On March 17, 2026, World — the biometric identity network co-founded by Sam Altman — launched AgentKit, a developer toolkit that lets AI agents carry cryptographic proof that a unique, verified human stands behind them. The product integrates with Coinbase and Cloudflare's x402 protocol, the HTTP...
"Payments are the 'how' of agentic commerce, but identity is the 'who.'" — Erik Reppel, Head of Engineering, Coinbase Developer Platform
On March 17, 2026, World — the biometric identity network co-founded by Sam Altman — launched AgentKit, a developer toolkit that lets AI agents carry cryptographic proof that a unique, verified human stands behind them. The product integrates with Coinbase and Cloudflare's x402 protocol, the HTTP-native payment standard that has already processed over 100 million transactions since its 2025 launch. Together, they propose a new primitive for the internet: AI agents that can prove they represent a real person, pay for resources autonomously, and do both without exposing the human's identity.
This is not a speculative protocol paper. AgentKit is live in limited beta, backed by a verification network of nearly 18 million Orb-verified humans across 160+ countries, and targeted squarely at a market McKinsey projects will reach $3–5 trillion in annual transaction volume by 2030. The convergence of biometric identity, zero-knowledge cryptography, and stablecoin micropayments represents a new category of Web3 infrastructure — one where the economic value accrues not to speculation but to the trust layer that makes autonomous commerce possible.
The implications are structural. If AI agents are going to transact at scale — booking reservations, purchasing goods, calling APIs millions of times per day — the internet needs a way to distinguish a legitimate agent acting on behalf of a verified human from a bot army deployed by a single bad actor. AgentKit is the first serious attempt to build that distinction into the protocol layer.
The internet crossed a grim threshold in 2024: automated bot traffic surpassed human-generated traffic for the first time in a decade, reaching 51% of all web activity according to Imperva's 2025 Bad Bot Report. Of that, 37% was classified as malicious — scrapers, credential stuffers, fraud bots — marking the sixth consecutive year of growth. By late 2025, Cloudflare's network alone was fielding approximately 50 billion crawler requests per day from AI-oriented bots.
This is the world AgentKit is designed to operate in. The old tools — CAPTCHAs, rate limits, IP bans — were built for an era when bots were dumb and humans were patient. In the agentic era, the legitimate traffic is automated. A shopping agent dispatched by a verified human to find the best flight price looks, at the protocol level, identical to a scalper bot hoarding inventory. The internet has no native mechanism to tell them apart.
As DC Builder, a research engineer at the World Foundation, put it: "One person could run thousands of agents that all pay small fees. Proof of Human addresses this gap."
The economic stakes are not abstract. Bain & Company projects that AI agents could represent up to 25% of U.S. e-commerce by 2030. If platforms cannot differentiate between legitimate agent commerce and bot abuse, they will either block all automated traffic — killing the agentic economy before it starts — or leave their systems open to manipulation at industrial scale.
AgentKit introduces a three-layer architecture that separates identity verification, agent delegation, and transaction execution:
Layer 1 — Human Verification. The foundation remains World's Orb-based biometric system, which uses iris scans to generate a unique identifier. Nearly 18 million humans have completed this process across 160+ countries via over 1,500 active Orb devices. World has indicated plans to expand accepted credentials to include NFC-enabled passports and government IDs, broadening the verification surface beyond biometrics.
Layer 2 — Agent Delegation. A verified human can register one or more AI agents under their World ID. Each agent receives a delegated credential that cryptographically links it to its human principal. The critical design choice: zero-knowledge proofs ensure that a website receiving an agent's credential can verify the human is unique without learning who they are or linking activity across sessions.
Layer 3 — Multi-Agent Accounting. Platforms can track how many agents trace back to a single unique human, enabling per-person usage caps. A restaurant reservation system, for example, can allow one agent per verified human to book — preventing a single user from deploying a bot swarm to hoard tables.
This architecture is deliberately composable. AgentKit is built as an extension to the x402 v2 protocol, meaning any website already accepting x402 micropayments can layer on proof-of-unique-human verification with minimal integration work. A platform can require payment, proof of personhood, or both — tuning trust requirements to the sensitivity of the resource being accessed.
AgentKit does not exist in a vacuum. Its power comes from integration with x402, the HTTP-native payment protocol co-developed by Coinbase and Cloudflare and formalized under the x402 Foundation announced in September 2025.
The protocol is elegant in its simplicity: it repurposes the long-dormant HTTP 402 "Payment Required" status code. When an AI agent requests a resource — an API call, a web page, a data feed — the server can respond with a 402 status and payment instructions specifying the amount, token, recipient address, and network. The agent constructs a signed stablecoin transaction (typically USDC on Base, Polygon, or Solana), embeds it in the X-PAYMENT header, and re-submits the request. A facilitator verifies and settles the payment; the server delivers the resource.
The numbers suggest real adoption, not vaporware. The x402 ecosystem has processed over 100 million payments in its first six months, with transaction costs low enough to enable charges as small as $0.001 per request. Coinbase's hosted facilitator offers 1,000 free transactions per month, deliberately lowering the barrier for developer experimentation.
For the agentic economy, x402 solves a fundamental problem: how do machines pay each other? Traditional payment rails — credit cards, ACH, wire transfers — require human identity, billing addresses, and settlement cycles measured in days. Stablecoin micropayments over HTTP settle in seconds with no identity requirements on the payment side. AgentKit then adds identity requirements on the personhood side — a deliberate separation of payment capability from identity verification.
World's AgentKit is the most technically integrated solution shipping today, but it operates in an increasingly crowded field:
Humanity Protocol raised $20 million in January 2026 at a $1.1 billion valuation, co-led by Pantera Capital and Jump Crypto. Its approach substitutes palm-vein scanning for iris scans, claiming a false acceptance rate below 0.00008%. The protocol has generated over 2 million Human IDs since its testnet launch and has secured a strategic partnership with Mastercard. However, Humanity Protocol recently pivoted away from pure proof-of-personhood toward broader biometric identity applications, suggesting uncertainty about the TAM for personhood alone.
Civic and Gitcoin Passport offer lighter-weight identity verification through credential aggregation — combining social accounts, on-chain history, and government IDs into composite trust scores. These approaches avoid the biometric controversy but offer weaker uniqueness guarantees, making them more suitable for governance and airdrops than for high-stakes economic verification.
Pi Network has positioned its 50+ million verified users as a potential identity backbone for Web3, though its verification process relies on social graph attestation rather than biometrics, raising questions about sybil resistance at scale.
The critical differentiator for World is the x402 integration. Competitors offer identity verification; World is shipping identity-as-a-protocol-primitive embedded in the internet's payment layer. That architectural choice could prove decisive if agentic commerce scales as projected.
Understanding who captures value in the proof-of-personhood stack reveals the true economic logic of this emerging market:
Verification Infrastructure. World recently introduced World ID fees, signaling a shift toward sustainable revenue. Every identity verification consumes Orb hardware, network bandwidth, and zero-knowledge proof computation. At 18 million verified users, the infrastructure cost is significant. World Foundation raised $135 million to fund global Orb expansion, suggesting the current economics require subsidy.
Transaction Facilitation. Coinbase captures value through x402 facilitation — verifying and settling stablecoin payments on Base, its own Layer 2. Every AgentKit-verified transaction that flows through x402 generates settlement activity on Base, increasing its TVL and transaction fee revenue. This is infrastructure capture at its most elegant: Coinbase provides the payment rails, the settlement layer, and the facilitation service.
Platform Monetization. Websites and APIs integrating AgentKit gain a new monetization vector: per-human pricing for AI agent access. A data provider can charge $0.01 per API call but cap usage at 10,000 calls per unique human, preventing a single actor from extracting their entire dataset through a fleet of agents.
Token Economics. The WLD token remains central to World's ecosystem, with over 211 million WLD claimed by verified users — 77% of circulating supply. The token's value proposition shifts meaningfully if AgentKit drives adoption: it becomes the unit of account for human-verified agentic commerce, not merely a speculative governance token.
The total addressable market is defined by the intersection of AI agent proliferation and economic transaction volume. With the agentic AI market projected to grow from $9.89 billion in 2026 to $57.42 billion by 2031 (CAGR of 42.14%), and McKinsey projecting $3–5 trillion in AI agent-driven transactions by 2030, the identity verification layer sits on top of an extraordinary value flow.
Biometric Centralization. World's reliance on Orb-based iris scanning remains its most controversial design choice. Despite zero-knowledge proofs protecting identity downstream, the initial biometric capture creates a physical bottleneck and a trust assumption around the Orb hardware itself. Regulatory scrutiny has already forced operational pauses in several jurisdictions.
Cold Start Problem. AgentKit requires both platform adoption (websites implementing x402 + proof of personhood) and user adoption (humans verifying via Orb and delegating to agents). Two-sided marketplaces are notoriously difficult to bootstrap. The x402 integration lowers the platform-side barrier, but the human-side friction remains high.
Regulatory Uncertainty. The EU's AMLR framework, which strengthens transaction traceability requirements before 2027, could conflict with zero-knowledge proof architectures designed to obscure user identity. The balance between regulatory compliance and privacy-preserving identity is unresolved.
Competitive Moat Duration. If agentic commerce reaches $3–5 trillion, every major tech platform will build or acquire proof-of-personhood capabilities. World's first-mover advantage is real but perishable. The question is whether 18 million verified humans constitutes a defensible network effect or merely a head start.
The launch of AgentKit marks a structural shift in how Web3 infrastructure creates economic value. For years, the crypto industry has searched for use cases that justify blockchain's complexity with real-world utility. Proof of personhood for AI agents may be the clearest candidate yet: it solves a problem that traditional internet architecture cannot (distinguishing legitimate automated agents from malicious bots), it uses cryptographic tools that only blockchain can provide (zero-knowledge proofs for privacy-preserving identity), and it sits on top of a transaction volume measured in trillions.
The critical question is execution speed. Bot traffic is growing faster than identity infrastructure can verify humans. The x402 Foundation's institutional backing from Coinbase and Cloudflare provides distribution advantages that most crypto projects never achieve. But 18 million verified humans is a rounding error against 5 billion internet users. Scaling biometric verification to the billions who will deploy AI agents is a hardware logistics problem as much as a cryptographic one.
What is clear is that the identity layer for the agentic internet will be built on crypto rails. No other technology offers the combination of programmable payments, zero-knowledge privacy, and permissionless composability that this use case demands. The companies that control the trust layer — who can say "this agent represents a real, unique human" — will extract value from every transaction in the agentic economy. That is not a token narrative. It is an infrastructure thesis.