When Copilot Cowork Agents Need to Pay for Things

#microsoft #githubcopilot #ai #payments

Microsoft just launched Copilot Cowork - and it changes what enterprise agents can do. You delegate a task, Cowork breaks it into subtasks, farms them out to specialized agents, and delivers results. It's agent orchestration inside M365, powered by Anthropic's Claude, with MCP as the integration protocol.

There's one problem nobody at Microsoft addressed during the announcement: what happens when one of those agents needs to buy something?

The Gap in Enterprise Agent Infrastructure

Cowork can pull data from your emails, meetings, files, and connected apps. It can delegate to third-party agents from Adobe, Monday.com, Figma. It can chain multi-step workflows.

But it can't pay. If a Cowork agent needs to hit a premium API, license a dataset, or commission work from an external agent - there's no payment rail. The agent just... stops. Or asks a human to handle it. Which defeats the point of delegation.

This is the gap we've been building for.

ClawPay + agentwallet-sdk: Payment Rails for Enterprise Agents

agentwallet-sdk (v5.0.2 on npm) gives agents non-custodial USDC wallets with hard spending limits. ClawPay is the payment orchestration layer on top - it handles invoicing, receipt verification, and compliance logging for enterprise deployments.

Here's what the integration looks like for a Cowork-style workflow:

import { AgentWallet } from 'agentwallet-sdk';

// Enterprise agent with strict spending policy
const agent = await AgentWallet.create({
  chain: 'base',
  spendingPolicy: {
    maxPerTransaction: '25.00',
    dailyLimit: '200.00',
    allowedRecipients: ['0x...approved-vendor-1', '0x...approved-vendor-2'],
    requireApproval: { above: '100.00', approver: 'finance-agent' }
  }
});

// Agent autonomously pays for premium data
const report = await agent.fetch('https://api.market-data.com/enterprise/full-report');

The spending policy is the key piece for enterprise adoption. Finance teams aren't going to sign off on autonomous agents with unlimited spend authority. agentwallet-sdk enforces per-transaction limits, daily caps, approved vendor lists, and escalation thresholds - all at the wallet level.

Why MCP Makes This Work

Cowork uses MCP (Model Context Protocol) for agent-to-agent communication. agentwallet-sdk already speaks MCP through our agentwallet-sdk-mcp server. That means a Cowork agent can discover payment capabilities through standard MCP tool discovery, request a payment through the MCP interface, and get back a signed receipt - all without custom integration code.

The flow: Cowork agent receives a task that requires paid data. It discovers the payment tool via MCP. It calls the tool with the amount and recipient. agentwallet-sdk checks the spending policy, executes the USDC transfer on Base, and returns a receipt. The Cowork agent includes the receipt in its API call and gets the data.

No human intervention. No procurement process. No P.O. number. Just an agent paying for what it needs within pre-approved limits.

Enterprise Controls That Actually Matter

For Cowork adoption in regulated industries, you need:

Audit trails - every transaction logged on-chain with metadata linking back to the originating task
Approval workflows - transactions above threshold escalate to a finance agent or human approver
Vendor allowlists - agents can only pay pre-approved addresses
Budget isolation - each department or project gets its own wallet with its own limits
Compliance exports - transaction history in formats that auditors understand

ClawPay handles all of this on top of agentwallet-sdk. It's the layer that makes "agents with wallets" acceptable to a CISO.

The Timing

Microsoft announced Cowork yesterday. Stripe shipped x402 on Base last month. Coinbase's CEO said agents will outnumber humans in transactions. The infrastructure pieces are converging.

Enterprise agents will need to pay for things. The only question is whether those payments run on traditional rails (slow, permission-heavy, human-gated) or on crypto rails (instant, programmable, agent-native).

We're betting on crypto rails. The SDK is agentwallet-sdk on npm. Open-source, MIT licensed. Build the payment layer your Cowork agents are going to need.