Quick Answer
AI agent protocols are shared technical rules that let AI agents identify themselves, prove they act for a real person, and perform approved actions on a business’s systems. The newest example is the Personal Agent Protocol (PAP), announced on October 6, 2026 by Meta and Sierra, with partners including Shopify, Stripe, Walmart, Genesys, Rocket and Instinct. It is an early-stage open standard, not yet an industry-wide one.
What Is an AI Agent Protocol?
An AI agent protocol is a common set of rules for how software agents talk to businesses. It answers three questions: Who is this agent? Who does it work for? What is it allowed to do?
Without such rules, a store sees an AI agent as an unidentified bot. With them, the store can verify the agent, check the customer’s permissions, and decide which actions to allow.
What Is the Personal Agent Protocol (PAP)?
The Personal Agent Protocol is an open standard that defines how personal AI agents authenticate with businesses and act on a consumer’s behalf. Meta and Sierra announced it on October 6, 2026.
Key facts, as reported at announcement:
- Lead developers: Meta and Sierra.
- Named partners: Genesys, Instinct, Rocket, Shopify, Stripe and Walmart (per Sierra’s announcement). Coverage of Meta’s own post adds NICE and Decagon.
- Core design: customers decide what access their agents get; businesses decide which actions those agents may perform (Channel Insider, Oct 7, 2026).
- Status: a v0.1 specification, design workshops and a reference implementation were promised for later in October 2026.
- Not yet included: payments. Sierra lists payment extensions as a future step, per Forkast’s analysis.
Why Did the Industry Need This Now?
Agents have moved from drafting emails to buying things, and businesses have started pushing back.
Meta launched its Muse personal agent on September 8, 2026, with Stripe’s Link wallet built in for checkout, according to Forkast. Reports say Amazon blocked Muse from its store on September 20, saying unauthorized AI agent access violates its terms and that Muse does not identify itself as an agent. Amazon has also sued Perplexity over its Comet browser’s shopping behavior, per the same reports.
The lesson: agents can only work at scale if businesses can recognize and trust them.
How Does PAP Compare With Other Agent Protocols?
PAP is one of several overlapping efforts. They focus on different layers.
| Protocol | Backed by | Main focus |
|---|---|---|
| Personal Agent Protocol (PAP) | Meta, Sierra, Shopify, Stripe, Walmart and others | Agent identity, consumer control, business visibility |
| Universal Commerce Protocol | Google, Target, Etsy, Wayfair; Walmart and Shopify participate | Full agent-initiated checkout |
| Agentic Commerce Protocol | Stripe and OpenAI (Apache 2.0, Sept 2025) | Checkout flows for AI transactions |
| Machine Payments Protocol | Stripe and Tempo (March 2026) | Machine-to-machine payments |
| Trusted Agent Protocol | Visa | Merchant visibility and trust verification |
Sources: CryptoBriefing, TechJack Solutions, Forkast (October 2026).
What Pattern Do These Protocols Share?
Most ship identity first and payments later. Forkast’s analysis notes that PAP, Google’s protocol and Visa’s all prioritize identity, intent and signaling ahead of settlement. Trust has to be established before money moves.
What Should Businesses Do?
- Audit agent traffic. Learn which automated visitors reach your site and what they do.
- Define allowed actions. Decide which tasks an agent may perform (browse, order, refund) and which need a human.
- Watch the v0.1 spec. Read the specification once published before committing to an integration.
- Avoid betting on one standard. Several protocols compete, and none has won.
What Should Consumers Know?
- You choose what access your agent has; the business decides what actions it may take.
- Check which purchase protections apply when an agent buys for you. Meta says Muse is the first agent covered by Link’s purchase protections.
- Review agent permissions the way you review app permissions.
Frequently Asked Questions
Is the Personal Agent Protocol an official industry standard?
No. It is an open standard proposal backed by several large companies. Reporting on the launch stresses that it is early-stage and has not been adopted industry-wide.
Does PAP handle payments?
Not yet. Authentication, consumer control and company visibility come first. Payment extensions are listed as a possible future addition.
Who announced PAP, and when?
Meta and Sierra announced it on October 6, 2026.
Why did Amazon block Meta’s Muse agent?
Per press reports, Amazon said unauthorized AI agent access violates its terms and that the agent did not identify itself while browsing.
Will one protocol replace the others?
Unclear. PAP, Universal Commerce Protocol, Agentic Commerce Protocol and Trusted Agent Protocol cover overlapping layers, and partners such as Walmart and Shopify already take part in more than one.
Bottom Line
AI agents are only as useful as the trust businesses place in them. Agent protocols are the first serious attempt to build that trust into the internet’s plumbing. They are still early, so treat October 2026 as the starting line, not the finish.
Sources
- Channel Insider, “Meta Joins Walmart, Shopify, Stripe to Back New AI Agent Standard for Business,” Oct 7, 2026
- TechJack Solutions, coverage of the PAP launch, Oct 2026
- Forkast, “Every New Agent Protocol Ships Identity First and Money Later,” Oct 2026
- Forkast, “Meta Just Built the First Integrated Agent-Commerce Stack,” Sept 24, 2026
- CryptoBriefing, “Stripe, Meta, Walmart, and Shopify are building the infrastructure for AI agents to shop for you,” Oct 2026
- Let’s Data Science, “Meta and Sierra Introduce Personal Agent Protocol,” Oct 2026