The Chinese fintech giant Alipay has launched an AI open platform that allows merchants to upgrade mini-programs into AI-callable services, gating them behind a single assistant named 'Abao.' The platform claims to reach 1 billion users. On its surface, this is a story about AI and e-commerce. But for those of us who spent 2020 mapping liquidation cascades in DeFi, this is something else entirely: the infrastructure for the largest centralized oracle network the world has ever seen.
Alipay’s MCP (Model Context Protocol) is not a blockchain term. It is a standardized API wrapper that exposes existing digital services to large language models. Merchants wrap their mini-programs into MCP-compliant tools. The AI assistant Abao then routes user intents to the appropriate service, executes transactions, and settles commercially. The platform handles AI service hosting, trading, and settlement. This is a turnkey AI agent marketplace.
On a macro level, this is a brilliant business move. On a protocol level, it is a terrifying centralization vector disguised as convenience.
Let me decompose the technical stack. The core is the MCP protocol — a set of interfaces that define how an LLM can call external functions. Alipay controls the protocol specification, the validation layer, the transaction settlement, and the user identity. Every call passes through Alipay’s servers. Every data point is owned by Alipay. Every dispute is adjudicated by Alipay. This is the opposite of the zero-trust architecture we champion in crypto. It is a trust monopoly.
Based on my experience auditing the Geth consensus logic in 2017, I learned that centralized state transition functions are fragile. Alipay’s state machine is closed-source, running on their own infrastructure. If a bug in the MCP interpretation leads to a double-execution — say, a user pays for a hotel but the booking fails and the refund doesn't trigger — the resolution depends entirely on Alipay’s internal recovery mechanism. There is no on-chain transparency. No merkle proofs. No slashing conditions.
The platform supports cross-platform distribution: car dashboards, AI glasses, smart speakers. This means the MCP protocol will become a ubiquitous middleware. Every time an AI assistant on a Tesla asks a user to confirm a payment, the settlement flows through Alipay’s pipeline. That is tremendous liquidity concentration. In DeFi, we call this a 'single point of failure.' In the AI world, they call it 'user experience.'
The real issue is not centralization per se — it is the absence of composability with trustless systems. Alipay’s MCP is a walled garden. Merchants cannot independently verify the transaction history. Users cannot self-custody their interaction log. Developers cannot fork the protocol or build competing interfaces. This is a proprietary oracle network that decides which services are visible, how they rank, and what settlement terms apply. For regulated finance, this may be acceptable. For decentralized finance, it is a poison pill.
Consider a DeFi lending protocol that wanted to integrate Alipay’s AI assistant for loan origination. The MCP call would expose user credit scores, transaction history, and repayment capacity. Alipay would own that data. If the protocol tried to use it as an oracle feed, the feed would be centralized and non-auditable. The oracle latency here is not milliseconds — it is a contractual dependency. This is exactly the kind of systemic risk I mapped during the 2020 DeFi composability crisis, where cross-protocol dependencies created $150M of hidden exposure.
In 2022, when I audited Terra’s seigniorage mechanism 48 hours before collapse, I saw a similar pattern: a closed-loop feedback system that appears robust until the single point of dependency fails. Alipay’s MCP platform is a closed-loop feedback system of user behavior, AI recommendation, and payment settlement, all controlled by one entity. A regulatory directive, a security breach, or a strategic pivot could sever access for every merchant and user relying on Abao. There is no escape hatch to a neutral base layer.
The contrarian angle: Alipay’s MCP platform may actually improve security for ordinary consumers, because it introduces accountability. Unlike pseudo-anonymous DeFi scams, Alipay can claw back funds, reverse transactions, and identify bad actors. Centralized settlement reduces fraud. But for the decentralized ecosystem, this is the wrong lesson. We cannot build money legos on top of proprietary middlewares. Composability requires the ability to exit, fork, and recombine. Alipay’s MCP prevents all three.
The takeaway: The Alipay AI platform will likely become the dominant oracle for AI-driven consumer transactions in China. It will process billions of dollars in AI-generated commerce. But it will remain a centralized, non-composable silo. If DeFi protocols try to bridge into this ecosystem, they will import the same risks that brought down Terra — a dependency on a single centralized oracle that can be turned off overnight. The question is not whether Alipay’s MCP is technically sound. It is whether we are willing to build money legos on loaned land.
