Cloudflare and Stripe launched an open protocol on April 30 that allows AI coding agents to provision cloud infrastructure, register domains, and deploy applications to production without any manual human steps. The integration, called Stripe Projects, removes the three traditional blockers that kept agents from end-to-end deployment: account creation, payment, and API credential management.
How the Protocol Works
The system operates in three stages, according to Cloudflare’s announcement. First, discovery: agents call a catalog command that returns all available services across providers. Second, authorization: Stripe acts as identity provider, linking the user’s existing Cloudflare account via OAuth or automatically provisioning a new one. Third, payment: Stripe issues a tokenized payment method that providers use to bill the human user when their agent starts subscriptions or makes purchases.
A user installs the Stripe CLI with the Projects plugin, logs into Stripe, and prompts their agent to build something. From that point forward, the agent handles everything. It creates a Cloudflare account if one doesn’t exist, obtains an API token, purchases a domain through Cloudflare Registrar, and deploys the application. The human must accept Cloudflare’s terms of service, but no dashboard visits, credit card entry, or token copying is required.
Stripe sets a default spending cap of $100 per month per provider, according to InfoWorld. Users can raise limits and configure budget alerts.
Beyond Cloudflare
Stripe Projects is not limited to Cloudflare. The protocol supports over two dozen providers in beta, including AgentMail, Supabase, Hugging Face, and Twilio. Any platform with signed-in users can implement the same integration pattern, per Cloudflare, making it a potential standard for agent-to-infrastructure provisioning.
Cloudflare is offering $100,000 in credits to startups that incorporate through Stripe Atlas and use the new capability.
Security Concerns
David Shipley, CEO of Beauceron Security, raised the obvious counterpoint to InfoWorld: cybercriminals constantly need fresh infrastructure as law enforcement takes down their operations. “Making it even faster to build new infrastructure and deploy it quickly is a huge win for them,” he said.
The protocol does require initial Stripe authentication and ToS acceptance, which ties deployments to a verified identity and payment method. Whether that creates sufficient accountability at scale remains an open question.
The Autonomy Threshold
This is the first major cloud provider to treat AI agents as first-class customers rather than tools operating within human-managed accounts. The protocol standardizes what Cloudflare calls “typically one-off or bespoke” cross-product integrations, extending OAuth into payment and account creation in a way that treats agents as autonomous participants in the infrastructure supply chain.
Combined with the agent payment infrastructure wave from late April, the pattern is clear: the plumbing for agents to operate as independent economic actors is being laid across identity, payment, and now deployment. The question has shifted from “can agents do this?” to “should the spending cap be higher than $100?”