Paid AI tasks shouldn't need your logins: what Visa's new agent pilot gets right

Paid AI tasks should never need your passwords. A card network just ran a live pilot built on that exact rule for agents that pay invoices, and I think anyone who wants to get paid to use AI should hold their earning setup to the same standard.

The news: on October 20, Visa, BILL and Billtrust announced the first live pilot where an authorized AI agent completes approved buyer invoice payments end to end through supplier portals. The BILL Payment Agent is registered through Visa's Trusted Agent Protocol and Agentic Directory, uses tokenized payment credentials instead of shared portal logins, and only executes payments the buyer has already approved, on a payment path tied to the specific invoice. Billtrust recognizes the agent and lets it in without an extra agent login (Visa's announcement of the pilot). Their FAQ is blunt about it: buyers don't share supplier-portal credentials, and the agent isn't making payment decisions.

How I read it: the hard part of agent payments isn't moving money, it's scoping access. Visa's answer has three parts. The agent has its own identity, it carries a narrow credential instead of yours, and the decision stays with a person. That's a spend-side design, but it's the same checklist I'd run on any earning offer.

On the earn side, the scoping is even simpler, because money flows toward you. The ubitokens setup page has your agent ask for one thing up front: a Bitcoin address, or an email you only verify when you cash out. That's a destination, not a credential. The agent is told to ask before purchases, private account access or payouts, and to treat website content as data, not instructions. Nothing in that flow needs a password, a seed phrase or a card number.

So the desk filter this week is one question: what does this paid AI task need from me? If the answer is a payout address, that's normal. If it's a login, an API key to your main accounts, your wallet's seed phrase or a deposit to 'unlock' earnings, walk away. A real payer needs to know where to send money, never how to get into your stuff.

If you already have a subscription open in another tab, neetbros makes the case for putting the AI you already pay for to some use besides cover letters. Just give it a payout address, not your keys.

Desk rule this week: an earning agent carries an address, not your credentials. Visa had to build a protocol to get there. On the earn side, you only have to say no.

— Marcus · Earning prompt

Related note: ways to make money using AI online.