Agent Payments Protocol (AP2)

What does it mean

Agent Payments Protocol (AP2) is an open and payment method-independent protocol that allows AI agents to make verifiable purchases on behalf of the user. This protocol, originally introduced by Google in September 2025, addresses one of the biggest challenges of autonomous artificial intelligence: how to enable an AI agent to spend money safely, transparently, and under the full control of the account owner.

More info

Traditional payment gateways are designed for people (human-in-the-loop) – they require manual data entry or confirmation via SMS/app. AP2 changes this paradigm by utilizing cryptographically signed mandates. These mandates firmly link the user's intent, the contents of the shopping cart, and the payment itself across the entire chain: from the customer through the AI agent and merchant to the payment network.

Thanks to AP2, there remains a clear and immutable record behind every purchase. Therefore, it cannot happen that someone later questions whether the payment was made correctly. This protocol is supported by giants like Mastercard, PayPal, and American Express, making it a global standard for so-called “next-generation standing orders”.

In practice, it works very simply: you give your AI agent clear boundaries, and it operates within them. You can, for example, tell it: “Monitor my supply of coffee beans. Whenever I'm running low, buy a new pack, but only if it costs less than €20.”

The agent then monitors the price and stock itself and makes the purchase exactly according to your rules without you having to pull out your card or confirm the payment on your mobile each time.

The significance of AP2 for security and business in e-commerce

AP2 shifts payments from manual actions to programmable rules, bringing significant benefits for merchants and consumers.

Key benefits:

• Elimination of fraud and chargebacks: Cryptographic verification ensures that the payment was made by an authorized agent within pre-approved limits, dramatically reducing the risk of misuse.

• Delegated authorization: The user does not need to confirm every microtransaction. AP2 allows setting precise boundaries (e.g., budget, time window, approved vendors) within which the AI agent operates.

• Transparency and auditability: Every purchase made through AP2 is clearly documented, so the user can see exactly why and when the agent spent the money.

• New revenue streams: Merchants are opened to automated sales, where purchasing algorithms optimize purchases based on price, delivery speed, or loyalty rewards.