Back to blog
Agentic Infrastructure6 min read

What Actually Ships: The Four Powers of an Agent

AI agent infrastructure needs four primitives: identity, wallet, payments, policy. Why ERC-4337 and ERC-8004 are the foundation.

Parth Chaudhary
What Actually Ships: The Four Powers of an Agent

The short version: AI agent infrastructure is the set of systems an autonomous agent needs to act in the economy on someone's behalf, not just reason about it. At Abstraxn we call them the Four Powers: identity, so others can verify which agent they are dealing with; a wallet, so it can hold and move value; payments, so it can pay per call without a human; and policy, so its spending stays inside rules it cannot override. An agent missing any one of them either can't act or can't be trusted to.

The last piece ended on a line: agency that has been authorized, not agency that has to be supervised. The substrate is here, and the protocols are ready. Moving from that claim to deployable AI agent infrastructure takes a stack, not just a chain.

This is that stack, and the shape it has to take to be useful. The rest of this piece walks through the layers that work, and the two the market keeps under-shipping.

Key Takeaways

  • AI agent infrastructure needs four primitives, not three: identity, wallet, payments, and policy.
  • Externally Owned Accounts cannot scope permissions, expire credentials, or sponsor their own gas, which makes them unsafe for autonomous agents.
  • ERC-4337 and EIP-7702 turn the wallet into a programmable contract that can enforce limits and rotate keys.
  • The market has built wallets and payments. Identity (ERC-8004) and policy remain the underbuilt half.
  • The Abstraxn Agent Layer ships identity, wallets, and payments, plus the first policy controls, on account abstraction infrastructure that has secured $5B+ in volume.

Why EOAs Fail as AI Agent Infrastructure

Start with the wallet, because that is where most agent-and-money attempts break. Externally Owned Accounts, which most of crypto still relies on, are hostile to agents.

An EOA is tied to a single private key. It cannot enforce spending limits or rotate permissions, it cannot pay its own gas, and it cannot validate logic before signing.

Handing an EOA's private key to an autonomous agent is the digital equivalent of giving a teenager your credit card, your car keys, and your house alarm code, then leaving for a two-week vacation. The agent can act. So can anyone who pulls the key off a compromised machine. With no scoping, no expiry, and no audit trail at the protocol level, the wallet simply does what the key tells it.

That is not autonomy. It is unsupervised exposure with extra steps.

How Account Abstraction Powers AI Agent Infrastructure

Smart accounts under ERC-4337 and EIP-7702 stop treating the wallet as a passive keypair and make it a programmable contract.

That means you can attach policies, scope permissions, and rotate keys without losing the account. You can batch operations, or let a third party (a paymaster) sponsor gas in any currency, or in no currency at all.

Session keys are a big unlock for agents in this model: short-lived, narrowly scoped credentials that let an agent act inside defined limits and expire when the job is done. The agent signs a UserOperation, a bundler picks it up, and the Abstraxn Paymaster sponsors the gas if the rules allow it.

The wallet stops being a credit card with no back-of-house controls. It becomes infrastructure that knows how to say no.

But the wallet is one primitive. AI agent infrastructure needs four.

The Four Powers of AI Agent Infrastructure

Strip away the framing and an autonomous, non-human actor needs exactly four things to function. Not three. The shape of the gap matters.

1. Identity

The agent has to be addressable, verifiable, and accountable across protocols. A wallet address anyone could spin up in thirty seconds is not enough. It needs a persistent on-chain presence with reputation, provenance, and a way for the rest of the network to know which agent it is dealing with. ERC-8004 is the standard taking shape around this exact question, and we cover how it is checked in practice in Agent Identity Verification.

2. Wallet

The smart account itself, built on ERC-4337 and EIP-7702. It is the home address for the agent's value and the substrate every other power plugs into. We walk through building one in AI Agent Wallets: How to Build an Agent That Can Actually Pay.

3. Payments

The rails have to match how agents actually transact. Agents don't make one big purchase a day; they make hundreds of small payments an hour to APIs, marketplaces, and other agents. x402 lets an agent pay for a data feed in the same HTTP call that fetches it, and MPP, the Machine Payments Protocol from Stripe and Tempo, is a second live rail alongside it. Either way, the agent pays before it receives the data, because the data feed will not extend it credit. The full flow is in Building an AI Agent That Can Pay Its Own API Bills.

4. Policy

Policy decides whether a given transaction is allowed to happen at all, and it is enforced before signing, before the agent can act. In full, that means spend caps, allowlists, time windows, approval thresholds, and an audit trail a compliance team can read: guardrails that live in the infrastructure, not in a prompt you hope the model respects. At Abstraxn, address allowlists, address blocklists, and per-transaction limits are live today, and the rest is in active development. Where those limits have to live is covered in AI Agent Spending Limits. The check that sits above them, Know Your Intent (KYI), verifies each action against what a human actually authorized.

The industry has crowded into wallets and payments, and money in and money out is broadly solved. Identity and policy are the underbuilt half, and they are the half that decides whether agents go into production or stay in demos.

The Abstraxn Agent Layer: AI Agent Infrastructure in Production

Here is what production AI agent infrastructure looks like at Abstraxn today.

A dashboard deploys a wallet-equipped, transaction-capable agent in minutes, not months.

Every agent gets a server wallet whose keys stay server-side in Abstraxn's signing infrastructure, never in the agent runtime or the browser, so teams don't roll their own custody and end users never see a seed phrase. Spend policies and interaction policies attach to the agent server-side, where its reasoning can't reach them.

The Abstraxn Paymaster is wired in by default, so agents can transact gaslessly on supported chains, sponsored or self-funded according to the rules the team sets.

The dashboard ships with 50+ pre-integrated MCP tools (Model Context Protocol servers), giving every agent reach into marketplaces, data feeds, DeFi protocols, and off-chain APIs without custom integration glue. A growing catalog of ready-to-use tools, including price oracles, swap routers, identity verifiers, and settlement helpers, lets agents compose real workflows from the start.

All of it sits on the same account abstraction stack (bundler, paymaster, and relayer) that has already secured $5B+ in volume across 100k+ transactions for 50+ integrations, at 99.99% uptime. The infrastructure is battle-tested. We are exposing the right shape of it for what is fast becoming the largest user category in Web3: the agent itself.

The Bigger Picture

The first wave of the internet taught machines to talk to each other. The second taught them to serve content to humans. The third, the one we are standing at the edge of, is about machines transacting with each other on behalf of humans, at speeds and scales human-mediated commerce cannot reach.

That world will not run on Web2 rails, and it cannot run on EOAs. It will not survive on infrastructure built for one human, one credit card, and one checkout button at a time.

It runs on programmable wallets, sponsored gas, session-scoped authority, and identity that holds across protocols. Above all, it needs a policy layer that enforces trust before the signature, not after the loss. The Agent Layer is live at dashboard.abstraxn.com. Spin one up and send it after something.

The agents are coming. Build accordingly.

Frequently Asked Questions

What is AI agent infrastructure?

The systems an autonomous agent needs to act on someone's behalf rather than only reason: a verifiable identity, a wallet it can hold and move value with, payment rails it can use without a human, and policy that keeps its spending inside rules it cannot override. Abstraxn calls these the Four Powers.

What are the Four Powers of an agent?

Identity (who the agent is, verifiable through ERC-8004), wallet (a programmable ERC-4337 or EIP-7702 smart account), payments (rails such as x402 and MPP for per-call payment), and policy (rules enforced before signing, such as allowlists, blocklists, and per-transaction limits).

Why can't an AI agent just use a regular crypto wallet?

A regular wallet, an externally owned account, is a single private key. It can't scope permissions, expire credentials, sponsor its own gas, or check a transaction against rules before signing, so anyone holding the key, including a compromised agent, can move everything in it.

Which of the Four Powers does Abstraxn ship today?

Identity, wallets, and payments are live in the Abstraxn Agent Layer. For policy, address allowlists, address blocklists, and per-transaction limits are live, and broader controls such as approval thresholds and velocity caps are in active development.

About the Author

Parth Chaudhary

Parth Chaudhary

Solution Architect

Parth Chaudhary is a Solution Architect at Abstraxn. He works at the intersection of account abstraction and agentic AI infrastructure, on wallets, paymasters, agent identity, and the policy guardrails that keep autonomous agents inside their limits. Find out more at abstraxn.com or spin up an agent at dashboard.abstraxn.com.