One underrated blocker: agents can't pay for things. Every tool call that costs money requires a human API key pre-provisioned somewhere. L402 (HTTP 402 + Lightning) was designed exactly for this — agents get an invoice, pay it, get proof of payment. It's been in IETF draft since 2020 but adoption is still early.