Yes, AI agents can buy domains through MCP servers and x402 APIs, paying in stablecoins or through a checkout link a person approves. Keep it safe by having the agent get a price-locked quote, show it to you for approval, and pay from a key, balance or wallet capped at what you're willing to spend.
The 7-step safe purchase flow
- Check availability and price right before buying (
search_domainsorquote_domain). - Preview with
create_orderanddry_run=true: the live quote, renewal price and any blockers, with nothing charged. - Create the order to get a price-locked quote, its lock expiry and a
checkout_url. - Show the human the domain, years, total, token and chain, and the renewal price. Get an explicit yes.
- Or hand the human the
/order/{id}link to pay with a wallet, QR code or card. - Send an
idempotency_keyand reuse it on retries, so no order is created or charged twice. - Pay the exact amount before the lock expires, then poll
check_orderuntil it completes.
Spend caps and scoped keys
Cap what the agent can reach, in layers:
- Scoped API keys: give the agent a key with
scope=read(look, don't touch),allow_purchase=false(manage DNS but never spend) or a list of allowed domains. - Monthly spend cap: set
PUT /api/v1/account/spend-capwith{"monthly_spend_cap_usd": 50}. Orders that would pass the cap are refused with 403 and nothing is charged. A scoped agent key cannot raise its own cap. - Prepaid balance: top up a fixed amount and let the agent use
buy_with_balance, so it can never spend more than you put in. - No-purchase server: connect chat apps to
https://stabledomains.net/api/mcp/discover, which searches and quotes but has no buying tools. Purchases come back as a checkout link for you.
Wallet scoping for x402
Use a dedicated wallet with a small USDC balance, never your main wallet. Sign the exact quoted amount and asset, nothing else, and refuse anything above your cap. The StableDomains x402 register endpoint quotes the exact live USDC price on Base in the 402 response, refuses premium or unavailable names before payment, and replays return the same order.
Avoiding typosquats and scam domains
Check spelling against the brand and avoid lookalike characters. Run WHOIS and DNS checks. Watch premium flags (quote_domain returns premium and renewal_price) and renewal jumps on the domain prices report. Confirm you're connected to the real endpoint at stabledomains.net.
Card payments: what agents can and can't do
Agents don't pay by card on their own. A person pays the checkout link by card, or approves a Stripe Link request. A card fee is added.
What the human should set up
- A scoped API key and a monthly spend cap
- A dedicated small wallet or prepaid balance
- An approval rule: no payment without showing the quote
- A renewal plan: auto-renew from a renewal balance (
set_auto_renew) or a calendar reminder - Signed notifications (
set_notification_webhook) - API keys kept out of prompts and rotated
See how purchases are kept safe, agents.md and StableDomains vs Porkbun MCP.
FAQ
Can AI agents buy domains? Yes. Through an MCP server such as stabledomains.net/api/mcp or an x402 API, paying in USDC or USDT on 7 chains, or by handing you a checkout link.
How do I limit what my AI agent can spend? Give it a scoped API key, set a monthly spend cap, and fund a prepaid balance or a small dedicated wallet. Require approval for each order.
Is x402 safe for agent payments? x402 signs a specific amount to a specific recipient; the risk sits with the wallet. Use a dedicated low-balance wallet and sign exact quoted amounts.
Can my agent pay for a domain with my credit card? Not on its own. You pay the checkout link by card, or approve a Stripe Link request.
Can I preview a purchase without paying? Yes. dry_run=true on orders, renewals and DNS changes returns the quote and blockers and charges nothing.