstart](https://openrouter.ai/docs/quickstart) (2026-10-03); [Ramp Router](https://www.prnewswire.com/news-releases/ramp-launches-routercom-to-cut-companies-rising-ai-bills-302855572.html) (2026-08-19); Vercel, [AI Gateway](https://vercel.com/ai-gateway) and [Browserbase tools](https://vercel.com/changelog/ai-gateway-adds-browserbase-search-and-fetch-tools) (2026-09-30); [Nevermined](https://nevermined.ai/pricing/) (accessed 2026-10-02)

**Prior work in this series**

- [Part 1](https://www.second-breakfast.co/blog/agentic-commerce-pt1) (2026-09-27)

---

*Disclosures: I lead capital formation at PL Capital, which has backed t54 Labs, World and Privy. Views are my own and do not represent PL Capital or Protocol Labs. Nothing here is investment advice. Do your own diligence.*

---

Source: https://www.second-breakfast.co/blog/agentic-commerce-pt2