Google built the rail every AI agent will ride

Yesterday Google handed its AI a debit card and a 24/7 shift.

The headline is the agent.

The moat is one layer down.

Coffee at the ready.…

Google's flashy new Gemini Spark agent is the distraction; the payments rail underneath is the trap.

At I/O 2026 yesterday, Google unveiled a 24/7 cloud agent powered by Gemini 3.5 Flash, with permission to act unprompted. 60 payments and tech giants have already signed on to the rail moving the money.

Watch which rival agent vendor adopts it first.

The agent gets the demos. The protocol gets the decade.

Spark runs on Google Cloud, not your phone.

Close your laptop, lock your screen, go to sleep. It keeps working. It reads your Gmail, parses your credit card statements for hidden subscriptions, and from this week talks to Canva, OpenTable, and Instacart.

Google says it will "make purchases on your behalf in the coming months."

"On the team, we think of it as if you're giving a teenager their first debit card" — Josh Woodward, VP of Gemini, at the pre-event press briefing.

The official disclaimer goes further: Spark "may share your info or make purchases without asking."

The parental controls cost $100 to $200 a month, Ultra subscription required.

The teenager metaphor is doing a lot of misdirection.

The real play is the Agent Payments Protocol (AP2) underneath. Launched last September with Mastercard, PayPal, American Express, and Coinbase aboard. Donated to the FIDO Alliance last month, with v0.2 quietly adding "Human Not Present" payments.

Agents buy when you're not there to click yes.

Here is the catch every rival agent vendor has to swallow.

Anthropic's Cowork, OpenAI's Operator, OpenClaw — they all need a payments rail or they cannot actually transact. AP2 is open, FIDO-governed, and already wired to 60+ networks. Adopt it and Google sets the trust assumptions for every agent purchase on the internet. Refuse it and your agent stays a demo.

Either way, the data graph most of us already live inside just hired a porter.

Pro: One open, signed standard beats 60 proprietary wallets, and AP2's cryptographic audit trail is a real upgrade on today's liability black box.

Con: The standard's author monetises your search history, sits in every Spark transaction, and ships agents with documented permission to act unprompted.

Our read: The interesting question is not whether AP2 wins, but how its rivals avoid riding rails their fiercest competitor designed.

[Report] Google Cloud — "Announcing Agent Payments Protocol (AP2)"

The protocol explicitly drops the assumption a human clicks buy, replacing it with signed mandates any compliant agent can issue.

Why it matters: The trust model for online payments is being rewritten by the company holding both the users and the rail.

Spark "may share your info or make purchases without asking" — Google disclaimer.

Google Blog — AP2 donated to FIDO Alliance — The "Human Not Present" update is the line everyone skipped.

Android Authority — Spark, Daily Brief, and the Gemini redesign — The clearest breakdown of which apps Spark reaches into.

Crypto Briefing — Why an AI watching your card statements unsettles crypto natives — Same trust problem, different tribe spotting it first.

Would you let Gemini Spark run your card?

You can read all our back issue newsletters for free here.

For the love of coffee, see you tomorrow!

Enjoy your Wednesday, keep it caffeinated.

Wednesday's brew, done.

Quick disclosure before you close the tab:

I'm sending this from Gmail.

Google already has the data graph. I'd still rather chew through my own subscriptions on a Sunday than hand the card over.

The agent revolution will be voluntary, the data extraction won't.

Read yesterday’s newsletter about Meta’s reassigned workers here.

Thanks for reading!

Are you subscribing?

Join your crew of caffeinated sceptics today.

Be sure to get your daily Curse and Coffee fix by hitting the button below.

Open Monday to Friday.