--- title: "Your agent can now pay the bills" publication: "Need More Context" edition: 2 date: 2026-10-23 language: en url: https://needmorecontext.com/pt/2/ markdown: https://needmorecontext.com/en/2.md translation_of: https://needmorecontext.com/pt/2.md summary: "PLUS: the AI \"swarm\" that attacked 400+ financial institutions in Latin America" --- Translated from the Portuguese original: https://needmorecontext.com/pt/2.md # Your agent can now pay the bills *Need More Context Nº 2, Friday, October 23, 2026. AI agents, in context.* Mastercard is offering a system that lets an AI agent pay for services on its own, inside a spending cap set in advance. In a related story, a new report shows an army of agents attacking more than 400 financial institutions across Latin America. ## In today's edition 1. Your agent can pay on its own. You set the limit 2. An agent "swarm" attacked 400+ financial institutions in Latin America 3. Clicksign lets AI send contracts ## 1. Your agent can pay on its own. You set the limit Mastercard opened early access to Agent Pay for Machines, which lets an agent pay for APIs, data or compute without an account, API key or invoice at each vendor. **The details:** - It runs on x402: the service answers with a payment request and the agent hands back a signed voucher. - Whoever pays sets the task, the permissions and the spending cap up front. - In the Cloudflare Connect demo on 10/20, an agent paid vendors out of a single budget. - Pilots with Cloudflare, Ant International, AIsa, Base, BVNK, Coinbase and the agency Hype. Since the June announcement, Mastercard has talked about paying by card, bank account or stablecoin. It is still a pilot: no commercial launch and no published pricing. **Why it matters:** Agents are getting a financial life. If you sell online, keep an eye on this: your next customer may not be human. 💡 **If you're a developer:** request early access at ap4m.build and try the sandbox. **If you're not:** read the step-by-step of the Hype demo in Mastercard's announcement; it is the clearest picture yet of an agent paying on its own. **Sources:** [mastercard.com](https://www.mastercard.com/global/en/news-and-trends/press/2026/october/Mastercard-Agent-Pay-for-Machines-in-action.html), [ap4m.build](https://ap4m.build/info), [theblock.co](https://www.theblock.co/news/business/2026-10-20-mastercard-opens-early-access-to-ai-agent-payments-following-pilots-with-coinbase-base-and-cloudflare-421406) ## 2. An agent "swarm" attacked 400+ financial institutions in Latin America Security firm Straiker described CARLIY0S, the multi-agent system the CyberCartel group used against the region's banks and fintechs over a few months. **The details:** - A "commander" (Claude, running in Cursor) handed tasks to four other Claude agents: three debated each target and the fourth made the final call. - Five Grok agents gathered credentials, and the group's two computers shared memory through an MCP server. - To keep the models from refusing, the prompts claimed it was an authorized penetration test or an academic exercise. - One stolen database held 4,493 records, including 391 API keys and 67 passwords stored in plain text. According to Straiker, Anthropic revoked the credential used. xAI is still investigating. **Why it matters:** The same tools that power legitimate work can be turned into weapons, and model refusals did not hold. Anyone connecting agents to company systems needs stronger security and a log of everything the agent does. The report's details point to Mexico (the SPEI payment system); it names no targets in Brazil. **Sources:** [straiker.ai](https://www.straiker.ai/blog/inside-carliy0s-how-cybercartel-used-multiple-ai-models-to-attack-latin-american-banks), [info.straiker.ai](https://info.straiker.ai/hubfs/Ebooks-Whitepapers/Straiker-Inside-CARLIY0S-Threat-Report.pdf) ## 3. Clicksign lets AI send contracts The Brazilian e-signature platform launched an MCP server: ChatGPT, Claude, Cursor or another compatible client can create and send envelopes, use document templates, remind people who haven't signed yet and check status. **The details:** - You authorize access in the browser, and only account admins can take actions. - There is a test environment, and no extra charge for plans that already include API access. **Why it matters:** One more concrete example of an agent at work in a process every business has. 💡 A word of warning: a contract opens one more attack surface on your agent, since it can carry a malicious instruction. **Sources:** [developers.clicksign.com](https://developers.clicksign.com/docs/mcp-server), [clicksign.com](https://www.clicksign.com/integracoes/claude) ## Everything else in AI - Brazilian credit co-op Sicoob put Sebah to work, an internal IT-operations agent that pulls data together, writes reports and raises alerts. Sicoob says it cut the time of those tasks by up to 98%, and the check on bank slips (boletos), run every seven minutes, follows fixed rules rather than a model deciding on its own. ([sicoob.com.br](https://www.sicoob.com.br/web/sicoob/noticias/-/asset_publisher/xAioIawpOI5S/content/id/325742018)) - Brazilian tax-document platform Qive launched an MCP connector that brings invoices, suppliers and tax credits into Claude and ChatGPT, with authenticated access. ([noticias.dino.com.br](https://noticias.dino.com.br/qive-lanca-camada-de-inteligencia-artificial/)) ## Terms in this edition - Agent: AI that does not just answer but acts. It opens files, runs commands and uses other programs for you. - API: The door one program uses to talk to another and ask for data or actions. - API key: A password that gives a program access to a service; whoever holds it uses the service in your name. - Multi-agent system: Several AI agents working together, each with a role, coordinated by one of them or by a program. - Fintech: A company that offers financial services mainly through apps and the web, like digital banking or payments. - Model: The "brain" the agent uses to understand and decide. It almost always runs on the company's servers. - MCP: Open standard that connects an AI assistant to other systems, like a universal plug. - Envelope: In e-signature platforms, the package holding the document and the list of who needs to sign it. - x402: Protocol where a site charges an agent by answering "402 Payment Required" and the agent pays on the spot. - Signed voucher: A digitally signed promise to pay that the seller can verify and collect later. - stablecoin: A cryptocurrency pegged to a regular currency, like the US dollar. - Credentials: The data that proves who you are to a system: username, password, access key. - Memory: To run on your computer, the whole model has to fit in the graphics card's memory, or in shared memory (on Macs and some new PCs), with room left over for the context. - Penetration test: An authorized attack by hired specialists to find weaknesses before criminals do. --- Subscribe: https://needmorecontext.beehiiv.com/subscribe Archive: https://needmorecontext.com/en/archive.md RSS: https://needmorecontext.com/pt/feed.xml · JSON Feed: https://needmorecontext.com/pt/feed.json