The Shift No One Can Ignore
For years, AI agents have been able to read data, draft emails, and write code — but the moment they needed to spend money, a human had to step in. That constraint is disappearing. In March 2026, three of the most influential players in payments and AI independently released frameworks designed to let agents transact autonomously. The age of the machine customer has arrived.
Three Protocols, One Direction
Visa's "Agentic Ready" Programme
Visa launched a pilot with European banks that enables agent-initiated card transactions with built-in compliance checks. The programme embeds regulatory guardrails directly into the transaction flow — KYC verification, spending velocity checks, and merchant category restrictions all happen before the payment clears. For enterprises operating in regulated markets, this is the path of least friction: agents transact through existing card rails, and compliance is handled at the network level.
Stripe's Machine Payments Protocol (MPP)
Stripe took a different approach: an open standard built on a mechanism web developers already understand — the HTTP 402 status code (Payment Required). The flow is elegant in its simplicity:
- An agent requests a resource from a service.
- The service responds with HTTP 402, specifying what payment is needed.
- The agent authorizes the payment and resubmits the request with a payment credential.
- The service verifies the credential and delivers the resource.
The entire transaction completes within a single HTTP request-response cycle. No redirect chains, no checkout pages, no human in the loop. MPP is designed for machine-to-machine commerce — pay-per-call API access, metered SaaS usage, on-demand compute — scenarios where sub-second purchasing decisions make economic sense.
OpenAI's Agentic Commerce Protocol
OpenAI's entry powers Instant Checkout inside ChatGPT, allowing the assistant to browse, select, and purchase products within a conversation. While more consumer-facing than Visa's or Stripe's offerings, it establishes a precedent: conversational agents that can close a transaction without ever leaving the chat interface.
What This Unlocks for Agent Developers
An always-on agent with purchasing authority opens workflows that were previously impractical:
- Automated inventory management — an agent monitors stock levels and places replenishment orders the moment thresholds are breached, without waiting for a procurement cycle.
- Pay-per-use tooling — agents spin up browser sessions, GPU instances, or third-party API calls and pay for exactly what they consume, in real time.
- Subscription optimization — agents audit recurring charges, cancel underused services, and renegotiate plans based on actual usage data.
- Micropayment workflows — tasks that involve hundreds of sub-cent transactions (data enrichment, per-query licensing) become viable when no human approval bottleneck exists.
The Guardrails That Must Come First
Giving an agent a wallet without constraints is a security incident waiting to happen. Before enabling any autonomous spending, implement these non-negotiable controls:
- Hard spending limits. Set per-transaction caps and daily maximums. No single agent action should be able to drain a budget.
- Human-in-the-loop for high-value transactions. Define a dollar threshold above which the agent must pause and request explicit human approval.
- Comprehensive audit trails. Every transaction — approved, rejected, or pending — must be logged with full context: what the agent was trying to accomplish, which protocol it used, and what triggered the purchase.
- Tokenized payment methods. Agents should never hold raw card numbers or bank credentials. Use tokenized references that can be revoked instantly if an agent is compromised.
Getting Ready: Four Immediate Steps
Teams planning to integrate agentic payments should start now, before the standards solidify:
- Document purchasing rules. Write explicit policies defining what an agent is and is not allowed to buy, under what conditions, and up to what amount.
- Build approval pipelines. Implement tiered approval workflows — automatic for low-value, human-gated for high-value, blocked for prohibited categories.
- Instrument spending monitoring. Set up real-time dashboards and anomaly detection on agent expenditures. Treat agent spending the same way you treat production error rates: alert early, investigate fast.
- Track the emerging standards. Visa, Stripe, and OpenAI are moving quickly, but the protocols are still evolving. Assign someone to monitor updates and assess compatibility with your stack.