Right now, a personal AI agent shopping on your behalf behaves a lot like a raccoon in a trench coat: it scrapes your site, clicks your buttons, and hopes nobody asks too many questions. Sierra and Meta would like those agents to walk in through the front door and show some ID instead.

OAuth, but Make It Agentic

On October 6, Sierra announced the Personal Agent Protocol (PAP), an open standard developed with Meta that defines how personal AI agents authenticate with businesses and get authorized to act on their systems. It's built on OAuth. An agent can start as a guest, looking up public information like stock levels or return policies, and then move up to read-only or write access once the customer authenticates. Those sessions carry over across channels.

Businesses decide how agents get in: through the website, through APIs using standards like MCP and OpenAPI, or by talking to the company's own agent. The launch partners are Genesys, Instinct, Rocket, Shopify, Stripe and Walmart, and a v0.1 spec is due later this month. Payments are a planned future extension rather than part of the first version, and push notifications and finer-grained permissions are also on the roadmap.

Standards Season Has Arrived

Here's the uncomfortable truth for anyone running a commerce site: "agent traffic" is turning from a novelty in your logs into a channel you'll need a policy for. A shared protocol beats every retailer inventing its own bouncer rules, and building on OAuth instead of something new and exotic is a sensible choice that security teams will appreciate.

But it's not a done deal. Amazon, OpenAI and Anthropic aren't in the first coalition, no European retailers, banks or payment companies have signed on, and Stripe and Shopify are also involved in Visa's competing Trusted Agent Protocol. We've seen this movie before, and it usually ends with an adapter for every standard. The smart play isn't to bet everything on one protocol. It's to get your APIs, permissions and content clean enough that plugging into whichever standard wins is an afternoon's work, not a quarter-long project.

The agents are coming either way. The real question is whether they show up with credentials or come in through the window.

If you're wondering how your site's APIs and auth would cope with AI agents knocking politely (or not so politely), we're happy to help you map out an agent-ready integration plan.

Source: The Next Web