Guide
Agentic commerce explained: what it means when AI agents shop for you
Agentic commerce is shopping where an AI agent does the clicking: it finds the product, compares options, and pays, on your behalf and within rules you set. Card networks, payment companies, and AI labs have each launched their own way to make that work. You do not need to know the plumbing to stay safe, but it helps to know what the names mean and which controls are yours.
By Agent Lane Editorial · Page dated 14 October 2026
What does agentic commerce mean?
“Agentic” just means acting on its own. In agentic commerce, the buyer is still you, but the one doing the steps is an AI (artificial intelligence) agent. It can be as small as “reorder my usual coffee” or as open as “find me a carry-on under $150 and buy it.” The merchant sees an order; the payment industry is building ways for that merchant to tell the order came from an agent you actually authorized.
What are ACP, AP2, and x402?
These are the three standards you will see most. Each is a published set of rules that lets agents, merchants, and payment providers talk to each other.
| Name | What it stands for | Who started it | What it does, in plain words |
|---|---|---|---|
| ACP | Agentic Commerce Protocol | OpenAI and Stripe | Lets an agent check out at a merchant inside a chat, using a payment you approved, without handing the agent your card number. |
| AP2 | Agent Payments Protocol | Google, with many payment partners | Uses signed “mandates” (a digital note of what you allowed, such as an item and a price cap) so a merchant and bank can check the agent had your permission. |
| x402 | Named after the web’s “402 Payment Required” status code | Coinbase | Lets an agent pay small amounts, usually in stablecoins (crypto tokens pegged to a currency such as the US dollar), to unlock a web page or data feed. More in x402 buyer basics. |
Card networks run their own programs on top of these, such as Visa Intelligent Commerce and Mastercard Agent Pay. They mostly issue agent-specific card tokens (a stand-in number tied to one agent, which can be limited or switched off without replacing your real card). Names and details change quickly; check each company’s own page before relying on a feature.
How does an agent actually pay?
- Saved account. The agent uses a store account where your card is already saved. Easiest, and the riskiest, because store limits are rarely set.
- Virtual card. A separate card number with its own limit. See virtual cards for AI agents.
- In-chat checkout. The AI app shows you the order and you confirm, often through ACP.
- Agent wallet. A small crypto wallet the agent controls, used for x402 and similar payments. See dedicated agent wallet.
What controls should I set before an agent can check out?
- Pick one way to pay. Use a virtual card or a small, separate wallet. Not your main card, debit card, or bank login. See should I give my AI agent my credit card.
- Set a hard limit. A per-purchase cap and a monthly cap, set at the card or wallet, not just in the chat. See AI agent spending limits.
- Allow-list merchants. Let the agent buy only from shops you named. See allow-list merchants only.
- Confirm before checkout. Have the agent show item, price, shop, and total before it pays, until you trust it.
- Keep receipts in one place. Send order mail to the agent’s own inbox and skim it weekly. See receipt log after each session.
What can go wrong?
- Wrong item or quantity. The agent misread the page. Fix: you confirm every order at first.
- Repeat charges. A job that runs daily buys daily. Fix: an end date and a monthly cap.
- Tricked by a page. A web page or email can contain hidden text telling the agent to buy or pay. This is called prompt injection. Fix: a merchant allow-list and a rule that page text is never an instruction.
- Refund gaps. Card payments can be disputed with your bank; crypto payments usually cannot be reversed. Fix: keep crypto wallets tiny.
Frequently asked questions
What is agentic commerce?
Shopping where an AI agent finds, chooses, and pays for things on your behalf, within limits you set.
What is the Agentic Commerce Protocol (ACP)?
An open standard from OpenAI and Stripe that lets an AI agent complete a checkout with a merchant using a payment you approved, without the agent seeing your full card number.
What is the Agent Payments Protocol (AP2)?
An open standard led by Google that records what you allowed an agent to buy as a signed mandate, so merchants and payment providers can check the agent had permission.
How is x402 different from AP2 and ACP?
x402 is aimed at small, automatic payments, usually in stablecoins, to unlock web content or data. ACP and AP2 are aimed at regular shopping checkouts.
Is it safe to let an AI agent buy things?
It can be, with a separate virtual card or small wallet, hard limits set at the card or wallet, a merchant allow-list, and your confirmation before checkout while you build trust.
Can I get my money back if an agent buys the wrong thing?
Card purchases can usually be returned or disputed with your bank like any other purchase. Crypto payments usually cannot be reversed, which is why agent wallets should stay small.
Related guides
- Can AI agents make purchases?
- Virtual cards for AI agents
- x402 buyer basics
- A proactive ping is not permission to spend
- All guides
Get the daily roundup
The day’s useful AI agent news for small businesses, in plain language, by email. Free.