Originally published on The Searchless Journal
You're working in Claude, debugging a deployment. A message appears in the agent window: an ad for a cloud hosting service. You click through. Later, a notification arrives: you earned $0.03 from that click.
This isn't hallucination. It's Kickbacks, a startup quietly building the first ad network for AI agents — and it's already paying users.
Kickbacks, founded by Andrew McCalip, injects advertisements into the execution windows of Claude, Codex, and other AI coding tools. Users who install the browser extension see sponsored prompts interleaved with their AI agent workflows. When they click, they split the revenue 50/50 with Kickbacks.
The numbers are small but real. Average users earn $25 per month; the top 10% clear $75. The product has 25,000 downloads and 5,000-10,000 daily active users, with hundreds to thousands joining daily. A new beta version adds opt-in data collection for prompt-based ad targeting, delivering 5x higher CPMs.
"This will be one of the most highly monetized surface areas in the entire world," McCalip told AdExchanger in a detailed interview. "Users stare at agent windows 4 to 12 hours per day. The impression time is just outrageous."
The story here isn't just about a clever extension. It's about the emergence of an entirely new advertising surface — the agent execution layer — and the consequences when third parties monetize what AI labs cannot or will not do themselves.
The Labs' Ad Dilemma
OpenAI and Anthropic are not launching ad networks. The backlash would be immediate and severe. Imagine paying for ChatGPT Plus and seeing sponsored prompts injected into your conversations. The same subscription that promises "unrestricted access" suddenly becomes a vehicle for commercial interruption. Users would revolt.
But ad revenue is too valuable to ignore forever. ChatGPT has 200 million weekly active users. Claude is the fastest-growing AI assistant among developers. Codex powers millions of coding workflows. These platforms are the new search engines, the new browsers, the new operating interfaces. Advertisers will follow the attention.
The labs are caught in a bind. If they serve ads themselves, they risk alienating users who trust them as productivity tools, not ad-supported services. If they ignore the opportunity, they cede billions in revenue to intermediaries who don't care about brand perception.
Kickbacks is that intermediary. It's a Robin Hood story — users get paid instead of platforms — but it's also a Trojan horse. By normalizing ads inside AI agents, Kickbacks establishes a precedent: agent execution windows are ad inventory. Once that door opens, the labs can't credibly claim they're different.
How It Works: Ad Injection Meets Agent Workflows
Kickbacks operates as a browser extension. When you use Claude or Codex in your browser, the extension monitors the agent conversation. At strategic moments — typically after a task completes or during natural pauses — it inserts a sponsored message into the execution stream.
The ad looks like any other agent response, but it's marked with subtle styling and a disclosure. If you click, you go to the advertiser's site. Kickbacks tracks the conversion, splits the revenue with you, and credits your account. You can withdraw once you hit a minimum threshold.
The targeting is basic but effective. The current version uses contextual signals from your conversation — if you're debugging Python, you might see an ad for a Python monitoring service. The new beta, currently in testing, goes further by analyzing the semantic content of your prompts. McCalip says this version delivers 5x higher CPMs because advertisers can target specific workflows and pain points.
Fraud detection is a core challenge. Bots don't have human circadian rhythms. They generate bursts of activity at odd hours, never take meal breaks, and click relentlessly on every ad. Kickbacks's system flags these patterns and blocks suspected bot traffic. The company also uses browser fingerprinting and behavior analysis to distinguish humans from scripts.
Legally, Kickbacks operates in a gray area. McCalip says lawyers reviewed the code and concluded that injecting ads into browser-rendered content doesn't violate OpenAI or Anthropic terms of service. The extension modifies what users see in their own browsers; it doesn't scrape, copy, or redistribute proprietary content.
Whether the labs agree is an open question. OpenAI's Terms of Use prohibit "interfering with or disrupting the Service." Anthropic's Acceptable Use Policy bars "circumvention of technical measures." A stretched reading could cover ad injection. But enforcement is difficult. Kickbacks is client-side, not server-side. The labs can't easily block it without breaking legitimate browser extensions.
The Economics: Why Agent Windows Matter
The advertising industry shifts inventory toward attention. Wherever humans spend time, advertisers follow. Agent execution windows represent a new and potentially valuable class of inventory.
Consider the engagement profile. Traditional web users bounce between sites, spending seconds on each page. Agent users stay in a single window for hours, collaborating with an AI on complex tasks. They read, think, write, and debug without leaving the interface. The dwell time is orders of magnitude higher than the average website visit.
McCalip's claim about 4-12 hours of daily engagement is plausible. Developers who use Claude or Codex for work often keep them open all day. The agent becomes part of their workflow, integrated into their IDEs, terminals, and documentation. It's not a tool they visit occasionally; it's where they live.
From an advertiser's perspective, this is valuable inventory. You're reaching engaged, attentive users at moments when they're actively thinking about technical problems. A cloud hosting ad appearing while someone debugs a deployment error is contextually relevant. A monitoring tool ad during an outage investigation is timely. The conversion potential is real.
The revenue splits are also unusual. Most ad networks pay publishers 60-80% of revenue; users get nothing. Kickbacks flips this by paying users directly and keeping 50% for itself. This model aligns incentives: users want more ads because they earn more, and advertisers get better targeting because users opt into data sharing.
The question is whether CPMs can support this split. Current Kickbacks users earn $25-75 per month, suggesting CPMs in the $2-5 range for basic targeting. The new beta's 5x uplift implies $10-25 CPMs for prompt-based targeting, which is competitive with programmatic benchmarks for high-intent inventory.
But the real upside is scale. If Kickbacks grows to 100,000 or 1 million users, the network effects accelerate. More users mean more data for better targeting, which attracts more advertisers, which increases revenue per user. The flywheel is visible in the company's growth numbers: hundreds to thousands of new users joining daily.
The Third-Party Pattern: Mobile, Then Browsers, Now Agents
This is a familiar playbook. Mobile ads were pioneered by third-party ad networks before Apple and Google launched their own platforms. Google AdMob launched in 2006, three years before Apple's iAd. Browsers saw a similar pattern: third-party extensions injected ads into web pages before native ad blocking became mainstream.
The pattern is predictable: a new platform emerges with no monetization infrastructure. Third parties build ad technology on top of it. Users install tools because they get paid or receive some other benefit. Advertisers follow the inventory. The platform owner initially tolerates or ignores the activity. Then the platform either copies the technology (often with better integration) or cracks down on violations.
Kickbacks is exactly at this stage. It's the "wild west" moment for agent advertising. The labs haven't publicly commented on it, and there's no sign of enforcement. This ambiguity allows the product to grow and test assumptions about user behavior, advertiser demand, and pricing economics.
But the labs aren't sitting still. OpenAI is reportedly building an ad platform for ChatGPT. Anthropic has explored monetization options for enterprise features. Both companies see the revenue opportunity. They're just waiting for the right moment — likely when they have enough scale and user trust that ad revenue becomes attractive but not alienating.
Kickbacks accelerates that timeline. By normalizing ads in agent windows, it proves the concept works. It shows that users will tolerate (and even benefit from) ads in AI workflows. It demonstrates that advertisers will pay for agent inventory. It collects data on what kinds of ads convert and when. When the labs eventually launch their own ad networks, they'll be building on market validation provided by Kickbacks.
The Strategic Question: Agent Presence, Not Just Citations
The broader implication for brands is that AI visibility is about to become more complex. Until now, the conversation has focused on citations: how do you get ChatGPT, Perplexity, and Claude to mention your brand in their answers? That's still important. But Kickbacks introduces a new category: agent-presence.
Agent-presence means your brand appears inside AI workflows through advertising, sponsored content, or paid placement. It's not about being cited as a trusted source; it's about paying to be inserted directly into the agent's execution stream.
This shifts the economics of AI discovery. Citations are earned through content quality, entity authority, and structured data. Agent-presence is bought through ad spend, targeting parameters, and revenue-share deals. They represent two different acquisition channels with different metrics and ROI expectations.
For some brands, agent-presence will be more valuable than citations. A cloud hosting provider might get more value from a paid ad appearing during a deployment debugging session than from being mentioned in a general AI answer about "best cloud platforms." The former reaches users at a moment of active need; the latter reaches users in passive discovery mode.
The challenge is measurement. Citation tracking is hard enough. Agent-presence tracking is even harder. Kickbacks offers basic analytics — clicks, conversions, revenue share — but brands will want more: cost-per-acquisition, lifetime value, attribution across touchpoints, competitive intelligence on who's bidding on what prompts.
This is where Searchless's AI visibility audit becomes relevant. As agent advertising grows, brands need to understand both their citation performance (earned visibility) and their agent-presence opportunities (paid visibility). The audit framework will expand to track both, giving brands a complete picture of how they appear in AI workflows.
The User Experience: Productivity Tool or Adware?
Kickbacks faces a perception problem. To some users, it's a clever way to monetize their AI usage. To others, it's adware that degrades the AI assistant experience. The line between helpful integration and intrusive advertising is thin.
The beta's prompt-based targeting makes this worse. If you're chatting with Claude about a medical condition and see an ad for a treatment, it feels invasive. If you're debugging a database query and see an ad for a managed database service, it feels relevant. The difference is context and consent.
Kickbacks addresses this with an opt-in model for the new beta. Users can choose whether to share their prompts for ad targeting. This is smart compliance — GDPR and CCPA require explicit consent for using personal data for advertising. It's also good UX: users who don't want targeted ads can still earn revenue from untargeted ones.
But the fundamental tension remains. AI assistants promise to be helpful, unbiased, and focused on the user's goals. Advertising is inherently biased toward the advertiser's goals. Injecting ads into an AI workflow forces the AI to serve two masters: the user and the advertiser.
This isn't a new problem. Google Search has wrestled with it for two decades. The difference is that Google shows ads at the top of results, clearly labeled as "Sponsored." Kickbacks inserts ads into the middle of a conversation, blurring the line between organic AI responses and paid placements.
The labs will likely insist on stricter labeling if they ever launch their own ad networks. OpenAI and Anthropic have brands to protect; they can't afford accusations of deception. Kickbacks, as a third-party extension, has less at stake. But if the company grows large enough, it will attract regulatory scrutiny. The FTC's guidelines on native advertising are clear: paid placements must be conspicuously disclosed. Kickbacks appears to comply, but enforcement is inevitable.
The Competitive Landscape: Kickbacks, Cursor, and the Agent OS
Kickbacks isn't alone in targeting the agent layer. Cursor, the AI-native code editor, has integrated AI directly into the editing workflow. Other tools are building agent interfaces for specific verticals: legal research, medical diagnosis, financial analysis. All of these are potential ad surfaces.
The difference is integration. Kickbacks is a browser extension; it works across multiple platforms but lacks deep integration with any one. Cursor has native access to the editor context; it could deliver ads tied to specific files, functions, or errors. A legal research agent could inject ads for case law databases during document review. A medical diagnosis agent could promote clinical trials during differential diagnosis.
This fragmentation creates a complex ad-buying landscape. Advertisers won't want to manage separate campaigns across dozens of agent platforms. They'll want unified reporting, consistent targeting, and centralized billing. Consolidation is inevitable: either an agent ad network (like Kickbacks) becomes the standard, or the platforms themselves build native ad systems that cross-sell inventory.
Kickbacks is betting on the former. By being first to market and focusing on the popular platforms (Claude, Codex, Claw Code), it aims to establish network effects and become the default agent ad network. Cursor support is coming next. If it can expand to other agent platforms before the labs launch their own solutions, it may achieve enough scale to survive the inevitable competitive pressure.
The Long View: Agent Monetization as a Structural Shift
The deeper story is about the structural shift in how digital services monetize. For twenty years, the dominant model was: users get free access, publishers show ads, platforms take a cut. This funded Google, Facebook, and most of the consumer web.
AI assistants are breaking this model. They're not free — users pay subscriptions or per-token fees. They're not ad-supported — the labs position them as premium productivity tools. But they're also expensive to operate. GPU costs for frontier models are astronomical. The labs need revenue beyond subscriptions.
Agent advertising fills this gap. It allows the labs to monetize AI usage without charging users more. It aligns with the attention-based economics of the web. It creates a new category of digital advertising that sits between search ads and social ads.
Kickbacks is the first visible instance of this category. It won't be the last. We'll see agent ad networks, sponsored prompts, paid recommendations, and AI-native ad formats that we haven't imagined yet. The question for brands is when to enter, not whether.
The early adopters will gain first-mover advantage in targeting and pricing. Latecomers will face higher costs and more competition. The window for experimentation is now.
Is your brand visible when AI agents recommend products? Check your AI visibility
Sources
- AdExchanger — "Kickbacks Injects Ads Into AI Agents" (interview with Andrew McCalip, July 2026)
- The Verge — "ChatGPT Work Launches as OpenAI's Agentic Superapp" (context on AI agent expansion)
- CNBC — "OpenAI Ad Strategy: Beyond ChatGPT Plus" (context on lab monetization pressure)
- OpenAI Terms of Use — analysis of ad injection legality
- Sensor Tower State of AI 2026 report — ChatGPT usage and engagement data
Top comments (0)