Skip to content
Universal Commerce Protocol Brand hub · en

Transaction layer

Agentic payments: how an AI pays on your behalf, under control.

Agentic payments are the layer that lets an AI agent authorize and execute a purchase for a user, with consent and within defined limits. Here are the rails (AP2, Visa, Mastercard, x402), how they work, and what it means for a merchant.

The 30-second summary

  • What: an AI agent pays on the user's behalf, under mandate and limits.
  • How: scoped authorizations (cryptographic mandates, tokens, agent identity, human approval).
  • Who: AP2 (Google/FIDO), Visa Intelligent Commerce, Mastercard Agent Pay, x402, plus UCP and ACP handlers.
  • Merchant: it remains the seller of record; the prerequisite is still a machine-readable offer.

A short definition

Agentic payments are the authorization and execution of a settlement by an autonomous software agent on a buyer's behalf, with consent and within limits the buyer has set. It is the transaction layer of agentic commerce: without it, an agent plateaus at recommendation and cannot close. Established

The problem it solves

When an agent sits between buyer and merchant, three questions become critical: who approved the transaction, what the agent was allowed to buy, and who is responsible if something goes wrong. Agentic payment rails answer these with agent identity, scoped authorizations and verifiable traceability. Established

The rails and standards

Rail / Standard Backer Role Status
AP2 (Agent Payments Protocol) Google, stewarded by the FIDO Alliance Authorization via cryptographic mandates (intent, cart, payment) 120+ partners
Visa Intelligent Commerce Visa Agent identity, tokenized credentials, real-time authorization Integrated into OpenAI experiences (June 2026)
Mastercard Agent Pay / AP4M Mastercard Agent-initiated payments; AP4M for agent-to-agent transactions Live in Singapore and Malaysia
Payment token (ACP) OpenAI, Stripe Single-use token passed by the agent to the merchant ChatGPT and apps side
x402 Coinbase Machine-to-machine stablecoin settlement AP2-linked extension
UCP handlers Google, Shopify Google Pay, Shop Pay exposed via the UCP standard UCP standard

These approaches are not mutually exclusive: they cover different roles (authorization, identity, settlement) and stack. A single merchant may be touched by several of them, depending on the surfaces where its buyers are. Emerging

Mandates and consent

The common thread of serious approaches is replacing the sharing of a card number with a proof of authorization. AP2 formalizes this with cryptographically signed mandates: an intent mandate (what the user wants), a cart mandate (what they commit to) and a payment mandate (the final authorization). On the network side, Visa relies on tokenized credentials and real-time authorization, and aligns its Trusted Agent Protocol with OpenAI's protocol. In every case the user keeps control via spend limits, allowed merchant categories and, for sensitive purchases, human approval. Established

Europe and compliance

Europe is moving with its own framework: in June 2026, Worldline, ING and Mastercard completed a first end-to-end European agentic payment in live conditions. The structuring issue remains compliance, in particular PSD2 and strong customer authentication applied to a delegated buyer: how to satisfy authentication when an agent, not the human, triggers the payment. This is where the European market will follow its own path. Emerging

What it changes for a merchant

Agentic payments do not remove the groundwork: a structured catalog, accurate prices and stock, explicit policies. A payment rail never compensates for poor data. The merchant remains the seller of record; it benefits from exposing a machine-readable, actionable offer early and from clarifying its governance (pricing, eligibility, dispute). The readiness audit methodology scores this state layer by layer, and the UCP implementation guide details the path on the Google/Shopify side.

Frequently asked questions

01

What are agentic payments?

Agentic payments are the authorization and execution of a payment by an AI agent on a user's behalf, with consent and within user-defined limits (spend cap, merchant categories, human approval for some purchases). It is the transaction layer of agentic commerce.

02

What is the difference between agentic commerce and agentic payments?

Agentic commerce covers the whole journey (discovery, comparison, purchase) an agent runs for the user. Agentic payments are its final building block: making settlement compatible with a delegated buyer, securely and traceably.

03

How is an agent authorized to pay?

Approaches converge on scoped authorizations: cryptographically signed mandates (AP2 defines intent, cart and payment mandates), tokenized credentials (Visa), spend limits and per-merchant-category rules, and human approval for sensitive transactions. The shared goal: prove who approved, what the agent was allowed to buy, and who is responsible.

04

Who is liable in a dispute?

In current models (UCP, ACP) the merchant remains the seller of record: legal responsibility and the customer relationship stay with it. Networks and protocols add agent identity, traceability and guardrails, but do not move the responsibility for the sale.

05

Are agentic payments available in Europe?

The first milestones exist: in June 2026, Worldline, ING and Mastercard completed a first end-to-end European agentic payment in live conditions. The European question centers on compliance (PSD2, strong customer authentication) applied to a delegated buyer.

Go further

The reference standard, the protocol comparison, and the glossary of terms.