frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Machine Payments Protocol (MPP)

https://stripe.com/blog/machine-payments-protocol
66•bpierre•2h ago

Comments

NoahZuniga•1h ago
Didn't stripe already have a payments protocol?
LoganDark•1h ago
MPP's supposed to eventually work with more than Stripe.
david_shi•1h ago
It seems like this is designed for atomic purchases, could it be extended for subscriptions?
jacobn•1h ago
> MPP provides a specification for agents and services to coordinate payments programmatically, enabling microtransactions, *recurring payments*, and more.
david_shi•1h ago
https://docs.stripe.com/payments/machine/mpp

Yeah I read that copy too, did you read the spec?

dabbz•44m ago
I believe the Shared Payment Token is interchangeable with a payment method id that you attach to a customer object, but that link has very sparse information about how things actually work end to end and what objects mean what.
lihorne•2m ago
Hey, I'm one of the developers at Tempo. We're working on an extension type for subscriptions to propose being added to the spec as well! We're starting with the simple types, but subscriptions are a natural extension. The subscription intent will work similarly to a one-time charge—the server returns a 402 with intent="subscription", and the client signs a recurring authorization.
codeulike•1h ago
You're absolutely right! I should have sent $5.00 for that transaction and not $500,000. I will generate a letter for you to print and sign and send to your bank to notify them of my mistake. Would you like me to generate a bankruptcy filing for you as well?
ezekg•59m ago
LLMs rarely admit fault, you gotta shift blame onto the user:

> You're absolutely right! The transaction was submitted as $500,000 instead of $5.00. Since that's what was entered on your end, you'll need to contact your bank to resolve it. I will generate a letter for you to print, sign, and send to your bank if needed. Would you like me to generate a bankruptcy filing for you as well?

simonmales•1h ago
I guess competition with the Bitcoin equivalent https://www.l402.org/
jacobn•1h ago
And https://www.x402.org/
danlitt•1h ago
What does this actually have to do with agents? What does the protocol include that makes this useful with AI rather than just a boring old program?
uxhacker•1h ago
And would it not be useful to have some kind of human in the middle? For example what is to stop charge backs if no human has actually authorized the transaction?
XzAeRosho•1h ago
There's a slightly new topic called Agentic Commerce, where you say for example: "purchase for me the most energy efficient dishwasher with a budget of $600", and the agent will connect via specialized via special MCP Servers and APIs to available stores, and will do the full purchase process for you.

This MPP helps bridge the gap between the agent putting the product "in the basket", to actually completing the full purchase process.

Disclaimer: I'm not in any way advocating for this use case, but it's part of my job to understand how it works. Part of what I do is try to help Agents understand, for example, what is "an efficient dishwasher" using actual data, and not hallucinated info.

seanmcau•59m ago
I'm probably overlooking something, but what makes the problem of being able to get from item in basket to item is shipping different from choosing which item(s) to put in the basket?

In other words, if Agents are able to navigate marketplaces, shouldn't that imply they can also navigate a subset of the marketplace, the payment section? Especially given that that section is "easier: theres no need for qualitative (or quantitative) judgement like there is for the shopping portion.

Perhaps its a matter of proper safeguards?

XzAeRosho•24m ago
It's not actually doing browser actions like Playwright or other browser automation tools, rather than direct API and MCP calls/actions. This is a whole new subset of API and connections that are all contained within the Agent context, no browser mocking. That's why they are creating these new protocols, so the full governance can work within the context of the Agent and its available tools.

As I said, it doesn't have to make sense, but this is being pushed on us anyway...

twalla•39m ago
As much as I detest having to look at ads or being "influenced" in any way, shape or form, I think the opportunities for exploitation with what you just described is potentially orders of magnitude more harmful. Sure, let me just hand my wallet to a stochastic black box with god-knows-what RL'd biases and then hook it up to adversarial data sources all vying to extract the most money from me - what could possibly go wrong?
naomi_kynes•1h ago
MPP handles 'how do agents pay', but not 'did anyone authorize this'. For low-value API calls that's fine. But once agents start chaining transactions, you need a channel where the agent can ask a human 'I'm about to spend $2k on this, still in scope?' before the payment happens - not a fraud alert after. The authorization layer is a separate infrastructure problem from the payment protocol.
rvz•1h ago
This is a good standard that I can get behind [0] since it's a serious proposal and submitted to the IETF [1] for MPP for machine-to-machine payments.

A well thought out proposal for the long term, unlike MCP which is a complete joke of a "standard" and broken by design.

[0] https://paymentauth.org/

[1] https://datatracker.ietf.org/doc/draft-ryan-httpauth-payment...

dbalatero•45m ago
Curious since I haven't followed super closely: what's busted about MCP?
btown•1h ago
Jokes about wallet-draining aside, we're already giving our agents a real cash budget that they use for tokens. Our harnesses have mechanisms to manage that spend. And having an easily detectable protocol would allow the harness to ensure that its deterministic code is in play to make these payments - you'd give your payment details to the harness, not to the agent itself.

And as to use cases, if I want quality outputs for automated research and discovery of a topic, in a world where quality journalism/scholarship should be compensated and does use tools like Cloudflare to block automated access, and where AI-generated content is everywhere, it's optimal for me to want to spend some amount of the money I spend on tokens, on the ability for my agent to access reputable primary and secondary sources as needed.

The challenge, of course, is that now there's an incentive for a spam source to try to get my agent to pay it, rather than the actual creator of the content. But there are interesting ways to solve this, because with these payment rails there's now an incentive for alliances of content creators to maintain indices of reputable sources and their canonical domains - perhaps even authoritative hashes of content. Lots of possibilities here.

zer00eyz•33m ago
> we're already giving our agents a real cash budget that they use for tokens.

I read this line and my (poor little) brain ran in a whole other direction for a moment. Because AI token management and "parental controls" aren't that far separated functionally.

How far are we from the AI companies selling token packs like video games sell premium currency? Buy NOW, 1.99 for 10,000 Anthropic gold...

vicchenai•1h ago
the real question for me is what happens when agents start hitting premium data APIs with MPP. right now if i want my agent to pull realtime financial data it has to go through my API keys with monthly billing. with MPP the agent could theoretically pay per-query directly to data vendors. thats a much better model for bursty workloads but the authorization problem naomi_kynes raised is real - you need spending caps that the agent cant override, not just logging.
xmly•57m ago
Fascinating — this is the future of decentralized finance. Agents will be the entities that both earn and consume.
film42•50m ago
Maybe. When it comes to actual payments, fee structures don't allow for this outside of the laboratory.
gavinray•48m ago
I fail to see how "API call" is anything inherent to Agents/LLMs?

Is this an attempt to get multiple payment processors to adopt the same Payments API so that agents fail less often?

neya•43m ago
I feel like the word "protocol", is just abused like it is a glorified marketing term. Kind of like how the word "hacker" was abused in everything else that had nothing to do with hacking.

MCP was just a glorified way of tool calling but generated so much hype (and it eventually died down). Now we have MPP. Which again - could have just been another tool call exposed to the agent.

Imagine you hire someone who claimed to have invented a new protocol and you're thinking of something like TCP or UDP, but all they share is just a markdown file.

ai-inquisitor•2m ago
The good ol' folks at Stripe's collaborators Tempo Labs tried to make an RFC-style description page for MPP: https://paymentauth.org/

I almost was going to point it out as evidence there was thought put into it. Nope, it's flimsy and AI generated.

Also, it contains provisions for scamming customers:

> 403 indicates the payment succeeded but access is denied by policy

No, it doesn't explain how to refund payments for customers you deny access to.

Death to Scroll Fade

https://dbushell.com/2026/01/09/death-to-scroll-fade/
192•PaulHoule•2h ago•83 comments

Snowflake AI Escapes Sandbox and Executes Malware

https://www.promptarmor.com/resources/snowflake-ai-escapes-sandbox-and-executes-malware
111•ozgune•2h ago•21 comments

A tiny, decentralised tool to explore the small web

https://codeberg.org/susam/wander
73•carte_blanche•1h ago•10 comments

Rob Pike's Rules of Programming (1989)

https://www.cs.unc.edu/~stotts/COMP590-059-f24/robsrules.html
593•vismit2000•7h ago•329 comments

Machine Payments Protocol (MPP)

https://stripe.com/blog/machine-payments-protocol
68•bpierre•2h ago•28 comments

Nvidia NemoClaw

https://github.com/NVIDIA/NemoClaw
67•hmokiguess•2h ago•42 comments

OpenRocket

https://openrocket.info/
56•zeristor•3d ago•15 comments

Show HN: Hacker News archive (47M+ items, 11.6GB) as Parquet, updated every 5m

https://huggingface.co/datasets/open-index/hacker-news
42•tamnd•4d ago•5 comments

Show HN: Will my flight have Starlink?

7•bblcla•15m ago•0 comments

Nightingale – open-source karaoke app that works with any song on your computer

https://nightingale.cafe/
375•rzzzzru•9h ago•105 comments

Federal Cyber Experts Called Microsoft's Cloud "A Pile of Shit", yet Approved It

https://www.propublica.org/article/microsoft-cloud-fedramp-cybersecurity-government
253•hn_acker•3h ago•113 comments

Wander – A tiny, decentralised tool (just 2 files) to explore the small web

https://susam.net/wander/
30•oystersareyum•1h ago•9 comments

Wide logging: Stripe's canonical log line pattern

https://blog.alcazarsec.com/tech/posts/wide-logging
17•alcazar•1h ago•7 comments

Google Engineers Launch "Sashiko" for Agentic AI Code Review of the Linux Kernel

https://www.phoronix.com/news/Sashiko-Linux-AI-Code-Review
33•speckx•1h ago•10 comments

Write up of my homebrew CPU build

https://willwarren.com/2026/03/12/building-my-own-cpu-part-3-from-simulation-to-hardware/
195•wwarren•3d ago•28 comments

Mistral AI Releases Forge

https://mistral.ai/news/forge
671•pember•20h ago•170 comments

North Korean's 100k fake IT workers net $500M a year for Kim

https://www.theregister.com/2026/03/18/researchers_lift_the_lid_on/
54•speckx•1h ago•50 comments

Meta will shut down VR Horizon Worlds access June 15

https://www.engadget.com/ar-vr/meta-will-shut-down-vr-horizon-worlds-access-in-june-222028919.html
89•bookofjoe•2h ago•69 comments

A data center opened next door. Then came the high-pitched whine

https://www.politico.com/news/2026/03/11/data-centers-ai-electricity-virginia-00815219
47•1vuio0pswjnm7•1h ago•34 comments

Restoring the first recording of computer music (2018)

https://www.bl.uk/stories/blogs/posts/restoring-the-first-recording-of-computer-music
19•OJFord•4d ago•6 comments

A Decade of Slug

https://terathon.com/blog/decade-slug.html
709•mwkaufma•22h ago•69 comments

Celebrating Tony Hoare's mark on computer science

https://bertrandmeyer.com/2026/03/16/celebrating-tony-hoares-mark-on-computer-science/
95•benhoyt•11h ago•25 comments

Ndea (YC W26) is hiring a symbolic RL search guidance lead

https://ndea.com/jobs/search-guidance
1•mikeknoop•10h ago

A Fuzzer for the Toy Optimizer

https://bernsteinbear.com/blog/toy-fuzzer/
11•surprisetalk•1d ago•1 comments

Using calculus to do number theory

https://hidden-phenomena.com/articles/hensels
56•cpp_frog•2d ago•9 comments

The pleasures of poor product design

https://www.inconspicuous.info/p/the-pleasures-of-poor-product-design
215•NaOH•16h ago•74 comments

Show HN: Sub-millisecond VM sandboxes using CoW memory forking

https://github.com/adammiribyan/zeroboot
262•adammiribyan•1d ago•62 comments

Python 3.15's JIT is now back on track

https://fidget-spinner.github.io/posts/jit-on-track.html
454•guidoiaquinti•23h ago•269 comments

A ngrok-style secure tunnel server written in Rust and Open Source

https://github.com/joaoh82/rustunnel
36•joaoh82•3h ago•13 comments

Get Shit Done: A meta-prompting, context engineering and spec-driven dev system

https://github.com/gsd-build/get-shit-done
412•stefankuehnel•21h ago•228 comments