Something fundamental is shifting in how we think about online commerce. Over the past few weeks, I have been watching a quiet infrastructure war unfold between the world's largest tech and payments companies. The prize? Becoming the standard protocol layer for AI agents that shop and pay on behalf of humans.
This is not speculative anymore. OpenAI's ChatGPT now lets users buy directly from Etsy sellers. Google is rolling out AI-powered checkout in Search and Gemini. Mastercard and Visa have launched competing frameworks for authenticating AI-initiated transactions. The age of agentic commerce has arrived, and its infrastructure is being built in real time.
What Are Agentic Commerce Protocols?
Traditional e-commerce assumes a human is clicking buttons, filling forms, and entering payment details. Agentic commerce flips this model: an AI agent acts on your behalf, discovering products, comparing options, negotiating terms, and completing transactions.
For this to work at scale, we need new standards. Three major protocols have emerged:
Google's Universal Commerce Protocol (UCP) is an open standard co-developed with Shopify, Etsy, Wayfair, Target, and Walmart. UCP establishes a common language for AI agents to interact with merchants, payment providers, and logistics systems across the entire shopping journey. It is already endorsed by more than 20 major players including Visa, Mastercard, American Express, and Stripe.
OpenAI's Agentic Commerce Protocol (ACP) powers the new Instant Checkout feature in ChatGPT. Co-developed with Stripe, ACP defines how conversational AI agents handle the back-and-forth between users and merchants. Over a million Shopify merchants will soon be accessible through this protocol.
Google's Agent Payments Protocol (AP2) sits alongside UCP and focuses specifically on payment authorization and verification. More than 60 organizations, including PayPal, Adyen, and Klarna, are collaborating on AP2 to ensure AI-initiated transactions remain secure and auditable.
The Payment Giants Are Not Standing Still
What makes this moment significant is how payment networks are responding. Mastercard has launched Agent Pay, a framework that combines network tokenization, authentication, and fraud controls to validate AI-initiated transactions without exposing sensitive card credentials.
The key innovation is the Dynamic Token Verification Code. Instead of an AI agent handling actual card numbers, trusted agents receive network-issued tokens that can be submitted through standard checkout forms. This maintains security while enabling autonomous transactions.
Fiserv recently announced it will be one of the first major processors to integrate Mastercard's Agent Pay at scale. This means merchants using Clover point-of-sale systems will soon be able to accept AI-initiated purchases through their existing infrastructure, with no custom integration required.
Visa has launched similar capabilities, and the two card networks are actively working with AI platforms to ensure interoperability. Both have signed on to Google's UCP, signaling that protocol fragmentation may be avoided in favor of layered standards that work together.
Why This Matters for the Middle East
The implications for our region are substantial. The UAE and Saudi Arabia are investing heavily in AI infrastructure and digital commerce. As AI agents become primary shopping interfaces, the countries and companies that integrate these protocols earliest will have significant advantages.
Consider a scenario that is now technically possible: A user in Dubai asks their AI assistant to find and purchase a specific product. The agent searches across multiple marketplaces, compares prices and shipping times, applies available discounts, and completes the purchase using a tokenized payment method. All of this happens in a single conversation, with the user only confirming final details.
For merchants in the region, adopting UCP or ACP early means being discoverable by the billions of AI agents that will soon mediate consumer purchases. For payment providers, integrating Agent Pay or AP2 means remaining relevant in a world where card details are never entered manually.
The Security and Trust Challenge
The most fascinating aspect of this infrastructure buildout is how it addresses trust. When an AI agent initiates a transaction, how do we verify that it is acting on legitimate user intent? How do we prevent fraud or unauthorized purchases?
The protocols being deployed solve this through multiple layers:
- Tokenization replaces card numbers with network-issued tokens, reducing exposure of sensitive data
- Agent identity verification ensures only authenticated AI systems can initiate transactions
- Intent confirmation requires explicit user approval for purchases above certain thresholds
- Audit trails maintain complete records of AI decision-making for dispute resolution
Mastercard's framework, for instance, allows transactions to be processed only after verifying that a real consumer has authorized the purchase. The agent itself never has access to underlying credentials.
What Comes Next
We are in the early months of a multi-year transition. Today, AI agents can handle simple single-item purchases. The roadmap includes multi-item carts, subscription management, returns processing, and complex negotiations.
Several developments to watch in 2026:
Protocol convergence or competition: Will UCP, ACP, and AP2 evolve into complementary layers, or will we see a standards war? The early signs point toward cooperation, with major players endorsing multiple protocols.
International expansion: Current implementations focus on US markets. Rollout to the Middle East, Europe, and Asia will require adaptation to local payment methods and regulations.
Agent capability growth: As models become more capable, the scope of what agents can autonomously handle will expand dramatically.
Conclusion
The infrastructure for agentic commerce is being built now. The decisions being made by Google, OpenAI, Mastercard, and their partners will shape how commerce works for the next decade. For AI practitioners and business leaders in the region, this is the moment to understand these protocols and consider how they will transform your industry.
The future of shopping is not about better websites or smoother checkout flows. It is about AI agents that know your preferences, have your trust, and can act on your behalf. The protocols emerging today are the foundation that makes this possible.