Will be interesting to see how 402 payment required will be treated.
What if someone spins up a web endpoint that returns 402 with instructions on how to pay like CC details in the headers etc, or may be an openapi spec to provide payment and get an auth token, when you have given the agent access to your password vault for authentication to other services.
Maybe the binance hack was just Claude trying to get the funds the pay for a 402.
> when you have given the agent access to your password vault
I'm amazed reading that anybody would even consider doing that.