The Economy is Growing a New Layer
AI agents don't just browse the web. They buy things.
By 2030, McKinsey estimates AI agents could be responsible for $1 trillion in US-based transactions alone. Stripe puts the figure at $385 billion in US online spend redirected through agentic channels. Bain goes further: 15–25% of total global retail could flow through autonomous agents, redirecting $3–5 trillion in spend within this decade.
These numbers are not forecasts about a distant future. The infrastructure to make them real is being built today — and the architecture decisions being made right now will determine which businesses capture this shift and which become invisible to it.
Why Agents Need Their Own Wallets
The problem is straightforward: an AI agent that can browse, decide, and act cannot complete a transaction if it has no payment credentials of its own.
Traditional e-commerce assumes a human is present — someone to authenticate, approve, and confirm. Agentic commerce breaks this assumption. When an AI agent is delegated to book travel, order supplies, or pay for API calls on behalf of a user, it needs:
- Its own payment identity — not borrowed credentials
- Scoped spending limits — so it can't overspend its mandate
- Machine-readable payment protocols — so it can complete transactions programmatically
- Verifiable proof of authorization — so merchants can trust the transaction came from a legitimate, user-authorized agent
Four major protocol ecosystems are now competing — and in some cases collaborating — to become the standard layer for this new economy.
x402: HTTP Payments for Machines
In May 2025, Coinbase revived one of the internet's oldest abandoned features: the HTTP 402 "Payment Required" status code, dormant since 1996.
The x402 protocol turns this code into a full payment rail for AI agents. When an agent requests a resource from an x402-compatible server, the server responds with HTTP 402 plus a machine-readable header specifying the amount, currency, and destination wallet. The agent signs a stablecoin payment (typically USDC), retries the request with proof of payment in the header, and receives the resource — all within a single HTTP exchange.
No accounts. No sessions. No API keys. Zero protocol fees.
Coinbase and Cloudflare co-govern x402 through the x402 Foundation, and adoption has been swift. AWS launched Amazon Bedrock AgentCore Payments on x402 in May 2026 in partnership with Coinbase and Stripe. Cloudflare built native x402 support into its Workers and Agents SDK. The x402 Bazaar now hosts over 10,000 x402-compatible API endpoints discoverable by agents.
By late 2025, x402 was processing around 731,000 transactions per day with cumulative volume reaching approximately $600 million. The protocol supports Base, Ethereum, Arbitrum, Polygon, and Solana.
Coinbase AgentKit and Agentic Wallets
Giving agents a payment protocol is one thing. Giving them a secure wallet to pay from is another.
Coinbase AgentKit (introduced November 2024) is a framework-agnostic toolkit that embeds MPC-secured crypto wallets into AI agents. Compatible with LangChain, CrewAI, and any LLM framework, AgentKit gives agents the ability to hold, send, and receive crypto; interact with DeFi protocols; sign messages; and pay for APIs via x402 — all without a developer needing to handle private key management.
In February 2026, Coinbase launched Agentic Wallets — a production-grade infrastructure layer built specifically for autonomous agents. Key features:
- MPC-secured keys — the private key is split across multiple parties; no single point of failure
- Programmable session caps — define exactly how much an agent can spend per task or session
- Gasless settlement on Base — agents never need to hold ETH for gas; Coinbase's paymaster covers it
- Native x402 support — agents can pay for any x402-compatible resource directly from their wallet
The result: an AI agent can be deployed with a funded wallet, a defined spending mandate, and the ability to autonomously pay for compute, data, tools, and services — returning any unspent balance at task completion.
Google AP2: Trust and Authorization at Scale
On September 16, 2025, Google announced the Agents-to-Payments (AP2) protocol — a fundamentally different approach to the agent payment problem.
Where x402 solves the how of payment, AP2 solves the why — providing cryptographically verifiable proof that a transaction was authorized by a real user with a defined mandate. Its core primitive is the Mandate: a tamper-proof, digitally signed contract that captures exactly what a user authorized an agent to do.
Two flows are supported:
- Human present: An Intent Mandate captures the user's request; a Cart Mandate locks in items and price before any payment is triggered — creating an immutable authorization record.
- Delegated (Human Not Present): An Intent Mandate pre-authorizes the agent with rules (price limits, timing, item categories); the agent auto-generates a Cart Mandate when conditions are met.
AP2 is payment-method agnostic — it supports credit cards, stablecoins, bank transfers, and alternative payment methods. A collaboration with Coinbase and the Ethereum Foundation produced an A2A x402 extension for crypto agent payments within the AP2 framework.
Launched with over 60 partner organizations — including Adyen, American Express, Coinbase, Mastercard, PayPal, Revolut, Salesforce, Shopee, and Visa — Google subsequently donated AP2 to the FIDO Alliance (the standards body behind passkeys) to ensure platform-neutral governance. v0.2 added formal support for fully autonomous "Human Not Present" payments.
Stripe's Multi-Protocol Approach
Stripe has moved faster and broader than any other payments company in this space, building at every layer of the stack simultaneously.
Agentic Commerce Protocol (ACP), co-developed with OpenAI and launched September 2025, powers ChatGPT's Instant Checkout — enabling US users to buy directly within chat from Shopify merchants, Etsy sellers, and brands including Glossier, Vuori, and SKIMS. ACP is open source (Apache 2.0) with Salesforce among early adopters.
Shared Payment Tokens (SPTs), launched with the Agentic Commerce Suite in December 2025, let AI agents securely pass a buyer's payment credentials to a merchant without exposing the underlying card or account details. Tokens are scoped to a specific seller, bounded by time and amount, and fully auditable. Stripe has extended SPT support to Mastercard Agent Pay, Visa Intelligent Commerce, Affirm, and Klarna.
Link for Agents (launched at Stripe Sessions 2026) gives Stripe's 200 million Link users scoped, one-time-use payment tokens for trusted agent transactions — a direct bridge between existing consumer wallets and agentic commerce.
Machine Payments Protocol (MPP), co-authored with Tempo (a Stripe- and Paradigm-backed blockchain) and proposed to the IETF in March 2026, targets the high-frequency, sub-cent payment use cases that card rails cannot handle economically. An agent pre-funds a session balance; signed vouchers are issued per request and settled in batches. Over 100 services adopted MPP at launch, including Anthropic, OpenAI, Shopify, Deutsche Bank, Standard Chartered, DoorDash, and Ramp.
Stripe's own projection: agentic purchasing could reach $385 billion in US online spend by 2030.
Visa, Mastercard, and PayPal: The Card Networks Enter the Arena
The major card networks recognized the shift early and moved in parallel.
Visa launched Intelligent Commerce in April 2025 — APIs that integrate identity verification and spending controls directly into AI agent workflows. In October 2025, Visa introduced the Trusted Agent Protocol with 10+ partners, helping merchants distinguish legitimate AI agents from malicious bots. For 2026, Visa predicts millions of consumers will make agent-mediated purchases during the holiday shopping season.
Mastercard Agent Pay, unveiled April 2025, completed its first live agentic transaction on the Mastercard network in Q3 2025. Mastercard contributed its Agent Pay standards to the FIDO Alliance alongside Google, and integrated with Stripe's SPT ecosystem.
PayPal launched Agentic Commerce Services in October 2025. Its Agent Ready product enables PayPal merchants to accept payments from AI assistants — ChatGPT, Perplexity, and Gemini — with fraud detection and buyer protection already applied. PayPal has also collaborated with Google Cloud on a joint agentic commerce solution.
What This Means for Your Business
The protocol landscape is complex, but the business implication is simple: the next major commerce channel is being built now, and it does not serve merchants who aren't ready for it.
An AI agent shopping on a customer's behalf will default to merchants that are agent-discoverable, agent-transactable, and agent-trustworthy. Merchants that remain invisible to these protocols will lose transactions they never even knew they could have captured.
Four practical steps for businesses evaluating this shift:
- Audit your payment infrastructure. Does your checkout support SPTs, x402, or AP2 mandates? If not, you are not agent-accessible.
- Make your product data agent-discoverable. PayPal's Store Sync and x402 Bazaar are early examples of agent-facing product directories. Structured data matters more than it ever has.
- Understand the authorization model. AP2 Mandates and SPTs both require merchants to handle and verify agent-issued credentials. This is a new compliance surface.
- Think about agent-to-agent revenue. Your business may not only sell to agents — it may offer services used by agents as part of larger workflows. x402 and MPP make these micro-revenue streams viable for the first time.
Agentic commerce is not a future scenario. ChatGPT is already checking out. Your competitors may already be agent-ready.
Building an agentic system for your business? Explore our live showcase of production deployments or talk to our team about what agentic automation looks like for your workflows.