# Agentic Commerce — Rayudu Ramisetti

> Agentic commerce explained and catalogued by Rayudu Ramisetti: what happens when the buyer is a program, which protocol answers which problem — ACP, UCP, AP2, x402, MCP, A2A and plain REST — and a reading list where every link has been checked.

## Pages

- [Home](https://agentic.rayuduramisetti.com/): what agentic commerce is, latest reads, and the protocol map.
- [Explainers](https://agentic.rayuduramisetti.com/explainers): plain explanations of each concept.
- [Protocols](https://agentic.rayuduramisetti.com/protocols): ACP, UCP, AP2, x402, MCP, A2A and plain REST compared.
- [Resources](https://agentic.rayuduramisetti.com/resources): every link, grouped by layer.

## Protocols at a glance

- **ACP** (Checkout, Stripe · OpenAI · Meta): Product feed, checkout session, delegated payment, orders and webhooks. Does not: move money itself, or decide whether the agent is allowed to spend. https://www.agenticcommerce.dev/
- **UCP** (Checkout, Google · Shopify): Catalogue, cart, checkout, order lifecycle, and what a merchant supports. Does not: prescribe a payment rail; it carries whichever one the merchant accepts. https://ucp.dev/
- **AP2** (Payment, Google): Signed intent, cart and payment mandates, for human-present and autonomous flows. Does not: define the storefront or the catalogue; it assumes a checkout already exists. https://ap2-protocol.org/
- **x402** (Payment, x402 Foundation): A 402 response carrying payment terms, and the retry that proves payment. Does not: handle carts, tax, shipping or returns. it is one request, one price. https://x402.org/
- **MCP** (Transport, Anthropic · community): Tool discovery and invocation between a client and a server. Does not: define anything about commerce; there is no official payments extension. https://modelcontextprotocol.io
- **A2A** (Transport, Linux Foundation): Agent cards, tasks and messages between independent agents. Does not: carry payment on its own; the x402 extension adds that. https://a2a-protocol.org/latest/
- **REST** (Checkout, everyone, already): Nothing new — which is the point. An OpenAPI document makes it discoverable. Does not: give you mandates, scoped tokens or a shared vocabulary between merchants. https://spec.openapis.org/oas/latest.html

## Explainers

- **Agentic commerce**: A purchase where the buyer is a program acting for a person. https://agentic.rayuduramisetti.com/explainers#agentic-commerce
- **402 vs 403**: The two answers the web currently gives a machine: charge it, or shut it out. https://agentic.rayuduramisetti.com/explainers#402-vs-403
- **ACP — Agentic Commerce Protocol**: A checkout API shaped for agents, from Stripe, OpenAI and Meta. https://agentic.rayuduramisetti.com/explainers#acp
- **UCP — Universal Commerce Protocol**: The other open checkout spec, from Google and Shopify. https://agentic.rayuduramisetti.com/explainers#ucp
- **AP2 — Agent Payments Protocol**: Signed mandates that prove a human agreed to this purchase. https://agentic.rayuduramisetti.com/explainers#ap2
- **x402**: Pay for a single HTTP request, inline, with no account. https://agentic.rayuduramisetti.com/explainers#x402
- **Mandates and scoped tokens**: How you let an agent spend without handing it your card. https://agentic.rayuduramisetti.com/explainers#mandates-and-tokens
- **Web Bot Auth**: Cryptographic ID for agents, instead of guessing from user-agent strings. https://agentic.rayuduramisetti.com/explainers#web-bot-auth
- **MCP vs A2A**: One connects a model to tools; the other connects agents to each other. https://agentic.rayuduramisetti.com/explainers#mcp-vs-a2a
- **Product feeds and structured data**: The unglamorous half: being readable before being buyable. https://agentic.rayuduramisetti.com/explainers#feeds

## Latest reads

- [Agentic Settlement Protocol](https://arxiv.org/abs/2609.02208) — arXiv, 2026-09-02. Escrow for purchases an agent makes now and a human confirms later: authorize, capture, refund.
- [A Formal Analysis of Agent Payment Protocols](https://arxiv.org/abs/2609.00060) — arXiv, 2026-08-30. Models x402, MPP, ACP and AP2 in Tamarin and reports 40 findings nobody had written down.
- [Protocol-Level Attacks on Agentic Commerce Platforms](https://arxiv.org/abs/2607.21824) — arXiv, 2026-07-23. 33 structural vulnerabilities that survive a model swap, because they live in the protocol.
- [Model Context Protocol, 2026-07-28](https://modelcontextprotocol.io/specification/2026-07-28) — MCP, 2026-07-28. The current dated spec. Worth checking what is and is not in it before assuming commerce support.
- [Web Bot Auth](https://developers.cloudflare.com/bots/reference/bot-verification/web-bot-auth/) — Cloudflare, 2026-07-01. The practical guide to signing agent requests: keys, a directory, and RFC 9421 signatures.
- [Free-Riding the Agentic Web: x402 security analysis](https://arxiv.org/abs/2605.30998) — arXiv, 2026-05-29. Four ways deployed x402 integrations leak paid resources, with fixes.

## Reading list by layer

### Checkout protocols

- [Agentic Commerce Protocol (ACP)](https://www.agenticcommerce.dev/): The ACP specification site: checkout sessions, carts, feeds and delegated payment between an agent and a merchant.
- [ACP specification repo](https://github.com/agentic-commerce-protocol/agentic-commerce-protocol): OpenAPI documents, JSON Schema and markdown RFCs, versioned by date. Apache-2.0.
- [Stripe's ACP documentation](https://docs.stripe.com/agentic-commerce/acp): Stripe's implementation guide — agentic checkout, cart and feed, delegated payment and authentication, orders and webhooks — and the page that names Stripe, OpenAI and Meta as ACP's authors.
- [Universal Commerce Protocol (UCP)](https://ucp.dev/): Open protocol for agent commerce covering catalog, cart, checkout and order lifecycle. Apache-2.0.
- [UCP specification repo](https://github.com/Universal-Commerce-Protocol/ucp): The UCP spec and docs, with SDKs and a conformance suite.
- [Shopify's agent documentation](https://shopify.dev/docs/agents): Shopify's agent surface built on UCP: global and storefront catalogs, universal cart, cart and checkout MCP servers, order webhooks.
- [OpenAI commerce documentation](https://developers.openai.com/commerce): Merchant-facing guides and specs for selling inside ChatGPT: product feeds, agentic checkout, delegated payment, promotions.
- [Building UCP](https://shopify.engineering/UCP): Shopify's engineering write-up of why UCP exists and how it is put together.

### Payment rails

- [Agent Payments Protocol (AP2)](https://ap2-protocol.org/): Specification for agent-initiated payments built on signed mandates: intent, cart and payment, for human-present and autonomous flows.
- [AP2 reference implementation](https://github.com/google-agentic-commerce/AP2): Python SDK, samples and a web client for the AP2 mandate flow. Apache-2.0.
- [AP2 announcement](https://cloud.google.com/blog/products/ai-machine-learning/announcing-agents-to-payments-ap2-protocol): The launch post, with the reasoning behind mandates and the list of launch partners.
- [x402](https://x402.org/): An HTTP-native payment standard that revives 402 Payment Required: a server answers with terms, the client pays and retries.
- [x402 documentation](https://docs.x402.org/introduction): How the scheme works end to end, with client and server implementations.
- [x402 repo](https://github.com/x402-foundation/x402): The main implementation, now under the foundation. TypeScript.
- [Stripe for agents](https://docs.stripe.com/agents): Stripe's agent documentation: an MCP server, agent plugins and skills, and how to accept payments from agents.
- [Stripe and OpenAI: Instant Checkout](https://stripe.com/newsroom/news/stripe-openai-instant-checkout): The launch announcement, and the clearest description of shared payment tokens scoped to a merchant and cart total.
- [Visa Intelligent Commerce](https://www.visa.com/en-us/solutions/intelligent-commerce): Visa's programme for agent-bound tokenized credentials, with controls and signals for merchants.
- [Visa Intelligent Commerce for developers](https://developer.visa.com/capabilities/visa-intelligent-commerce): The developer view: tokenization, authentication, payment instructions and signals, with a sandbox.
- [PayPal Agent Ready](https://developer.paypal.com/agent-ready/overview): PayPal's merchant documentation for accepting payments initiated by an assistant.
- [PayPal agentic commerce services](https://developer.paypal.com/agentic-commerce-services/about): PayPal's wider agentic service set for merchants and platforms.

### Agent plumbing

- [Model Context Protocol](https://modelcontextprotocol.io): The protocol for giving a model tools and data. Commerce reaches it through other specs: ACP defines an MCP binding, UCP an MCP transport.
- [MCP specification](https://modelcontextprotocol.io/specification/2026-07-28): The current dated specification. There is no official commerce or payments extension.
- [MCP extensions](https://modelcontextprotocol.io/extensions/overview): The official extension index: apps, authorization, tasks and skills.
- [Agent2Agent (A2A)](https://a2a-protocol.org/latest/): Open standard for agents talking to other agents, donated by Google to the Linux Foundation.
- [a2a-x402](https://github.com/google-agentic-commerce/a2a-x402): The x402 payment extension for A2A: one agent pays another for a service, on chain.

### Discovery and structured data

- [schema.org/Product](https://schema.org/Product): The vocabulary behind product markup: price, availability, identifiers. Old, boring, and what most crawlers already read.
- [llms.txt](https://llmstxt.org/): A convention for a short markdown brief at a fixed path, aimed at models rather than crawlers.
- [NLWeb](https://github.com/nlweb-ai/NLWeb): Turns a site into a conversational endpoint that is also an MCP server, answering in schema.org JSON. Moved from the microsoft org.
- [Shopify catalog for agents](https://shopify.dev/docs/agents/catalog): A worked example of a catalogue built for machine buyers, including a per-merchant catalog MCP server.
- [Under the hood: UCP](https://developers.googleblog.com/under-the-hood-universal-commerce-protocol-ucp/): How UCP models catalogues, carts and orders, from the people who built it.

### Identity, trust and bot auth

- [Web Bot Auth](https://developers.cloudflare.com/bots/reference/bot-verification/web-bot-auth/): Signed HTTP requests that identify an automated client with a key directory, built on RFC 9421 message signatures.
- [IETF Web Bot Auth working group](https://datatracker.ietf.org/wg/webbotauth/about/): The active IETF group standardising this, with a charter that explicitly covers agents acting for users.
- [Web bot auth architecture draft](https://datatracker.ietf.org/doc/draft-meunier-web-bot-auth-architecture/): The architecture draft: how a bot proves its identity with HTTP message signatures.
- [HTTP Agent Profile draft](https://datatracker.ietf.org/doc/draft-dhir-http-agent-profile/): Authenticated agent traffic plus value exchange over HTTP 402 with pluggable micropayments. The closest thing to an IETF agent-payments draft.
- [Trusted Agent Protocol](https://github.com/visa/trusted-agent-protocol): Visa's open spec for a merchant to verify an agent's identity and the mandate it is acting under.
- [Signed agents](https://blog.cloudflare.com/signed-agents/): Why cryptographic identity beats user-agent strings and IP allowlists for agent traffic.
- [Pay per crawl](https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/): Charging automated clients per request at the edge, again using 402.

### Research

- [A Formal Analysis of Agent Payment Protocols](https://arxiv.org/abs/2609.00060): Models x402, MPP, ACP and AP2 in Tamarin across 86 verification cases, reporting 40 previously undocumented findings. August 2026.
- [Free-Riding the Agentic Web: security analysis of x402](https://arxiv.org/abs/2605.30998): Four classes of flaw in deployed x402 integrations that allow resource theft, with mitigations. May 2026.
- [Protocol-Level Attacks on Agentic Commerce Platforms](https://arxiv.org/abs/2607.21824): A taxonomy of 33 structural protocol vulnerabilities, including payment-hijacking chains, plus a benchmark. July 2026.
- [Agentic Settlement Protocol](https://arxiv.org/abs/2609.02208): An application profile for refundable, delayed-fulfilment purchases using authorize-and-capture escrow. September 2026.

### Companies and tools

- [Crossmint](https://www.crossmint.com/): Wallets and stablecoin infrastructure with agent-funded wallets, virtual cards and a purchase API.
- [Skyfire](https://skyfire.xyz/): Identity and wallet stack for agents: know-your-agent tokens, mandates, and a checkout product.
- [Nekuda](https://nekuda.ai/): Merchant tooling for exposing agent-callable actions on a site, with analytics on how agents use them.
- [Stripe agent tooling](https://github.com/stripe/ai): Stripe's AI SDK, token metering, MCP server and agent skills. Moved from stripe/agent-toolkit.
- [Awesome agentic commerce](https://github.com/xpaysh/awesome-agentic-commerce): A community index of protocols and implementations, useful for spotting what is new.

## Elsewhere

- [Rayudu Ramisetti](https://www.rayuduramisetti.com): everything else he works on.
- [Writing](https://rayuduramisetti.substack.com): his Substack.
- [LinkedIn](https://www.linkedin.com/in/ramisetti-rr/): get in touch.