What an AI agent needs to rent a GPU

Cloud GPUs assume a person. Someone signs up, verifies an email, adds a card, generates an API key, and stores it somewhere the software can reach. Every step wants a human, and the key that comes out the other end belongs to whoever holds it.

An agent that has to wake a person up to rent a GPU is not autonomous. It is a script with a queue.

The wallet is the account. An agent signs a short challenge, proves it controls the key, and gets a session. Nothing to provision, nothing to rotate, and no shared secret sitting in a config file waiting to leak.

The same wallet is what pays, so spending and identity are the same fact. You can see what an agent did by looking at what its wallet did.

Leases are funded in USDG on Robinhood Chain, and the wallet needs a little native ETH there for gas. Fund it once and the agent works until the balance runs out.

For a single job, x402 skips the lease entirely: submit a command, pay per request, read the output. That path accepts USDC on Base as well, which is what most agents already hold.

Images are referenced by digest. A tag can be repointed at different bytes after you approved it, so a tag is a promise and a digest is an address. The quote names the exact image before any money moves.

Access arrives as a temporary SSH credential scoped to the lease, and the workspace is destroyed when the lease closes.

The SDK handles the full lifecycle in a few lines: quote, fund, wait for readiness, run a command over SSH, release. The MCP server exposes the same operations as tools, so an agent leases a GPU the way it calls anything else. x402 covers one-shot jobs with no lease to manage.

What none of them need: a browser, a signup form, or a card. If you want to watch what your agent is doing, there is a console, and the agent never touches it.

Give an agent its own wallet and fund it with what you are willing to lose. Escrow is capped at 50 USDG per lease and a lease runs at most six funded hours, so a runaway loop has a bounded cost.

Anything the agent must keep private belongs in the vault. Items there carry the weakest class of machine they may be released into, and today that floor stops a card or a credential from ever reaching a rented box.