Grok Bot can shop online, one human-approved charge at a time
The two-week-old agent uses Stripe Link to request a single-use card after each approved spend, starting with US users.
By Ryan Merket · Published
Primary source: X
Why it matters
Payments let Grok Bot turn product research into a completed transaction, giving SpaceXAI a route into consumer shopping and automated business spending.
Grok Bot (@bot) can now complete online purchases using single-use payment cards from Stripe Link, pushing SpaceXAI's new browser agent beyond product research and into transactions.
https://x.com/bot/status/2093419921007108385
Users connect a Link wallet, tell a Bot what to shop for and receive a request to approve the proposed charge, according to a two-post thread published Friday. After approval, Link supplies Grok Bot with a secure card created for that payment. SpaceXAI said the feature is initially available in the US, with mobile access planned later.
The approval step keeps Grok Bot from independently deciding to spend money. The user remains responsible for authorizing each charge, while the Bot handles the browsing, product selection and checkout work around it.
A payment rail for a browser agent
SpaceXAI launched Grok Bot on August 11th as a collection of persistent agents that operate on a cloud computer with access to a browser, terminal, files and signed-in web services. The product is built around delegation: a user assigns a task and the Bot continues working after the user closes the application, returning when it needs a decision or approval.
Purchasing gives that architecture a concrete endpoint. A Bot that finds a product, compares sellers or prepares an order can now finish the transaction instead of returning a checkout link for the user to handle. The single-use card also means SpaceXAI does not need every retailer to build a checkout specifically for Grok Bot. The Bot can attempt to use the same card forms designed for human shoppers.
The payment infrastructure comes from Stripe Link's wallet for agents, which Stripe introduced on April 29th. Link lets an authorized agent request either a temporary virtual card or a Shared Payment Token backed by payment methods already stored in the user's wallet. Stripe says the raw card or bank credentials are not exposed to the agent.
Link can restrict a payment credential by factors including the merchant, amount and currency. Under the current flow, Link sends the user a spend request before releasing the credential. The user can then track transactions and manage connected agents through Link.
That setup gives Stripe an influential position between AI assistants and online sellers. Agent developers get a payment system without building a consumer wallet, while Stripe controls the authorization layer that tells merchants whether a machine-initiated transaction carries a buyer's permission.
Grok Bot is moving quickly from work to spending
The shopping feature arrived 17 days after Grok Bot's beta release and two days after SpaceXAI expanded access across its subscription lineup. Grok Bot is included with SuperGrok plans, Cursor Pro, Pro+ and Ultra, and Cursor Teams plans. Usage is metered separately from customers' existing Grok and Cursor allowances, SpaceXAI says.
SpaceXAI has pitched Grok Bot primarily as a work product. Its launch material described Bots researching sales accounts, updating customer relationship software, processing invoices, reproducing software bugs and preparing marketing campaigns. SpaceXAI's August 26th update already listed purchasing a domain as part of a website-building workflow. The Link connection formalizes the payment step and makes it available for broader shopping assignments.
Money also raises the cost of a bad agent decision. SpaceXAI's security documentation recommends explicit approval boundaries for purchases, financial transfers and other consequential actions. It warns users to verify the target, scope and values presented in an approval request before allowing an action.
Grok Bot's architecture adds another consideration: all Bots belonging to one user share the same cloud computer, including browser sessions, files and application logins. SpaceXAI tells users not to treat separate Bots as separate security boundaries. A connected Link wallet therefore belongs inside the same access review as the other accounts available on that shared machine.
The immediate experience still depends on whether Grok Bot can navigate a retailer's product pages, inventory system and checkout reliably. Captchas, login challenges, delivery restrictions and rapidly changing availability remain part of the web that the Bot must operate. Link solves the credential problem after the user approves the purchase. Grok Bot still has to get the right item into the right cart first.