Agentic Payment Rails Are Built. Your Store Isn't Ready.
Agentic payment infrastructure is close to finished, and almost nobody selling online has noticed. Over about eighteen months the card networks quietly built the rails an AI agent needs to pay - identity, authorization, spend limits, all of it - and not only Visa and Mastercard. Amex and UnionPay shipped too, and the rest of the industry lined up behind a single protocol.
Four of the major networks - Visa, Mastercard, American Express and UnionPay - have each shipped dedicated AI-agent payment rails, and more than 60 firms stand behind AP2, the shared authorization layer. The money side of an agent buying from you is largely solved.
“Agentic will be a paradigm shift for ecommerce,” said Nathan Feather, an analyst who covers small‑ and mid‑cap internet companies at Morgan Stanley, in the report. “With greater digitization of consumers’ wallets, this could shake up the e‑commerce funnel with implications across retailers and digital advertising players.”
What is not solved is your storefront: whether an agent can find your product, read your catalog and reach a checkout at all. Every network did its homework. Most stores have not started theirs.
Here is what each network actually shipped, and when. Every row is a payment capability aimed at agents, not at shoppers with thumbs.
| Network | What they shipped | When | How it works |
|---|---|---|---|
| Visa | Intelligent Commerce, then Trusted Agent Protocol | Apr & Oct 2025 | Tokenized agent credentials, spend controls, a bot-versus-agent signal at checkout |
| Mastercard | Agent Pay, built on Agentic Tokens | Apr 2025 | Agent identity and verifiable intent bound to the token, revocable from the issuer app |
| American Express | Agentic Commerce Experiences (ACE) Developer Kit | 2026 | Agent verification for merchants, plus purchase protection for registered agents |
| UnionPay | Agentic Payment Open Protocol | Apr 2026 | Agent-identity lifecycle and authorization, an open standard beyond mainland China |
| Discover / Diners Club | No dedicated agent protocol | - | The one major network without agent-specific rails so far |
| Industry (AP2) | Agent Payments Protocol | Sep 2025 | Three signed mandates as verifiable credentials, backed by 60-plus partners |
Agentic payment tokens arrive first from Visa and Mastercard
Both moved in April 2025. Visa launched Intelligent Commerce, opening its network to AI agents with tokenized credentials, identity checks and spend controls, and followed in October with a Trusted Agent Protocol that helps a merchant tell a real agent from a bot at checkout. Mastercard launched Agent Pay the same month, built on Agentic Tokens - an extension of the tokenization that already powers Apple Pay and Google Pay, with agent identity and verifiable intent bound to the token and revocable from the issuer app. Two names, one idea: a card credential an agent can use and a bank can still pull back.
“Consumers aren’t ready to delegate payments to AI agents … Three‑quarters of these consumers say they are uncomfortable allowing an AI agent to complete a purchase and pay autonomously, even if they could set spending limits and rules in advance.”
American Express and UnionPay took agent payments global
The two-network framing broke in 2026. American Express shipped its Agentic Commerce Experiences (ACE) Developer Kit, which verifies agents for merchants and adds purchase protection for buys made by a registered agent - the first network to put its guarantee behind an agent transaction. UnionPay followed, releasing its Agentic Payment Open Protocol in April 2026 and proving it live with an AI assistant booking a taxi in Hong Kong. UnionPay reaches well beyond mainland China, so agent payment rails now run across Asia, not just the US networks.
Agentic payment authorization runs through AP2
The networks did not each build a silo. In September 2025 Google announced the Agent Payments Protocol (AP2) with more than 60 partners: Mastercard, Visa, American Express and UnionPay International, plus JCB, PayPal, Ant International, Adyen, Coinbase and Worldpay. AP2 carries three signed mandates - Intent, Cart and Payment - as verifiable credentials, so an agent can prove a real person authorized a specific purchase for a specific amount, and it was later handed to the FIDO Alliance to govern. That is most of the payments industry agreeing on how an agent proves consent, which is the hard part of letting software spend your money.
Agentic payment readiness: where stores fall short
The payment rails are ready. Your store is the missing piece. Morgan Stanley projects agentic shoppers will drive 190 to 385 billion dollars in US e-commerce by 2030, 10 to 20 percent of the online total. The rails to capture that spend are done.
An agent still has to find your product, read your catalog and reach a checkout it can complete, and our own testing says most stores are nowhere close. Across 50 mid-market DTC brands we measured, the average store exposed 2.6 of 9 agent protocols, and every point came from its platform, not from anything the store built. The bank will let the agent pay. The store is the thing turning it away.
What a store owner should do about agentic payments
- Leave the payment rails to the networks. You do not build agent tokens - Visa, Mastercard, Amex and UnionPay already did, and your processor will surface them. Do not spend a day on the money layer.
- Make your store reachable before anything else. An agent that cannot read your catalog never reaches the payment step. Start with crawler access and a clean product feed - the platform requirements piece has the checklist.
- Check what an agent actually sees on your store. Run the agent-readiness check and fix the protocols your platform should be handing you for free.
- Ask your processor when agent transactions turn on. Agent Pay and Intelligent Commerce reach you through certified processors, so the real question is your provider's timeline, not the network's.
- Watch AP2 if you sell across borders. With UnionPay, JCB and Ant International in the coalition, agent authorization is going global, and cross-border sellers feel it first.
Every date here is from 2025 or 2026, and the networks are shipping updates fast. Treat the specifics as a snapshot of where the rails stand now, and check each network's developer docs for the current state before you build against them.
The pattern across this whole cluster holds one more time: the infrastructure for agentic commerce is arriving faster than stores are adapting to it. The networks finished the payment rails while most merchants were still treating AI agents as a traffic problem. The stores that get bought from will be the ones an agent can reach, read and check out - the full playbook is in the pillar guide.
Run the agent-readiness checker on your store and see whether an agent can even get to the checkout the networks just built.
FAQ
Which card networks support AI agent payments?
Four of the majors have shipped dedicated agent payment rails: Visa (Intelligent Commerce, April 2025, plus a Trusted Agent Protocol in October 2025), Mastercard (Agent Pay on Agentic Tokens, April 2025), American Express (its Agentic Commerce Experiences Developer Kit in 2026) and UnionPay (Agentic Payment Open Protocol, April 2026). Discover, the network behind Diners Club, has not shipped a dedicated agent protocol yet. Beyond those, more than 60 firms including JCB, PayPal and Ant International back the shared AP2 authorization protocol.
What is AP2 and who is behind it?
AP2, the Agent Payments Protocol, is an open standard Google announced in September 2025 with more than 60 partners, including Mastercard, Visa, American Express, UnionPay International, JCB, PayPal, Ant International, Adyen, Coinbase and Worldpay. It lets an AI agent prove to a merchant or network that a real person authorized a specific purchase, using three signed mandates (Intent, Cart and Payment) carried as verifiable credentials. It was later handed to the FIDO Alliance for governance, so it is vendor-neutral rather than any one network's product.
Do I need to build anything to accept agent payments?
No. The payment rails are the networks' job, not yours. Visa, Mastercard, Amex and UnionPay have already built the agent tokens and authorization, and they reach merchants through certified payment processors, so accepting an agent transaction is a question of when your processor enables it. Your work is on the store side: making your catalog readable and your checkout reachable so an agent can get to the payment step in the first place.
How big is agentic commerce expected to get?
Morgan Stanley, in a December 2025 outlook, projects that agentic shoppers could drive 190 billion dollars to 385 billion dollars in US e-commerce spending by 2030, which it frames as roughly 10 to 20 percent of the US online total. Those are its base and bull cases. The figure matters here because the payment rails to capture that spend are already built, so the constraint on a given store is whether an agent can reach and read it, not whether it can pay.
If the networks solved payments, why is my store still not agent-ready?
Because payment and discovery are two different layers. The networks solved the money: an agent can authenticate, get authorized and pay. But an agent first has to find your product, read your catalog and reach a checkout it can complete, and that is on your store. In our test of 50 mid-market DTC brands, the average store exposed only 2.6 of 9 agent protocols, and every point came from its platform rather than the store. The bank will let the agent pay; most stores are the thing turning it away.