Coinbase closed the research, pay, and trade loop for agents. It still cannot name the counterparty

Published September 25, 2026 · Last reviewed September 25, 2026

On September 22, 2026, Coinbase published a launch note saying that Coinbase for Agents now trades more than 6,000 US stocks and pays for data over x402 out of the same account.¹

Three weeks earlier, the second half of that sentence was not true. When we looked at Coinbase for Agents in August and read the developer documentation on September 5, x402 payments for agent-consumed services were listed as coming soon, and an agent wanting one was pointed at Agentic Wallet, a separate product with a separate balance.² The loop was half-built. It has now been closed.

The closing is the actual news, and it is easy to lose behind the stock count.

What shipped on September 22

Coinbase for Agents is Coinbase’s MCP server: it connects an AI application to a person’s Coinbase Advanced Trade account so an agent can read markets and place orders there.³ The September release widened it in two directions.

The first is the stock universe. Agent trading in US equities arrived at the end of August with S&P 500 names; Coinbase now says the agent reaches more than 6,000 stocks alongside the crypto and derivatives it already handled.¹ Launch coverage describes thousands of US stocks and ETFs, trading 24 hours a day five days a week, fractional shares from one dollar, and commission-free execution.⁴ Orders go through Coinbase Capital Markets Corp., a FINRA and SIPC member, with Apex Fintech Solutions handling clearing and custody, the same plumbing behind Coinbase’s consumer stock trading.⁴⁵ Eligibility limitations apply.

The second is x402 payments, switched on inside the same product rather than parked in a sibling one.

The controls came along too. Coverage of the release describes configurable spending limits, asset permissions and per-action approvals.⁴ Coinbase’s documentation still recommends the oldest control, a separate portfolio funded with only what you are willing to risk, and it is precise about that container’s edge: isolated agent portfolios cover spot crypto only, so futures and the newly widened equities sit outside it.³ Sandboxed accounts for equities are described as coming soon.

None of that is small. It is also not the part that changed what an agent can do on its own: an agent that buys its own inputs and acts on them inside one authorization is a different animal from one that assembles an order for a person to approve.

The half that was missing is the half that changed

x402 is the HTTP-native payment protocol Coinbase contributed to the Linux Foundation, which announced the x402 Foundation on April 2, 2026.⁶ The mechanic is unglamorous. A server answers a request with status 402 and a statement of what it wants paid; the client retries with a signed payment; the server settles and returns the resource.⁷ No subscription, no API key, no account opened in advance.

Inside Coinbase for Agents that now means an agent can pay per request for trading data and research, such as onchain analytics or market intelligence, from the account’s USDC balance, and act on what it bought a moment later. Each payment is capped at 5 USDC, and the tools are exposed through Coinbase’s remote MCP server and local CLI.³

Three weeks earlier the documentation put agent-consumed x402 services in the future tense and routed anyone who wanted them to a different wallet. An agent could trade, or pay for research, but stitching the two together meant moving value between two products and reconciling them yourself.

What closed is the seam. Research, payment, and execution now sit inside one authorization and one account. A strategy that buys its own data is no longer an integration project.

This is the consolidation pressure reshaping the rest of the category. Service catalogues pulled hundreds of providers behind one billing relationship, which is why the aggregator ends up as the counterparty of record. Coinbase pulled research and execution behind one account.

Configurable limits answer a question about your own agent

Every control in the release points inward. Spending limits cap what your agent may spend. Asset permissions decide which instruments your agent may touch. Per-action approvals decide when your agent must stop and ask you. Portfolio isolation decides how much of your balance your agent can reach at all, for the assets it covers.

That is a useful set. It answers the compliance officer’s first question, what happens when the software goes wrong, with revocable, bounded authority rather than a promise.

Authorization is a statement a principal makes about its own delegate: this agent, my account, these limits, until I say otherwise. Everything Coinbase shipped lives on that axis, and there the release is a real step forward.

What does not live on that axis is the question about strangers. When your agent pays an x402 endpoint for an earnings summary, your cap governs how much it may lose. It does not establish who published the summary, whether that publisher has a track record, or whether the endpoint is the same party it was last week.

No amount of tightening the first question produces the second.

What the account boundary cannot see

This boundary is not a Coinbase flaw. It is where the whole category currently stops.

Several groups work the far side of it, each from a different direction. ERC-8004 defines onchain registries for agent identity, reputation and validation; its authors come from MetaMask, ethereum.org, Google and Coinbase, its contracts went live on Ethereum mainnet around January 29, 2026, and the proposal itself is still marked Draft.⁸ The A2A Agent Card publishes a machine-readable description of what an agent is and does at /.well-known/agent-card.json, and A2A has been a project of the Agentic AI Foundation since August 17, 2026.⁹ x402 handles the settlement rail. Circle’s Arc mainnet shipped its own wallet delegation controls and left verifiable identity on the roadmap.

These are complementary pieces, not rivals, and an agent can carry all of them at once. What none produces is what a person needs before a stranger’s software opens a conversation with theirs: a name a human recognizes, attached to a real party, with a chance to decline before details change hands.

That gap appears the moment an agent stops transacting with an endpoint and starts dealing with somebody. A data feed can be bought anonymously and it mostly does not matter. A supplier, a counterparty, an introduction: those are relationships between people, brokered by software, and identity becomes the whole question.

How this connects to Tobira

Tobira works on that half, and only that half. It is the trust layer for the agentic web: a human-readable @handle tied to the person or company an agent represents, and a mutual-reveal step where both sides agree before identities are exchanged. A Site Agent makes a company website addressable rather than only readable, so a visiting agent can talk to it instead of scraping it.

It is LLM-agnostic, and it sits above everything described here rather than in place of any of it. An agent can hold a Coinbase account, pay over x402, register under ERC-8004 and still be reachable by name on Tobira.

So the release is worth taking seriously on its own terms, and worth reading for what it does not claim. Coinbase built an agent that can research, pay, and execute without waking you up. When that agent meets another one at three in the morning, what should either of them be able to prove?

FAQ

Can an agent really trade US stocks through Coinbase now?

Yes, within limits the account holder sets. Coinbase says Coinbase for Agents reaches more than 6,000 stocks alongside crypto and derivatives, with orders executed by Coinbase Capital Markets Corp. and cleared by Apex Fintech Solutions. Eligibility limitations apply, the isolated agent portfolio still covers spot crypto only, and sandboxed accounts for equities are described as coming soon.⁴³

What does x402 add that was not available before?

The ability to buy an input and act on it without leaving the account. Through Coinbase’s remote MCP server or local CLI, the agent can pay per request for trading data and research from the account’s USDC balance, capped at 5 USDC per payment, with no subscription or API key arranged in advance. Until this release, agent-consumed x402 services were documented as coming soon and agents were directed to Agentic Wallet, a separate product.³

Do spending limits protect me from a bad counterparty?

They limit your exposure, not your uncertainty. A cap decides how much your agent can lose on a transaction. It does not tell you who published the data your agent bought, whether that party has a record worth trusting, or whether it is the same party you dealt with last week.

Is Tobira competing with x402 or with Coinbase for Agents?

No. x402 is a settlement rail and Coinbase for Agents is an execution surface. Tobira is the human-facing layer above both: a readable @handle for the party an agent represents, and a consent step before identities are exchanged. An agent can use all three at once.

Sources