Agentic Commerce: How AI Agents Shop and Pay
Shopping online has always meant a person clicking through pages, filling in a cart and typing card details. Agentic commerce changes who does the clicking. An AI agent receives a goal, such as “order more printer paper under $40” or “find a hotel in Lisbon for next weekend”, then searches, compares, decides and pays. Since 2025 every major player in payments has started building for it, from card networks and Google to OpenAI and Stripe, with payment rails that range from tokenized cards to stablecoin protocols such as x402.
This guide explains what agentic commerce is, the protocols behind it, what Visa and Mastercard have built, why ChatGPT’s Instant Checkout was wound down, how an agent pays today, the new risks for merchants, where stablecoins fit and how to prepare.
What Agentic Commerce Is
Agentic commerce is buying and selling in which software agents act on behalf of people or businesses. The agent does more than recommend a product. It can take actions: add items to a cart, choose shipping, apply a discount and complete the payment within limits the user has set.
Three things separate it from ordinary e-commerce:
- The buyer is software. The agent reads product data, prices and policies instead of looking at a web page.
- The person sets the rules, not every click. The user approves a goal, a budget or a specific cart, and the agent handles the rest.
- Payments need new safeguards. Merchants, banks and card networks need to know that the agent is real, that it acts for a real customer and that the customer agreed to the purchase.
Agentic commerce is still early. Most people use AI assistants to research products, and far fewer let an agent complete the purchase. But the infrastructure being built now will shape how online payments work for the next decade.
Three Levels of Agent Shopping
It helps to separate agentic commerce into three levels, because each one asks something different of a merchant.
| Level | What the agent does | Who decides at the moment of purchase | Example |
|---|---|---|---|
| Assisted discovery | Searches, compares and summarizes options | The person, on the merchant’s own site | Asking a chatbot for the best laptop under $1,000 |
| Delegated checkout | Builds the cart and pays after approval | The person, with one confirmation in the chat | Approving a cart the agent prepared |
| Autonomous purchasing | Buys within preset rules, without asking each time | Nobody; the rules decide | Reordering supplies when stock runs low, within a monthly budget |
Today most activity sits at the first level. The second level is where the industry’s big experiments have happened, and the third level is where the hardest questions about liability, fraud and consent live.
The Protocols: ACP, AP2 and x402
For agents to buy from millions of merchants, they need shared rules. Three open protocols compete and overlap.
| Protocol | Led by | Purpose | How payment works |
|---|---|---|---|
| ACP (Agentic Commerce Protocol) | OpenAI and Stripe | Lets an AI assistant place orders with merchants | A payment token limited to one merchant and one amount |
| AP2 (Agent Payments Protocol) | Google, with a broad group of partners | Proves the user authorized what the agent buys | Signed “mandates”; works with cards, bank payments and stablecoins |
| x402 | Coinbase, now the x402 Foundation | Lets software pay for web resources inside an HTTP request | Stablecoin payments, mostly USDC |
ACP was announced by OpenAI and Stripe in September 2025 as the standard behind ChatGPT’s Instant Checkout. The merchant stays the seller of record, and the agent passes the order and a payment token that can only be used for that merchant and that amount.
AP2 was announced by Google in September 2025 with dozens of partners, including Mastercard, American Express, PayPal and Coinbase. Its key idea is the mandate: a digitally signed record of what the user asked for. An intent mandate captures the instruction, for example “buy these concert tickets if they drop below $150”, and a cart mandate captures approval of the exact items and price. Mandates give merchants and banks evidence that a purchase was authorized.
x402 focuses on a different job: paying for digital resources, such as data or API calls, in stablecoins. Google added an x402 extension to AP2 so agents can settle in crypto when that suits the transaction. Our x402 guide explains how it works step by step.
What the Card Networks Built
Visa and Mastercard are determined not to be left out of agent payments, and both have launched programs designed to let agents pay with cards safely.
Visa Intelligent Commerce. Announced in April 2025, it gives agents tokenized card credentials, lets users set spending controls and connects agent purchases to the existing card system. In October 2025 Visa added the Trusted Agent Protocol, built with Cloudflare, which lets merchants recognize legitimate agents through signed web requests instead of treating them as bots. On April 8, 2026, Visa unveiled Intelligent Commerce Connect, a platform aimed at companies deploying agents, merchants and payment providers.
Mastercard Agent Pay. Mastercard’s program is built on Agentic Tokens, card credentials issued specifically for an agent and tied to the user’s consent. Mastercard said Agent Pay was enabled for all US Mastercard cardholders by November 2025, and it has run pilots with banks in Europe and Australia.
| Visa Intelligent Commerce | Mastercard Agent Pay | |
|---|---|---|
| Credential | Tokenized card for the agent | Agentic Token |
| Agent identity | Trusted Agent Protocol (signed requests) | Agent registration and verification |
| User control | Spending limits and consent | Consent tied to the token |
| Status | Platform launched for agents and merchants in April 2026 | Enabled for US cardholders since November 2025 |
The message from both networks is the same: agent payments should keep the protections of card payments, including tokenization, fraud monitoring and dispute rights.
What Happened to ChatGPT Instant Checkout
The most visible experiment in agentic commerce was OpenAI’s Instant Checkout, which launched on September 29, 2025 and let ChatGPT users buy products from participating merchants without leaving the chat. It was built on ACP and processed through Stripe.
In March 2026, OpenAI wound Instant Checkout down. Product discovery stays in ChatGPT, but purchases now happen on merchants’ own sites or in their own apps inside ChatGPT. OpenAI said the first version did not offer the flexibility it wanted. Retailer data told a clearer story:
- Conversion was weak. Walmart said conversion from Instant Checkout was three times lower than when shoppers clicked through to Walmart’s own site.
- Few merchants went live. Shopify’s president said only about a dozen Shopify merchants had launched ChatGPT checkout.
- Merchants wanted control. Retailers prefer to own the checkout, the customer relationship, upsells, loyalty programs and returns.
The lesson is not that agentic commerce failed. It is that agents are already good at discovery, while the final purchase still works best where the merchant controls the experience. Expect a hybrid: agents that research and prepare, and checkouts that stay with the merchant, at least for consumer purchases.
How an Agent Pays Today
Payment flows differ by platform, but most follow the same pattern.
- The user sets a goal and limits, such as a budget, a preferred store or a requirement to confirm before paying.
- The agent searches and compares using product feeds, websites and merchant APIs.
- The user approves, either the exact cart or a standing rule that covers it.
- The agent receives a payment credential limited to that purchase, such as a tokenized card, a scoped payment token or a stablecoin wallet with a spending cap.
- The merchant receives the order through its checkout or API, along with signals that identify a trusted agent.
- The payment is authorized and the order confirmed, and a record of the user’s consent is kept for any later dispute.
Notice what the agent does not get: the user’s full card number or unlimited access to their money. The whole system is designed around narrow, temporary permissions.
Risks: Fraud, Disputes and Liability
Agentic commerce creates new risks for merchants, and most of the rules for handling them are still being written.
- Fake agents. Fraudsters can disguise bots as shopping agents to test stolen cards or scrape prices. Agent identity programs aim to solve this, but adoption is uneven.
- “My agent did it” disputes. A customer may claim they never approved a purchase their agent made. Without a clear consent record, these look like any other unauthorized-transaction dispute. Our guide to what a chargeback is explains how such disputes play out and what they cost.
- Wrong orders. An agent can misread a size, a model or a delivery date, leading to returns and refund requests.
- Prompt injection. Malicious web pages can hide instructions that try to trick agents into buying from fake shops or revealing payment details.
- Unclear liability. When a purchase goes wrong, responsibility can sit with the user, the agent platform, the payment provider or the merchant. Card networks are adapting dispute rules, but many cases will be decided one at a time for now.
| Risk | Who is most exposed | What helps |
|---|---|---|
| Fake agents and card testing | Merchants | Agent verification, bot management, velocity limits |
| Unauthorized-purchase disputes | Merchants and issuers | Consent records, mandates, clear order confirmations |
| Wrong orders | Merchants and customers | Accurate product data, clear return policies |
| Prompt injection | Users and agent platforms | Agent safeguards, spending limits, trusted merchant lists |
Where Stablecoins Fit
Card-based agent payments make sense for consumer shopping, because they keep familiar protections. Stablecoins fill other gaps.
- Small payments. An agent paying a few cents for data or an API call cannot use a card economically. Stablecoins on fast networks can handle it.
- Machine-to-machine payments. When one agent pays another, there may be no cardholder at all.
- Global reach. A stablecoin payment works the same way in any country, without currency conversion or cross-border card fees.
- Programmable limits. Wallets can enforce budgets, approved recipients and time limits in code.
- Final settlement. Payments cannot be charged back. That protects sellers from false disputes, but it means buyers and agents must check carefully before paying.
This is why the x402 Foundation includes Visa, Mastercard and Stripe alongside crypto companies. Agent payments are likely to use cards for some jobs and stablecoins for others. If you want to be ready for both, our guide on how to accept USDC payments is a practical starting point.
What Agents Look For When Choosing a Merchant
A person can be swayed by a beautiful homepage or a clever banner. An agent cannot. It works from data, and it rewards merchants whose information is complete, consistent and easy to verify.
| Signal | Why it matters to an agent | What to do |
|---|---|---|
| Accurate price and stock | Agents compare offers and avoid items that may be unavailable | Keep feeds and pages in sync, ideally in real time |
| Complete specifications | Agents must match the user’s exact requirements | Fill in sizes, materials, compatibility and dimensions |
| Total cost | Users set budgets that include shipping and taxes | Show shipping costs and delivery times clearly |
| Return and refund terms | Agents weigh the risk of a wrong order | Publish simple, specific return rules |
| Reviews and reputation | Agents look for evidence that a store is reliable | Collect genuine reviews and display them with structured data |
| Payment options | The agent must be able to pay with the credential it holds | Support common methods, including tokenized cards and stablecoins |
| Fast confirmation | Agents need to report back to the user | Send order and payment confirmations automatically |
Notice that most of these are good practice for human shoppers too. Preparing for agents mostly means doing the basics of e-commerce with more discipline, because an agent will not forgive missing data the way a patient human might.
How Merchants Should Prepare
You do not need to rebuild your store for agents, but some groundwork pays off whether agents arrive quickly or slowly.
- Clean up product data. Complete titles, specifications, sizes, stock levels and prices. Agents compare data, and incomplete listings lose.
- Add structured data to product pages so machines can read prices, availability and reviews reliably.
- Publish clear policies for shipping, returns and warranties in plain language that an agent can summarize.
- Review your bot blocking. Make sure verified agents are not blocked along with malicious bots, and use tools that can recognize signed agent traffic.
- Open an API path for orders and payment status where you can. Agents work better with APIs than with checkout pages.
- Keep dispute evidence: order logs, confirmations, delivery proof and any consent data you receive.
- Accept stablecoins for international customers, high-value orders and future machine payments.
- Track AI referrals in your analytics so you know when agents and AI assistants start sending you buyers.
What This Means for Businesses That Accept Crypto
Crypto-accepting businesses start with an advantage. They already take payments that are global, fast and programmable, which are exactly the properties machine payments need. The gap to close is automation: payments that are created, confirmed and matched to orders without anyone checking a wallet by hand.
Bcon Global covers that groundwork. Customers pay in BTC, ETH, USDT, USDC and other coins, the money goes straight to your wallet with a flat 1% fee, and the Bcon Global API lets your systems create payment requests and receive confirmations automatically. Whether the next buyer is a person or an agent working for one, the payment flow is the same.
Frequently Asked Questions
What is agentic commerce?
Agentic commerce is online buying in which AI agents act on behalf of people or businesses: they search, compare and complete purchases within limits the user sets.
What is the Agentic Commerce Protocol?
ACP is an open standard announced by OpenAI and Stripe in September 2025 that lets AI assistants place orders with merchants using a payment token limited to one merchant and one amount. It powered ChatGPT’s Instant Checkout.
What is AP2?
AP2 is Google’s Agent Payments Protocol. It uses signed mandates to prove what a user authorized an agent to buy, and it works with cards, bank payments and, through an x402 extension, stablecoins.
Why did OpenAI end Instant Checkout?
OpenAI said the first version lacked the flexibility it wanted. Retailers reported weak results: Walmart saw conversion three times lower than on its own site, and only about a dozen Shopify merchants went live. Purchases now happen on merchants’ own sites and apps.
Can AI agents pay with crypto?
Yes. Protocols such as x402 let agents pay in stablecoins like USDC, and AP2 supports stablecoin payments through an extension. Crypto is especially useful for small and machine-to-machine payments.
What should merchants do now?
Improve product data and structured data, publish clear policies, make sure verified agents are not blocked, offer API access where possible, keep dispute evidence and accept stablecoins.
Agentic commerce is moving from demos to infrastructure. Card networks are issuing tokens for agents, Google and OpenAI have published protocols, and stablecoin payments have found a natural role in machine-to-machine trade. The first big consumer experiment, Instant Checkout, showed that agents are better at finding products than closing sales, and that merchants want to keep control of the checkout.
For merchants, the right response is steady preparation rather than a rebuild: clean data, clear policies, automated payments and payment options that work for both people and software. Businesses that get those basics right will be easy for agents to find, trust and pay.