When your AI agent starts spending your money, here’s what to know
The short version. In 2026, AI agents moved from finding things to paying for them. Visa, Mastercard and Google have all shipped the rails: agents can now initiate real payments inside limits a human sets in advance, using tokenized credentials — never your raw card number. But for ordinary consumers this is still pilots and early access, not everyday checkout. “Announced” does not mean “available to you.” This site tracks what is actually live, with a date and a source for every claim.
What’s live as of 26 October 2026
| Who | What is live | Status |
|---|---|---|
| Visa Intelligent Commerce | Merchant tools and live pilots: a first live pilot of AI agents completing approved supplier-invoice payments with BILL and Billtrust (20 Oct 2026); a strategic collaboration with OpenAI for agent-initiated Visa payments (10 Jun 2026). | Pilots, not consumer checkout everywhere |
| Mastercard Agent Pay | Agent Pay for Machines in early developer access (20 Oct 2026); consumer Agent Pay announced April 2025; a first live end-to-end agentic payment with Santander in Europe (Mar 2026). | Early access and pilots |
| Google AP2 | Agent Payments Protocol v0.2 (28 Apr 2026), donated to the FIDO Alliance; 60+ organisations involved. AP2 authorises a payment; it does not settle one. | A standard, not a product you sign up for |
| x402 | Open protocol for machine-to-machine payments (Coinbase, May 2025; v2 Dec 2025; Linux Foundation stewardship Jul 2026). | Protocol, mainly machine-to-machine so far |
| Stripe MPP, OpenAI ACP, Google UCP | Further protocols in the same landscape; Visa’s Connect product accepts across several of them. | Availability varies by provider |
Full detail, with sources, is in Agentic Commerce 101 and the news articles below.
Four questions to ask before you let an agent pay
- What exactly did I authorise? A spending limit, merchant categories, and whether approval is required for each purchase. If a product cannot show you these three things, do not enable it.
- What happens if it buys the wrong thing? Ask the issuer or merchant what the dispute and refund path is before you enable agent payments. This is still being defined in most products.
- Can I revoke it? Turning off an agent’s authority should be one action, not a maze. Test the off switch before you need it.
- Whose credentials is it using? Legitimate agent payments use tokenized credentials — a stand-in for your card, with limits attached. If a product asks for your raw card number to hand to an agent, do not.
Recent updates
- 20 Oct 2026 — Visa, BILL and Billtrust run the first live pilot of AI agents paying supplier invoices
- 20 Oct 2026 — Mastercard opens Agent Pay for Machines to developers: 9 payments, 2 merchants, 1 budget
- 28 Apr 2026 — Google’s agent-payment protocol goes neutral: AP2 v0.2 donated to FIDO
- 26 Oct 2026 — This site launched.
What this site is
A data service for payments professionals tracking agentic commerce: what agents can pay for, what the controls are, and what goes wrong. We record dated, sourced facts; we do not sell. There are no affiliate links and no sponsored content in this launch version. How we check every claim is on the Method page.