Agentic commerce refers to online shopping in which autonomous software performs, on the buyer’s behalf, the steps that until now required a human, from the first search to the click on “Pay.” For three decades, e-commerce rested on the opposite assumption. An artificial intelligence agent (ChatGPT, Gemini, Copilot, Comet…) receives a task, for example “find me trail running shoes in size 43 under €120.” It discovers products, compares offers, then completes the purchase itself, with its user’s money and authorization.
🔑
Definition
An agentic payment is a payment initiated by an autonomous software agent under a mandate granted by a human (budget, scope, duration). The core challenge is the evidence given to the merchant and the networks: proof that the purchase was actually authorized, by whom, and within what limits.
🔍
Discover
The agent queries the web, product feeds, and catalogs published as structured data to find relevant offers.
⚖️
Compare
In a few seconds, it cross-checks prices, delivery times, reviews, and return policies across far more sites than a human could.
💳
Buy
It runs the checkout: tokenized payment credentials, mandate verification, confirmation. It never sees the card number.
Traffic measurement already documents the trend. According to Adobe Analytics (April 2026), traffic from AI sources to US e-commerce sites jumped 393% year over year in Q1 2026. It now converts 42% better than conventional traffic, after converting 38% worse in March 2025.
How an agent actually pays
An agentic payment chains three building blocks. Identification establishes which agent is sending the requests, and whether that identity can be verified. The mandate then states what the human has authorized, including amounts and scope. Execution picks the rail that moves the money: tokenized card, credit transfer, or stablecoin. The diagram below shows the full orchestration.
Lifecycle of an agentic purchase
User
Gives their agent a mandate
“Buy this headset if the price drops below €90, max budget €100”
➜
AI agent
Discovers and compares offers
Product feeds, schema.org structured data, catalogs exposed via MCP
➜
AI agent
Identifies itself to the merchant
Cryptographic signature (Web Bot Auth), proof of mandate
➜
Merchant
Verifies the agent and accepts the order
Tells a trusted agent from a malicious bot, checks price and stock
➜
PSP / network
Executes the payment
Delegated card token (Visa, Mastercard), ACP-style API, or stablecoin via x402
➜
User
Receives confirmation and an audit trail
The signed mandate serves as evidence in a dispute
ℹ️
The customer is now a machine
The merchant now receives requests from a machine client rather than from a browser carrying cookies. The entire existing stack (fraud screening, 3-D Secure, checkout pages, loyalty programs) was designed for humans, so it has to be rethought.
Advertisements
The protocol battle (2025–2026)
An agentic commerce protocol defines the format of exchanges between the agent, the merchant, and the payment rail, and every major player has published one within 18 months. Four families dominate: three open protocols and the card networks’ frameworks. Google’s AP2 carries signed mandates that work across several rails, while ACP, from OpenAI and Stripe, handles checkout inside ChatGPT. x402, from Coinbase and Cloudflare, handles HTTP payments in stablecoins. Visa Intelligent Commerce and Mastercard Agent Pay bring agents onto card rails. Alongside them, Cloudflare’s pay-per-crawl charges AI systems for the content they crawl.
Protocol
Backers
Launch
Payment rail
Main use case
AP2 (Agent Payments Protocol)
Google + 60 partners (Mastercard, PayPal, Amex, Coinbase…)
Sept. 16, 2025; v0.2 in Apr. 2026
Cards, credit transfers, stablecoins
Signed mandates (Verifiable Credentials) proving human authorization
ACP (Agentic Commerce Protocol)
OpenAI × Stripe, joined by PayPal
Sept. 29, 2025
Cards via PSPs (Stripe and others)
Instant Checkout in ChatGPT: Etsy at launch, then Shopify merchants
x402
Coinbase, then the x402 Foundation with Cloudflare (Linux Foundation since Apr. 2026)
May 2025, relaunched Sept. 2025
Stablecoins (mostly USDC)
Machine-to-machine micropayments via HTTP 402 “Payment Required”
Pay-per-crawl
Cloudflare
Private beta, July 2025
x402 / deferred billing
Charging AI crawlers that scrape publisher content
UCP (Universal Commerce Protocol)
Google × Shopify
Jan. 2026
Builds on AP2
Universal catalog and cart across agents, merchants, and PSPs
Major agentic commerce protocols (as of July 2026)
AP2 answers the question “who authorized what?” with three signed mandates: intent, cart, and payment.
ACP answers “how does an agent run a complete checkout?” (order, taxes, payment, returns).
x402 answers “how does one machine pay another, per use, with no account or subscription?”
Anthropic’s MCP (Model Context Protocol) serves as the access layer to catalog, inventory, and pricing data for every camp.
⚠️
A fragmented landscape
These standards are published as open specifications, but their backers pursue competing commercial strategies. A merchant that wants to be present on every agentic channel therefore has to implement several protocols at once. No consolidation is expected before 2027.
Who backs the agentic standardsOPOpenAIStripeGOGoogleCOCoinbaseCLCloudflareVisaMastercardPayPalShopify
Visa and Mastercard join the race
The two largest card networks have each published an agentic framework, a set of rules and APIs that opens their rails to agents. One day apart in late April 2025, Mastercard launched Agent Pay (April 29) and Visa launched Intelligent Commerce (April 30). Both frameworks let verified agents pay with dedicated card tokens, without ever handling the actual card number.
🔵
Visa Intelligent Commerce
Opens Visa’s tokenization APIs to AI agents. The Trusted Agent Protocol, co-developed with Cloudflare, was added on October 14, 2025. It lets merchants recognize legitimate agents through cryptographic signatures.
🟠
Mastercard Agent Pay
Agentic Tokens bind a tokenized card to a specific agent, a merchant scope, and a consent policy. On September 17, 2026, Alchemy’s AgentCard platform began issuing one-time-use tokenized Mastercard credentials to agents, linked to the card the customer already holds. The cardholder and the issuer set spending limits, merchant categories, and purchase types in advance, and the card keeps its benefits and rewards program on the network. The first live agentic transaction took place on September 29, 2025, and the full “Agent Suite” launched in Q2 2026.
🇪🇺
Europe gets on board
On June 2, 2026, Worldline and ING, working with Mastercard, completed Europe’s first end-to-end agentic transaction in a live production environment. An agent selected concert tickets and paid for them within the budget the customer had set.
60+
partners at AP2’s launch
Google Cloud, Sept. 2025
$7B
annualized volume of Visa’s stablecoin settlement pilot (Apr. 2026, +50% in one quarter)
Visa / Forbes, June 2026
€310B
of European transactions assisted by AI agents by 2036 (estimate)
Worldline / ING, June 2026
The networks’ strategy is to turn every agent into a certified token holder, tied to a card and its issuer. Agentic commerce then stays on card rails, fees included, rather than moving to account-to-account transfers or stablecoins.
Timeline: two years that changed everything
Agentic commerce went from demos to commercial deployment in less than two years. The timeline below covers the announcements that set the protocols, the network frameworks, and the first production transactions.
Nov. 2024
Perplexity “Buy with Pro”
The first consumer AI assistant able to buy directly for the user, in the US.
Jan. 2025
OpenAI Operator
An agent that can browse the web and fill shopping carts like a human. The “browser-use” approach is fragile, but it works on any site with no prior integration.
Apr. 29–30, 2025
Mastercard Agent Pay and Visa Intelligent Commerce
The two networks announce their agentic frameworks one day apart.
May 2025
Coinbase launches x402
HTTP status code 402 “Payment Required,” reserved for three decades, is finally used for stablecoin payments.
July 1, 2025
Cloudflare pay-per-crawl
Private beta: publishers can charge AI crawlers that scrape their content.
Sept. 16, 2025
Google AP2
A signed-mandate protocol with more than 60 partners, including Mastercard, PayPal, American Express, and Coinbase.
Sept. 29, 2025
Instant Checkout in ChatGPT + ACP
OpenAI and Stripe launch in-chat purchasing (Etsy, then Shopify). The same day, Mastercard completes its first live agentic transaction.
Oct. 14, 2025
Visa Trusted Agent Protocol
Built with Cloudflare: agent signatures that tell legitimate assistants from malicious bots.
Nov. 2025
Amazon sues Perplexity
Federal lawsuit: the Comet agent allegedly hid what it was in order to shop on Amazon without authorization.
Jan. 2026
UCP and California’s AB 316
Google and Shopify publish the Universal Commerce Protocol; California makes clear that an AI’s autonomy does not shield the party behind it from liability.
Apr. 2026
x402 joins the Linux Foundation
More than 25 members (AWS, Anthropic, Circle…). Adobe measures a 393% jump in AI traffic to US retail sites in Q1.
June–July 2026
Europe and the infrastructure scale up
Europe’s first agentic transaction in production (Worldline × ING, June 2); Shopify rolls out its agentic storefronts broadly; Cloudflare opens the waitlist for its Monetization Gateway (July 1).
🔑
The sequence falls into three phases. 2024 brings the first demos, 2025 opens the protocol war, and 2026 brings the first production transactions and the scaling of the infrastructure.
Advertisements
Key takeaways
Agentic commerce hands discovery, comparison, and purchase to an AI agent acting under a human mandate.
Four families of standards coexist: AP2 (Google, signed mandates), ACP (OpenAI × Stripe, conversational checkout), x402 (Coinbase × Cloudflare, stablecoins), and the network frameworks (Visa Intelligent Commerce, Mastercard Agent Pay).
Card networks are betting on delegated tokens to keep the flow on their rails; crypto players are betting on native HTTP micropayments.
The 2026 data confirm the traction: AI traffic to US retail sites is rising sharply and converts better than conventional traffic (Adobe Analytics).
The Amazon-Perplexity lawsuit shows that agent access to merchant sites is still an open legal question.
🔑
The trillion-dollar question
Three contenders are vying to control the point of contact with the buyer: the merchant, the agent (OpenAI, Google…), and the payment network. The winner will capture e-commerce margins for the next decade.
Two related topics build on this guide. Agentic commerce: what it means for merchants covers the channel’s operational consequences and the preparation it requires, and AI agent identity and mandates describes the underlying trust mechanics.
How an agent actually pays
An agentic payment chains three building blocks. Identification establishes which agent is sending the requests, and whether that identity can be verified. The mandate then states what the human has authorized, including amounts and scope. Execution picks the rail that moves the money: tokenized card, credit transfer, or stablecoin. The diagram below shows the full orchestration.