All posts

Susana Khan, CMO @ TODAQ

The Agent Economy Just Got Its First Native Currency Rail. It’s Called Qatom.

MCP solved how agents talk to tools. Qatom solves how they pay for them.…

There’s a moment in every infrastructure cycle when the thing everyone said was coming actually arrives. Not as a roadmap slide or a whitepaper. As a tool you can install.

That moment is now.

The conversations we’ve been tracking, and in some cases, seeding over the past several months have all pointed at the same structural gap. AI agents are executing at machine speed. They’re calling dozens of services per task, making purchasing decisions autonomously, and chaining outputs across providers without a human in the loop. The compute infrastructure for this is largely in place. The model capability is moving fast. What wasn’t in place, until now, was the payment layer that makes agent-to-agent commerce actually work.

We built that layer. We called it TAPP. We’ve been running it in production since 2023, and we’ve written about why it matters for AI companies, for creators, for the economics of microtransactions that legacy rails make structurally impossible.

What we hadn’t done was give it a front door that any developer, any agent runtime, any MCP-compatible tool chain could walk through in three steps.

That’s Qatom.


The Standard That Made This Possible

Agentic AI tooling has, in the last twelve months, begun converging on a standard. The Model Context Protocol — MCP — has become the lingua franca of how agents discover and call external tools. If you’re building agents in 2026, you’re either already building on MCP or you’re about to be. The ecosystem is moving fast and it’s moving in one direction.

MCP solved a real problem: a standard interface so agents can talk to tools without bespoke integration work at every junction. What it didn’t solve, what no one in that ecosystem had solved, is how agents pay for what they call.

The attempts have been visible to anyone building in the space. Legacy rails charge 2.9% plus $0.30 on transactions that might be worth three cents and settle days after the service was consumed. From the crypto side, x402, Coinbase’s protocol reviving HTTP’s 402 status code for stablecoin payments, diagnosed the problem correctly and moved fast. But it was built for crypto-native operators, and the enterprises, AI companies, and commercial API providers who run on commercial banking infrastructure and settle in dollars are not its constituency.

Qatom is the MCP server that adds the missing primitive: an agent that can pay. No crypto wallet required. No gas. No facilitator sitting between the payment and the settlement. USD, settled in flight, on TODA underneath.


What It Actually Does

The architecture is worth understanding, because the design choices matter.

Payment in Qatom travels inside the HTTP request itself, a header attached to the API call, settled between counterparties before the response comes back. No callback. No webhook. No reconciliation cycle. The response either arrives paid or it doesn’t arrive. This is the vending machine model we’ve been describing since February, finally expressed as a working MCP primitive: insert payment, receive service, atomically, with no intermediary absorbing margin at every hop.

Underneath that interface is the TODA stack, the same cryptographic infrastructure we’ve been describing since the Built Before It Was Named piece. File-based digital bearer assets, not balances. USD-TDN files that behave like physical cash: portable, self-verifying, carrying their own proof of provenance without depending on any central ledger. No blockchain. No gas. No volatility. Settlement in milliseconds between Twins, with bank rails connected for funding and payout in dollars where it counts.

For a developer or an enterprise AI team, the practical picture looks like this. Your agent gets a wallet. It can check its own balance as a standard MCP tool call. It can discover paywalled APIs in a live marketplace headless catalog, priced per call, not per month. It can pay for what it uses in the same request that calls the tool. And if you’re providing a service, you can register any HTTP API as a payable tool through chat or REST, set your price per call, and define how revenue splits across however many parties share in the value, up to two hundred payees per payout, settled atomically at the moment the call clears.

The fee across all of this is zero. That’s the architecture at work, not a promotional offer, when you remove the intermediary chain that legacy rails require, zero fees is what the math produces.

That’s what the infrastructure does. The question worth sitting with is why the window to build on it is shorter than most people currently assume.


Why the Window Is Narrow

The MCP ecosystem is still early enough that the payment primitive it adopts will become load-bearing infrastructure. The standard that wins here doesn’t just win a product category. It becomes the default assumption baked into every agent runtime, every tool provider, every enterprise deployment that gets built on top.

The history of infrastructure is the history of defaults. Whoever built the card rails didn’t make news in proportion to their eventual importance. AWS launched in 2006 and was considered a developer curiosity. The window to build a position in a new infrastructure layer is narrow, and it closes when the incumbents get entrenched.

That window is why the architectural gaps in what already exists matter now, not later. x402 has processed over 100 million payments in its first six months — real traction, real proof of demand. But a formal analysis published this year by researchers across Peking University, Shanghai Jiao Tong University, and Zhongguancun Laboratory (Li et al., “A402,” arXiv 2603.01179) documented structural flaws that x402 v2 left unresolved. Service providers must execute requests before payment confirms on-chain, meaning they absorb non-payment risk on every call. And because end-to-end latency is bounded by blockchain confirmation time, high-frequency interaction is structurally impractical; on-chain fees make fine-grained micropayments economically unviable at volume. The cumulative effect is measurable: an agent retrieving data from 100 x402-protected APIs accumulates up to 110 seconds of payment overhead alone.

There’s also a centralization problem that x402’s own community has been openly debating. Every payment routes through a single facilitator which, if compromised, can fabricate settlements or take down every x402-gated service by going offline, a single point of failure at the economic core of a protocol designed to eliminate intermediaries. And the relay model has no sustainable revenue mechanism at the protocol level: gas costs are currently absorbed as a Coinbase subsidy with no path to protocol-level compensation. Every successful payment infrastructure in history has earned a return on the value it creates. x402’s relay layer, as currently built, does not.

These are not edge cases to be optimized away. They are consequences of routing machine-speed commerce through a consensus mechanism designed for something else.

Legacy rails face a different version of the same problem. They’re wired into commercial banking and trusted by enterprises, but they were built for monthly human billing. Batching thousands of micropayments to reduce per-unit fees re-introduces settlement latency, requires reconciliation cycles, and still prices three-cent transactions into incoherence.

Agents are transacting right now. One of our earliest AI service customers went from dozens of API calls per hour to multiple per minute sustained around the clock, not because a human was clicking, but because AI systems were calling other AI systems and making autonomous purchasing decisions in real time. We watched that happen in production. The volume was real. The payment infrastructure held because it was built for exactly this load.

Qatom makes that accessible to every developer building agents today. The install is one line. Authentication is OIDC. The marketplace is live and dynamic. The agent that calls a tool is the agent that pays for it, in the same request, with no human required.


For the Builders

If you’re building agent workflows that call external APIs, code generation, data retrieval, model invocations, media synthesis, you’ve already encountered the friction. Either you’ve absorbed cost into a subscription that doesn’t match your actual usage pattern, or you’ve batched transactions to make unit economics tolerable, or you’ve simply priced the APIs you’d use out of scope because the fee structure made the math not work.

The 63-cent workflow we described in February, script generation, voiceover, music, image generation, video rendering, five API calls, five providers, costs $1.64 in fees on legacy rails before any of those providers have seen a dollar. With Qatom, the fee is zero and the settlement is atomic. A three-cent transaction becomes economically viable. A tool you’d have built as a subscription becomes a pay-per-call service and earns from day one.

That changes what’s worth building. The long tail of developer tools, data services, and specialized AI capabilities that never made sense as subscriptions, because no individual developer could justify the monthly commitment for occasional use, becomes a real market when the payment primitive supports it.


For the Enterprises

The Built Before It Was Named piece covered the governance dimension in detail. The short version: as enterprises deploy autonomous agents at scale, the question regulators, counterparties, and insurers are now asking is not whether agents executed, it’s whether you can prove what they did. The TODA architecture gives every transaction a cryptographic record that travels with it, verifiable by any party, dependent on no intermediary’s continued cooperation.

That’s embedded in Qatom, not bolted on after. Every transaction that flows through Qatom carries the same provenance guarantees we described when we wrote about AGENTSAFE and the Catalini macroeconomic analysis. Settlement and verifiable record are the same atomic operation. Compliance becomes a property of the infrastructure rather than a layer added on top.

For enterprise AI teams evaluating where to place a dependency, that sequencing is the relevant fact.


What Comes Next

Qatom ships today as a hosted MCP tool, compatible with any MCP-compatible agent harness; Claude, OpenClaw, Hermes, Codex, or whatever runtime your stack runs on. The marketplace is live. The wallet is live. The earning side, registering your API as a payable tool and collecting per-call revenue, are all live.

The install is one line: clawhub install Qatom. Three steps to a wallet, a marketplace, and agents that can finally transact.

We’ve spent years building infrastructure that nobody was asking for yet because the mathematics said it would be necessary. The mathematics was right. The moment it was describing is this one.

Your agents can transact now. The rail is there.


TODAQ Micro builds verification and payment infrastructure for AI Agents. Qatom is available now at qatom.ai and on GitHub at github.com/todaqmicro/openclaw.

TODAQ - Technical documentation https://engineering.todaq.net/

To reach us: hello@todaq.net.


References

On the TODA / TAPP Infrastructure

Molina-Jimenez, C., Toliver, D., Nakib, H.D. & Crowcroft, J. — Fair Exchange: Theory and Practice of Digital Belongings. World Scientific, 2024. (Foundational research on the Fair Exchange dilemma; attestables; and proof that fairness can be a mathematical property of protocol architecture rather than a social or institutional one.) https://www.worldscientific.com/worldscibooks/10.1142/q0448

Coward, K. & Toliver, D.R. — “Simple Rigs Hold Fast.” TODAQ / T.R.I.E., 2022. arXiv:2208.13617. (Cryptographic proof of Integrity-at-a-Distance and double-spend prevention via structural induction.) https://arxiv.org/abs/2208.13617

Coward, K., Toliver, D.R., Gravitis, A. et al. — “Rigging Specifications.” TODAQ / T.R.I.E., v0.9876, January 2023. (Co-authored by CTO Adam Gravitis; defines the TODA file as a digital bearer instrument and specifies the Rigs architecture.) https://trie.site/rigging_specifications.pdf

External Sources

On Enterprise AI Governance and Macroeconomics

Catalini, C., Hui, X. & Wu, J. — “Some Simple Economics of AGI.” February 26, 2026. arXiv:2602.20946. (Source for the Measurability Gap; Counterfeit Utility; Trojan Horse Externality; False Confidence Trap; and the prescription that verification must be native to each transaction.) https://papers.ssrn.com/sol3/papers.cfm?abstract_id=6298838

Khan, R., Joyce, D. & Habiba, M. — “AGENTSAFE: A Unified Framework for Ethical Assurance and Governance in Agentic AI.” IBM, December 2025. arXiv:2512.03180. (Source for the static guardrail problem and identification of cryptographic action provenance as the critical missing layer in enterprise AI governance.) https://arxiv.org/abs/2512.03180

On x402 Architecture and Limitations

Reppel, E., Roscoe, C. & Nickerson, J. — “Introducing x402 V2: Evolving the Standard for Internet-native Payments.” Coinbase Developer Platform / x402.org, December 11, 2025. (Primary source confirming x402 launch in May 2025; 100M+ payments in six months; v2 scope limited to multi-chain and SDK modularity with atomicity flaws unresolved.) https://www.x402.org/writing/x402-v2-launch

Li, Y., Wang, L., Wang, K., Yang, Z., Wang, K., Guan, Z. & Gao, J. — “A402: Binding Cryptocurrency Payments to Service Execution for Agentic Commerce.” Peking University / Shanghai Jiao Tong University / Zhongguancun Laboratory / Beijing Jiaotong University, 2026. arXiv:2603.01179. (Primary source for structural flaws in x402: L1 non-payment risk to service providers; L3 latency and cost limitations at scale. Also source for cumulative latency figures: 50–110s for 100-API agent, 25–55s for 50-source trading bot. Confirms flaws remain unresolved in x402 v2.) https://arxiv.org/abs/2603.01179

Stone, D. — “The x402 Facilitator Problem: How to Remove the Centralized Trust Bottleneck.” Tangle, March 22, 2026. (Source for facilitator single-point-of-failure analysis: fabrication, censorship, and downtime failure modes; facilitator verifies and settles with zero cryptographic proof of correctness; no fallback or quorum mechanism.) https://tangle.tools/blog/decentralizing-x402-facilitator/

YQ — “The X402 is great, but what are some of the hidden problems?” PANews / Jinse Finance, October 31, 2025. (Source for relay economics analysis: $0.0006 gas cost per transaction with no protocol-level compensation; two-phase settlement latency of 500–1100ms per single request; EIP-3009 exclusivity limiting compatibility with USDT and DAI.) https://www.panewslab.com/en/articles/87f007ff-f2c6-4b41-919d-24e26c295912

Matos, G. — “What is x402? The HTTP-402 payments standard powering AI agents, explained.” CryptoSlate, December 18, 2025 (updated February 5, 2026). (Source for enterprise compliance burden framing: custodying keys, managing stablecoin balances, and compliance risk for agent fleets.) https://cryptoslate.com/what-is-x402-the-http-402-payments-standard-powering-ai-agents-explained/

Coinbase — “Coinbase and Cloudflare Will Launch the x402 Foundation.” Coinbase Blog, September 23, 2025. (Source for x402 Foundation co-launch date, governance mission, and Cloudflare partnership.) https://www.coinbase.com/blog/coinbase-and-cloudflare-will-launch-x402-foundation


Internal Sources

Khan, S. — “The Payment Layer for the AI Economy: How internet-native payments enable machines to transact.” TODAQ Press, February 18, 2026. (Source for the 63-cent AI workflow example; $1.64 in fees on legacy rails; 95%+ contribution margin validation; vending machine payment model; AI-to-AI transaction volume data; customer scaling from dozens of API calls per hour to multiple per minute.)

Khan, S. — “Everyone’s Building AI Agents. Nobody’s Figured Out How They Get Paid.” TODAQ Press, February 28, 2026. (Source for batching-as-workaround critique; legacy rails analysis; x402 framing as crypto-native but wrong constituency; 95% cost reduction versus alternative rails; production evidence of machine-to-machine scaling.)

Khan, S. — “Built Before It Was Named: MIT named it. IBM specified it. The proof was already done — and the infrastructure built on it is live.” TODAQ Press, March 15, 2026. (Source for TODA cryptographic architecture; Rigs papers; Fair Exchange framework; AGENTSAFE / IBM governance gap; Catalini macroeconomic analysis; enterprise provenance and verifiability requirements; TAPP commercial deployment since 2023.)