On March 17, 2026, World — the biometric identity network co-founded by Sam Altman — launched AgentKit, a developer toolkit that lets AI agents carry cryptographic proof of a verified human behind them. By integrating with Coinbase and Cloudflare's x402 stablecoin micropayment protocol, AgentKit ...
"Payments are the 'how' of agentic commerce, but identity is the 'who.' By integrating World ID with the x402 protocol, developers now have a complete trust stack: a way for agents to pay for what they need and a way for platforms to verify there is a real human behind the wallet." — Erik Reppel, Head of Engineering, Coinbase Developer Platform & Founder of x402
On March 17, 2026, World — the biometric identity network co-founded by Sam Altman — launched AgentKit, a developer toolkit that lets AI agents carry cryptographic proof of a verified human behind them. By integrating with Coinbase and Cloudflare's x402 stablecoin micropayment protocol, AgentKit creates a dual-layer trust stack: payments for economic access, identity for legitimacy. The announcement marks the first production-grade attempt to solve the agent identity problem at the protocol layer.
The timing is not accidental. McKinsey projects that AI agents will mediate $3 trillion to $5 trillion in global consumer commerce by 2030. Stripe launched x402-based USDC payments on Base in February 2026. The Linux Foundation formed the Agentic AI Foundation in December 2025 with Anthropic, OpenAI, Google, Microsoft, and AWS to standardize agent interoperability. The infrastructure for agentic commerce is being built in real time — but until now, nobody had a credible answer to the question: how does a platform know a real person authorized this agent?
AgentKit is World's answer. Using zero-knowledge proofs derived from Orb-verified biometric data, it lets agents prove human backing without revealing personal information. Whether this becomes the dominant standard or a cautionary tale in biometric overreach will depend on adoption velocity, developer trust, and the regulatory environment. But the economic stakes — a multi-trillion-dollar agent economy that currently has no identity layer — guarantee that this design space will be aggressively contested.
The internet was designed for humans clicking through web pages. AI agents are breaking that assumption at scale.
McKinsey's agentic commerce research forecasts that autonomous AI systems will mediate $3 trillion to $5 trillion in global consumer commerce by 2030, representing a "seismic shift" from discrete human shopping steps to continuous, intent-driven flows powered by autonomous systems. Bain & Company estimates the U.S. share alone at $300 billion to $500 billion, representing 15–25% of total online retail. Morgan Stanley's more conservative model places U.S. agentic e-commerce spending at $190 billion to $385 billion by the same date.
The software market powering this is growing at 46.3% CAGR, from $7.84 billion in 2025 to a projected $52.62 billion by 2030, according to MarketsandMarkets.
But every one of these forecasts contains a shared assumption: that platforms will be willing to accept agent traffic. Today, they largely are not. A federal judge issued a preliminary injunction in early March 2026 against AI developer Perplexity, blocking its Comet browser from making purchases on Amazon on behalf of users. The case underscores the fundamental tension: platforms cannot distinguish between a legitimate agent acting for a verified customer and a botnet running a scalping operation.
As DC Builder, a research engineer at the World Foundation, put it: "One person could run thousands of agents that all pay small fees. Proof of Human addresses this gap."
The identity layer is not a nice-to-have. It is the missing prerequisite for the entire agentic economy.
AgentKit operates at the intersection of biometric verification, zero-knowledge cryptography, and HTTP-native payments. The architecture has three distinct layers:
Layer 1: Biometric Root of Trust
World's identity system begins with the Orb — a physical device that converts an iris scan into a unique encrypted digital code. This generates a World ID, which serves as a one-per-person credential. World reports nearly 18 million Orb-verified individuals across more than 160 countries, out of approximately 40 million total network participants. In some markets, penetration is striking: more than a third of Lisbon's adult population and more than a quarter of Buenos Aires' adults hold a verified World ID.
The Orb network currently comprises approximately 1,000 devices deployed globally, with plans to deploy 7,500 Orbs across the United States over the next 12–24 months. A more portable Orb Mini device is in development. World also plans to expand verification to NFC-enabled passports and government IDs.
Layer 2: Zero-Knowledge Delegation
This is AgentKit's core innovation. A verified World ID holder can delegate their identity to one or more AI agents. Critically, this delegation uses zero-knowledge proofs: the agent can cryptographically prove it is backed by a unique verified human without revealing who that human is. The platform receiving the proof learns only that a real person exists behind the agent — not their name, location, or biometric data.
This enables several new primitives:
Layer 3: x402 Integration
AgentKit functions as an extension of the x402 payment protocol. When an agent accesses an x402-compatible endpoint, it presents both a micropayment and proof of human backing in a single HTTP request-response cycle. The receiving platform gets dual authentication: payment governs economic access, identity governs legitimacy.
AgentKit is currently available in limited beta for developers with a verified World ID, with a full 1.0 release planned alongside the next generation of the World ID protocol.
AgentKit's identity layer sits atop x402, the open payment standard that revives the dormant HTTP 402 "Payment Required" status code for native stablecoin micropayments. Understanding the payment layer is essential context for understanding the identity layer.
Developed by Coinbase and launched in September 2025, x402 turns any HTTP endpoint into a paywall that agents can autonomously clear. The flow is simple:
No signups. No API keys. No invoices. The entire transaction completes in a single programmatic flow.
The x402 ecosystem has grown rapidly. Transaction volume has exceeded 15 million across all integrations. In February 2026, Stripe launched x402 support on Base for USDC payments, a watershed moment that brought the protocol into the mainstream payments stack. Stripe product manager Jeff Weinstein noted that "the current financial system is tuned for humans and is incompatible with agent needs" — citing requirements for microtransactions, 24/7 global rails, and low-latency finality.
The coalition behind x402 now includes Coinbase, Cloudflare, Stripe, Circle, AWS, Google Cloud, Visa, Alchemy, and Anthropic — with the x402 Foundation providing neutral governance. CoinGecko has already launched x402-powered API endpoints at $0.01 USDC per request, allowing agents to fetch market data without accounts or API keys.
AgentKit does not operate in a vacuum. The agent identity and payment space is being contested on multiple fronts:
| Player | Approach | Status | |--------|----------|--------| | World (AgentKit) | Biometric ZK proofs + x402 payments | Beta launched March 2026 | | Google (AP2) | Agent-to-agent payment protocol | Development stage | | Stripe (x402) | Payment layer, no identity | Live on Base since Feb 2026 | | Agentic AI Foundation | Open standards (MCP, AGENTS.md, Goose) | Formed Dec 2025 under Linux Foundation | | Coinbase (x402) | Payment protocol + facilitator infra | 15M+ transactions |
The Agentic AI Foundation (AAIF), formed in December 2025 under the Linux Foundation, represents the industry's attempt to avoid proprietary lock-in. Its platinum members — AWS, Anthropic, Block, Bloomberg, Cloudflare, Google, Microsoft, and OpenAI — contributed three foundational projects: Anthropic's Model Context Protocol (MCP, 97M+ monthly SDK downloads), OpenAI's AGENTS.md (adopted by 60,000+ open-source projects), and Block's Goose framework. The AAIF explicitly lists agent identity as an unsolved problem — creating a natural integration point for solutions like AgentKit.
The key question: will identity consolidate around a single biometric-based standard, or will the market support multiple competing approaches? The answer likely depends on whether platforms demand strong uniqueness guarantees (favoring biometrics) or merely behavioral reputation signals (favoring lighter-weight approaches).
From an economic value distribution perspective — analyzing where the fees flow and who captures rent — the agent identity layer introduces a new extraction point in the value chain:
Current agent transaction flow (x402 without identity):
Proposed flow with AgentKit:
The agentic payment market itself is growing from $7 billion to $93 billion by 2032, according to industry estimates. If identity verification captures even 1–3% of that flow as a protocol-level fee, the identity layer alone represents a $1–3 billion annual revenue opportunity at maturity.
For platforms, the calculus is straightforward: verified agent traffic converts better and generates fewer chargebacks, fraud losses, and bot mitigation costs. The premium platforms are willing to pay for verified traffic will determine how quickly the identity layer is adopted.
Biometric centralization risk. Despite zero-knowledge cryptography, the Orb's iris-scanning infrastructure creates a physical chokepoint. If World's hardware network is compromised, delayed, or regulated out of key markets, the entire identity layer stalls. The planned expansion to passport-based NFC verification partially mitigates this but introduces reliance on government-issued credentials — a different centralization vector.
Regulatory uncertainty. Biometric data collection faces increasing scrutiny globally. The EU's AI Act and GDPR impose strict requirements on biometric processing. Several jurisdictions — including Kenya and India — have previously restricted or investigated World's Orb operations. The expansion to AI agent identity adds a new regulatory surface area that has not yet been tested.
Adoption chicken-and-egg. Platforms must integrate x402 + AgentKit verification for it to be useful. Developers must build agents with World ID delegation for platforms to demand it. Currently, the ecosystem exists primarily in beta, and the gap between 18 million verified users and the billions of agents projected by 2030 is vast.
Competing identity models. Proof of personhood via biometrics is one approach. Reputation-based systems, economic stake-based identity (deposit collateral to prove legitimacy), and government-issued digital IDs all compete for the same design space. There is no guarantee biometric ZK proofs will win.
Privacy paradox. While zero-knowledge proofs protect individual identity, the existence of a global biometric registry — even one processed locally on the Orb — creates systemic risk if the cryptographic assumptions underlying the ZK proofs are ever broken.
World's AgentKit is the first production-grade attempt to solve agent identity at the protocol layer, combining biometric verification with zero-knowledge proofs and x402 payments.
The addressable market is enormous: McKinsey's $3–5 trillion agentic commerce forecast by 2030 currently has no identity infrastructure. The agentic payments market alone is projected to reach $93 billion by 2032.
The x402 ecosystem has reached critical mass, with Stripe, Coinbase, Cloudflare, AWS, and Google Cloud backing the payment standard and 15M+ transactions processed.
Identity is the new value extraction layer in the agent economy. Whoever controls the verification step captures rent on every authenticated agent transaction — a potential $1–3 billion annual opportunity.
Biometric centralization remains the core risk. World's Orb network (1,000 devices, 18M verified users) must scale by orders of magnitude while navigating global regulatory fragmentation around biometric data.
The Agentic AI Foundation's open standards work (MCP, AGENTS.md) explicitly leaves identity unsolved — creating a strategic opening that AgentKit is designed to fill.
The launch of AgentKit marks a pivotal moment in Web3 infrastructure. For the first time, there is a credible, production-grade mechanism for AI agents to prove human backing while preserving privacy — and to do so within the same HTTP request that processes payment. The convergence of biometric identity (World), payment infrastructure (x402), and industry standardization (AAIF) is creating the trust stack that the agentic economy requires to function.
But credible does not mean inevitable. World must scale its Orb network by 10x while fighting regulatory headwinds. The x402 ecosystem must move from 15 million transactions to billions. And the broader question of whether biometric proof of personhood or lighter-weight alternatives will dominate agent identity remains genuinely open.
What is not open is the question of whether the agent economy needs an identity layer. The Perplexity injunction, the platform access wars, and the sheer scale of projected agentic commerce all point in the same direction: agents that cannot prove human backing will be locked out of the emerging agent economy. The race to build that identity layer is no longer theoretical. It started this week.