MoonPay Put a Crypto Wallet Inside ChatGPT and Claude. One Limit Decides Who Controls the Money

MoonPay has put a crypto wallet inside ChatGPT and Claude.

A user can ask an AI assistant to swap tokens, send money or prepare a card payment without leaving the conversation.

The assistant can build the transaction.

Whether it can complete that transaction alone depends on one setting.

MoonPay calls the product PayBox, and its most important feature is the boundary between “Always Ask” and “Autonomous.”

every Claude and ChatGPT user now has the power to trade anything on @base by having a conversation

to show you how PayBox works, we converted USDC to Base, then bought @virtuals_io and @AskVenice tokens

all of these transactions were approved and conducted 100% in Claude

— MoonPay 🟣 (@moonpay) July 29, 2026

MoonPay’s PayBox announcement describes a vault that connects to ChatGPT and Claude through a custom connector. The company is positioning the vault as a reusable financial identity and permission layer rather than a one-purpose trading bot.

Inside the chat, a user can instruct the assistant to buy, sell, swap, send or bridge supported digital assets. The AI prepares the action, shows the amount, asset, network and destination, then can present a passkey approval before money moves.

PayBox supports Ethereum, Base, Arbitrum, Polygon, Hyperliquid, Tempo and Robinhood Chain at launch. That list spans major smart-contract networks, trading infrastructure and newer payment-focused chains, while MoonPay says additional networks and capabilities will follow.

The company also built card access through Visa’s agentic-commerce protocol. That allows an assistant to prepare eligible card purchases without exposing the raw card number inside the chat.

Wallet keys are protected with multi-party computation and trusted execution environments. The key is divided so that no single party receives the whole secret or can sign a transaction independently.

MoonPay says users can fund PayBox from an existing wallet, a bank account or a card, depending on availability. Assets can then be managed from the same conversational interface used to request an action.

The connector is designed to return a proposed transaction for inspection rather than asking the language model to hold a private key. Signing remains inside the PayBox security system.

MoonPay presents the product as a bridge between natural-language instructions and financial rails, with the vault enforcing what a connected assistant can reach.

That architecture protects the key.

It does not decide what the AI is allowed to do.

The policy layer does.

Under “Always Ask,” the assistant can prepare an action but must stop for a human passkey approval before execution.

Under “Autonomous,” the user creates a standing grant. The grant can limit the assets, amounts, recipients, networks and types of action the assistant may use.

Once those limits are in place, an eligible transaction can execute without a new approval for each individual move.

Changing the permissions still requires a fresh passkey confirmation. MoonPay says every authorization is scoped to a specific action and cannot be reused for a different one.

Users can also revoke access.

Those details turn PayBox from a flashy chat demo into a serious test of how AI agents will interact with money.

A conventional wallet asks the holder to inspect and approve every transaction. That process can be slow, especially when a strategy involves recurring swaps, portfolio rebalancing, bridging assets or sending many small payments.

An autonomous wallet replaces repeated approvals with a policy written in advance.

The security question shifts.

Instead of asking only whether an attacker can steal the private key, the user must ask whether the permission grant is narrow enough to survive a malicious instruction, a compromised connector, a hostile website or an assistant that misunderstands the request.

A limit of $50 in stablecoins to one approved recipient is a contained experiment.

A broad grant covering every token, every network and an unlimited amount is something else entirely.

The same product can be conservative or dangerous depending on the scope the owner chooses.

MoonPay’s PayBox terms make that responsibility explicit. The service operates as a control and orchestration layer rather than a bank, custodian, exchange or payment processor, which means its role centers on permissions and instructions instead of holding the money being moved.

Funds move from a source chosen by the user to the intended recipient. PayBox provides the interface, permissions and execution instructions around that movement, while the underlying wallet, blockchain or payment provider completes the financial leg.

The terms warn that an operation performed under an autonomous grant may occur without the user reviewing that specific transaction at the moment it executes. That warning is central because a standing authorization trades repeated human confirmation for speed and automation.

They also state that users bear the risks of the instructions and permissions they create, including activity initiated through a connected AI agent.

PayBox is non-custodial. MoonPay says it cannot recover the wallet or reverse blockchain transactions if the user loses access or an authorized action produces an unwanted result.

The terms also warn that blockchain fees, price movement, smart-contract failures and third-party services remain outside PayBox’s control. A transaction may be delayed, fail or complete at an unfavorable value even when the permission system works as designed.

Users are responsible for checking recipient information and complying with applicable laws. MoonPay reserves the ability to restrict access, but that platform power does not turn it into the holder of customer funds.

In practical terms, the service can constrain and transmit an instruction. It cannot promise the economic result, undo a valid transfer or restore a wallet after the recovery path is lost.

That is the real meaning of control in this system.

The user controls the policy. The software enforces the policy.

The blockchain treats a valid signature as final.

congrats @Nassah__313 we just sent you $50 of PYUSD, entirely in Claude using PayBox

1️⃣ we asked PayBox
2️⃣ we gave PayBox permission
3️⃣ PayBox delivered the funds

it's that simple

chat-based agentic payments are here

— MoonPay 🟣 (@moonpay) July 29, 2026

Decrypt’s report on the launch describes PayBox as an attempt to make financial actions conversational across both crypto wallets and payment cards. The product turns a natural-language request into a structured action without making the user navigate a separate wallet interface for every step.

The report highlights the passkey approval flow and the option to let an agent act within predefined spending limits. Those two modes give the same connector very different levels of authority, from preparing a transaction for review to executing it under an existing grant.

It also notes that the product connects to two widely used general-purpose AI assistants instead of requiring customers to adopt a separate MoonPay chatbot. That reduces the behavioral hurdle because the user can stay inside a familiar conversation.

That distribution choice may be as important as the wallet technology. The financial tool appears where the user is already asking questions, researching assets and making decisions.

Decrypt reports that PayBox combines the crypto vault with virtual-card support, extending the same permission model beyond blockchain transfers. A connected assistant can therefore help coordinate both digital-asset activity and eligible conventional purchases.

The launch follows a broader push by payment companies to give software agents controlled access to commerce. Visa, Mastercard, Coinbase and stablecoin companies have all been developing rails that let an AI initiate a payment while keeping identity and authorization checks around it.

MoonPay’s advantage is the combination of those rails in a consumer-facing interface. Its challenge is making the permission system understandable enough that convenience does not outrun informed consent.

For experienced crypto users, PayBox could compress a long sequence of steps.

A request such as “convert $100 of USDC to PYUSD on Base and send it to this approved address” can be translated into a prepared transaction without manually opening a wallet, selecting a network, finding a token contract and entering every field.

For newcomers, that convenience removes much of crypto’s visible complexity.

It can also hide the details that keep people safe.

Networks, token contracts and slippage matter.

Bridge routes and recipient addresses matter too.

A polished conversational answer does not make those underlying choices harmless.

The safest version of an AI wallet will make the critical details clearer at the approval moment, not bury them behind the ease of a conversational request.

Autonomous grants need the same discipline companies use for employee expense cards and software access: least privilege, small limits, approved destinations, clear expiration dates and an easy kill switch.

The market is moving toward this model quickly.

Stablecoins give AI agents a digital payment rail that operates continuously. Wallet connectors let them interact with exchanges, protocols and merchants.

Passkeys give users a familiar approval method without requiring them to handle a seed phrase for every action.

Put those pieces together and an assistant can move from explaining a transaction to carrying it out.

That is a major capability jump.

It is also why PayBox’s least glamorous feature may be its most consequential one.

The future of agentic finance will not be decided by whether an AI can send money. MoonPay has shown that it can.

It will be decided by how precisely humans can define the circumstances under which the AI is allowed to act.

“Always Ask” keeps the person in every loop.

“Autonomous” moves the person one level higher, from approving transactions to designing the rules that approve them.

That single choice decides where the money really stops being under moment-to-moment human control.

Join the conversation!

We have no tolerance for comments containing violence, racism, profanity, vulgarity, doxing, or discourteous behavior. If a comment is spam, instead of replying to it please click the icon below and to the right of that comment. Thank you for partnering with us to maintain fruitful conversation.