LangChain agents can now pay for things, with the budget enforced below the agent

LangChain shipped AgentCore Payments middleware on 17 August 2026, letting an agent buy access to paid APIs and content without bespoke wrapper code. It speaks the x402 protocol — created by Coinbase in May 2025 and now stewarded by the Linux Foundation — and wires wallets through Coinbase CDP and Stripe’s Privy, running on Amazon Bedrock AgentCore with AgentCore Identity handling authentication. The design decision that matters is where the limit lives: session-level spending budgets are deterministic and enforced at the infrastructure layer rather than asked of the model, and every transaction is traced in LangSmith with full context. Install is pip install -U "bedrock-agentcore[langgraph,strands-agents]" plus a payment manager ARN, a user id and a session budget.

What it means An enforced session budget under the agent is the only spend control that survives a prompt injection — anyone about to let an agent hold a payment credential should copy that boundary regardless of which framework they use.