Agentic web daily · 2026-10-26

# Mastercard opens x402 agent payments; WebMCP reaches Commerce.com storefronts

Mastercard opened Early Access to Agent Pay for Machines, which lets AI agents pay for digital services with x402 on Base. Cloudflare and Commerce.com are reported to be injecting WebMCP tools at the edge for nearly 100,000 storefronts. Our panel also shows a jump in MCP and MCP Server Cards publication.

[← 2026-10-25](/digest/2026-10-25/) · [JSON for agents](/digest/2026-10-26/index.json) · [Atom](/digest/feed.xml) · [JSON Feed](/digest/feed.json)

## Stories

### 1. Mastercard opens Early Access to Agent Pay for Machines, built on x402 and settled on Base

launch [x402](/protocols/x402/)

According to Exchange.news, Mastercard showed Agent Pay for Machines at Cloudflare Connect on 20 October. The service lets AI agents pay for data, models, computing power and APIs within a spending limit using x402 vouchers, settled on Base, without an account, API key or prepaid credit at each provider. Mastercard says it ran end-to-end pilots with Cloudflare, Ant International, AIsa, Base, BVNK, Coinbase and Hype. Early Access includes buyer-side and seller-side APIs, a toolkit, a sandbox and documentation.

Why it matters: Sellers of paid APIs and data can evaluate the seller-side API in Early Access to see how Mastercard's x402 vouchers fit their existing payment handling.

- [Mastercard’s Agent Pay for Machines lets AI agents pay](https://exchange.news/news/base-mastercard-agent-pay-for-machines-x402/) · exchange.news · 2026-10-24 REPORTED

### 2. Cloudflare and Commerce.com inject WebMCP shopping tools at the edge across storefronts

adoption [WebMCP](/protocols/webmcp/), [Model Context Protocol](/protocols/mcp/)

According to aiPressHQ, Cloudflare reported on October 21, 2026 that it and Commerce.com have deployed an edge-level WebMCP implementation. A Cloudflare-injected script exposes tools such as product search and add-to-cart through document.modelContext, so merchants do not need to rebuild their sites or edit themes. The rollout covers nearly 100,000 storefronts using Configuration Rules and custom hostname metadata. Store owners can opt out in the Commerce.com dashboard, and pages load normally if the MCP server is offline or the browser lacks support.

Why it matters: Agent developers can expect WebMCP tools on a large set of storefronts alongside server-side MCP. Merchants on other platforms can use this deployment as a model for adding WebMCP without editing theme code.

- [Cloudflare and Commerce.com Launch WebMCP for AI Shopping Agents | aiPressHQ](https://aipresshq.com/posts/cloudflare-and-commerce-com-launch-webmcp-for-ai-shopping-agents-ff03e8/) · aipresshq.com · 2026-10-25 REPORTED

### 3. Malicious AGENTS.md in a Downloads folder led a coding agent to install a rogue npm package

security [AGENTS.md](/protocols/agents-md/)

BleepingComputer reports that Forever Security found an AGENTS.md file in a customer's ~/Downloads folder, which was also the agent's working directory. The file led a coding agent to try to install the malicious npm package 'function-color'. The researchers reproduced the attack against OpenAI Codex. They also demonstrated a related technique against Claude Code that leaked OAuth tokens and hijacked the account. They say there is nothing for OpenAI or Anthropic to patch, because the agent is doing what it was built to do.

Why it matters: Agents automatically load instruction files from their working directory. Teams should avoid running agents in untrusted folders and should limit the tools and permissions those agents can use.

- [AI coding agents hijacked using AGENTS.md file in Downloads folder](https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/) · bleepingcomputer.com · 2026-10-25 REPORTED

### 4. Kin enables WebMCP in home-insurance quoting; agent prepares a quote but does not bind the policy

adoption [WebMCP](/protocols/webmcp/)

According to Market & Tech, Kin announced on October 23, 2026 that it has enabled WebMCP in its digital home-insurance quoting flow. Kin says a compatible AI agent can carry a user's request on Kin.com to a personalized quote ready for purchase. Kin does not say the agent binds or pays for the policy. Kin disclosed no quote volume, success rate, error or conversion figures.

Why it matters: This is a WebMCP deployment in a regulated purchase flow where the final commitment stays with the user. There is no performance data yet to judge results.

- [Kin opens insurance quoting to WebMCP: an AI agent prepares the offer but does not bind the policy itself — Market & Tech](https://marketandtech.com/en/news/2026-10-25-ecom-kin-webmcp-insurance-quotes/) · marketandtech.com · 2026-10-25 REPORTED

### 5. TrendAI scan finds internet-reachable MCP servers exposing SQL execution and patient data

security [Model Context Protocol](/protocols/mcp/)

it-daily.net reports on a TrendAI (Trend Micro) report on AI security. In a scan of internet-reachable MCP servers, the researchers found the execute_sql function reachable on 70 hosts, and at least three servers gave access to patient data without login. An analysis of MCP server source projects found that 48 percent recommend storing credentials in plaintext .env or configuration files. The report says most AI incidents came from known weaknesses such as missing authentication and unpatched software, not attacks on models.

Why it matters: Operators of MCP servers should confirm that authentication is enforced on any internet-reachable endpoint and that credentials are not kept in plaintext configuration files.

- [KI-Angriffe zielen auf das Umfeld der Modelle](https://www.it-daily.net/it-sicherheit/cybercrime/ki-angriffe-zielen-auf-umfeld) · it-daily.net · 2026-10-25 REPORTED

### 6. MCP and MCP Server Cards publication jumps on our panel; 1800 servers updated on the MCP Registry

adoption [Model Context Protocol](/protocols/mcp/), [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/), [Official MCP Registry](/protocols/mcp-registry/)

Today 102 of 278 panel domains were checked. Model Context Protocol is published by 50 of 102 panel domains (+15 since 2026-10-25), and MCP Server Cards (SEP-2127) by 36 of 102 (+11 since 2026-10-25). New publishers of both include notion.so and docs.perplexity.ai, and supabase.com now publishes MCP. Separately, 1800 servers (3000 versions) were published or updated on the official MCP Registry since 2026-10-25.

Why it matters: Server Cards are spreading together with MCP endpoints, so clients that read them for discovery will find more sites that support them. Today's counts cover only the domains checked today.

- Our measurement: 102 of 278 panel domains were checked today; grades: A+ 32, A 17, B 18, C 27, D 4, F 3.
- Our measurement: Model Context Protocol (mcp) is published by 50 of 102 panel domains (+15 since 2026-10-25).
- Our measurement: MCP Server Cards (SEP-2127) (mcp-server-cards) is published by 36 of 102 panel domains (+11 since 2026-10-25).
- Our measurement: docs.perplexity.ai now publishes Model Context Protocol (mcp); it did not on 2026-10-25.
- Our measurement: docs.perplexity.ai now publishes MCP Server Cards (SEP-2127) (mcp-server-cards); it did not on 2026-10-25.
- Our measurement: notion.so now publishes Model Context Protocol (mcp); it did not on 2026-10-25.
- Our measurement: notion.so now publishes MCP Server Cards (SEP-2127) (mcp-server-cards); it did not on 2026-10-25.
- Our measurement: supabase.com now publishes Model Context Protocol (mcp); it did not on 2026-10-25.
- Our measurement: 1800 servers (3000 versions) were published or updated on the official MCP Registry since 2026-10-25.

### 7. Aegis v0.1.0 adds Web Bot Auth signature verification to Caddy

launch [Web Bot Auth HTTP Message Signatures](/protocols/webbotauth/), [HTTP Message Signatures](/protocols/http-message-signatures/)

A developer announced Aegis (v0.1.0) on the Caddy community forum. It is a handler that checks Web Bot Auth signatures on incoming requests against keys published at a well-known URL, such as OpenAI's http-message-signatures-directory. It passes the result to the rest of the Caddy config so routes can decide what each agent gets. The author suggests starting in observe mode and reviewing access logs before blocking anything.

Why it matters: Caddy operators can route signed agent traffic separately from unsigned bots. The module is early and not yet on the caddyserver.com download page.

- [New plugin: Aegis, which verifies Web Bot Auth signatures - Plugins - Caddy Community](https://caddy.community/t/new-plugin-aegis-which-verifies-web-bot-auth-signatures/34021) · caddy.community · 2026-10-25 REPORTED

### 8. IAB Tech Lab releases OpenProposal, a draft of AAMP 3.0 for agent ad negotiation

spec [Agentic Advertising Management Protocols](/protocols/aamp/)

According to AdTech Sumo, citing PPC Land, IAB Tech Lab has introduced OpenProposal, a draft of the AAMP 3.0 specification. The draft covers how AI agents representing buyers and sellers exchange advertising proposals, from the initial brief to the final purchase commitment.

Why it matters: Ad-tech teams building buy-side or sell-side agents should review the draft to see how proposal exchange may be standardized under AAMP.

- [IAB Tech Lab Releases Draft AAMP 3.0 for AI Ad Buying and Selling | AdTech Sumo](https://adtechsumo.com/news/openproposal-5c07ed) · adtechsumo.com · 2026-10-25 REPORTED

## The numbers

We re-check a fixed panel of 278 domains every day through the same [/check/](/check/) report anyone can run. 102 answered today (176 could not be checked and are left out of every comparison). Changes compare the 68 domains checked cleanly on both 2026-10-25 and 2026-10-26.

| A+ | A | B | C | D | F |
| --- | --- | --- | --- | --- | --- |
| 32 | 17 | 18 | 27 | 4 | 3 |

### Published or withdrawn since 2026-10-25

- [2s.io](/check/2s.io/) now publishes [Model Context Protocol](/protocols/mcp/)
- [2s.io](/check/2s.io/) now publishes [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/)
- [agent-ready.dev](/check/agent-ready.dev/) now publishes [Model Context Protocol](/protocols/mcp/)
- [agent-ready.dev](/check/agent-ready.dev/) now publishes [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/)
- [agentclientprotocol.com](/check/agentclientprotocol.com/) now publishes [Model Context Protocol](/protocols/mcp/)
- [agentclientprotocol.com](/check/agentclientprotocol.com/) now publishes [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/)
- [agentcommunity.org](/check/agentcommunity.org/) now publishes [Model Context Protocol](/protocols/mcp/)
- [agentcommunity.org](/check/agentcommunity.org/) now publishes [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/)
- [agentskills.io](/check/agentskills.io/) now publishes [Model Context Protocol](/protocols/mcp/)
- [agentskills.io](/check/agentskills.io/) now publishes [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/)
- [amplitude.com](/check/amplitude.com/) now publishes [Model Context Protocol](/protocols/mcp/)
- [amplitude.com](/check/amplitude.com/) now publishes [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/)
- [api.proof.com](/check/api.proof.com/) now publishes [Model Context Protocol](/protocols/mcp/)
- [asana.com](/check/asana.com/) now publishes [llms.txt](/protocols/llms-txt/)
- [atlan.com](/check/atlan.com/) now publishes [api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs](/protocols/api-catalog-rfc9727/)
- [bird.com](/check/bird.com/) now publishes [Model Context Protocol](/protocols/mcp/)
- [bird.com](/check/bird.com/) now publishes [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/)
- [desvela.dev](/check/desvela.dev/) now publishes [Model Context Protocol](/protocols/mcp/)
- [docs.perplexity.ai](/check/docs.perplexity.ai/) now publishes [Model Context Protocol](/protocols/mcp/)
- [docs.perplexity.ai](/check/docs.perplexity.ai/) now publishes [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/)
- [eodly.io](/check/eodly.io/) now publishes [Model Context Protocol](/protocols/mcp/)
- [eodly.io](/check/eodly.io/) now publishes [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/)
- [metricspot.com](/check/metricspot.com/) now publishes [api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs](/protocols/api-catalog-rfc9727/)
- [mintlify.com](/check/mintlify.com/) now publishes [Model Context Protocol](/protocols/mcp/)
- [mpp.dev](/check/mpp.dev/) now publishes [api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs](/protocols/api-catalog-rfc9727/)
- [notion.so](/check/notion.so/) now publishes [Model Context Protocol](/protocols/mcp/)
- [notion.so](/check/notion.so/) now publishes [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/)
- [openfort.io](/check/openfort.io/) now publishes [Model Context Protocol](/protocols/mcp/)
- [openfort.io](/check/openfort.io/) now publishes [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/)
- [supabase.com](/check/supabase.com/) now publishes [Model Context Protocol](/protocols/mcp/)
- [0g.ai](/check/0g.ai/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)
- [aaif.io](/check/aaif.io/) no longer publishes [agents.txt](/protocols/agents-txt/)
- [aaif.io](/check/aaif.io/) no longer publishes [Markdown for Agents](/protocols/cloudflare-markdown-for-agents/)
- [agentclientprotocol.com](/check/agentclientprotocol.com/) no longer publishes [Agent2Agent Protocol](/protocols/a2a/)
- [agentclientprotocol.com](/check/agentclientprotocol.com/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)
- [agentcommunity.org](/check/agentcommunity.org/) no longer publishes [Markdown for Agents](/protocols/cloudflare-markdown-for-agents/)
- [agenticresources.dev](/check/agenticresources.dev/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)
- [agentskills.io](/check/agentskills.io/) no longer publishes [Agent2Agent Protocol](/protocols/a2a/)
- [aitxt.ing](/check/aitxt.ing/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)
- [apify.com](/check/apify.com/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)
- [bird.com](/check/bird.com/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)
- [desvela.dev](/check/desvela.dev/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)
- [docs.n8n.io](/check/docs.n8n.io/) no longer publishes [agents.txt](/protocols/agents-txt/)
- [docs.n8n.io](/check/docs.n8n.io/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)
- [docs.perplexity.ai](/check/docs.perplexity.ai/) no longer publishes [Agent2Agent Protocol](/protocols/a2a/)
- [docs.perplexity.ai](/check/docs.perplexity.ai/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)
- [openfort.io](/check/openfort.io/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)
- [supabase.com](/check/supabase.com/) no longer publishes [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/)

### Grade changes

| Domain | Was | Now |
| --- | --- | --- |
| [aaif.io](/check/aaif.io/) | A (54) | B (38) |
| [agenticresources.dev](/check/agenticresources.dev/) | B (38) | C (25) |
| [asana.com](/check/asana.com/) | D (10) | C (20) |
| [atlan.com](/check/atlan.com/) | B (36) | A (49) |
| [mintlify.com](/check/mintlify.com/) | B (41) | A (54) |
| [mpp.dev](/check/mpp.dev/) | B (41) | A (54) |
| [notion.so](/check/notion.so/) | F (5) | C (25) |

### Adoption across the panel

| Standard | Domains | Change |
| --- | --- | --- |
| [llms.txt](/protocols/llms-txt/) | 76 / 102 | +1 |
| [Model Context Protocol](/protocols/mcp/) | 50 / 102 | +15 |
| [MCP Server Cards (SEP-2127)](/protocols/mcp-server-cards/) | 36 / 102 | +11 |
| [Content Signals Policy](/protocols/cloudflare-content-signals-policy/) | 35 / 102 | 0 |
| [api-catalog: A Well-Known URI and Link Relation to Help Discovery of APIs](/protocols/api-catalog-rfc9727/) | 34 / 102 | +3 |
| [AI Crawler User-Agent Tokens in robots.txt](/protocols/ai-crawler-tokens-robots/) | 32 / 102 | -11 |
| [Markdown for Agents](/protocols/cloudflare-markdown-for-agents/) | 32 / 102 | -2 |
| [OAuth Protected Resource and Authorization Server Metadata (as used for agent authorization)](/protocols/oauth-metadata-for-agents/) | 30 / 102 | 0 |
| [Agent Skills](/protocols/anthropic-agent-skills-format/) | 28 / 102 | 0 |
| [AI Catalog well-known file](/protocols/ai-catalog-well-known-file/) | 22 / 102 | 0 |
| [OAuth Client ID Metadata Document](/protocols/oauth-cimd/) | 15 / 102 | 0 |
| [Agentic Resource Discovery](/protocols/ard/) | 12 / 102 | 0 |
| [AGENTS.md](/protocols/agents-md/) | 11 / 102 | 0 |
| [Agent2Agent Protocol](/protocols/a2a/) | 8 / 102 | -3 |
| [auth.md](/protocols/auth-md/) | 5 / 102 | 0 |
| [Web Bot Auth HTTP Message Signatures](/protocols/webbotauth/) | 3 / 102 | 0 |
| [agents.json](/protocols/agents-json/) | 2 / 102 | 0 |
| [agents.txt](/protocols/agents-txt/) | 2 / 102 | -2 |
| [Identity Assertion JWT Authorization Grant](/protocols/identity-assertion-authz-grant/) | 2 / 102 | 0 |
| [Really Simple Licensing](/protocols/rsl/) | 2 / 102 | 0 |
| [Agent Directory Service](/protocols/ads/) | 1 / 102 | 0 |
| [agent-permissions.json](/protocols/agent-permissions-json/) | 1 / 102 | 0 |
| [Open Knowledge Format](/protocols/okf/) | 1 / 102 | 0 |
| [Universal Commerce Protocol](/protocols/ucp/) | 1 / 102 | 0 |
| [Signature Agent Card (Web Bot Auth registry)](/protocols/web-bot-auth-signature-agent-card/) | 1 / 102 | 0 |

### Fastest-growing repositories

| Repository | Stars | Change |
| --- | --- | --- |
| [block/goose](https://github.com/block/goose) | 55729 | +70 (0.1%) |
| [agentskills/agentskills](https://github.com/agentskills/agentskills) | 26636 | +56 (0.2%) |
| [agentsmd/agents.md](https://github.com/agentsmd/agents.md) | 25115 | +21 (0.1%) |
| [copilotkit/copilotkit](https://github.com/copilotkit/copilotkit) | 38239 | +20 (0.1%) |
| [ag-ui-protocol/ag-ui](https://github.com/ag-ui-protocol/ag-ui) | 16819 | +18 (0.1%) |
| [agentclientprotocol/agent-client-protocol](https://github.com/agentclientprotocol/agent-client-protocol) | 4513 | +16 (0.4%) |
| [googlecloudplatform/open-knowledge-format](https://github.com/googlecloudplatform/open-knowledge-format) | 1117 | +14 (1.3%) |
| [a2aproject/a2a](https://github.com/a2aproject/a2a) | 26298 | +13 (0.0%) |

Out of 58 repositories named in our records.

Official MCP Registry: 1800 servers (3000 versions) published or updated since 2026-10-25.

How this digest was made
Items are written only from the cited sources and our own measurements; every number in an item appears in a source it cites. VERIFIED = fetched from the standard's issuer or a standards body; REPORTED = a claim by press or a third party.

Sources searched: feeds 0, datatracker 13, hn 0, arxiv 0, exa 100, parallel 2, tips 0. 115 candidates, 76 new, 16 kept by triage (claude-opus-5-5), 13 facts given to the writer (claude-opus-5-5).

- item 9 (AI crawler tokens in robots.txt drop on our panel) dropped: numbers not in its sources: ['11']

Window 2026-10-24T18:00:00Z to 2026-10-26T07:30:35Z. Generated 2026-10-26T07:59:24Z. Licence CC BY 4.0.

## Newsletter

Get the daily digest and standard changes by email.