Quick answer
Cloudflare’s announced model separates human financial authority from agent spending authority. An Account Wallet belongs to a human-operated Cloudflare account; a Virtual Wallet would let an agent spend through an API key inside delegated rules.
Both wallet execution surfaces are described as forthcoming in the August 4 announcement. Treat this page as architecture planning, not confirmation of availability. Start with the Wallets preview guide.
Responsibility comparison
| Dimension | Account Wallet | Virtual Wallet |
|---|---|---|
| Primary operator | Human account owner or administrator | Agent or service using an API key |
| Funds | Adds, removes, and delegates account funds in the proposed model | Spends delegated funds |
| Authority | Defines policy and approves overrides | Acts only within assigned policy |
| Controls named by Cloudflare | Balance, allowances, allowlists, maximum transaction size | Enforced permissions and maximum spend |
| Escalation | Authorized human can review and change limits | Requests override when policy blocks spend |
| Identity | Account-linked handle can be shared optionally | May identify as a delegate of the account |
Design for revocation and recovery
API-key operation requires more than a budget. Use one key per agent and environment, narrow merchant and purpose scope, short expiry, secure storage, rotation, immediate revocation, idempotency, receipts, and an independent kill switch.
Define what happens when an agent is compromised, a merchant response is malicious, a price changes, settlement is delayed, a duplicate request appears, an allowance is exhausted, or the human reviewer is unavailable. Fail closed when authority or transaction state is ambiguous.
Do not confuse delegation with ownership
A Virtual Wallet limit would constrain spending; it would not make the agent the owner of the Account Wallet, authorize fund withdrawal, approve any merchant, or transfer legal accountability. The account owner remains responsible for policy, monitoring, exceptions, and applicable financial, tax, procurement, privacy, and security review.
Use the spending guardrails guide for policy design and the x402 relationship guide for payment roles.
Frequently asked questions
Who controls a Cloudflare Account Wallet?
Cloudflare describes Account Wallets for human Cloudflare account owners who fund, withdraw, and delegate spend to Virtual Wallets.
How would a Virtual Wallet operate?
The announcement describes a Virtual Wallet as an API-key-operated agent wallet that can spend only under permissions and limits set by the Account Wallet owner.
Are Account and Virtual Wallets available now?
The announcement establishes current handle claiming but describes wallet setup, funding, and use in future tense. Verify live product documentation before implementation.
Official source
Source check: August 12, 2026. Recheck product availability, authority model, key handling, controls, assets, geography, fees, and terms.