Machines That Trade: Safe Commerce in the Agentic Economy

Key takeaways

 

• AI agents are starting to actually pay — and a new layer of standards makes it safe
• Real protocols now exist: ACP (OpenAI + Stripe), AP2 (Google), x402 (Coinbase), MPP (Stripe + Tempo)
• They split the job into authorisation, checkout and machine-to-machine payment, so an agent can buy without ever seeing your card
• For business: to be bought by an agent, your offer must be discoverable, verifiable and transactable — not just visible

 

The Mundane: the meter in the cupboard, deciding

A smart meter ticks over quietly in a hallway cupboard. It is, in a small way, already making decisions — when to draw power, when to hold off — on rules someone set once and forgot. Now imagine that quiet, automatic decision-making spreading: your energy manager buying cheaper off-peak power, your business's systems renewing a service, an agent booking and paying for a job without waking you. For any of that to be safe, machines need a trustworthy way to handle money — and in 2025 and 2026, that arrived.

The Machine: the rails for agents to pay

A year ago, letting an AI spend money felt reckless. Today there are real, named standards for it, and they share the work out sensibly:

• ACP — the Agentic Commerce Protocol, co-developed by OpenAI and Stripe (open-source, released 2025). It defines how an AI agent and a merchant complete a purchase through a clean set of checkout steps — so an agent can browse a catalogue and check out on a buyer's behalf without ever handling the underlying card details.
• AP2 — Google's Agent Payments Protocol (2025). This is the authorisation and trust layer: how a human or business grants an agent permission to spend, with mandates, limits and an audit trail, so the agent can only do what it was actually allowed to.
• x402 — Coinbase's protocol (2025), which revives the long-dormant HTTP "402 Payment Required" status code to let agents make tiny, instant stablecoin payments directly over the web. It has since moved to the Linux Foundation with backing from the likes of Google, Stripe and Visa.
• MPP — the Machine Payments Protocol, from Stripe and Tempo (2026), an enterprise-grade standard for machine-to-machine payments.

The important point isn't the alphabet soup. It's that these layers compose: AP2 says what an agent is allowed to spend, ACP runs the checkout, and x402 or MPP move the actual money. Together they turn "an AI spending money" from a scary idea into a bounded, auditable transaction.

The Digital Eye: your service as a transactable object

To this new machinery, a business isn't a phone number and a vibe. It's a transactable object: can your offer be discovered, can its terms be verified, can it be paid for through these rails, and was the agent authorised to do so? (To be clear: these are emerging industry standards, not something most small businesses plug into yet — and nothing here implies any particular firm is "agent-payable" today. The direction of travel, though, is unmistakable.)

The Mindset: from selling to humans to being buyable by machines

It's no longer enough to be findable by an agent; the frontier is being buyable by one — discoverable, verifiable, and transactable through trusted rails, within limits a customer set. You don't need to implement payment protocols this week. You need to understand the shape of where this goes, and start with the foundation every layer of it depends on: structured, verifiable facts about what you offer, at what price, under what terms. The plumbing for machines to pay each other safely is being laid right now by the biggest names in tech. The businesses that will benefit are the ones already legible enough to sit on those rails when they reach the high street.

Try this, this week

Think one step past "can a customer find me?" to "could a trusted agent buy from me with confidence?" Write down, in plain terms, exactly what an agent would need to transact with you safely: a clear price, clear terms, a clear scope, and proof you'll deliver. The gaps in that list are the same gaps a cautious human feels — so fixing them helps you today and future-proofs you for tomorrow.

Common questions

Are AI agents really paying for things now?

Yes — real standards launched in 2025–2026 (ACP from OpenAI and Stripe, AP2 from Google, x402 from Coinbase, MPP from Stripe and Tempo) let agents transact within set limits, and adoption is growing.

How is it kept safe?

The job is split: an authorisation layer (AP2) sets what an agent may spend, a checkout layer (ACP) runs the purchase, and payment rails (x402, MPP) move the money — with mandates, limits and audit trails, and without exposing card details to the agent.

What should a small business do now?

Not implement protocols — but make your offer discoverable, verifiable and clearly priced. That structured legibility is the foundation every one of these layers depends on.