When AI agents pay in bitcoin: Lightning, L402 and what to watch in Lugano

An AI agent is a program that carries out tasks by itself: it searches, calls other services, buys data. To pay for these things it would normally need a card, an account and an API key that a human set up. The Lightning Network, bitcoin's fast payment layer, offers another way: the agent pays a small invoice and gets access straight away. Several sessions at Plan ₿ Forum on 23–24 October cover this topic.

L402 is a payment protocol from Lightning Labs. It uses the HTTP status code 402 "Payment Required", which has existed in the web standard for decades but was rarely used.

1. The agent requests a paid resource, for example an API.
2. The server answers 402 with a Lightning invoice and a token.
3. The agent pays the invoice and receives a proof of payment.
4. It repeats the request with the token and the proof, and gets the data.

There is no sign-up, no stored card and no API key to leak. In the words of the documentation, "credentials are purchased, not provisioned."

Lightning Labs has published lightning-agent-tools, an open-source set of seven skills and a server for AI assistants:

• lnget: a command-line downloader that pays L402 invoices automatically, caches tokens and retries the request. The --max-cost option caps how much it may pay per request.
• Aperture: a reverse proxy that lets a seller put an L402 paywall in front of an existing API.
• An MCP server with 18 read-only tools, so an AI assistant can look up a Lightning node's state without being able to move funds.

The kit uses a remote signer by default: the agent's machine does not hold the private keys, a separate machine signs. The documentation adds: "For production use with significant funds, use watch-only mode with a remote signer."

Learn the basics of Lightning in our Learn section.