Agentspay

Explainer

Gemini Enterprise Spend Controls: Google Agentspace Pricing, Agent Limits and the Cap Google Actually Ships

Google did something in August 2026 that the other agent platforms have not done: it shipped a hard monthly spend cap that genuinely stops usage instead of emailing you about it. That deserves credit, and it also moves the interesting question one step along. A cap that stops something is only as useful as the thing it is scoped to, so we went and measured what Google can actually point that cap at, in the API model Google publishes for anyone to read.

Agent Payments Console

Pick an agent

Payment intent

intent:

Policy evaluation

Human approval required

This spend is over your approval threshold. Approve it to issue a scoped card, or deny it.

Scoped virtual card issued

Agentspay

single-use

Wallet budget

spent of

Audit trail

In short

Gemini Enterprise is Google enterprise agent platform, renamed from Google Agentspace on 9 October 2025 and sold at a published 21 US dollars per seat per month for Business and 30 dollars for Standard and Plus, with a pay-as-you-go edition at a 0 dollar seat fee. On 26 August 2026 Google added hard monthly spend caps for agent workloads, and they are real: when a project reaches the limit, Gemini Enterprise stops overage usage and the agent API calls pause. We read the Discovery Engine and Cloud Billing Budgets API models on 16 September 2026 and measured what that cap can be scoped to. The cap is a Cloud Billing budget filtered to the Vertex AI service, and the budget Filter object exposes nine dimensions: projects, services, labels, resource ancestors, subaccounts, credit types, and three period settings. None of them is a user, an agent or a counterparty, so one cap covers every agent in the project and cannot distinguish between them. The Agent resource itself carries 21 properties, including an authorization config and a sharing scope, and not one of them is a monetary amount. The cap also governs only what you owe Google. It has no reach over what an agent buys from a third party.

What Google shipped in August 2026, and why it changes the question

Gemini Enterprise is Google enterprise agent platform: the place a US company connects its own data, deploys agents against it, and gives staff an assistant that can actually do things in the business. It is the product formerly sold as Google Agentspace, renamed on 9 October 2025 and closed to new Agentspace sales at the end of that year, with the developer platform folded in during 2026 as the Gemini Enterprise Agent Platform. If your company runs on Google Workspace, this is the path of least resistance into production agents.

On 26 August 2026 Google announced flexible billing and cost controls for agents, and the headline is worth stating plainly because it is genuinely better than what the competition ships: you can now set hard monthly caps on AI spend and projects. Google own wording on what happens when the ceiling is reached is unambiguous. If a project hits its limit, the agent API calls temporarily pause. The documentation repeats it: when your project reaches this spend limit, overage usage is automatically stopped.

That is a refusal, not a notification, and it puts Google ahead of every other vendor we have measured this year. Salesforce sends threshold alerts. Microsoft expresses no monetary amount near an agent at all. AWS shipped a number but scoped it to a single session. Google shipped a cap that turns things off.

So the useful question is no longer whether Google gives you a ceiling. It does. The question is what that ceiling is attached to, because a cap is only as precise as its scope, and scope is the kind of thing that is decided in a schema rather than in a launch post. That is what we measured.

Gemini Enterprise pricing, read from Google own page

Most of the pricing articles on this topic quote each other. We read the figures below off the Google Cloud Gemini Enterprise page on 16 September 2026, and they are the prices Google itself publishes rather than a partner reconstruction. Google publishes two seat prices and one zero.

Business is starting at 21 USD per seat per month, aimed at small businesses and teams, with 25 GiB of storage and data indexing per seat pooled across the tenancy, and a ceiling of 300 seats. Standard and Plus share one price card at starting at 30 USD per seat per month, which is worth noticing: two editions with different quotas behind a single starting-at number means 30 dollars is Standard floor and Plus is a sales conversation. The third option is the one the August announcement added. Pay-as-you-go, for organizations with 20 or more seats, carries a 0 dollar seat fee and bills at standard rates for tokens, memory, compute and storage. Google notes it is rolling out gradually.

The shape matters more than the numbers. A seat price is a fixed cost that a procurement team already knows how to model, and it is bounded by headcount. Token, memory and compute billing is a variable cost bounded by agent activity, and agent activity is the thing the whole program exists to increase. Pay-as-you-go removes the seat floor entirely and hands you a meter with no headcount ceiling behind it, which is exactly why Google shipped the caps in the same announcement. The two go together on purpose.

Alongside that sit Flexible Savings Plans: commit to a monthly spend and take 10 percent off token costs for a one-year term or 20 percent for three years, with, in Google words, no minimums, no maximums, and no new billing silo to manage. Google also previewed deferred execution pricing, where eligible agent workloads are scheduled into off-peak windows at up to half the inference cost.

How we measured what Google can express about agent spending

Vendor marketing is a poor source for this and opinion is worse, so we do the same thing on every vendor page: we read the published API model. Google is unusually good to work with here, because every Google API ships a machine-readable discovery document that anyone can fetch without a key, and those documents are the ground truth that the console, the CLI and the client libraries are all generated from. If a field is not in the discovery document, it does not exist in the product.

On 16 September 2026 we pulled four of them. Discovery Engine, which is the API behind Gemini Enterprise and Agentspace, at v1alpha (2,323,112 bytes, revision 20260914) and at v1 (2,049,833 bytes, revision 20260915). Vertex AI Platform v1 (3,867,717 bytes, revision 20260904), which carries the Agent Engine runtime. And Cloud Billing Budgets v1 (32,956 bytes, revision 20260906), which is where the spend cap actually lives, a fact we will come back to because it is the whole finding.

Across the alpha Discovery Engine model that is 1,053 schemas, 3,516 properties and 385 methods. We flattened every schema to its property names and ran two vocabulary passes. The money pass matched amount, currency, budget, spend, price, cost, payment, invoice, monetary, credit limit, dollar, purchase, billing, charge, fee, USD, wallet and quota. The policy pass matched merchant, category, MCC, vendor, counterparty, allowlist, approval, daily, monthly, cumulative, aggregate, payee, threshold, cap and ceiling.

Then, because a regex that finds nothing is usually a broken regex rather than a discovery, we ran the same passes against a positive control: the Cloud Billing Budgets API, a Google service whose entire job is money. A working method has to light that one up.

The finding: the cap is a Cloud Billing budget, and a budget cannot see an agent

Start with how an administrator actually sets the Gemini Enterprise limit, because the documented procedure gives the answer away. You open Gemini Enterprise, go to Usage and Spending, find Project monthly spend limit, click Set limit, and Google hands you off to Cloud Billing to configure a budget with Vertex AI (aiplatform.googleapis.com) selected from Services. The Gemini Enterprise spend cap is not a Gemini Enterprise object. It is a Cloud Billing budget pointed at one service.

That matters because it means the cap inherits the budget object model exactly, and we measured that object model. A Budget lives at billingAccounts/{billingAccountId}/budgets/{budgetId}, which is the top of the Google Cloud hierarchy and the furthest possible point from an individual agent. Its budgetFilter is where scope is decided, and the Filter object publishes exactly nine dimensions: projects, services, labels, resourceAncestors (folders and organizations), subaccounts, creditTypes, creditTypesTreatment, calendarPeriod and customPeriod.

Read that list again with an agent in mind. Every dimension is a billing or infrastructure container. Not one of them is an identity. There is no user, no service account, no agent, no counterparty, no merchant, no category. The finest grain available is a project, or a label on a resource, and a label is a string you attach to infrastructure rather than a control the platform enforces against an actor.

The consequence is concrete and it is the thing to take into your architecture review. One Gemini Enterprise cap covers every agent in the project, indivisibly. If you run twelve agents and one of them loops, the cap fires for all twelve. Your invoice-reconciliation agent, your support triage agent and your research agent all stop together because a thirteenth one misbehaved. You cannot give the risky agent a small allowance and the safe one a large one, not because Google decided against it but because there is no field in the schema to hold it.

The Agent resource has twenty-one properties and not one is an amount

The obvious next question is whether the limit lives closer to the agent somewhere else in the product, so we looked at the agent itself. Discovery Engine v1alpha contains 31 agent-named schemas carrying 85 properties between them, and the central one is Agent, with 21 properties. Here they are in full, because the list is more persuasive than any summary of it: name, displayName, description, icon, languageCode, customPlaceholderText, starterPrompts, state, createTime, updateTime, sharingConfig, authorizationConfig, observabilityConfig, managedAgentDefinition, adkAgentDefinition, a2aAgentDefinition, dialogflowAgentDefinition, suspensionReason, rejectionReason, creationFailureReason and deploymentFailureReason.

Zero of the 85 agent-schema properties match the money vocabulary. The policy pass returned six hits, and all six are the same two fields repeated across API versions: effectiveTpmThreshold and tpmThresholdNextUpdateTime on the agent search token subscription status. A TPM threshold is tokens per minute. It is a throughput ceiling on a subscription, read-only and output-only, and it is a rate rather than an amount. It is the closest thing to a limit anywhere near a Gemini Enterprise agent, and it is not money.

What makes this a design decision rather than an unfinished corner is what is on the object. authorizationConfig is real governance: it holds the authorization required to invoke the agent, and a separate list of tool authorizations for the resources the agent reaches. sharingConfig.scope governs who can see and use it. The state enum runs to ten values including ENABLED, DISABLED and SUSPENDED, so Google can switch an agent off. The governance vocabulary is present, mature and carefully thought through. It governs identity, access, visibility and lifecycle, and it stops exactly where money begins.

Google does model commerce for agents. It points the other way.

There is one place in the agent model where Google does talk about money, and it is the most quotable detail we found, because of which direction it faces.

An agent defined through the A2A protocol carries a2aAgentDefinition, and inside it sits cloudMarketplaceConfig with two properties. entitlement is required, formatted projects/{project}/entitlements/{entitlement}. order is output only, formatted billingAccounts/{billing_account}/orders/{order}.

So Google does attach an agent to a commercial object. An entitlement and an order are commerce primitives, and they sit directly on the agent definition. They describe you buying the agent from Google Cloud Marketplace. There is no matching object anywhere in the model for the agent buying something on your behalf. The commerce vocabulary exists, it is wired to the agent, and it runs in exactly one direction: money flowing to Google.

That is not a complaint. It is a fair description of the boundary Google drew, and it lines up with the boundary Microsoft, Salesforce and AWS drew independently. It is just worth being clear-eyed that the presence of billing language on an agent record does not mean the platform has any view on the agent as a spender.

The control worked, so the zero is real

A finding built on a regex is worthless without a control, and this one has a strong positive control that we ran the same day with the same expressions.

The Cloud Billing Budgets API is tiny: 11 schemas, 36 properties, 5 methods. The money pass matched 9 of those 36 properties, a hit rate of 25 percent, against Budget.amount, BudgetAmount.specifiedAmount, BudgetAmount.lastPeriodAmount, Budget.budgetFilter, ThresholdRule.spendBasis, Filter.creditTypes, Filter.creditTypesTreatment, Money.currencyCode and the list response. The method is not blind. Point it at a Google API that models money and it fires hard.

The same control produced a second finding worth having, and it is the one that explains why Google shipping a hard cap was news at all. A Cloud Billing budget, on its own, does not stop anything. Google own description of Budget.thresholdRules is that they are rules that trigger alerts, meaning notifications of thresholds being crossed, when spend exceeds the specified percentages. The attached NotificationsRule has five properties and every one of them is a delivery channel: a Pub/Sub topic, monitoring notification channels, default IAM recipients, project-level recipients and a schema version. There is no deny action, no stop action and no enforcement field anywhere in the object.

So the generic Google Cloud budget is an alarm. What Google added in August was a specific enforcement behavior on top of it for Gemini Enterprise overage, which is a genuine improvement and is worth paying for. It is also, by construction, an enforcement behavior wearing a budget scope, which is why it lands at the project and cannot land on an agent.

What the cap protects and what it leaves open

Be precise about the boundary, because getting this wrong in either direction costs money. The Gemini Enterprise cap protects what you owe Google: token, memory, compute and storage consumption beyond your pooled quota, across the Gemini Enterprise app, the Gemini Enterprise Agent Platform and AI coding tools such as Antigravity. Within that scope it works, and it is the best-behaved control of its kind we have measured.

Two things sit outside it.

The first is everything the agent buys. An agent that has a tool wired to a supplier portal, a payables system, an ads platform, a metered vendor API or a checkout can move real dollars, and none of it touches a Google meter. Google charges you a fraction of a cent for the inference that decided to place the order. The order itself is somebody else invoice. A project spend limit filtered to aiplatform.googleapis.com cannot see it, and no amount of tuning the cap will make it see it, because the spend never enters Google Cloud billing in the first place.

The second is which agent, which follows from the nine filter dimensions. Without an identity dimension there is no per-agent allowance, no per-team allowance, no counterparty rule and no approval threshold. Google can tell you that the project has spent 80 percent of its budget. It cannot tell the budget to care that one particular agent is responsible for most of it, and it cannot hold a single expensive action for a human while letting the cheap ones through.

The failure mode nobody plans for: the agent stops mid-task

A hard cap has a failure mode, and it is worth walking into the rollout meeting with this one already understood, because it is the practical cost of choosing enforcement over alerting.

When the ceiling is reached, Google words are that the agent API calls temporarily pause, and end users see a Usage limit reached error in the Gemini Enterprise app. Nothing is rolled back and nothing is queued. An agent halfway through a multi-step task simply stops in the middle of it, which is an inconvenience for a research agent and something worse for an agent that had already committed to the first half of a workflow. Google went out of its way in the August announcement to say the pause protects your budget without affecting the rest of your production infrastructure, which is true and is also the point: the blast radius is your agents, all of them, at once.

There is also a documented accuracy caveat that belongs in any forecast. Google states that because stopping usage can take a few minutes to take effect, you might incur charges that exceed your limit. The cap is a fast brake rather than an exact one. For a workload measured in tokens per second, a few minutes of continued spend past a ceiling is not a rounding error.

The alert side is more conventional. Automated email alerts arrive at 50, 80 and 100 percent of the budget. That is a sensible cadence for a human watching a monthly trend and an unhelpful one for an agent that can burn a month of tokens in an afternoon, which is the same mismatch we found in Salesforce Digital Wallet and in AWS session limits.

Where a spend policy layer fits on top of Gemini Enterprise

None of this is an argument against Gemini Enterprise, and there is nothing here to compete with. Google owns the model, the enterprise data grounding, the connectors, the agent runtime and the identity model, and it now owns a working consumption ceiling as well. The layer the schema shows is empty is the one in front of the money: the decision about whether a particular payment, at this amount, to this counterparty, at this point in the month, is allowed to happen at all.

That is what agent spend controls do. You keep Gemini Enterprise as the platform and keep the project cap doing its job on your Google bill, and you put a policy between your agents and your money: a budget that aggregates across a day, a week and a month per agent rather than per project, a merchant-locked virtual card so an agent authorized to renew one vendor cannot pay a different one, an approval threshold that holds a payment for a named human above an amount you choose, a velocity rule for the looping-agent case, and an audit trail that reconciles to your books in dollars rather than in tokens. Because the policy layer is rail neutral it does not care whether the agent pays by card, through an ACP checkout, under an AP2 mandate or over x402.

The test for whether you need one is short and honest. If your Gemini Enterprise agents only search your corpus, summarize documents and draft replies, you do not need anything beyond the project cap, and you should stop reading here. If any agent has a tool that can cause money to move outside Google Cloud, you are currently relying on a ceiling that was designed to size an infrastructure bill.

How Gemini Enterprise compares with the other agent control planes

Five vendors, five published schemas, one pattern, and Google comes out of it best. We have now measured the models behind the major agent control planes shipped in 2026 using the same method each time, and the results are consistent enough to be useful as a buying frame.

Microsoft Agent 365 is agent-aware right down to the conditional access vocabulary and expresses no monetary amount anywhere near an agent: 48 agent-governance types, 623 properties, zero money. Salesforce Agentforce documents 178 money objects and 41 agent objects in 1,757 standard objects, with an intersection of zero, and Digital Wallet alerts rather than refuses. AWS AgentCore shipped a genuine number, one optional per-session USD amount on a session that lives at most eight hours, with no cumulative total in the model, so every new session restarts at the full maximum. The payment MCP servers hand a model write access to live payment APIs with no ceiling at all. Since then we added a sixth: ServiceNow AI Control Tower, whose SDK writes 84 agent columns with no amount among them and whose only dollar limit belongs to a human approver.

Google is the only one of the five with a cap that actually refuses work, and that is a real advantage worth weighing when you choose a platform. It is also scoped to a billing container rather than to an actor, which is the same line every other vendor drew, arrived at from a different direction. Five independent engineering organizations, with different architectures and different commercial incentives, all govern identity, access and capability and all decline to govern the amount a specific agent may commit to a specific counterparty. That is a defensible line. It is also a line, which means something has to sit on the other side of it. For the wider category, AI agent governance covers the control frameworks in general, and AI agent payment platforms compares the vendors who do this specific job.

Whatever standard moves the money, Agentspay is the rail-neutral control plane that keeps it governed. See how it works and the control surfaces that enforce policy, approvals, and audit on every transaction.

Pricing

Gemini Enterprise pricing, read from the Google Cloud page on 16 September 2026

US list. Google publishes two seat prices and one zero. Consumption is billed separately on top of every edition.

Edition Published price Pooled storage and indexing Who it is sold to
Business Starting at 21 USD per seat per month 25 GiB per seat Small businesses and teams, up to 300 seats
Standard / Plus Starting at 30 USD per seat per month 30 GiB (Standard), 75 GiB (Plus) Organizations needing enterprise IT controls
Pay-as-you-go 0 USD seat fee No pooled quota, all usage billed Organizations with 20+ seats, rolling out gradually
Frontline Not published 2 GiB Deskless staff, 150 seat minimum
Flexible Savings Plan 10% off tokens (1 year), 20% off (3 years) Not applicable Steady or growing workloads, no minimum or maximum

Measured

Google published API models, measured 16 September 2026

Discovery Engine is the API behind Gemini Enterprise and Agentspace. Cloud Billing Budgets is the positive control and also, it turns out, where the cap lives.

API model Size and revision Schemas / properties Money-vocabulary hits
Discovery Engine v1alpha 2,323,112 bytes, rev 20260914 1,053 / 3,516 37 total, 0 on any agent schema
Discovery Engine v1 2,049,833 bytes, rev 20260915 990 / 3,442 37 total, 0 on any agent schema
Vertex AI Platform v1 3,867,717 bytes, rev 20260904 1,484 / 4,692 19 total, 0 on any agent schema
CONTROL: Cloud Billing Budgets v1 32,956 bytes, rev 20260906 11 / 36 9 of 36, a 25% hit rate

The scope problem

Every dimension a Gemini Enterprise spend cap can be scoped to

The cap is a Cloud Billing budget. These nine properties are the complete contents of its Filter object.

Filter dimension What it scopes to Can it identify an agent
projects A set of Google Cloud projects No, every agent in the project shares it
services A set of services, e.g. aiplatform.googleapis.com No, this is the product not the actor
labels One label and value pair on resources No, a label tags infrastructure not an actor
resourceAncestors Folders and organizations No, this is coarser than a project
subaccounts Billing subaccounts No, this is coarser than a project
creditTypes and creditTypesTreatment Which credits count toward spend No, this is accounting treatment
calendarPeriod and customPeriod Month, quarter, year or a fixed date range No, this is a time window
An agent, user or counterparty Does not exist There is no such property

Side by side

What the Gemini Enterprise cap governs and what a spend policy layer adds

An honest split. Google owns the platform, the data grounding and the consumption ceiling, and we do not compete on any of it.

Control Gemini Enterprise A spend policy layer
Hard monthly ceiling on Google consumption Yes, and it genuinely stops usage Not its job
Scope of that ceiling The whole project, indivisibly Per agent, per team, per counterparty
Budget that aggregates across a month Yes, on the Google bill only Yes, on what the agent actually spends
Ceiling on what the agent buys elsewhere No, the spend never reaches Google billing Yes, that is the entire purpose
Counterparty or merchant rule No such property in the Filter object Allow list, deny list, merchant lock
Approval threshold above an amount No, the cap is all or nothing Holds the payment for a named human
Velocity rule for a looping agent No, a TPM threshold is a rate not an amount Yes, per agent and per window
Which agent caused the spend Not expressible, no identity dimension Per-agent attribution in dollars
Behavior at the limit Every agent in the project pauses at once Only the offending action is refused
Agent identity, access and tool scope Yes, authorizationConfig and sharingConfig Not its job, we defer to Google

Frequently asked

Questions people ask about Gemini Enterprise

What is Gemini Enterprise?

Gemini Enterprise is Google enterprise AI agent platform. It connects to your company data sources, indexes them, and lets staff search, ask questions and run agents against that corpus, with agents built either through Google own builder, the Agent Development Kit, Dialogflow or the A2A protocol. It is the product previously sold as Google Agentspace, renamed on 9 October 2025.

Is Google Agentspace the same as Gemini Enterprise?

Yes. Google renamed Agentspace to Gemini Enterprise on 9 October 2025 and stopped selling Agentspace at the end of that year, moving existing customers across at contract renewal. The underlying API is still named Discovery Engine, which is why Agentspace terminology survives in the documentation and in the schema. If you are comparing Agentspace pricing, you are comparing Gemini Enterprise pricing.

How much does Gemini Enterprise cost?

Google publishes Business at starting at 21 USD per seat per month and Standard and Plus together at starting at 30 USD per seat per month, both read from the Google Cloud page on 16 September 2026. A pay-as-you-go edition for organizations with 20 or more seats carries a 0 dollar seat fee and bills tokens, memory, compute and storage at standard rates. Consumption beyond your pooled quota is billed on top of every seat edition.

Does Gemini Enterprise have spending limits?

Yes, and unusually for this category they are enforced rather than advisory. Since 26 August 2026 an administrator can set a hard monthly spend limit, and Google states that when the project reaches it, overage usage is automatically stopped and agent API calls pause. The limit is set through Cloud Billing with the Vertex AI service selected, and it is scoped to a project.

Can you set a budget per agent in Gemini Enterprise?

No. The cap is a Cloud Billing budget, and the budget Filter object exposes nine dimensions: projects, services, labels, resource ancestors, subaccounts, credit types, credit types treatment, calendar period and custom period. None of them identifies a user or an agent. We measured this in the published API model on 16 September 2026. One cap therefore covers every agent in the project and cannot distinguish between them.

What happens when Gemini Enterprise hits its spend limit?

Overage usage stops and agent API calls pause. End users see a Usage limit reached message in the Gemini Enterprise app. Nothing is queued or rolled back, so an agent partway through a multi-step task stops in the middle of it, and because the cap is project-scoped, every agent in that project stops at the same moment. Google also warns that stopping can take a few minutes, so you may incur charges past the limit.

What are Gemini Enterprise overages?

Each seat edition includes a pooled quota shared across all users in the project. When that quota is exhausted, feature usage stops unless an administrator turns overages on, which lets users continue at pay-as-you-go rates. Overages are supported on Standard, Plus and Standard Emerging Market editions. The pay-as-you-go edition has no pooled quota, so the concept does not apply to it.

What is pooled quota in Gemini Enterprise?

Pooled quota is storage and data indexing allocated per seat but shared across everyone in the project rather than reserved per person. Business includes 25 GiB per seat, Standard 30 GiB, Plus 75 GiB and Frontline 2 GiB. Pooling means a handful of heavy users can consume the allowance bought for the whole company, which is usually what pushes an organization into overages first.

Does a Google Cloud budget stop spending?

On its own, no. Google describes budget threshold rules as rules that trigger alerts, meaning notifications of thresholds being crossed, and the attached notifications rule contains only delivery channels: a Pub/Sub topic, monitoring channels and email recipients. There is no deny or stop field in the object. The enforcement behavior in Gemini Enterprise is a specific addition layered on top of that budget for overage usage.

Can a Gemini Enterprise agent spend real money?

Yes, and the project cap does not see it. An agent with a tool wired to a supplier portal, a payables system, an ads platform, a metered vendor API or a checkout can move real dollars, and that spend never enters Google Cloud billing. Google charges a fraction of a cent for the inference that made the decision. The purchase itself arrives on a different invoice entirely.

What is the Gemini Enterprise Flexible Savings Plan?

It is a spend commitment that discounts token costs. Committing to a monthly spend for one year takes 10 percent off token prices and a three-year term takes 20 percent, with no minimum and no maximum spend required. It changes the unit price rather than the ceiling, so it makes an unbounded meter cheaper without making it bounded. Set the cap separately.

Does Gemini Enterprise limit how fast an agent can spend?

Not in money terms. The only threshold anywhere near an agent in the published schema is effectiveTpmThreshold, a tokens-per-minute ceiling on the agent search subscription, and it is an output-only field describing your subscription rather than a policy you set per agent. It bounds throughput, not amount, and it has no view of anything an agent buys outside Google.

Does Google give agents access to a marketplace?

Yes, and it is worth understanding which direction that runs. An agent defined through the A2A protocol carries a Cloud Marketplace configuration with a required entitlement and an output-only order, which represent you purchasing that agent from Google Cloud Marketplace. There is no corresponding object anywhere in the model for the agent purchasing something on your behalf.

Do I need a spend policy layer if I use Gemini Enterprise?

It depends what your agents can touch. If they only search your corpus, summarize documents and draft replies, the project cap is proportionate and you need nothing else. If any agent holds a tool that can cause money to move outside Google Cloud, you need a per-agent budget that aggregates, a counterparty rule and an approval threshold, and the published schema shows Google has nowhere to store any of the three.

Keep reading

More explainers

ServiceNow AI Control Tower

ServiceNow AI Control Tower

ServiceNow AI Control Tower is the most complete agent inventory and risk console a large US enterprise can buy, and it now reaches across AWS, Google Cloud and Azure. We read the schema ServiceNow ships to developers to answer the one question the rollout meeting always ends on: can it stop an agent from spending money? It cannot, and the reason is written into the data model.

Read

Salesforce Agentforce

Salesforce Agentforce

Agentforce is the largest agent platform any US enterprise is likely to already own, and it moved to consumption billing, which means the meter now runs on what your agents do rather than on how many seats you bought. That raises a finance question the rollout deck rarely answers: when an Agentforce agent is loose in production, what actually stops it spending. We went and measured the answer in Salesforce own published object model rather than guessing at it.

Read

AWS AgentCore

AWS AgentCore

Amazon shipped the missing piece in August 2026. Bedrock AgentCore Payments went generally available, and it is a real payments product: an agent can now hold a wallet, meet an HTTP 402, pay, and carry on reasoning without a human in the loop. So the question a platform lead has to answer stopped being whether AWS gives agents money and became a narrower, more awkward one: how much of a spend policy did AWS actually ship? We went and measured it, property by property, in the API model AWS publishes.

Read

Microsoft Agent 365

Microsoft Agent 365

Microsoft shipped a control plane for AI agents, and it is a good one. It gives every agent an identity, a registry entry, an owner, a sponsor and a Conditional Access policy. Then somebody in finance asks the obvious follow-up question: fine, but what stops the agent from spending money? This page answers what Agent 365 costs, what it governs, and what we measured when we went looking for a dollar amount anywhere in Microsoft's agent governance surface.

Read

QuickBooks MCP Server

QuickBooks MCP server

Connecting an accounting system to an AI assistant is now a ten minute job. Deciding what that assistant is allowed to do once it is connected is the part nobody writes about, and it is the part your controller will ask about first. This page compares what the official QuickBooks, NetSuite and Xero MCP servers actually hand a model, measured rather than summarized from marketing pages.

Read

Payment MCP Servers

payment MCP servers

Every large payment company shipped an MCP server in the last eighteen months, and almost every write-up of them is a setup tutorial. The setup is the easy part. The question worth answering before you connect one to a production account is narrower and much less comfortable: what, exactly, can the model on the other end of that connection do to your money?

Read

PayPal Agentic Commerce

PayPal Agentic Commerce

PayPal made a bet that most merchants would rather not implement a commerce protocol at all. Where Stripe and OpenAI shipped a spec for you to build against, PayPal shipped two products that sit on top of the checkout you already have, and then bought a company to make the catalog half work. That choice is the whole story: it explains why Agent Ready needs almost no engineering from you, why there is nothing for an agent to discover about your store on the open web, and why the thing PayPal will not do for you is the thing that gets expensive later.

Read

Shopify Agentic Commerce

Shopify Agentic Commerce

Shopify switched agentic commerce on by default, so your store is probably already selling to AI assistants whether or not anyone on your team configured it. Instead of restating the announcement, we checked something you can check too: on September 2, 2026 we requested the machine-readable capability file that Shopify publishes for real storefronts, on fourteen well-known US brand domains, and read what it exposes to an agent. Eleven answered correctly. The three that did not share one trait, and it is quietly costing them agent traffic.

Read

Web Bot Auth

Web Bot Auth

Web Bot Auth is the reason your agent either gets served or gets throttled with the scrapers. Almost everything written about it repeats the same architecture diagram, so we did something different: on September 1, 2026 we fetched the published key directories of more than twenty major AI operators and infrastructure vendors to see who is genuinely signing their traffic. Four were. The results are in the first table.

Read

Tempo Blockchain

the Tempo blockchain

Tempo is the payments chain Stripe and Paradigm built, and it shipped with a protocol that lets software pay for things on its own. It settles machine payments in under a second. It has nothing at all to say about whether your agent should have paid.

Read

AI Agent Governance

AI agent governance

Every agentic AI governance framework published so far governs the same four things: identity, tools, data and prompts. Not one of them carries a budget. Here is what the real frameworks say, which guardrails actually bind at runtime, and what to do about the last mile none of them reach.

Read

A2A Protocol

A2A Protocol

Most explanations of the A2A protocol stop at the sentence that agents can now talk to each other. That was true in April 2025 and it is no longer the interesting part. A2A shipped version 1.0 in April 2026 under Linux Foundation governance, it runs in production inside Azure AI Foundry and Amazon Bedrock AgentCore, and the questions engineers actually get stuck on are narrower: what an Agent Card commits you to, when to reach for MCP instead, and what happens the first time one of your agents has to pay another one for the work. That last question has a specific answer, and it is not in the core spec.

Read

Mastercard Agent Pay

Mastercard Agent Pay

Nearly every article about Mastercard Agent Pay is a retelling of one press release from April 2025, the one where Mastercard said AI agents would be able to shop with Agentic Tokens and named Microsoft as the first platform. That was sixteen months ago, and four more things have shipped since. Reading only the launch coverage leaves you with roughly a quarter of the picture, and the missing three quarters are the parts that decide whether you can actually put this into production.

Read

Visa Intelligent Commerce

Visa Intelligent Commerce

Almost everything written about Visa Intelligent Commerce is a retelling of the April 2025 announcement, when Visa said AI agents would be able to pay with a Visa credential. Three more things have shipped since, including an open agent-identity protocol built with Cloudflare that most coverage does not mention at all. This page is the current version, checked against Visa’s own developer documentation and newsroom in August 2026.

Read

Stripe agentic commerce

Stripe agentic commerce

Most writing about Stripe and agentic commerce is still a retelling of the September 2025 launch week, when Stripe and OpenAI shipped Instant Checkout and published the Agentic Commerce Protocol together. Stripe has built a good deal more since then, and some of it points in a direction the launch coverage never anticipated. This page is the current version, checked against Stripe’s own documentation in August 2026.

Read

ChatGPT Instant Checkout

ChatGPT Instant Checkout

Almost every guide to ChatGPT Instant Checkout still reads like it was written the week it launched, walking merchants through how to apply and what the fee will be. OpenAI changed course in March 2026. Here is the accurate version: what Instant Checkout was, what the numbers actually looked like, what replaced it, and which parts of the stack are still very much alive.

Read

Google AP2

Google AP2

Most guides to Google AP2 still describe an Intent Mandate and a Cart Mandate, because most of them are rewrites of the September 2025 launch post. The specification moved. Here is what the Agent Payments Protocol actually defines today, and the one question it deliberately does not answer.

Read

Human in the loop AI

Human in the Loop AI

Every guide to human in the loop AI describes the same shape: the agent pauses, a person decides, the agent continues. The shape is right. What almost none of them ask is a harder question, which is where the pause is enforced, because a pause written into the agent's own code is a pause the agent is trusted to honor.

Read

AI agent cost

AI Agent Cost

Every cost guide for AI agents answers the same two questions: what does it cost to build, and what does it cost to run. Both are answerable, and both are on somebody's invoice. The third question is the one that ends up in a variance report, because the agent also spends your money, and nobody sends you a bill for that.

Read

Agentic checkout

Agentic Checkout

Nearly every guide to agentic checkout is written for the merchant who wants to receive these orders. Far fewer are written for the company whose agents are placing them, which is odd, because agentic checkout quietly removes the one screen where spending used to get a second look.

Read

API monetization

API Monetization

Most guides to API monetization argue about which pricing model wins. The harder question in 2026 is who is calling. An API priced for a signed-up developer with a key behaves very differently when the caller is an agent that showed up once, wants one record, and has no account.

Read

x402 protocol

x402 Protocol

x402 took the one HTTP status code the web never used and turned it into a payment rail machines can drive. The protocol is elegant and genuinely small. The part it deliberately leaves to you is the budget.

Read

AI procurement agents

AI Procurement Agents

Every major procurement suite shipped agents during 2026. Almost none of them answer the question your controller will ask first, which is what happens when the agent is wrong about a purchase and the money has already moved.

Read

Agentic payments

Agentic Payments

Agentic payments move money with no human at the checkout. The rails to do it all shipped during 2026. The part most teams have not solved is deciding, before the money moves, whether the agent was allowed to spend it.

Read

AI agent monetization

AI Agent Monetization

Every AI agent company is rewriting its price list. The models that survive are metered. The ones that quietly fail are the ones where nobody measured what a single task costs to serve.

Read

Agent payment platforms

AI Agent Payment Platforms

Five different kinds of product now call themselves an AI agent payment platform, and they solve five different problems. Picking the wrong category is the expensive mistake, not picking the wrong vendor inside a category.

Read

Universal Commerce Protocol

the Universal Commerce Protocol (UCP)

Google and Shopify shipped UCP as an open standard so an AI agent can check out at any merchant that supports it. Here is what the specification actually defines, where it is live for US buyers, and the one thing it deliberately leaves to you.

Read

MCP Payments

MCP Payments

MCP payments are how an AI agent discovers a payment tool and calls it to move money. The catch: the Model Context Protocol carries the tool call, not the spending decision, so nothing in the stack asks whether the purchase should have happened.

Read

Visa Intelligent Commerce vs Mastercard Agent Pay

Visa Intelligent Commerce vs Mastercard Agent Pay

Visa Intelligent Commerce and Mastercard Agent Pay are the two big card networks racing to let AI agents pay. They take different routes to the same idea, and neither one decides whether a given purchase should have happened.

Read

Agentic Commerce Protocol

the Agentic Commerce Protocol

ACP is the open standard behind agentic checkout in ChatGPT. It tells a merchant how to sell to an AI agent. It says nothing about whether your agent should have made the purchase.

Read

AP2 vs ACP vs x402

AP2 vs ACP vs x402

AP2, ACP, and x402 are the three standards shaping how AI agents pay. They solve different layers of the problem, and most real systems will touch more than one.

Read

Machine payments protocol

Machine payments protocol

As software starts paying software, machine payments protocols define how value moves without a human at the keyboard. The harder question is how to keep that spending governed.

Read

Know Your Agent (KYA)

Know Your Agent

KYA, or Know Your Agent, extends the idea of customer due diligence to autonomous software. When an agent spends, you need to know which agent, on whose authority, and under what limits.

Read

Keep agent spending governed

Add policy, hard limits, human approval, and an immutable audit trail across any protocol or rail. Start in the sandbox today.

Never moves money without policy