Nevermined Product

Platforms want one upstream. Model routers proved it.

Model routers showed that a platform would rather plug into one upstream that aggregates, normalises, ranks and keeps the long tail healthy than hold a dozen vendor relationships itself. The same is now true for the paid services an agent buys, and the hard part is the work nobody wants to own.
By
Robin
Oct 8, 2026
The two pages from the live run. Every label on the left is an account a human would have had to open. Every label on the right is a purchase on the receipt.
See Nevermined
in Action
Real-time payments, flexible pricing, and outcome-based monetization—all in one platform.
Schedule a demo
Two upstreams, one product: a platform's agents reach models through a model router (already decided) and everything else an agent buys through the AI Services Catalog (open), shown with the marks of real catalog listings. The platform keeps the user, the bill and the margin; the upstream owns one call shape, a catalog kept current, rank on real usage, routing around outages and cost per key.
Fig. 1 · Two upstreams, one product. The read-across. A platform already made the upstream decision once, for models. The services half is the same decision, and the split of who owns what is the same too. Model names are shown as type; the service marks are real catalog listings.

What the model router actually sold

Every serious development platform now routes models through one upstream. Not because it could not call OpenAI directly, but because it did not want to own what came with calling everyone: a different call shape per vendor, a different catalog, a different bill, a different way of failing.

OpenRouter describes itself in one line: “A unified API for every major LLM. One endpoint, hundreds of models, with routing, fallbacks, and cost tracking across providers.” Read that as a list of chores a platform declined to do. Normalise every provider to one call shape. Keep a catalog current as 400 models come and go. Rank them by real-world usage, not by press release. Route around outages. Track cost per key. By its Series B in May 2026 that upstream served 8 million developers, and Stripe has since agreed to buy it.

The pattern repeated at the infrastructure layer. Vercel AI Gateway sells budgets per team, project, key or member on one balance, and in October 2026 widened that balance from text to image, video, speech, embeddings, reranking and web search. Cloudflare's unified billing lets a developer use providers with no provider keys at all. Second-tier gateways such as Portkey and LiteLLM sell the same thing to platform teams: one upstream, per-key budgets, a ledger.

The lesson is not “models are a commodity”. It is that a platform will pay a spread to an upstream that does the dirty work, so long as the upstream stays in the background and the platform keeps the user, the bill and the margin.

The same shape, now for services

An agent does not stop at models. The moment a job needs a web search, a page scraped, a company enriched, a filing read or a sentence translated, it needs a paid service from a vendor it has never met.

The agent can pay. That part is no longer the obstacle. Visa reported live agent-initiated purchases with independent European merchants in July 2026, with more than 30 issuers behind them; Mastercard's Agent Pay followed with cards an agent can use on its own. On the machine side, pay-per-call protocols such as x402 and MPP let a service quote a price in the HTTP response and settle the call in the same breath. Agent identity is arriving on the same timeline. So “an agent cannot open an account” is yesterday's problem, and we do not build on it.

What is left is harder: knowing what to buy, whether it works right now, what it will cost, and whether the vendor settled what it quoted. Platforms are feeling this one vendor at a time:

  • Replit's agent handles a few paid third-party APIs “behind the scenes, no API keys or setup required”, billed to Replit credits at the provider's public rate. Three vendors, with everything else still a key in Secrets.
  • n8n's SerpAPI node asks the user to sign up with the vendor and paste a key. When Firecrawl shipped a native n8n connection, Firecrawl kept the billing: “n8n is not involved”.
  • LangSmith Fleet bundles thousands of tools and states that fees for third-party tools “are billed by the third-party provider”. One invoice per vendor, under the platform's roof.
  • Vercel's own guide for coding agents procuring integrations stops for a human at “selecting paid plans or accepting terms”.
Nine paid services, each shown by its own mark, times four things each (call shape, catalog entry, bill, way of failing) equals 36 things to integrate bought direct, against one call shape, one catalog, one bill and one ledger through one upstream. Below, how Replit, n8n, LangSmith Fleet and Vercel handle it today, one vendor at a time.
Fig. 2 · Vendor by vendor, the platform owns it all. The four rows are the four things the model router took off a platform's hands: a call shape, a catalog entry, a bill and a way of failing. Multiply by every vendor a job touches and the platform is running a procurement desk.

Each of these is a platform doing by hand, for one vendor, the thing the model router did for all of them. That is the gap: one upstream for the paid services an agent uses, with the same discipline the model router brought to models.

The dirty work, named

What does the upstream have to own? More than a list. Here is the work, in the order a platform discovers it.

01 · Indexing and schemas

Every listing needs an endpoint, a price, a request shape and a response shape an agent can act on without reading a landing page. Today the AI Services Catalog holds 160+ listings from 150+ providers across 13 categories, each with a slug, a category, a protocol and a price, in the same words a model router uses, with the same meaning.

02 · Search by need, not by vendor

An agent asks “find the funding news for every company on my list”, not “call Exa”. Semantic search over the listing text, unioned with full text, serves one ranker behind the endpoint, the app and search, so what the platform shows its users is what Auto picks.

03 · Quality on settlement evidence

A list says a service exists. A settlement says it works and charges what it said. The shelf is ranked on real settlements: traction counted in distinct paying customers over 30 days (at least two, so no single buyer can fake it), and price integrity measured as advertised against settled. A competitor can copy the list. It cannot copy an observation.

04 · Liveness, every hour

Every listing receives a real unpaid request each hour, and the payment challenge is read back. Two different buyers refused at settle, and the listing leaves Auto. Money is the test.

05 · Budgets and per-user controls

A budget a human set: cap, per-call limit, expiry, call count. Revoked in one action. The agent cannot raise it. Per user, per agent, or shared across a team.

06 · One ledger

One line per call, exported per caller, so a platform's finance function reconciles agent spend the way it reconciles anything else.

07 · Fallbacks (direction, not shipped)

This is where honesty matters. Today Auto returns one pick with its reasons, and the platform chooses the next move from the same shortlist. Automatic fallback to the next listing is the direction, the same way the model router moved from one pick to routing around outages, and it is not shipped.

From a listing to a pick: index, probe every hour, score on settlements, rank, Auto returns one pick with the record, and fallback to the next listing drawn dashed as direction, not shipped. Budget and ledger apply to every call.
Fig. 3 · From a listing to a pick. The stations a listing passes through before an agent ever sees it, with the budget and the ledger applied to every call. Fallback is drawn dashed because it is the direction of travel, not a shipped behaviour.

The score in the middle is one function, the same for every listing.

The quality function: qualityScore is a function of SettleGate, Liveness, Traction and PriceIntegrity, each defined. A gated listing scores zero; weights are tuned, the same for every listing, and not published.
Fig. 4 · The quality function. Money is the test: the gate and the score both read settlements, which only the party routing the calls can observe.

A platform could build any one of these. Building all of them, and keeping them true as 150 providers change prices and endpoints, is the work it declined to do for models and will decline to do for services.

Why an upstream beats building it

Four things a platform gets from an upstream that it cannot get from a vendor-by-vendor integration programme.

Supply grows with demand. Service providers list their own services on the same shelf, where Auto finds them like everyone else. A platform that builds its own shelf adds vendors at the speed of its partnerships team; a shared shelf adds them at the speed of the market. Service providers are the one row lit on both sides: they buy what their product needs and sell what they make, on one ledger.

The record of every pick. No model reads the listings. Auto scores the shelf on the sentence and returns one listing with what was considered and why this one won. For a compliance function, “here is why” beats “the agent chose”.

Agents ask in plain words; the AI Services Catalog scores the shelf on the sentence and returns Exa Search, Firecrawl Scrape and PredictLeads, with the record of the first pick showing what was considered and why Exa Search won.
Fig. 5 · You do not browse the shelf. You ask it. Three needs in, three listings out, each with the shortlist it beat. The illustrative record shows the shape of what is kept for every pick: the candidates and the reason, which is what a compliance function asks for first.

The merchant is paid what it quoted. A published price per call, plus the platform's margin, equals the platform's retail price. Nothing is taken from the seller, which removes the reason to steer a pick.

The evidence compounds. Every settlement improves the rank of the next ask. Signals only the party routing the calls can see, accumulating for every platform on the shelf at once.

Four ways to put it in your product

The delivery model follows how the platform already charges. The platforms page sets out the four; any mix works.

Four delivery models from most control to simplest for the user: Wrap, Pass-through, Blend into your credits, Bundle into your subscription, each with the platforms it fits. Underneath every model, one organization provisioned once, with Nevermined in the background.
Fig. 6 · Four delivery models. Ordered from the most control to the least friction for the user. The dots are the control you keep, relative, not a score; the model follows how the platform already charges.

Underneath, the platform is provisioned as one organization, and Nevermined stays in the background in every model: our name appears only where a user signs in through a connector or enrols a card.

Where it lands first

The pull is clearest where a platform already sells a unit its users spend.

Platform types placed on the same axis: enterprise agent runtimes on Wrap, sourcing agents also on Wrap where data is a feature, second-tier model gateways on Pass-through, workflow builders, coding agents and sourcing agents on Blend, nothing first on Bundle. Agent frameworks span all four as one bill and a budget; vertical operators come later. Clay is a competitor; browser agents and Apify are supply.
Fig. 7 · Who embeds, and how. The map of the section below, on the same axis as the delivery models. The unit a platform already sells sets the model; an outlined chip is a second fit. No platform type lands first on Bundle: a subscription is usually the second conversation.

Workflow and no-code agent builders (n8n, Zapier, Make, Gumloop, Relevance AI, Lindy, Dust) already meter tasks and credits, and their docs describe users pasting vendor keys. Blend.

Coding agents and dev environments (Replit, Lovable, Bolt, v0, Devin, Cursor) already sell credits. They have one validated pattern, Replit's, and the rest have the gap. Blend.

Sales and recruiting sourcing agents below Clay (Unify, Instantly, 11x, Artisan, Juicebox, Pin) run waterfalls that are already credit-metered, and sources die (Proxycurl, July 2025). Blend, or wrap where data is presented as a feature. Clay already runs a 200-provider shelf and is the competitor, not the embedder.

Second-tier model gateways (Portkey, LiteLLM, Cloudflare AI Gateway, Helicone, Requesty) hold the one-bill, budgeted buyer relationship already, and the shelf beside their models is bare. OpenRouter's web search through Exa is the first crack. Pass-through on the key the user holds.

Enterprise agent runtimes (AWS Bedrock AgentCore, Microsoft Copilot Studio, Salesforce AgentExchange) have shipped wallets, identity or marketplaces without a vetted shelf. Wrap behind the approved-tools layer, one SKU. Long cycle.

Agent frameworks and hosted runtimes (LangChain / LangSmith Fleet, Mastra, CrewAI, Arcade, Composio) are the largest developer surface. The pitch there is one bill and a budget, not tools.

Vertical operators come later and win the long tail: healthcare admin voice agents that add eligibility checks (Stedi meters them per call), legal research needing a registry no licence covers, equity research needing a long-tail filing. Browser agents and Apify are better understood as supply.

Everyone on this list already made the upstream decision once, for models. The services half is the same decision, and it is open.

Where to start

The shelf is live at nevermined.app/catalog, the offering is at nevermined.ai/catalog/platforms, and the story for a single developer is at nevermined.ai/catalog. One organization, one endpoint over HTTP or MCP, a budget per user or agent, every call on one ledger.

See Nevermined

in Action

Real-time payments, flexible pricing, and outcome-based monetization—all in one platform.

Schedule a demo
Robin
Related posts