Agentic Payments: A Full Guide to the AI Agent Payment Ecosystem, Protocols, Players and Limits

AI agents can already pay. Visa reports agents completing live purchases with more than 30 European issuers, and Coinbase's x402 protocol has settled over 248 million machine payments. The hard part isn't moving money. It's proving that a person told the agent to spend it.

That proof problem is why agentic payments now has at least six competing protocols and programs from Google, OpenAI, Stripe, Coinbase, Visa and Mastercard, plus PayPal and American Express building on top. This guide maps the whole ecosystem from primary sources: what each layer does, who controls it, how much real volume exists, and where it still breaks. It builds on Inside Deep Tech's Nevermined review and Stablecoin Payments Report: Q3 2026.

You'll get the layer model, a protocol comparison table, the card network and wallet plays, the stablecoin rail numbers, a buyer's checklist and the honest limits. Last updated: November 3, 2026.

Key Takeaways

• Agentic payments split into three layers: permission (AP2, Verifiable Intent), checkout (ACP, UCP) and settlement (cards, x402, MPP). No single protocol covers all three.
• Card networks own consumer checkout. Visa Intelligent Commerce and Mastercard Agent Pay use tokenized agent credentials, and Visa runs live agent purchases with 30+ European issuers.
• Stablecoin rails own machine payments. x402 has about 249 million transactions but only $63.5 million of volume, so the typical payment is cents.
• Governance went neutral in 2026. x402 moved to a Linux Foundation body with 40 members, and Google donated AP2 to the FIDO Alliance.
• Inside Deep Tech's take: merchants should accept agent traffic through their existing processor now, and treat liability and disputes as the real unsolved problem.

What are agentic payments?

Agentic payments are transactions that an AI agent starts and completes on behalf of a person or business, inside limits that person set in advance. The agent finds the item or service, agrees a price and pays, while the merchant, network and issuer each need proof that the spending was authorized.

That last part is what makes the category new. Card fraud systems were built on the idea that a human types a card number into a browser. When an agent does it, every party loses the usual signals: device, typing pattern, and a person clicking Buy. The protocols in this guide exist to replace those signals with cryptographic ones.

Two very different markets sit under the same label:

• Agentic commerce: a shopping agent buys a jacket, a flight or groceries for a consumer. Ticket sizes look like normal e-commerce, and card rails dominate.
• Machine payments: a coding or research agent pays per API call, per page crawled or per second of inference. Ticket sizes are fractions of a cent to a few dollars, and stablecoins dominate.

How does the agentic payment stack work?

The agentic payment stack works in three layers: permission proves what the user approved, checkout lets the agent and merchant agree on an order, and settlement moves the money. Most confusion in this market comes from comparing protocols that sit on different layers.

Source: Google AP2 announcement; Stripe and OpenAI ACP release; x402 Foundation launch; Visa Intelligent Commerce launch; American Express ACE kit.

A single purchase can touch every row. A shopper asks Gemini to reorder coffee. Google's UCP handles the checkout with the merchant, an AP2 mandate records the user's approval, a Mastercard agentic token pays, and the merchant settles on ordinary card rails. None of those pieces replaces the others.

Which agentic payment protocols matter in 2026?

Six protocols and programs matter in 2026: AP2, ACP, UCP, x402, MPP and the card networks' agent programs. The table below compares them on steward, layer, rails and status.

Source: AP2 v0.2 and FIDO donation; ACP launch; Google UCP announcement; x402 Foundation; Stripe MPP launch; Visa Europe live transactions; Mastercard Agent Pay for Machines.

Google AP2: what does the Agent Payments Protocol do?

AP2 lets a user cryptographically sign what an agent may buy, for how much and until when, so merchants and banks can verify the instruction later. Google launched it in September 2025 with more than 60 payments and technology partners, as an extension of the Agent2Agent protocol and MCP.

The core object is the mandate. An Intent Mandate captures the instruction ("buy two tickets under a set price when they go on sale"), and a Cart Mandate captures the exact approved basket. In April 2026 Google released AP2 v0.2 with "Human Not Present" payments and handed the protocol to the FIDO Alliance, the group behind passkeys. Mastercard's Verifiable Intent, co-developed with Google, went to FIDO at the same time. AP2 doesn't move money itself; it is designed to ride on cards, bank transfers or stablecoins.

OpenAI and Stripe ACP: how does checkout inside ChatGPT work?

ACP is a checkout standard that lets an AI app pass an order and a scoped payment token to a merchant, which stays merchant of record. Stripe and OpenAI launched it with Instant Checkout for US Etsy sellers and said over a million Shopify merchants would follow.

The payment piece is Stripe's Shared Payment Token. The AI platform issues a token scoped to one seller, with usage and expiry limits, and the merchant charges it like any other payment. Stripe says SPTs work in the US, Canada and select European countries. Merchants can also process ACP orders through another PSP, which is how PayPal's Braintree plugs in.

Google UCP: what is the Universal Commerce Protocol?

UCP is Google's open checkout standard for buying inside AI Mode in Search and the Gemini app. Google announced it in January 2026, co-developed with Shopify, Etsy, Wayfair, Target and Walmart, with Google Pay handling the credential and the retailer staying seller of record. In practice UCP is to Google's surfaces what ACP is to ChatGPT, and many merchants will run both.

Coinbase x402: how do agents pay per request?

x402 revives the web's unused HTTP 402 "Payment Required" code so a server can quote a price, the agent can pay, and the resource comes back in the same request cycle, with no account or API key. Coinbase created it, and the Linux Foundation's x402 Foundation became fully operational in July 2026 with 40 members including Visa, Mastercard, Stripe, Google, AWS and Circle.

Activity is real but small in dollars. Paymentscan counts 248.9 million x402 transactions and $63.53 million in total volume across tracked chains and facilitators. Chainalysis data reported by Decrypt found more than 87% of payments fell between a hundredth of a cent and 10 cents. Monthly volume has also cooled, from a $29.11 million peak in November 2025 to $372,200 in October 2026 on Paymentscan's tracked set.

Stripe and Tempo MPP: how is it different from x402?

MPP, the Machine Payments Protocol, also handles agent-to-service payments but adds sessions and streaming and supports cards as well as stablecoins. Stripe and Tempo launched it on March 18, 2026 alongside Tempo's mainnet, and Stripe merchants can accept MPP payments through the PaymentIntents API they already use. The practical difference: x402 is a thin open standard centered on stablecoins, while MPP is a commercial bundle that rides on Stripe's merchant base.

What are Visa and Mastercard doing in agentic payments?

Visa and Mastercard are turning card credentials into agent-specific tokens and registering trusted agents, so issuers can approve agent purchases and merchants can tell good bots from bad ones. Both run live agent transactions in 2026, mostly at small scale.

Source: Visa Intelligent Commerce launch; Visa Europe live transactions; Visa, BILL and Billtrust pilot; Mastercard agentic tokens; Mastercard Agent Pay for Machines.

Visa launched Intelligent Commerce in April 2025 with partners including Anthropic, Microsoft, OpenAI, Perplexity and Stripe. Its most concrete 2026 milestone is Europe, where agents now buy from merchants such as lastminute.com and Frasers using Visa Payment Passkeys. In October 2026 Visa, BILL and Billtrust launched a live pilot for agent-paid supplier invoices, where Trusted Agent Protocol replaces the CAPTCHA that usually blocks bots on payment portals.

Mastercard's Agent Pay launched with US issuers using Agentic Tokens and went live in the UAE as its first market outside the US. In October 2026 it opened developer early access to Agent Pay for Machines, which answers an HTTP 402 with a signed payment voucher inside a spending limit; the launch demo ran nine payments to two merchants on one budget, settled via Coinbase, Base and BVNK. That is Mastercard building its own answer to x402 on card-network accounts.

Industry plumbing is following. EMVCo, the standards body owned by the card networks, is drafting an Intent Services framework so that consumer-approved intent can be registered and checked before, during and after a transaction.

Where do PayPal, Amex and the processors fit?

PayPal, American Express and processors like Stripe and Adyen sit between the protocols and merchants, selling one integration that covers several AI surfaces. For most merchants, this is where agentic payments will actually be switched on.

• PayPal Agent Ready lets Braintree and PayPal merchants accept payments from ChatGPT through ACP and from Google AI Mode and Gemini through UCP, using the merchant's existing account.
• American Express ACE is a developer kit with agent registration, account enablement, intent intelligence, tokenized credentials and cart context; three of the five specs were available from April 14, 2026. Amex also says it will protect eligible Card Members from charges caused by registered-agent errors.
• Stripe spans both worlds: ACP and Shared Payment Tokens for checkout, and MPP with Tempo for machine payments.
• Startups such as Nevermined build metering and billing for agent-to-agent payments on top of x402 and card rails. Inside Deep Tech's Nevermined review covers that layer in depth.

Why do stablecoins matter for agentic payments?

Stablecoins matter because they settle tiny payments globally in seconds without a merchant account, which card rails can't do economically at sub-cent ticket sizes. That makes them the default rail for machine payments, even though consumer agent shopping still runs on cards.

The rail mix inside x402 shows how concentrated this is. Base carried most early volume, with $27.89 million in November 2025 alone, while Polygon and BNB Chain have grown share in 2026. Inside Deep Tech's Stablecoin Payments Report: Q3 2026 tracks the wider stablecoin market and the GENIUS Act and MiCA rules that govern it, and the Crypto Payments Report: Q3 2026 covers card-based crypto spending.

The convergence is notable. Card networks are joining the x402 Foundation, Stripe owns stablecoin infrastructure and Mastercard's machine product mimics HTTP 402. The likely end state isn't cards versus stablecoins. It's agents that hold a card token for shopping and a stablecoin wallet for metered services, with one permission record covering both.

How big is the agentic payments market?

Today the agentic payments market is small in measured dollars, though forecasts are large. McKinsey estimates agents could orchestrate $900 billion to $1 trillion of US retail revenue by 2030, and $3 trillion to $5 trillion globally, but that is a scenario for goods orchestrated by agents, not payments volume today.

Source: Paymentscan x402 metrics; Visa Europe release; Linux Foundation x402 release; McKinsey agentic commerce scenario, via AI CERTs.

Notice the gap between the rows. The only public, measurable volume is x402, and it is tens of millions of dollars. Card networks haven't disclosed agent transaction totals. Anyone selling a multi-billion-dollar agentic payments figure for 2026 is quoting a forecast, not a ledger.

How should merchants and builders choose a protocol?

Merchants should start from where their buyers' agents already shop, and builders should start from ticket size. The table matches common cases to the shortest credible path.

Source: PayPal Agent Ready; Stripe Shared Payment Tokens; x402; Visa, BILL and Billtrust; AP2 specification.

Three checks apply to every option. Ask who carries the chargeback when an agent buys the wrong thing. Ask whether agent traffic is identified in your fraud tools or blocked as bots. And ask whether the integration keeps you merchant of record, which ACP, UCP and PayPal all claim to preserve.

What are the honest limits of agentic payments?

The biggest limits are liability, fragmentation and thin real-world volume. The technology to pay works; the rules for who is responsible when an agent gets it wrong are still being written.

• Liability is unsettled. Amex is the only major network promising protection for registered-agent errors, and it hasn't launched yet. Chargeback reason codes for agent mistakes don't exist at most issuers.
• Too many standards. AP2, ACP, UCP, x402, MPP and two network programs overlap. FIDO and EMVCo are trying to unify intent, but merchants will run several integrations for years.
• Small measured volume. x402's monthly volume fell to $372,200 in October 2026, and card networks publish no agent totals. Early transaction counts include tests and self-dealing.
• Fraud moves too. Tokenized agent credentials stop card theft, but prompt injection can trick a legitimate agent into a legitimate-looking purchase. Mandates prove intent was signed, not that it was wise.
• Regulation lags. Consumer protection, strong customer authentication in Europe and stablecoin rules under the GENIUS Act weren't written for software buyers.

Inside Deep Tech's take: agentic payments is real infrastructure with an unproven market. The rails, tokens and protocols shipped in 2025 and 2026. The buyers haven't fully arrived, and the dispute rules haven't been written. Build for it now at low cost; don't forecast revenue from it yet.

What to watch next

• FIDO Alliance working groups on agentic authentication and payments: the first AP2 and Verifiable Intent specs under FIDO governance.
• EMVCo Intent Services: whether the card networks' standard body defines agent transaction indicators that issuers can score.
• Visa and Mastercard disclosures: the first agent transaction totals, and general availability for Agent Pay for Machines.
• x402 volume trend: whether monthly settled volume recovers as card networks and cloud providers join the foundation.
• Holiday 2026 agent shopping across ChatGPT, Gemini and Perplexity, the first real test of ACP and UCP at peak load.

Stablecoin Payments Report: Q3 2026

Q3 2026 stablecoin supply, USDC velocity, GENIUS and MiCA calendars, Visa settlement and the payments versus trading mix.

Inside Deep Tech

FAQ

The bottom line

Agentic payments is no longer a slide. Google, OpenAI, Stripe, Coinbase, Visa, Mastercard, PayPal and Amex have shipped protocols, tokens and pilots, and the stack has settled into identity, permission, checkout and settlement layers. What hasn't settled is who pays when an agent is wrong, and how much real spend shows up. Merchants and builders should wire in cheaply through existing processors, watch FIDO and EMVCo for the unifying rules, and treat 2026 volume claims with care.

For the startup side of the market, read Inside Deep Tech's Nevermined review, and for the rail beneath machine payments, the Blockchain Industry Report: Q3 2026.