The Protocols Powering Agentic Commerce: A September 2026 Update

Where things stand

A year after the first agent checkout went live, the protocols behind agentic commerce have settled into clear layers, most have moved to neutral governance, and real agent-led spending is still small. Our earlier article on the protocols powering agentic commerce laid out the standards that were starting to let AI agents shop and pay on our behalf. Since then, several of those protocols have changed owners, changed scope, or outlived the products they were first built for.

How the layers fit together

The protocols are best understood as layers that work together rather than rivals. Each one solves a different part of the same problem, from letting an agent talk to a store to proving a person approved the purchase.

At the top, MCP and A2A let agents connect to tools and to each other. Below that, UCP and ACP handle the shopping itself. The trust layer proves who the agent is and what the user agreed to. At the bottom, card networks and x402 move the money.

Eighteen months of change

Most of the protocols launched in 2025, and 2026 has been about handing them to shared bodies and making them work together.

The pattern matters for anyone building on these standards. A protocol run by a neutral group is less likely to change direction because one company’s product plans change, as ACP’s did when Instant Checkout closed.

The shopping layer: ACP and UCP

The shopping layer is where the biggest change happened: Google’s UCP has taken the lead on checkout, while ACP has narrowed its focus. This layer covers the conversation between an agent and a store, including finding products, building a cart and placing the order.

ACP, the Agentic Commerce Protocol, was released by OpenAI and Stripe in September 2025 to power Instant Checkout in ChatGPT. Instant Checkout was retired in March 2026 after only about a dozen Shopify merchants had shipped against it. The protocol kept going. PayPal joined as a payment provider, Stripe launched its Agentic Commerce Suite, and the April 2026 version of the spec covers carts, product feeds, orders, authentication and MCP. Its focus has shifted toward helping agents discover products rather than owning the checkout.

UCP, the Universal Commerce Protocol, was announced by Google and Shopify at the NRF retail conference on 11 January 2026 with more than twenty partners, including Walmart, Target, Etsy, Visa and Mastercard. Its goal is to replace one-off integrations between every agent and every store with a single shared layer. A March 2026 update added cart, catalog and identity linking features. Google is now testing a buy button for Flipkart products inside Gemini and AI Mode in India.

The trust layer: AP2, Visa and Mastercard

The trust layer answers two questions: is this agent who it says it is, and did a real person approve what it is buying? In 2026 the answers moved away from single companies and toward shared standards.

AP2, the Agent Payments Protocol, launched in September 2025 with more than 60 partners. It uses signed “mandates” that record what the user asked for and what ended up in the cart. On 28 April 2026, Google handed AP2 to the FIDO Alliance, the group behind passkeys, along with Mastercard’s Verifiable Intent framework.

The card networks each built their own piece. Visa’s Trusted Agent Protocol adds signed headers to each agent request so a merchant can confirm the agent’s identity and the user’s consent. Mastercard open-sourced Verifiable Intent in March 2026, which it co-developed with Google, to prove what the user actually intended to buy.

On 10 September 2026, Visa, Mastercard and Ant International announced a shared “know your agent” framework. The idea is that an agent registered with one network would not need to register again with the others. It is an early statement of intent, with no published spec or timeline yet.

The settlement edge: x402

x402 now has the broadest backing of any agent payment protocol, but the money moving over it is still small. Coinbase launched x402 in May 2025. It lets a website reply to an agent with an HTTP 402 “payment required” code, after which the agent pays in stablecoins and tries again. It suits small, per-request charges, such as paying a few cents for an API call or a page of data.

On 14 July 2026, the x402 Foundation launched under the Linux Foundation with 40 member organisations, including Visa, Mastercard, Stripe, Google, AWS, Cloudflare and American Express. Block joined in September.

The usage numbers need careful reading. Coinbase reported about 165 million transactions and roughly $50 million in total volume by late April 2026. The protocol’s own dashboard showed around 75 million transactions and $24 million over 30 days in mid-July, which works out to about 32 cents per payment. Independent analysis reported by CoinDesk in March found that roughly half of transactions were artificial, such as wallets paying themselves, and put real daily volume near $28,000.

The adoption gap

The standards are ahead of the shoppers. A June 2026 Checkout.com study of 400 heads of payments and more than 12,000 consumers across six markets shows the gap clearly.

Trust is the main reason. In the same study, a quarter of consumers said they would stop using an agent if a purchase was hard to dispute. Shoppers named spending caps, the ability to revoke access instantly, and easy cancellation as things they will not go without.

What this means for merchants

Most merchants do not need to pick a winning protocol, because payment providers are doing that work for them. Stripe says its Agentic Commerce Suite supports every major agentic protocol through a single setup. Adyen launched Adyen Agentic on 16 June 2026 to support UCP, ACP, AP2 and Meta’s AI checkout at the same time, so merchants can integrate once.

That leaves a few practical steps:

Ask your payment provider which protocols it supports today and which are planned.
Clean up product data. Agents can only recommend what they can read, and accurate titles, prices, stock levels and structured markup matter more than ever.
Plan for customer controls. Spending limits, easy cancellation and simple disputes are what shoppers say they need before trusting an agent with a card.

The protocols are no longer the bottleneck. The next year will be decided by whether shoppers trust agents enough to let them finish the purchase.