Product Launch · XiaoHu Explains

Cloudflare launches an automatic payment gateway: when AI wants to crawl your webpage or API, it can now pay you automatically

Expands from charging only AI crawlers to charging any caller — currently in early waitlist stage
30-second overview
  • Cloudflare announced the "Monetization Gateway," letting customers charge for their webpages, data, API endpoints, and AI tool calls — charged per use, not a monthly subscription.
  • How payment works: when an AI wants to use your resource, it first gets a "payment required" prompt with a quote, automatically pays, then re-requests with a "paid" credential attached — once verified, the request goes through. For example, an AI agent helping you book a flight pays $0.01 to check flight-delay data, the whole thing happens automatically, no account registration needed upfront, and you don't have to build your own payment system.
  • Settlement runs on stablecoins (like USDC); the official claim is under-a-second settlement. Payment verification happens at Cloudflare's servers in 330+ cities worldwide, done nearby without routing far away.
  • You decide the pricing rules: set prices per endpoint, charge dynamically by task difficulty, or charge only unauthenticated visitors — configurable with a few clicks in the dashboard or a few lines of config code.
  • This payment protocol isn't Cloudflare's alone — it's being built together with 25+ industry partners; Monetization Gateway is currently in the waitlist stage, not yet open to everyone.
Stance note: this is Cloudflare's own official blog announcement. The original text uses future tense ("will") throughout to describe features, currently in the waitlist opening stage, not yet fully live, with no public pricing page. The following describes its capabilities and plans per the original text; target figures and self-reported data are noted here once and not repeated line by line in the body.
1Background · The old model breaks down

Humans vs. AI crawlers — who's really consuming your content

For 30 years, the web has run on a simple exchange: content for human attention, monetized via ads, subscriptions, and e-commerce. As AI agents become the web's primary visitors, that exchange starts to break down. Agents don't watch ads, and they won't sign up for a monthly subscription for every tool they want to use — they read a page or data source once, take what they need, and leave.

Human visitor returns
AI crawler scraping (conservative)
~100×
AI crawler scraping (heavy)
10,000+×

By Cloudflare's own data, network-wide, for every one human visitor an AI crawler brings back to a site, that crawler scrapes the content anywhere from a hundred to tens of thousands of times. Under the old attention-based model, this one-off, non-retentive traffic is hard to monetize — the billing unit needs to shift from "a month" or "a seat" to "a request," "a token," "a result."

2Background · The old problem

Why pay-per-use never worked before

The idea of pay-per-use billing has been around a long time, but it's always been stuck on two real obstacles.

Obstacle 1 · Payment rails

Traditional payment rails can't handle transactions worth fractions of a cent — the cost of collecting the payment exceeds the payment itself, and settlement isn't fast enough. Below a certain amount, collecting the fee costs more than the fee.

Obstacle 2 · Billing systems

Companies wanting usage-based billing effectively have to turn themselves into half a payments company, building a whole stack for usage tracking, billing, and reconciliation — the backend overhaul is expensive. Many companies opted for the simpler, often more profitable, seat-based pricing instead.

Cloud services and APIs have long sold by usage or by the hour, but only to "known buyers": users register first, get an API key, then get billed by usage. Content has mostly skipped payment and run on ads. There's never been a good channel for small charges to anonymous callers.

3The launch · What it is

What exactly did Cloudflare announce

On July 1, 2026, Cloudflare gave its answer: the Monetization Gateway, an automatic payment gateway. To use an analogy, it's like installing a single automatic checkout register across your websites, data, and APIs — whether it's a webpage, a dataset, an API, or an MCP tool call, as long as it's hosted on Cloudflare, it can be set to "charge per use," with no need to integrate payments yourself. Payment verification and settlement run on an open protocol called x402, and the funds that land in your wallet are stablecoins (like USDC).

The novelty here is the expansion of who gets charged: from Pay Per Crawl in 2025, which could only charge AI crawlers, to now charging any caller for any resource.
Why it matters: an AI wanting to view your webpage or call your API doesn't need to register or log in first — it might just get automatically charged, and you don't touch a single line of payment code. How this actually works, layer by layer, is broken down below.
Cloudflare Monetization Gateway announcement hero image
Hero image from Cloudflare's official blog post "Announcing the Monetization Gateway." Source: Cloudflare Blog
4Core mechanism · x402

How the payment gets completed inside a single HTTP request

What finally makes pay-per-use work is an open protocol called x402. It folds payment directly into an ordinary web request, completed entirely within a single HTTP request-response cycle.

Core mechanism

x402 reuses an HTTP status code almost nobody uses — 402 (Payment Required) — and the protocol takes its name from that status code. Payment happens through a normal HTTP request-response, no redirect to a separate checkout page, no separate payments API call.

Here's a concrete example: say there's a customer-service AI agent helping you book a flight, and it needs to check "real-time flight delay" data — a site charges $0.01 per query for this data. It and the site complete both "get the data" and "pay for it" together, in a single ordinary web request:

1
Flight-booking agent → data site
Wants to check how delayed flight CA981 is, sends a request for the data directly.
GET /flight-delay?flight=CA981
2
Data site → agent
Sees this data is paid, doesn't hand over the data — returns a 402 status code with a quote attached: this query costs $0.01, payable in USDC, to this address.
402 Payment Required + quote
3
Flight-booking agent → data site
The agent's own wallet automatically pays the $0.01 as quoted, attaches the payment credential to the request, and re-sends the exact same request.
GET /flight-delay?flight=CA981 + credential
4
Facilitator (third party verifying payment) checks → data site grants access
The facilitator confirms the $0.01 was indeed paid; once verified, the site hands over "CA981 delayed 40 minutes," the agent gets the result and can immediately tell you the flight will be late. Settlement is peer-to-peer, and the $0.01 goes straight into the site's own wallet.
200 OK + flight delay data
Expand to see these four steps at the HTTP level
The flight-delay query example above, at the HTTP level
① Agent sends request
GET /flight-delay?flight=CA981 HTTP/1.1

② Site requires payment, attaches quote
HTTP/1.1 402 Payment Required
{
  "price":  "0.01",
  "asset":  "USDC",
  "payTo":  "0x…(site's wallet address)"
}

③ Agent pays, re-sends with credential
GET /flight-delay?flight=CA981 HTTP/1.1
X-Payment: <PAYMENT_PROOF>

④ Facilitator verifies, returns data
HTTP/1.1 200 OK
{"flight": "CA981", "delay_minutes": 40}

Fields are illustrative; actual price/currency/payment-address formats follow the official spec.

Analogy · x402

A bit like a contactless subway turnstile: tap (a request carrying a credential) and it auto-deducts and lets you through — no pulling out your wallet, no queuing at a ticket window, no jumping to a separate checkout page.

Two unfamiliar roles appear here — one line each. First is the facilitator (payment verifier): a third party in the x402 flow that confirms "this payment really was made." After the buyer pays, the facilitator checks whether the credential is valid; once verified, the server grants access to the resource. The facilitator itself never touches the money.

Analogy · facilitator

Similar to a customs officer checking paperwork — never touches the cash, just verifies the documents are in order.

Second is peer-to-peer settlement: the money the buyer pays goes straight into the seller's own wallet, with no bank, no platform account, no batch clearing step in between — hence near-instant settlement. Cloudflare states the design target is sub-second settlement.

Official x402 protocol sequence diagram: full call flow across four lanes — Client, Server, Facilitator, Blockchain
Official x402 protocol sequence diagram, source: x402 protocol GitHub repo (coinbase/x402). One level more detailed than the four-step explanation above: the facilitator actually makes two separate calls to the server — first a "verify" step to check the payment signature is valid, then after the server does its job, a "settle" step, which is when the transaction is actually submitted on-chain and waits for on-chain confirmation.
5Product capabilities

What pricing rules can Monetization Gateway actually set

At the product level, Monetization Gateway offers a flexible pricing-rule interface that lets you precisely specify which traffic requires payment. The rule syntax resembles other expression-based rules you'd configure in Cloudflare — clickable in the dashboard, configurable via API, or via Terraform (a tool for managing configuration as code), turning a paid endpoint into a piece of infrastructure configuration. The official announcement gives three planned capability examples.

① Charge by call type

Require payment for requests to a given URL path. For example, charge $0.01 for every read (GET) or write (POST) to /api/premium/*.

② Dynamic pricing

Charge based on task complexity. For example, price image generation dynamically by compute consumed, up to $2.

③ Gate only unauthenticated callers

Intercept the origin's (your own server that actually holds the data and runs the service) 401 (unauthorized) response and rewrite it as 402 (payment required), attaching the price and payment instructions.

What this gateway ultimately does is move billing and payment verification from the origin server to Cloudflare's edge.

Without Gateway

The origin has to build its own account system, billing system, and payment integration, overhaul the backend to charge by usage, and absorb high-concurrency payment traffic.

With Gateway

Billing and payment verification move to Cloudflare's edge (330+ cities), completed nearby, with the handshake closest to the buyer — reducing latency and shielding the origin. The origin only has to set prices and write rules.

Caller Request with credential Request path Payment verification CLOUDFLARE Edge node PAID PAID Origin origin
Mental model: the same flight-delay-query request from the previous section flows through a Cloudflare edge node, gets stamped "PAID," the request path and payment verification merge into one at the edge, then gets forwarded to the origin (here, "origin" is that data site's own server).
6Settlement · Stablecoins

Why stablecoins specifically do the heavy lifting here

Charges here are small — down to fractions of a cent — where traditional payment rails just aren't economical. Stablecoins fill that gap.

Stablecoins (like Open USD, USDC) can move very small amounts online with near-zero fees, settling in under a second — something traditional payment rails can't do today. x402 itself is rail-agnostic, but it's naturally suited to stablecoins, and there are no chargebacks.

Sub-second
Official target for stablecoin settlement speed
≈0
Fee overhead per payment — the protocol itself adds almost no extra burden
25+
Industry partners co-building the protocol with Cloudflare via the x402 Foundation
330+
Cities covered by Cloudflare's edge network, where the payment handshake completes nearby

One more clarification: x402 is an open protocol, co-built by Cloudflare and 25+ industry partners through the x402 Foundation (housed under the Linux Foundation), with the earliest reference implementation on GitHub coming from Coinbase. It is not Cloudflare's private protocol.

7What it delivers

What developers and creators actually save and earn

Bringing the mechanism and settlement details back to one question: what do you actually get from using this. Per the original text, mainly three things.

  • Service providers (websites, APIs, MCP services) don't need to build their own billing and payment collection systems — just write rules and set prices in Cloudflare, revenue lands directly in a wallet as stablecoins, tradeable or convertible to fiat at will.
  • Callers (including AI agents) don't need to register an account or get an API key upfront — the payment itself serves as the access credential, suited for calls previously abandoned because the amount was too small for traditional rails to be worth collecting (like a few cents per call).
  • Creators and small API providers get a new revenue channel — calls that previously almost nobody paid for can now be paid automatically; combined with Web Bot Auth (Cloudflare's identity-verification mechanism for confirming "is this visitor really the AI it claims to be"), you can verify caller identity at the same time as pricing.
8Current stage

Can you actually use it right now

Worth flagging: Monetization Gateway is currently in the waitlist stage, open for application to existing Cloudflare customers.

The original text uses future tense ("will") throughout to describe features (will give / will provide / will scale) — these capabilities are still being built and rolled out, not yet a fully live, mature product, and there's no public pricing page. Customers who want to charge for their webpages, datasets, APIs, or MCP tools by usage can join the early access list.

9The bigger picture

If this rolls out fully, how would money flow across the internet

Setting aside the current stage and the near-term benefits above, Cloudflare paints a larger vision.

Agents are software that acts autonomously on a user's behalf — they're starting to bring their own wallets online, paying for datasets, API calls, tools, and compute without a human in the loop. Some resources are free, some require verifying "who you are" (identity) first, and many require both. Cloudflare positions itself as one of the few pieces of infrastructure that can complete both identity verification (optionally combined with Web Bot Auth) and payment verification within a single request, then grant access to the origin — turning the request itself into a transaction.

2025
Pay Per Crawl
Launched on Content Independence Day — sites could control with one click which AI crawlers can access content, and charge them. Only crawlers could be charged.
2026
Monetization Gateway
Charges any caller for any resource — covering webpages, datasets, APIs, MCP tools — customers don't need to build their own payment machinery.
Metering, payment exchange, and settlement all move off your origin — what stays with you is what matters: your rules, your prices, your revenue. You just write one rule, and wallet-carrying agents will pay for whatever they use. Cloudflare Blog, "Announcing the Monetization Gateway"
This piece is an explainer based on Cloudflare's official blog post "Announcing the Monetization Gateway" (July 1, 2026); facts and figures follow the original. Source: blog.cloudflare.com/monetization-gateway