AgentsPay

Explainer

PayPal Agentic Commerce with Agent Ready, the PayPal MCP Server and the Agent Toolkit

PayPal made a bet that most merchants would rather not implement a commerce protocol at all. Where Stripe and OpenAI shipped a spec for you to build against, PayPal shipped two products that sit on top of the checkout you already have, and then bought a company to make the catalog half work. That choice is the whole story: it explains why Agent Ready needs almost no engineering from you, why there is nothing for an agent to discover about your store on the open web, and why the thing PayPal will not do for you is the thing that gets expensive later.

Agent Payments Console

Pick an agent

Payment intent

intent: ▌

Policy evaluation

Human approval required

This spend is over your approval threshold. Approve it to issue a scoped card, or deny it.

Scoped virtual card issued

AgentsPay

single-use

Wallet budget

spent of

Audit trail

In short

PayPal agentic commerce is a set of merchant services that let AI assistants find your products and pay for them. It has two named parts. Agent Ready is the payments half: it lets existing PayPal merchants accept transactions that originate from an AI agent, with PayPal fraud detection, buyer protection and dispute resolution attached, and no protocol implementation on your side. Store Sync is the discovery half: it pushes catalog, inventory and fulfillment data into AI shopping surfaces and routes the resulting orders back into your existing order management system, with you remaining the merchant of record. PayPal announced both on October 28, 2025, said Agent Ready would arrive in early 2026, and acquired the Israeli multichannel platform Cymbio on February 5, 2026 to run Store Sync. Separately, the PayPal MCP server and agent toolkit expose PayPal REST APIs such as invoicing, orders, refunds, disputes, subscriptions and shipment tracking as tools an AI agent can call. Those are back office automation, not agentic checkout, and merchants routinely confuse the two.

What is PayPal agentic commerce?

PayPal agentic commerce is the umbrella name for the services PayPal sells to merchants who want to be bought from inside an AI assistant. PayPal launched it on October 28, 2025 under the label agentic commerce services, and the announcement named exactly two things: an agentic payment solution and a catalog and order management offering. Those became Agent Ready and Store Sync. The framing matters more than the names. Every other major player in this market published a protocol and asked merchants to implement it. PayPal published a pair of managed services and asked merchants to enroll. If you are trying to work out which vendor to spend engineering time on, that is the first fork in the road, and it is the reason the rest of this page reads differently from our write-ups of Stripe agentic commerce and Shopify Agentic Storefronts.

What is PayPal Agent Ready?

Agent Ready is the payments side. PayPal describes it as letting existing merchants accept payments on AI surfaces, covering both supervised shopping (a person watching an assistant buy something) and automatic shopping (an agent buying without a human present), across conversational and browser-automated experiences. The pitch that PayPal keeps repeating is that it runs on top of your current checkout configuration, so a store already taking PayPal is eligible without new integration work, and PayPal fraud detection, buyer protection and dispute resolution come along unchanged. PayPal said at launch that Agent Ready would be available in early 2026, and it has been rolling out to merchants since, expanding coverage progressively rather than flipping on for everyone at once. If you are evaluating this, the honest question to ask your account team is not whether Agent Ready exists but which AI surfaces your specific account is enabled for today.

What is PayPal Store Sync, and what did the Cymbio acquisition change?

Store Sync is the discovery side, and it is the half that had a gap. It connects your product data, inventory and fulfillment to AI shopping surfaces, then drops resulting orders into the order management system you already run. Two commitments in PayPal's description are worth reading closely, because they are exactly what merchants lose in a marketplace arrangement: you keep merchant of record status, and you keep control of brand visibility and customer communications. At launch PayPal reached Store Sync through partners, naming Wix, Cymbio, Commerce (BigCommerce and Feedonomics) and Shopware. Then on January 22, 2026 PayPal announced it would acquire Cymbio outright, a Tel Aviv multichannel orchestration platform founded in 2015, and closed the deal on February 5, 2026. PayPal said plainly that the Cymbio team and technology would power Store Sync. In other words, the catalog syndication layer moved from being a partnership to being owned infrastructure, which is a reasonable signal about how central PayPal thinks it is.

Where PayPal agentic checkout is actually live

The integrations arrived faster than the product names suggest. PayPal and OpenAI announced a partnership on October 28, 2025, the same day as the agentic commerce services launch, to power Instant Checkout inside ChatGPT, with PayPal stating it would adopt the Agentic Commerce Protocol so ChatGPT users could check out with PayPal and so PayPal merchant catalogs, small businesses as well as large retail brands, would reach ChatGPT commerce during 2026. Perplexity went live first in practice: an integration launched just before Black Friday on November 25, 2025, letting people search, compare and buy inside Perplexity's chat interface using PayPal passkey authentication. Microsoft Copilot is the third surface PayPal and Cymbio both cite. If you want the mechanics of the ChatGPT side specifically, we cover them in ChatGPT Instant Checkout.

Does PayPal support the Agentic Commerce Protocol?

Yes, and this is a point of genuine confusion because PayPal simultaneously sells you a service that means you do not have to care. ACP was co-developed by Stripe and OpenAI and is the specification behind ChatGPT Instant Checkout. PayPal committed to adopting it, and the practical effect is that PayPal implements ACP so that its merchants do not have to. Your store does not stand up an ACP endpoint, publish a feed or handle a delegated payment token. PayPal's server speaks ACP to OpenAI on your behalf and settles into your existing PayPal account. That is the entire value proposition, and whether it is the right trade depends on how much you mind the intermediation. A merchant implementing ACP directly through Stripe owns the integration and the roadmap. A merchant going through Agent Ready owns neither and ships in a fraction of the time.

What the PayPal MCP server and agent toolkit actually do

This is the part most search traffic is actually looking for, and it is a different product from Agent Ready. The PayPal agent toolkit integrates PayPal REST APIs into AI agent frameworks, with support for the Model Context Protocol alongside Amazon Bedrock, CrewAI, LangChain, OpenAI's Agents SDK and Vercel's AI SDK. The PayPal MCP server exposes those APIs as callable tools, grouped roughly into invoicing (create_invoice, send_invoice), payments and refunds (create_order, create_refund), disputes (list_disputes, accept_dispute_claim), shipment tracking (create_shipment_tracking, get_shipment_tracking) and subscriptions (create_subscription_plan, cancel_subscription). Google also documents a PayPal MCP tool for its Agent Development Kit. The general shape of MCP payment tooling, and where it stops, is covered in MCP payments, and we compare PayPal's server against Stripe, Square, Checkout.com and Adyen in payment MCP servers.

The PayPal MCP server is a merchant back office, not an agentic checkout

Read that tool list again and notice what is in it. Drafting invoices, capturing orders, issuing refunds, accepting dispute claims, cancelling subscriptions. These are seller-side operations against your own PayPal account. The MCP server lets an agent run your back office. It does not let a shopper's agent buy from you (that is Agent Ready) and it does not let your agent buy from someone else with a budget attached. It is also worth being precise about the risk it introduces: an agent holding your PayPal API credentials can issue refunds and accept dispute claims, which are irreversible movements of money that no MCP tool definition constrains. If you connect it, scope the credential and log every call.

We probed the payments industry for agent discovery endpoints

A reasonable merchant assumption in 2026 is that becoming agent-discoverable means publishing a file, the way robots.txt or a sitemap works. Shopify reinforced that assumption by emitting a UCP capability document at /.well-known/ucp for every eligible store. So on September 3, 2026 we tested whether the payments industry does anything similar. We requested six candidate discovery paths across nineteen payment and commerce hosts, followed redirects, and, critically, checked the response content type rather than trusting the status code. We also sent a deliberately nonsense control path to each host to catch catch-all servers. That control step is the whole methodology, and the table below shows why.

The probe shows PayPal agent discoverability is enrollment-gated, not file-gated

The result is cleaner than we expected. Across nineteen hosts, not one payment provider served a machine-readable agentic discovery document at a well-known path. Every apparent hit was a catch-all HTML shell: braintreepayments.com, paypal.ai and shopware.com each returned HTTP 200 with HTML for a path we invented on the spot, so their 200s on /.well-known/ucp and /.well-known/agent-card.json mean nothing. The only genuine machine-readable agent artifact in the entire payments set belonged to Shopify, a commerce platform rather than a processor, and it was a Web Bot Auth signing key directory rather than a commerce capability file. The practical conclusion for a merchant is worth stating flatly: there is no file you can publish to make PayPal treat you as agent-ready. Discovery runs through enrollment at PayPal.ai and through the Store Sync connectors, not through the open web. If a consultant tells you to add a well-known endpoint to become PayPal agent-discoverable, they have invented that.

Almost no payment provider has an opinion about AI crawlers yet

While we had the hosts open we checked something adjacent and more actionable: whether these companies name AI crawlers in robots.txt at all. Eleven of the twelve payment and commerce hosts we parsed named none of GPTBot, OAI-SearchBot, ChatGPT-User, PerplexityBot, ClaudeBot, Google-Extended, Amazonbot, Applebot-Extended, Bytespider, CCBot or meta-externalagent. No allow, no block, no rule. Only shopware.com had written any AI crawler policy, and it was a set of partial path disallows rather than a blanket position. Ten of the nineteen hosts did serve an llms.txt, including paypal.com, developer.paypal.com, stripe.com, adyen.com, checkout.com, squareup.com, shopify.com, bigcommerce.com and wix.com. PayPal's is dated February 28, 2026, version 1.0.4, and opens by describing itself as part of a proposed standard for machine-readable LLM guidance. So the industry has adopted the voluntary summary file and has almost entirely ignored the enforceable one, which tells you where the actual thinking is.

PayPal agentic commerce compared with Stripe ACP and Shopify Agentic Storefronts

These three are not competing implementations of the same idea. Stripe gives you a protocol and expects engineering. Shopify switched a sales channel on by default and most merchants were live without knowing. PayPal sells a managed service that wraps the protocol so you never see it. The right choice follows from where your catalog already lives and how much control you want over the integration. A Shopify store that also takes PayPal can end up reachable through both paths at once, which is fine but worth knowing about when you try to attribute an order. The comparison table below is the honest version, including where PayPal is the weaker answer.

What PayPal agentic commerce does not do on the buy side

Everything above concerns money moving toward you. There is a second half of agentic commerce that PayPal's merchant services deliberately do not address: governing what your own AI agents are allowed to spend. Searching PayPal's agentic commerce documentation for a developer-facing spend policy engine, a programmable human approval step, per-agent scoped card issuing or an agent-attributed audit log returns nothing, because those are not what Agent Ready is for. Its controls are framed around a consumer deciding whether to let an assistant buy on their behalf, not around a finance team deciding what a fleet of production agents may purchase. If you run agents that spend company money, that layer is still yours to build or buy, and it is what agent spend controls and agentic payments governance exist to cover. We lay out the split in more detail on our PayPal Agentic Commerce alternative page.

How to get set up with PayPal agentic commerce

The sequence is short because most of the work is not yours. First, confirm you are an existing PayPal merchant in good standing, since Agent Ready builds on the checkout configuration you already have. Second, go to PayPal.ai and request access, which is the documented route: PayPal asks merchants to complete a form to contact its AI team for onboarding. Third, decide how your catalog reaches Store Sync, either directly or through one of the named connectors, Wix, Cymbio, BigCommerce with Feedonomics, or Shopware. Fourth, confirm with PayPal which AI surfaces your account is actually enabled for, because rollout has been progressive and the answer differs by merchant. Fifth, and this is the step people skip, work out how you will recognize an agent-originated order in your own reporting before the volume arrives rather than after.

Who PayPal agentic commerce is right for

It fits best if you already process meaningful volume through PayPal, your catalog sits on a platform PayPal has a connector for, and you have no engineering appetite for implementing a commerce protocol yourself. Under those conditions it is genuinely the lowest-effort route into AI shopping surfaces available, and the buyer protection and dispute machinery are real advantages over agent rails that have neither. It fits worst if you want to own the integration, need behavior PayPal has not exposed, or care about being intermediated between your store and the assistant. And it does nothing at all if your problem is the buy side, where the question is not how you get paid by an agent but what your own agents are permitted to spend.

Whatever standard moves the money, AgentsPay is the rail-neutral control plane that keeps it governed. See how it works and the control surfaces that enforce policy, approvals, and audit on every transaction.

The components

What each part of PayPal agentic commerce actually is

Merchants routinely conflate Agent Ready with the PayPal MCP server. They solve opposite problems and are bought by different teams.

Component Direction What it does Status
Agent Ready Money in Lets existing PayPal merchants accept payments originating from AI agents, supervised or automatic, with PayPal fraud detection, buyer protection and dispute resolution. No protocol work on the merchant side. Announced October 28, 2025, available from early 2026, coverage expanding
Store Sync Discovery Pushes catalog, inventory and fulfillment into AI shopping surfaces and routes orders back into your existing order management system. Merchant keeps merchant of record status and brand control. Sign-ups at PayPal.ai; powered by Cymbio since the February 5, 2026 close
ACP support Money in PayPal adopts the Agentic Commerce Protocol on the merchant's behalf so ChatGPT Instant Checkout works without the merchant implementing ACP. Announced with OpenAI, October 28, 2025
Agent toolkit Back office Wraps PayPal REST APIs for agent frameworks: Bedrock, CrewAI, LangChain, MCP, OpenAI Agents SDK, Vercel AI SDK. Generally available
PayPal MCP server Back office Exposes invoicing, orders, refunds, disputes, shipment tracking and subscriptions as MCP tools an agent can call against your own account. Generally available, also documented as a Google ADK tool
Agent spend governance Money out Not offered. No documented spend policy engine, approval API, per-agent scoped cards or agent-attributed audit log. Out of scope for PayPal's merchant services

Original research, September 3, 2026

Does any payment provider publish a machine-readable agent discovery file?

We requested six candidate discovery paths across nineteen payment and commerce hosts, followed redirects, checked the response content type rather than the status code, and sent a nonsense control path to each host to expose catch-all servers. Without that control step three hosts look like they support everything.

Host UCP, agent card, MCP or plugin manifest llms.txt Control path verdict
paypal.com, www.paypal.com None Yes, text/plain, dated February 28, 2026, version 1.0.4 Real 404s, result trustworthy
developer.paypal.com None Yes, text/plain, 1.5 KB Real 404s, result trustworthy
paypal.ai Apparent hits on every path Apparent hit FALSE POSITIVE. Returned HTTP 200 with HTML for a path we invented, so no endpoint claim can be made
braintreepayments.com Apparent hits on every path Apparent hit FALSE POSITIVE. Same catch-all HTML behavior
shopware.com Apparent hits on every path Apparent hit FALSE POSITIVE. Same catch-all HTML behavior
stripe.com, adyen.com, checkout.com, squareup.com None Yes, all four, text/plain Real 404s, result trustworthy
shopify.com Web Bot Auth signing key directory only, correct content type, Ed25519 key Yes, text/plain Real 404 on the control path, so this hit is genuine
bigcommerce.com, wix.com None Yes, both, text/plain Real 404s, result trustworthy
klarna.com, affirm.com, authorize.net, worldpay.com, fiserv.com, cymbio.com None None Real 404s, result trustworthy

Original research, September 3, 2026

How many payment platforms name an AI crawler in robots.txt?

We parsed robots.txt on twelve payment and commerce hosts and looked for eleven named AI user agents. This is the file that actually governs whether an answer engine may read your documentation and pricing.

Host AI crawlers named in robots.txt Effective policy
paypal.com None No rule written for any AI crawler
stripe.com, adyen.com, checkout.com, squareup.com, braintreepayments.com None No rule written for any AI crawler
klarna.com, affirm.com None No rule written for any AI crawler
shopify.com, bigcommerce.com, wix.com None No rule written for any AI crawler
shopware.com GPTBot, OAI-SearchBot, ChatGPT-User, Google-Extended, Amazonbot, Applebot-Extended, Bytespider, CCBot The only host with a written policy, and it is partial path disallows rather than a blanket block

Honest comparison

PayPal agentic commerce vs Stripe ACP vs Shopify Agentic Storefronts

Three different answers to the same merchant question. The right one depends on where your catalog lives and how much of the integration you want to own.

PayPal agentic commerce Stripe and OpenAI ACP Shopify Agentic Storefronts
Merchant engineering effort Lowest. Runs on your existing PayPal checkout, no protocol implementation Highest. You implement the protocol and own the endpoints None. Switched on by default for eligible US-selling stores
Who speaks the protocol PayPal, on your behalf You, directly Shopify, on your behalf
Discovery mechanism Enrollment at PayPal.ai plus Store Sync connectors. Nothing published on the open web Your own product feed and endpoints Platform emits /.well-known/ucp for you
Buyer protection and disputes Strongest. PayPal buyer protection, fraud detection and dispute resolution carry over Standard card network chargeback handling Standard Shopify Payments handling
Control over the integration Weakest. You are intermediated and cannot change behavior PayPal has not exposed Strongest. You own the roadmap Limited. Platform decides the shape
Merchant of record You You You
Governs what your own agents spend No No No

Frequently asked

Questions people ask about PayPal Agentic Commerce

What is PayPal agentic commerce?

PayPal agentic commerce is a set of merchant services that let AI assistants discover your products and pay for them. It has two named parts: Agent Ready, which lets existing PayPal merchants accept payments originating from AI agents with fraud detection, buyer protection and dispute resolution attached, and Store Sync, which pushes catalog, inventory and fulfillment data into AI shopping surfaces and routes orders back to your existing systems. PayPal announced both on October 28, 2025.

What is PayPal Agent Ready?

Agent Ready is PayPal's agentic payments product. It lets a store that already accepts PayPal take payments that come from an AI agent, covering both supervised shopping where a person is watching and automatic shopping where the agent buys alone. Its defining feature is that it sits on top of your existing checkout configuration, so eligible merchants need no new protocol integration, and PayPal's fraud, buyer protection and dispute handling apply unchanged.

When did PayPal Agent Ready become available?

PayPal announced Agent Ready on October 28, 2025 and said it would be available in early 2026. It has been rolling out since then, with coverage expanding progressively rather than switching on for every merchant at once. Because availability also depends on your ecommerce platform and which AI surfaces PayPal has enabled for your account, the reliable way to know your own status is to ask PayPal directly rather than to assume from the launch date.

Does PayPal support the Agentic Commerce Protocol?

Yes. PayPal and OpenAI announced on October 28, 2025 that PayPal would adopt the Agentic Commerce Protocol to power Instant Checkout in ChatGPT. The important detail for merchants is that PayPal implements ACP so you do not have to. Your store does not stand up an ACP endpoint or handle delegated payment tokens; PayPal's server speaks the protocol to OpenAI on your behalf and settles into your existing PayPal account.

Do I need to change my checkout to accept AI agent payments with PayPal?

No, and that is the main reason to choose this route. Agent Ready operates on top of the PayPal checkout configuration you already run, so a store already accepting PayPal is eligible without rebuilding anything. You do still need to request access through PayPal.ai and confirm which AI surfaces your account is enabled for. The work that remains is commercial and operational rather than technical.

What is the PayPal MCP server?

The PayPal MCP server exposes PayPal REST APIs as tools an AI agent can call through the Model Context Protocol. The tools cover invoicing, orders and refunds, disputes, shipment tracking and subscriptions, with functions such as create_invoice, create_order, create_refund, list_disputes and cancel_subscription. It is part of the wider PayPal agent toolkit, which also supports Bedrock, CrewAI, LangChain, the OpenAI Agents SDK and Vercel's AI SDK. It automates your own back office and is not the same thing as Agent Ready.

Is PayPal Store Sync free?

PayPal has not published pricing for Store Sync or Agent Ready, and we will not invent a number. The launch materials and developer documentation describe capabilities and availability without disclosing fees, and access runs through a request form rather than self-serve signup, which usually means commercial terms are set per merchant. Ask for the fee schedule in writing during onboarding, and ask specifically whether agent-originated transactions price differently from your standard rate.

Who is the merchant of record in PayPal agentic commerce?

You are. PayPal states explicitly that with Store Sync merchants retain merchant of record status along with control over brand visibility and customer communications. That is a meaningful difference from selling through a marketplace, where the platform typically becomes the seller of record and owns the customer relationship. It also means tax, returns and customer service obligations stay with you exactly as they do for orders from your own site.

Which AI assistants can I sell through with PayPal?

PayPal has publicly named three surfaces. Perplexity went live first, on November 25, 2025, using PayPal passkey authentication inside its chat interface. ChatGPT follows from the OpenAI partnership and PayPal's adoption of the Agentic Commerce Protocol. Microsoft Copilot is cited by both PayPal and Cymbio. Which of these is switched on for your specific account depends on your rollout status, so confirm rather than assume.

Does PayPal agentic commerce control what my own AI agents spend?

No. Agent Ready and Store Sync are entirely sell-side: they exist so money moves toward you. PayPal's agentic commerce documentation describes no developer-facing spend policy engine, no programmable human approval step, no per-agent scoped card issuing and no agent-attributed audit log, because its controls are framed around a consumer permitting an assistant to buy. If you operate agents that spend company money, you need a separate buy-side control plane. See our PayPal Agentic Commerce alternative comparison for that split.

Keep reading

More explainers

Plaid MCP Server

Plaid MCP Server

Plaid now offers a hosted MCP server for Claude, ChatGPT and agents built on the OpenAI and Anthropic APIs, plus a local MCP server for development. Engineering teams connecting them ask a fair question before anything ships: can an agent move money through Plaid, and if it can, what stops it? We read both servers' published tools, probed the hosted endpoint, and measured Plaid's public OpenAPI specification to answer it.

Read

Airwallex MCP Server

Airwallex MCP Server

Airwallex now ships AgentOS, a production MCP server, a CLI and a set of agent skills that let Claude, Cursor or Codex work directly on your Airwallex account. Before a finance team connects one, someone has to answer the question every controller asks in the review: what can this agent actually spend, and who decides the limit? We read the OAuth metadata of both Airwallex MCP servers and the card control documentation to find out.

Read

Tipalti MCP Server

Tipalti MCP Server

Tipalti now documents an official MCP server that connects Claude to your payables data, and its own AI agents already approve bills and match POs inside the product. Before an AP team lets any agent near supplier payments, the controller has to answer one question in the review: what stops it paying? We read Tipalti's MCP documentation, its OAuth metadata and every published REST operation to find out.

Read

Mercury MCP Server

Mercury MCP Server

Mercury now ships a hosted MCP server that connects Claude, ChatGPT, Cursor and a dozen other AI tools to your business bank account, and since August it issues agent cards an AI can check out with on its own. Before you hand either one to an agent, a founder or controller wants one answer: what actually stops it spending? We read Mercury's MCP documentation, its OAuth metadata and every operation in its public API on 15 October 2026 to find out.

Read

Bill.com MCP Server

BILL MCP Server

BILL now ships an official MCP server that connects your payables, receivables and card spend to Claude and ChatGPT, and third-party MCP servers already add write actions such as Create Payment on top of the BILL API. Before an AI agent touches the system that pays your vendors, a controller wants one answer: what stops it spending? We read every operation BILL publishes for its v3 API to find out.

Read

Deel MCP Server

Deel MCP Server

Deel now runs an official MCP server, so Claude, ChatGPT or Cursor can read contracts, list people, pull payslips and, with the right grant, create payments to your contractors and employees. For a finance lead or an HR operations owner the question before connecting it is simple: what stops the agent from paying the wrong person, or the right person too much? We read Deel's MCP documentation, called the live server, and read its OAuth metadata and the payment endpoints behind the tools.

Read

Rippling MCP Server

Rippling MCP Server

Rippling runs a first-party MCP server, so Claude, ChatGPT or Codex can look up people, check leave balances, file time off, draft a hire and edit custom objects as the employee who connected it. For an HR or IT lead the questions before turning it on are practical: what can the agent actually change, who decides, and where does money enter the picture. We read Rippling's MCP documentation end to end and called the live server with controls.

Read

Zapier MCP and Zapier Agents

Zapier MCP

Zapier MCP plugs Claude, ChatGPT, Cursor or any MCP client into more than 9,000 apps, and Zapier Agents run the same actions on a schedule. For finance apps that means an AI can create a Stripe payment, refund a Square charge, move money between Xero bank accounts or issue a Brex card. We read the action catalog Zapier publishes for nine finance apps on 13 October 2026 to find where a dollar limit lives.

Read

Sierra AI agents

Sierra AI

Sierra builds customer service AI agents for large consumer brands, and those agents do more than answer questions. They cancel orders, process returns, change bookings and hand out travel credits, and Sierra bills per outcome when they do. We read the only public code Sierra publishes about how such an agent is governed, its tau2-bench benchmark, on 12 October 2026, to see where the dollar limit lives.

Read

Workato MCP and Genies

Workato MCP and Workato Genies

Workato now sells itself as the control and execution plane for enterprise AI agents: Genies built in Agent Studio, more than 80 prebuilt MCP servers, and an MCP Gateway in front of all of them. Several of those servers can refund a Stripe charge, authorize a Xero bill or submit a Coupa requisition. We read Workato's own documentation on 9 October 2026 to find where a dollar limit lives.

Read

IBM watsonx Orchestrate

IBM watsonx Orchestrate

IBM sells watsonx Orchestrate as the control plane for every AI agent in the enterprise, and its agents now call tools, run flows and talk to other agents over MCP and A2A. We downloaded the developer kit IBM published on 7 October 2026 and read every agent and flow model in it, looking for one thing: where a dollar limit would go.

Read

Amex Agentic Commerce

American Express Agentic Commerce

American Express launched its Agentic Commerce Experiences (ACE) developer kit and Amex Agent Purchase Protection on 14 April 2026. It is the first card network to write "how much can be spent" into the agent's purchase intent and to promise a credit when a registered agent buys the wrong thing. We checked every public Amex host for the specification, an MCP server and discovery files on 7 October 2026. Here is what is actually live, and what a business still has to add before it lets agents spend.

Read

Concur AI and Joule

Concur AI and Concur Joule

SAP Concur is putting Joule agents into the expense report itself this year: one builds the report, one audits receipts before submission, and an AI approval assistant reaches US approvers in Q4 2026. Outside agents connect through Microsoft 365 Copilot or the Concur API. We read every OAuth scope SAP publishes for Concur to see where an agent's dollar limit would live. It is not in the scopes and it is not in the approve call.

Read

Coupa AI and Navi

Coupa AI and Coupa Navi

Coupa's Navi agents moved from answering questions to running payment batches this year, and since the September 2026 release Microsoft Copilot and custom agents can read and write Coupa data through MCP. We probed the Coupa MCP authorization servers on six live US tenants to see where the dollar limit sits for an outside agent. It is not in the token.

Read

Navan and Expensify

Navan AI and Expensify

Navan and Expensify both opened their travel and expense data to AI assistants this summer, and both are moving from answering questions to acting on reports. Expensify Agents can already submit, approve, reject and route expense reports. Navan says write tools for approving expenses and booking travel are next. We measured where the dollar limit sits for those agents, and in the agent itself it does not sit anywhere.

Read

HubSpot Breeze

HubSpot Breeze

HubSpot Breeze agents now resolve tickets, recommend leads and, through agent tools and the HubSpot MCP server, write carts, orders, quotes and line items. HubSpot meters what the agents cost you in HubSpot Credits, with an account cap and per-feature caps. It does not meter what they spend or commit on your behalf, and that gap is what this page measures.

Read

Intercom Fin

Intercom Fin

Intercom Fin no longer just answers questions. Through Fin Procedures and data connectors it looks up a Stripe subscription, cancels it and issues the refund while the customer is still typing. Intercom charges you 99 cents for that outcome. The refund itself can be any amount, and that is the number worth putting a limit on.

Read

Zendesk AI Agents

Zendesk AI agents

Zendesk AI agents now do more than answer. With AI Agents Advanced they run generative procedures that call your APIs, cancel Shopify orders and issue refunds while the customer is still in the chat. Zendesk bills you per automated resolution. Nobody bills you for the refund, and that is the number worth controlling.

Read

Brex AI Agents

Brex AI agents

Brex made the opposite bet to Ramp. Its MCP server lets Claude, ChatGPT or Cursor read almost everything in your Brex account and change almost nothing that matters for money. The Brex API is a different story: the same company publishes endpoints that create spend limits, issue cards and send wires. Which of those two doors your AI agent walks through decides what it can spend.

Read

Ramp AI Agents

Ramp AI agents

Ramp has built the most complete spend model for AI agents of any finance platform we have measured: agent identities, agent roles, agent cards, and funds with real dollar limits. That is exactly why the permission question matters here more than anywhere else. The limits are real, so the question is who can change them, and on Ramp the answer can include the agent.

Read

SAP Joule

SAP Joule

SAP Joule is moving from answering questions to acting inside S/4HANA, Ariba and Concur, which means SAP AI agents now sit one function call away from purchase orders and supplier payments. SAP publishes the developer tooling for Joule Studio on npm, so we downloaded it and asked the question a controller asks before an agent goes live: where does the dollar limit go? The answer is that SAP models money in great detail one layer down, and the Joule layer on top carries none of it.

Read

UiPath Agentic Automation

UiPath Agentic Automation

UiPath ships more agent governance than almost any vendor we have measured. It has a policy engine, four enforcement actions including human approval, and consumption metering accurate to a fraction of a unit. So we downloaded both SDKs UiPath publishes and asked the one question a finance lead asks before an agent goes live: can any of it be given a number in dollars? The answer is specific, and it is not the answer the word "budget" suggests.

Read

Workday AI Agents

Workday AI Agents

Workday now registers AI agents the way it registers employees, in the Agent System of Record, and more than 65 partners are wiring their agents into it. We downloaded the API specification Workday publishes for that registry to answer the question a CFO asks before any agent goes live: where is the spending limit? Workday's documents carry plenty of money controls. The agent record carries none.

Read

Oracle AI Agent Studio

Oracle AI Agent Studio

Oracle AI Agent Studio is included with every Oracle Fusion Cloud subscription, and it now lets a finance team build agents that call any REST API or MCP server. We read the API specification Oracle publishes for those agents to answer the question a controller asks before switching one on: what stops an agent spending money? Inside Fusion, quite a lot. Outside Fusion, nothing in the agent model does.

Read

ServiceNow AI Control Tower

ServiceNow AI Control Tower

ServiceNow AI Control Tower is the most complete agent inventory and risk console a large US enterprise can buy, and it now reaches across AWS, Google Cloud and Azure. We read the schema ServiceNow ships to developers to answer the one question the rollout meeting always ends on: can it stop an agent from spending money? It cannot, and the reason is written into the data model.

Read

Gemini Enterprise

Gemini Enterprise

Google did something in August 2026 that the other agent platforms have not done: it shipped a hard monthly spend cap that genuinely stops usage instead of emailing you about it. That deserves credit, and it also moves the interesting question one step along. A cap that stops something is only as useful as the thing it is scoped to, so we went and measured what Google can actually point that cap at, in the API model Google publishes for anyone to read.

Read

Salesforce Agentforce

Salesforce Agentforce

Agentforce is the largest agent platform any US enterprise is likely to already own, and it moved to consumption billing, which means the meter now runs on what your agents do rather than on how many seats you bought. That raises a finance question the rollout deck rarely answers: when an Agentforce agent is loose in production, what actually stops it spending. We went and measured the answer in Salesforce own published object model rather than guessing at it.

Read

AWS AgentCore

AWS AgentCore

Amazon shipped the missing piece in August 2026. Bedrock AgentCore Payments went generally available, and it is a real payments product: an agent can now hold a wallet, meet an HTTP 402, pay, and carry on reasoning without a human in the loop. So the question a platform lead has to answer stopped being whether AWS gives agents money and became a narrower, more awkward one: how much of a spend policy did AWS actually ship? We went and measured it, property by property, in the API model AWS publishes.

Read

Microsoft Agent 365

Microsoft Agent 365

Microsoft shipped a control plane for AI agents, and it is a good one. It gives every agent an identity, a registry entry, an owner, a sponsor and a Conditional Access policy. Then somebody in finance asks the obvious follow-up question: fine, but what stops the agent from spending money? This page answers what Agent 365 costs, what it governs, and what we measured when we went looking for a dollar amount anywhere in Microsoft's agent governance surface.

Read

QuickBooks MCP Server

QuickBooks MCP server

Connecting an accounting system to an AI assistant is now a ten minute job. Deciding what that assistant is allowed to do once it is connected is the part nobody writes about, and it is the part your controller will ask about first. This page compares what the official QuickBooks, NetSuite and Xero MCP servers actually hand a model, measured rather than summarized from marketing pages.

Read

Payment MCP Servers

payment MCP servers

Every large payment company shipped an MCP server in the last eighteen months, and almost every write-up of them is a setup tutorial. The setup is the easy part. The question worth answering before you connect one to a production account is narrower and much less comfortable: what, exactly, can the model on the other end of that connection do to your money?

Read

Shopify Agentic Commerce

Shopify Agentic Commerce

Shopify switched agentic commerce on by default, so your store is probably already selling to AI assistants whether or not anyone on your team configured it. Instead of restating the announcement, we checked something you can check too: on September 2, 2026 we requested the machine-readable capability file that Shopify publishes for real storefronts, on fourteen well-known US brand domains, and read what it exposes to an agent. Eleven answered correctly. The three that did not share one trait, and it is quietly costing them agent traffic.

Read

Web Bot Auth

Web Bot Auth

Web Bot Auth is the reason your agent either gets served or gets throttled with the scrapers. Almost everything written about it repeats the same architecture diagram, so we did something different: on September 1, 2026 we fetched the published key directories of more than twenty major AI operators and infrastructure vendors to see who is genuinely signing their traffic. Four were. The results are in the first table.

Read

Tempo Blockchain

the Tempo blockchain

Tempo is the payments chain Stripe and Paradigm built, and it shipped with a protocol that lets software pay for things on its own. It settles machine payments in under a second. It has nothing at all to say about whether your agent should have paid.

Read

AI Agent Governance

AI agent governance

Every agentic AI governance framework published so far governs the same four things: identity, tools, data and prompts. Not one of them carries a budget. Here is what the real frameworks say, which guardrails actually bind at runtime, and what to do about the last mile none of them reach.

Read

A2A Protocol

A2A Protocol

Most explanations of the A2A protocol stop at the sentence that agents can now talk to each other. That was true in April 2025 and it is no longer the interesting part. A2A shipped version 1.0 in April 2026 under Linux Foundation governance, it runs in production inside Azure AI Foundry and Amazon Bedrock AgentCore, and the questions engineers actually get stuck on are narrower: what an Agent Card commits you to, when to reach for MCP instead, and what happens the first time one of your agents has to pay another one for the work. That last question has a specific answer, and it is not in the core spec.

Read

Mastercard Agent Pay

Mastercard Agent Pay

Nearly every article about Mastercard Agent Pay is a retelling of one press release from April 2025, the one where Mastercard said AI agents would be able to shop with Agentic Tokens and named Microsoft as the first platform. That was sixteen months ago, and four more things have shipped since. Reading only the launch coverage leaves you with roughly a quarter of the picture, and the missing three quarters are the parts that decide whether you can actually put this into production.

Read

Visa Intelligent Commerce

Visa Intelligent Commerce

Almost everything written about Visa Intelligent Commerce is a retelling of the April 2025 announcement, when Visa said AI agents would be able to pay with a Visa credential. Three more things have shipped since, including an open agent-identity protocol built with Cloudflare that most coverage does not mention at all. This page is the current version, checked against Visa’s own developer documentation and newsroom in August 2026.

Read

Stripe agentic commerce

Stripe agentic commerce

Most writing about Stripe and agentic commerce is still a retelling of the September 2025 launch week, when Stripe and OpenAI shipped Instant Checkout and published the Agentic Commerce Protocol together. Stripe has built a good deal more since then, and some of it points in a direction the launch coverage never anticipated. This page is the current version, checked against Stripe’s own documentation in August 2026.

Read

ChatGPT Instant Checkout

ChatGPT Instant Checkout

Almost every guide to ChatGPT Instant Checkout still reads like it was written the week it launched, walking merchants through how to apply and what the fee will be. OpenAI changed course in March 2026. Here is the accurate version: what Instant Checkout was, what the numbers actually looked like, what replaced it, and which parts of the stack are still very much alive.

Read

Google AP2

Google AP2

Most guides to Google AP2 still describe an Intent Mandate and a Cart Mandate, because most of them are rewrites of the September 2025 launch post. The specification moved. Here is what the Agent Payments Protocol actually defines today, and the one question it deliberately does not answer.

Read

Human in the loop AI

Human in the Loop AI

Every guide to human in the loop AI describes the same shape: the agent pauses, a person decides, the agent continues. The shape is right. What almost none of them ask is a harder question, which is where the pause is enforced, because a pause written into the agent's own code is a pause the agent is trusted to honor.

Read

AI agent cost

AI Agent Cost

Every cost guide for AI agents answers the same two questions: what does it cost to build, and what does it cost to run. Both are answerable, and both are on somebody's invoice. The third question is the one that ends up in a variance report, because the agent also spends your money, and nobody sends you a bill for that.

Read

Agentic checkout

Agentic Checkout

Nearly every guide to agentic checkout is written for the merchant who wants to receive these orders. Far fewer are written for the company whose agents are placing them, which is odd, because agentic checkout quietly removes the one screen where spending used to get a second look.

Read

API monetization

API Monetization

Most guides to API monetization argue about which pricing model wins. The harder question in 2026 is who is calling. An API priced for a signed-up developer with a key behaves very differently when the caller is an agent that showed up once, wants one record, and has no account.

Read

x402 protocol

x402 Protocol

x402 took the one HTTP status code the web never used and turned it into a payment rail machines can drive. The protocol is elegant and genuinely small. The part it deliberately leaves to you is the budget.

Read

AI procurement agents

AI Procurement Agents

Every major procurement suite shipped agents during 2026. Almost none of them answer the question your controller will ask first, which is what happens when the agent is wrong about a purchase and the money has already moved.

Read

Agentic payments

Agentic Payments

Agentic payments move money with no human at the checkout. The rails to do it all shipped during 2026. The part most teams have not solved is deciding, before the money moves, whether the agent was allowed to spend it.

Read

AI agent monetization

AI Agent Monetization

Every AI agent company is rewriting its price list. The models that survive are metered. The ones that quietly fail are the ones where nobody measured what a single task costs to serve.

Read

Agent payment platforms

AI Agent Payment Platforms

Five different kinds of product now call themselves an AI agent payment platform, and they solve five different problems. Picking the wrong category is the expensive mistake, not picking the wrong vendor inside a category.

Read

Universal Commerce Protocol

the Universal Commerce Protocol (UCP)

Google and Shopify shipped UCP as an open standard so an AI agent can check out at any merchant that supports it. Here is what the specification actually defines, where it is live for US buyers, and the one thing it deliberately leaves to you.

Read

MCP Payments

MCP Payments

MCP payments are how an AI agent discovers a payment tool and calls it to move money. The catch: the Model Context Protocol carries the tool call, not the spending decision, so nothing in the stack asks whether the purchase should have happened.

Read

Visa Intelligent Commerce vs Mastercard Agent Pay

Visa Intelligent Commerce vs Mastercard Agent Pay

Visa Intelligent Commerce and Mastercard Agent Pay are the two big card networks racing to let AI agents pay. They take different routes to the same idea, and neither one decides whether a given purchase should have happened.

Read

Agentic Commerce Protocol

the Agentic Commerce Protocol

ACP is the open standard behind agentic checkout in ChatGPT. It tells a merchant how to sell to an AI agent. It says nothing about whether your agent should have made the purchase.

Read

AP2 vs ACP vs x402

AP2 vs ACP vs x402

AP2, ACP, and x402 are the three standards shaping how AI agents pay. They solve different layers of the problem, and most real systems will touch more than one.

Read

Machine payments protocol

Machine payments protocol

As software starts paying software, machine payments protocols define how value moves without a human at the keyboard. The harder question is how to keep that spending governed.

Read

Know Your Agent (KYA)

Know Your Agent

KYA, or Know Your Agent, extends the idea of customer due diligence to autonomous software. When an agent spends, you need to know which agent, on whose authority, and under what limits.

Read

Keep agent spending governed

Add policy, hard limits, human approval, and an immutable audit trail across any protocol or rail. Start in the sandbox today.

Never moves money without policy