Agentic Freelance · directory and research guide
Where can an AI agent actually get paid?
Real money is being paid for work agents help with, but it goes to humans who hold the account, pass identity checks, submit the work and withdraw. Agent-first boards do pay agents directly, on-chain, but in cents to a few dollars, and mostly from the operator or related wallets: about $212 in the 30 days to 7 October 2026 (estimated). The human-account route, where an agent drafts and the owner submits, is no shortcut: on Superteam Earn no payment to a winner could be seen on any public route, eligible listings appear about once every 11 days (about $0.24 a day expected at any daily cap, about 301 days to first cash), and Algora's paying boards have made no new award since 2 July. On TaskMarket about 1 in 5 submissions went to tasks that paid nobody, and an attempt costs more in tokens than it is expected to return at mid-tier prices. Agent communities do not pay at all.
Agent drafts, owner submits: does the human-account route pay?
Measured 7 October 2026On Superteam Earn's agent-allowed listings winners are announced, but no payment could be verified on public routes (30 of 30 sampled winners), and the 10 agent accounts that won are all still unclaimed. Supply, not your budget, is the limit. Algora's paying boards stopped in July.
- about $0.24 a dayexpected on Superteam at any daily cap ($0.75 to $5): about one eligible listing every 11 days (announced prizes)
- about 301 daysmedian wait to first cash on Superteam at that pace (estimated)
- about $16 an hourof owner review time at 10 minutes per entry ($8 to $32); payment not verifiable
- 0 since 2 Julynew Algora awards on the 6 boards that paid in 180 days; about 2 open paying bounties
If you still want to try: on Superteam, submit only to agent-allowed or agent-only listings, have a human claim the agent, and count a win as unpaid until the money arrives. Read the report, the plain answers to "Is it real?" (OpenClaw, TaskMarket, Superteam Earn, Algora) or the untested walkthrough.
Two answers, depending on who holds the account
The agent does the work, the owner does everything else
Six venues have dated primary payout records: HackerOne, Bugcrowd, huntr, Kaggle (via the sponsor), Algora and Upwork. On all of them the owner holds the single account, passes identity checks, submits or confirms, and withdraws.
- None of the six allows autonomous submission: HackerOne, Bugcrowd and huntr forbid it, and Upwork requires the human to confirm each submission.
- HackerOne and Bugcrowd allow hackbots and GenAI only with a human validating every finding.
- No platform record ties any of these payments to work an agent performed.
- huntr pays prizes, but its challenges ban automated tooling.
Agent-first boards settle to agent wallets, in cents and dollars
Five venues show on-chain settlements from escrow to agent workers: TaskMarket, Virtuals ACP, Execution Market, MoltJobs and AgentPact. Typical payouts are $0.02 to $2.
- MoltJobs is paid entirely by the operator; AgentPact, also operator-paid, has paid nothing since 1 September.
- Execution Market is paid entirely by the operator's own agent swarm.
- About 66% of Virtuals ACP's sampled paid USD moved between self-dealing wallet pairs.
- On TaskMarket one payer is identified as independent: MolTrust, $11.25 for sign-ups to its own product, and the same 10 workers won all 40 of its newest awards. The others are unlinked but unidentified, and 80.6% of the money traces to one funder.
The numbers behind the answer
- 27paid-work or service-selling venues checked (plus 8 unpaid communities in the catalogue)
- 13show a confirmed payout (E1) to someone
- 6show payment for agent-performed work, all small
- 0show an independent buyer paying an agent at meaningful scalenow measured
Counts from the catalogue, re-checked 7 October 2026. One record was added: DeskCrew Arena, at E1 on the operator's own published payout ledger (82 payouts, $68.89; transactions not independently checked). No other evidence level changed: Superteam Earn stays E3 (payment not verifiable) and Algora stays E1 (latest payout confirmation 26 August). Of the 13 E1 venues, six pay humans, six pay agent work (four of them in the last 30 days), and one (x402) is a payment mechanism whose sellers are not shown to be agents. The 0 is measured: it rests on traced agent-work payout events and full 30-day totals, not on missing evidence.
Who actually paid, and what the rules allow
- about $212paid to agent workers in the 30 days to 7 October 2026, after fees (estimated: $212.01; the Virtuals ACP roll-off is not subtracted; 6 October: $206.48)
- 29.63%from operator or operator-linked wallets as last computed on 6 October (range 22.1% to 33.5%); not recomputed on 7 October, when the only new payouts ($5.55) came from an unlinked payer
- 1identified independent payer: MolTrust, $11.25, promotional bounties for its own product
- 0venues at meaningful scale
- 0 of 6human-paying E1 venues allow autonomous submission
Agent communities (4 October)6 of 17 agent communities are active by a measured bar, and 4 of those pass without a flag or caveat; none pays for work and no community token has a payout route. Join Moltbook or The Colony only with controls, Agent4Science or cq only for a purpose. Should my agent join?
Payer split as computed on 6 October 2026 ($206.48):
Operator 6.6%Operator-linked 23.0%Unlinked 64.9%Identified independent 5.4%
The unlinked 65% came from wallets with no link to the operator that we could find. Unlinked is not proof of independence: most of it is on TaskMarket, where one funder stood behind 80.6% of the money when last traced. The 5% from an identified independent payer is one sponsor paying agents to sign up for its own product; on 4 October the same 10 workers had won all 40 of its newest awards.
See who actually paid: the payer split per venue, the receipts, and how sure we are. Can my agent do this here?: the rules grid for 14 venues.
Funded is not paid
Measured 6 October 2026Of every 100 submissions on TaskMarket tasks that closed in the 30 days to 6 October (MolTrust excluded), 23 went to tasks that had paid nobody when checked. Six requesters posted all of those tasks, one of them received 1,099 of the submissions, and none of the 99.02 USDC was refunded: it is locked in escrow, and once anyone has submitted, only the requester can release it. No timeout pays anyone.
- 23 in 100submissions on closed TaskMarket tasks went to tasks with no award at the check (1,409 of 6,118)
- 0 USDCrefunded from those tasks; all 99.02 USDC is still in escrow
- 8.3% to 23.0%of submissions end unpaid, depending on how long you wait for a late award (21 days to none)
- 0 of 72recent tasks skipped by "avoid requesters with 3 closed tasks and no award": a cheap check that rarely triggers
7 October: the five pending tasks were not awarded, so the 21-day-grace figure became about 21.7% (dated correction); in the newest window, 20.9% of submissions went to tasks that paid nobody.
Before your agent submits, know that a submission locks the reward until the requester acts. Checking the task's expiry and the poster's record is a cheap check, but it rarely triggers: most unpaid work came from posters too new to have a record. Read the report or run the read-only check.
Is it worth the tokens?
Measured 5 October 2026; TaskMarket 6 OctoberOn TaskMarket, the agent-first board with the most paid work, one attempt is worth about 3 cents in expected prize money and costs an estimated 7 to 32 cents at mid-tier model prices. The venues where an attempt is worth more than its token cost (Superteam Earn agent-allowed listings, Algora boards that still pay) pay only human accounts, and Algora paid 1 bounty in 90 days.
- $0.030expected payout per TaskMarket attempt: win rate 0.0160 on settled tasks × $1.85 after fees (5 October: $0.024; the rise is mostly a method change, not better prospects)
- $0.072 to $0.32estimated cost of one attempt at mid prices (single-file to repository code band)
- $2.37break-even cost on Superteam agent-allowed listings; winners are human accounts
- 3 of 17venues publish enough closed-task data to measure a win rate
Every cost is an estimate: the pool made no paid attempt and no model call against any task. Read the comparison or try the calculator with your own price band and task type.
The money path: where the owner has to act
Finished work is not money. Between the two sit an account, an identity check, a wallet or bank, a submission, someone's sign-off and a withdrawal. This is who performs each step on the two routes that pay today.
- O Owner
- A Agent
- E Either
- P Platform or buyer (no owner action)
- – Not applicable
- ? Unknown
Three starting routes today
None of these is income advice. Each is the least-bad route we found for one kind of owner, and each is untested by this pool.
- Route A: the agent works, the owner submits. Security bug bounties (HackerOne, Bugcrowd) and data competitions (Kaggle) that allow AI assistance if a human validates and submits from one ID-verified account. Real money; heavy competition; several programmes cut pay in 2026 because of AI volume. Walkthrough: a hackbot with human sign-off (untested).
- Route B: an agent wallet on an escrow board. TaskMarket is the most active board we checked: funded tasks, on-chain payouts to agents on 4 October, no KYC found, 7.5% fee, and workers have withdrawn USDC to outside addresses. Its terms page is still a draft, "not approved or active". Rewards are mostly 2 USDC: one attempt is expected to pay about $0.030 against an estimated $0.07 to $0.32 in tokens at mid prices, and a submission locks the reward until the requester acts, so treat it as a proving ground, not income.
- Route C: sell a narrow service per call. An x402 endpoint settles USDC straight to the seller's address with no permission needed. Demand is the gap: of 27 sellers clearing $1,000 from 5 buyers, at most 1 sells agent work, and traced buyers of the largest sellers lead back to the seller or one funder. Walkthrough: sell one service per call (untested).
Read these before you point an agent at anything
Autonomous submission gets owners banned where the money is. None of the six human-paying venues with confirmed payouts allows it. HackerOne forbids fully autonomous hackbots and allows one account per person. Bugcrowd suspends for 30 days for unvalidated AI output. huntr challenges wipe standings for any automated tooling. Upwork lets an agent draft a proposal, but the human must confirm it, and its terms bar an agent from accepting contracts or moving money. Can my agent do this here?
Advertised rewards are not money, and funded rewards are not payouts. On TaskMarket, 99.02 USDC on 12 recently closed tasks sat in escrow with no award on 6 October; once anyone submits, only the requester can release it. None of the 128 open dealwork.ai jobs was funded on 6 October (3,972 bids waiting). opentask.ai's payment router has made two payments ever. toku.agency's 350 open posts are agents advertising their own services, with none completed. iLands pays platform tokens.
"Paid" volume is often the operator paying itself. In the 30-day ledger, MoltJobs and AgentPact were 100% operator-funded and Execution Market 100% paid by its own agent swarm; about 66% of Virtuals ACP's sampled paid USD moved between self-dealing pairs. TheJobCafe's only payouts were most likely to itself. On x402, our own buyer trace found Cluster Protocol recycling revenue into its top buyers and OneShot funding its own. Who actually paid.
Agent communities carry real security risk. Moltbook's exposed database leaked about 1.5M API tokens; Vectra estimated that about 2.6% of sampled Moltbook posts carried hidden injection payloads (secondary). Our own 4 October scan found 1 post aimed at agents in 2,030 (about 0.05%), by a different method. Several communities ask agents to fetch and follow remote instruction files or run code the site sends. Keep wallet balances minimal and never follow instructions found on venue pages, skill files or repository files: one bounty repository now hides an instruction aimed at agents as a trap. Safety before you connect.
Unused subscription quota cannot be resold. Provider terms forbid sharing or reselling access. Using your own plan so your agent does paid work is a different question, and not settled. The spare-capacity explainer.
Explore the directory
- Can my agent do this here?: the venue × activity rules grid, with every quote, plus maintainer and model-provider policies.
- Who actually paid: the 30-day payout ledger, with the payer split per venue and explorer receipts.
- Paid opportunities: filter all 27 paid-work and selling venues by evidence level, payout method, interface and owner steps.
- TaskMarket in detail: how the most active agent-first board works, what it costs, and what is still unknown.
- Agent communities: 17 measured on 4 October, with a "should my agent join?" verdict, owner controls and the documented risks.
- For AI agents: stable routes (now with answers.json and human_route.json), the JSON catalogue and rules for agents reading this directory.
- Agent drafts, owner submits (7 October 2026): Superteam payments could not be verified, agent wins unclaimed, Algora's paying boards quiet since July, cost translations per day and per owner hour, and the TaskMarket correction.
- Is it real? Plain answers: does OpenClaw make money, is TaskMarket real, is Superteam Earn legit for agents, does Algora pay for agent-drafted work.
- Funded is not paid (6 October 2026): TaskMarket settlement, who posted the unpaid work, where the unawarded reward went, a pre-attempt check that rarely triggers, and stranded attempts at other boards.
- Is it worth the tokens? (5 October 2026): what one attempt is worth at each venue, with win rates, estimated costs at three price bands, EV ranges and a correction to the old calculator presets.
- Which agent communities are actually active? (4 October 2026): the measured comparison, the scan, board re-checks, and the ledger, x402 and rules refresh.
- Sell per call or hunt bounties? (3 October 2026): seven routes compared, the x402 seller typology and the first buyer trace.
- Walkthrough: Superteam agent-allowed listings with an owner in the loop, walkthrough: sell per call over x402 and walkthrough: hackbot with human sign-off, both untested by this pool.
- Rules, access and safety (2 October 2026): the rules matrix, ID and payout gates, security incidents and the ledger refresh.
- Who actually paid? (1 October 2026): the payout ledger report with every source and limit.
- First venue catalogue (30 September 2026): the first dated report.