Cloudflare’s Monetization Gateway lets a site owner require payment for selected requests, using HTTP 402 to send payment terms and challenge a buyer to authorize payment before retrying. It is not a blanket paywall on every domain: sellers configure which requests and callers are covered. As of Cloudflare’s documentation last updated September 30, 2026, the service is in closed beta, access requires a request, and both buyers and sellers must be based in the United States.
How does Cloudflare’s HTTP 402 paywall work?
HTTP 402 means “Payment Required.” In Cloudflare’s described flow, the status code becomes a negotiation point within the request itself rather than a browser redirect to a checkout page. Cloudflare says the exchange does not require a separate payment API call, though that product description is not proof that every origin can use the service without changes.
- A buyer requests a protected resource, such as a page, dataset, API endpoint, or MCP tool.
- The Gateway checks the seller’s rules. If the request requires payment, it returns payment requirements with the 402 response.
- The buyer signs a payment authorization and retries the request with it.
- The Gateway verifies the authorization. The origin produces the resource response, and the Gateway settles payment through Coinbase’s x402 Facilitator.
- The buyer receives the resource and a payment confirmation.
Cloudflare’s documentation describes two pricing approaches: fixed pricing settles the amount signed by the buyer, while variable pricing lets the origin report the amount actually due. Cloudflare says the service handles verification, settlement, failures and retries, analytics, and protocol changes; sellers define the access rules and prices.
Can a website charge AI agents per request?
Yes, if the seller configures a rule that matches the request and the buyer can handle the payment challenge. Cloudflare says Gateway rules can match request details such as URLs, headers, and query parameters, as well as caller attributes; its documentation gives verified bots as an example. The seller can use those conditions to price access to selected resources rather than charging every visitor or every request to a domain.
Recommended Free Tools
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Cloudflare’s July 1, 2026 announcement describes assets including pages, datasets, APIs, and MCP tools. It also frames the product as a way to charge callers that may not have conventional accounts or API keys. That possibility still depends on compatible clients, a seller’s configured rules, payment authorization, and an available settlement route.
What are x402 and the payment rail?
x402 is a payment protocol that uses HTTP 402 to convey machine-readable payment requirements. It is not itself the settlement network or payment method. In Cloudflare’s current Gateway description, Coinbase’s x402 Facilitator verifies and settles payments; Cloudflare’s July 2026 announcement specifies USDC settlement on Base and says additional rails are planned. Those planned options should not be read as already available through Gateway.
Rank #2
- Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
- USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
- FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
- Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
- Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
Cloudflare’s Agents documentation also discusses MPP, a separate protocol that uses different HTTP headers and can support payment methods including cards through Stripe and stablecoins. That broader documentation context does not change the Gateway flow documented through the x402 Facilitator.
Cloudflare’s argument that the rail was not the hardest part is best understood as a product thesis. Its July 2026 announcement contrasts per-request payments with conventional usage billing, which often depends on identifying a buyer, signup, credentials, and backend metering. Gateway’s intended contribution is the control layer around a request: matching policy, access enforcement, verification, settlement, retries, and analytics. The protocol still requires both sides to support it, and the payment must have a usable authorization and settlement path.
Rank #3
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T120. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T120 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-C port : Insert the T120 security key into the USB-C port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
Is Cloudflare Monetization Gateway available now?
Cloudflare’s documentation, last updated September 30, 2026, calls Gateway a closed beta. Interested users must request access through Cloudflare’s dashboard, and buyers and sellers must be based in the United States. The July 2026 announcement describes USDC settlement on Base through Coinbase’s x402 Facilitator.
Cloudflare’s product announcement and documentation explain the design, but the cited materials do not establish independent adoption results, paid transaction totals, seller revenue, conversion rates, or latency benchmarks. A company-reported request count is not evidence of paid usage.
Rank #4
- USB-C or tap via NFC for easy authentication on any compatible device. No drivers needed; optional Kensington software available for advanced management features.
- Works across Windows, macOS, iOS, Android, ChromeOS, and supports Passkeys and Apple ID.
- Slim, keychain-ready form for easy carry and on-the-go authentication
- IP68-rated for dependable performance
- FIDO CTAP 2.1 for enhanced security features (e.g. resident credentials, Passkey support) and backwards compatibility with CTAP 2. FIDO2 L2 certified security for phishing resistant protection against identity theft and unauthorized access.
How is Pay Per Crawl different from Monetization Gateway?
Cloudflare announced Pay Per Crawl as a private beta on July 1, 2025. It described a narrower crawler-focused product, while the 2026 Gateway materials describe rules for a broader range of callers and digital resources. The sources do not establish whether Pay Per Crawl has been retired or fully superseded.
| Area | Pay Per Crawl | Monetization Gateway |
|---|---|---|
| Scope described | Selected AI crawlers accessing content | Callers accessing sites, APIs, MCP tools, and datasets |
| Rules and pricing | Site owners set prices and select crawlers to charge | Rules match request fields and caller attributes; fixed and variable pricing are described |
| Payment details in the cited announcement or docs | Stripe payment management in the July 1, 2025 private-beta announcement | x402 and Coinbase’s Facilitator; the July 2026 announcement specifies USDC on Base |
| Availability stated in cited material | Private beta in the July 1, 2025 announcement | Closed beta in documentation last updated September 30, 2026; access request required |
Cloudflare’s September 2025 x402 post also proposed a deferred-payment arrangement for crawlers: collect audit logs, then pay an aggregated fee at the end of the day using a connected card or bank account. The post presented this as a proposal for delayed settlement and batch payments, not as the same immediate-settlement flow described for the current Gateway.
Free tools Windows power users keep installed
One-click scans. No signup required.
What does Cloudflare’s billion-402 figure show?
Cloudflare said on September 23, 2025 that its sites sent more than one billion HTTP 402 responses per day to bots and crawlers seeking content and ecommerce stores. That is a company-reported count of responses. It does not show how many payment challenges were accepted, how many transactions completed, or how much revenue sellers earned.
Cloudflare’s September 30, 2026 beta announcement quotes Ceramic.ai founder Dr. Anna Patterson: “The web was built for a human buyer, someone who signs up and enters a card. Agents need to act on their own behalf, and payments are how they do it. Search is one of the first things every agent needs, so it should be one of the first things an agent can buy.” Cloudflare says Ceramic.ai uses Gateway’s fixed-pricing scheme for paid search without an API key; this is a vendor-reported example, not an independent measure of results.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
