Skip to main content

How Merchants Accept AI Agent Payments

How merchants accept AI agent payments in 2026: protocols (ACP, UCP, AP2, MCP, x402), platform integrations (Shopify, BigCommerce, WooCommerce), product data optimization, and trust verification.

Written by Eco

Merchants accept AI agent payments by enabling four things: a protocol layer that lets agents discover and check out (ACP, UCP, AP2, MCP, or x402), an integration path through their commerce platform (Shopify Agentic Storefronts, Stripe Agentic Commerce Suite, BigCommerce, WooCommerce, Wix, commercetools) or a custom API, optimized product data that agents can read (Salsify, Syndigo, Akeneo, SAP Catalog Optimization Agent, Productsup, ReFiBuy), and a trust layer that verifies the agent's identity (Visa TAP, Web Bot Auth, Forter, Riskified). Stripe's Agentic Commerce Suite, launched December 11, 2025 with URBN, Coach, Kate Spade, Revolve, Ashley Furniture, Halara, ABT Electronics, and Nectar, plus platform partners Squarespace, Wix, Etsy, WooCommerce, commercetools, and BigCommerce, made the single-integration model the dominant low-code path. Shopify went further on March 24, 2026 by activating Agentic Storefronts for eligible US merchants by default, surfacing every Shopify store inside ChatGPT, Microsoft Copilot, Google AI Mode, and Gemini without the merchant doing anything. This article walks the full merchant-side decision stack: which protocols to support, how to integrate by platform, how to make product data agent-readable, and how to handle trust and fraud when the buyer is software acting under delegated authority.

What Does It Mean for Merchants to Accept AI Agent Payments?

Accepting AI agent payments means a merchant exposes its catalog, checkout, and trust signals so that an agent operating on a buyer's behalf can complete a purchase without the human ever loading the merchant's storefront. The merchant supports a protocol (ACP, UCP, AP2, MCP, or x402), accepts a Shared Payment Token or signed mandate, and verifies agent identity at the edge.

The merchant-facing definition is narrower than "agentic commerce" as a category. A merchant accepting AI agent payments is offering a transactional surface to non-human buyers — agents that found the merchant inside ChatGPT, Gemini, Claude, Perplexity, Copilot, or Rufus, and now want to complete the purchase on the buyer's behalf. The merchant still owns inventory, fulfillment, returns, and the customer relationship; what changes is the surface where the buyer arrives. For the wider buyer-side picture, see the 2026 guide to agentic commerce.

Three forces pushed merchants toward agent-payment readiness through the 2025-2026 cycle. First, AI-driven retail traffic accelerated rapidly: Adobe Analytics measured a 4,700% YoY increase in generative-AI traffic to US retail sites between July 2024 and July 2025. Second, the protocol layer consolidated: by NRF 2026, ACP, UCP, AP2, MCP, x402, and Visa TAP all had production reference implementations. Third, the platform tier shipped onboarding flows that compressed integration from "engineering project" to "click a checkbox" — Stripe's Agentic Commerce Suite launched with more than a dozen named platform and brand partners on day one, and Shopify activated Agentic Storefronts by default for US merchants in late March 2026.

The Riskified Q1 2026 Agentic Commerce Pulse found that 61.5% of consumers have used AI tools for product discovery while 53.9% fear AI increases fraud risk — a tension that explains why the trust layer matures alongside the payment layer. Merchants that delay agent-readiness lose the discovery upside; merchants that adopt without the trust layer absorb the fraud exposure.

Should My Store Support Agent Payments?

Most stores already do, by default, if they are on Shopify, BigCommerce, WooCommerce, Wix, Squarespace, Etsy, or commercetools. The harder question is whether to actively configure agentic discovery and checkout, optimize product feeds for AI surfaces, and accept the support overhead of a non-human buyer cohort. The answer turns on traffic mix, catalog readiness, and risk tolerance.

The default-on path is wide. Shopify's March 24, 2026 rollout enabled Agentic Storefronts across eligible US stores without merchant action; Stripe ACS reaches WooCommerce and BigCommerce stores through their respective platform extensions; Etsy was an OpenAI ACP launch partner. A merchant on any of these platforms is reachable through agent surfaces today unless the merchant explicitly opts out. The choice is not whether to be discoverable but whether to invest in agent-aware merchandising, product-data quality, and trust signals.

Three signals justify active investment beyond the default. The first is dependency on AI-driven discovery: if more than a small share of new-customer traffic already arrives via ChatGPT, Perplexity, or AI Mode (measurable through GA4 referrer data and the AI-traffic dashboards exposed by ReFiBuy, Wildcard, and Salsify Intelligence Suite), neglecting agent payments leaves conversion on the table. The second is catalog complexity: high-SKU merchants whose products require multiple attributes to surface correctly benefit disproportionately from PIM-grade enrichment; SAP's Catalog Optimization Agent claims 70% faster content improvement and 5% higher data completeness at scale. The third is fraud exposure: merchants in apparel, jewelry, electronics, or alcohol — categories with chargeback exposure that compounds across delegated-authority buyers — need an agent-aware fraud stack before scaling agentic checkout volume.

How Do Merchants Integrate?

Merchants integrate through one of three paths: a platform-managed onboarding (Shopify Agentic Storefronts, Stripe Agentic Commerce Suite via WooCommerce, Wix, Squarespace, BigCommerce, or commercetools), a custom direct-API integration with one or more protocols (ACP, UCP, AP2, MCP, x402), or an outsourced execution layer that automates checkout on the merchant's existing site (Rye, Induced AI, Henry Labs, Zinc).

The platform-managed path is the dominant choice for stores already on a major commerce platform. The single-integration promise — set up product data once, syndicate to every supported AI surface — became standard with the December 2025 Stripe ACS launch and the March 2026 Shopify rollout. Shopify Agentic Storefronts pushes catalogs to ChatGPT, Microsoft Copilot, Google AI Mode, and Gemini. Stripe ACS reaches OpenAI, Google (via UCP partnership announced at Stripe Sessions 2026), and Meta (Facebook native checkout in ads), and forwards Shared Payment Tokens to the merchant's existing Stripe account. The Stripe Sessions 2026 announcements (288 launches across April 29-30) extended ACS to Meta and Google channels and added Link Agent Wallet support; the Machine Payments Protocol — co-authored with Tempo and Paradigm — had already launched on March 18, 2026 alongside Tempo mainnet.

Shopify Agentic Storefronts

Shopify activated Agentic Storefronts by default for eligible US merchants on March 24, 2026 as part of the Winter '26 Edition. Merchants configure agent-readable catalog data once in the Shopify Admin and the platform syndicates to ChatGPT, Microsoft Copilot, Google AI Mode, and Gemini. Shopify also opened the Shopify Catalog to non-Shopify brands through a new Agentic plan, letting any retailer plug into Shopify's agent infrastructure without migrating their storefront. Shopify co-developed UCP with Google, so UCP-aware merchants on Shopify also surface natively through Google's AI Mode.

Stripe Agentic Commerce Suite (BigCommerce, WooCommerce, Wix, Squarespace, commercetools, Etsy)

Stripe's Agentic Commerce Suite launched December 11, 2025 with brand partners URBN (Anthropologie, Free People, Urban Outfitters), Coach, Kate Spade, Revolve, Ashley Furniture, Halara, ABT Electronics, and Nectar, and platform partners BigCommerce, WooCommerce, Wix, Squarespace, Etsy, and commercetools. The suite ships product discovery (catalog syndication to AI agents through Stripe), flexible checkout (built-in tax, shipping, and order handoff using the merchant's existing Stripe account), and Shared Payment Token management. BigCommerce confirmed its ACS integration on December 18, 2025; WooCommerce merchants enable it through the Stripe for WooCommerce extension. The suite expanded at Stripe Sessions 2026 to add Meta and Google (UCP) as supported channels.

commercetools Agent Gateway and AgenticLift

commercetools' Agent Gateway is built on MCP and exposes secure agent endpoints for cart updates, catalog enrichment, pricing, and order processing. The company added Agentic Jumpstart at NRF 2026 and AgenticLift in January 2026 — a standalone offering for enterprise retailers that don't want to replatform. commercetools is also a Stripe ACS launch partner, so a commercetools merchant can layer ACS on top of Agent Gateway for full discovery + checkout coverage.

Custom direct-API integration

Enterprise merchants and merchants with non-standard checkout flows often integrate ACP, UCP, AP2, MCP, or x402 directly. ACP requires a Stripe or PayPal ACP server endpoint that accepts the Shared Payment Token, validates it, and posts the charge through the existing Stripe or PayPal pipeline. UCP merchants ship a feed compliant with Google's UCP specification (overlapping with Google Merchant Center). AP2 merchants verify cryptographic mandates signed by the buyer's wallet or identity provider before authorizing. MCP merchants host an MCP server that exposes catalog, inventory, pricing, and order tools. x402 merchants accept HTTP 402 payment-required responses denominated in USDC on Base, Solana, or other supported chains. The agent payment protocols comparison covers the technical scope of each.

Third-party checkout execution

Merchants that have not adopted a protocol can still be reached through Layer 5 checkout-execution vendors. Rye Universal Checkout API automates checkout flows on more than 15,000 merchant sites without merchant opt-in, populating cart and payment forms on behalf of an agent. Induced AI, Henry Labs, Zinc, CartAI, and Channel3 cover overlapping use cases. The trade-off: the merchant has less control over the agent-side experience and may see higher fraud-screening false-positives unless its risk model is updated for legitimate Layer 5 traffic.

Choosing Protocols: ACP, UCP, AP2, MCP, x402

Protocol selection follows from where the merchant's buyers already shop. ACP reaches OpenAI surfaces and the Stripe ACS network; UCP reaches Google AI Mode, Gemini, and the UCP launch-partner cohort; AP2 covers cryptographic-mandate authorization across Google's payment-network partners; MCP exposes catalog and inventory to any model that speaks MCP; x402 enables stablecoin micropayments for machine-to-machine flows. Most production deployments support two or three protocols simultaneously rather than picking one.

The protocols are not mutually exclusive — they cover different slices of the discovery, authorization, payment, and trust workflow. ACP and UCP overlap on commerce semantics; AP2 layers underneath both for cryptographic authorization; MCP sits upstream as the data-plane standard; x402 occupies the stablecoin-settlement niche; Visa TAP authenticates the agent itself. The 7-layer agentic commerce stack shows where each fits.

Protocol

Backed by

Merchant scope

Integration path

Status

ACP (Agentic Commerce Protocol)

OpenAI + Stripe

Shopify, Etsy, ACS partners (BigCommerce, WooCommerce, Wix, Squarespace, commercetools)

Stripe ACS, PayPal ACP server, or direct Stripe API

Live; ChatGPT Instant Checkout retired Mar 2026, ACS continues

UCP (Universal Commerce Protocol)

Google + Shopify

UCP launch partners (Walmart, Target, Best Buy, Etsy) + Google AI Mode merchants

Google Merchant Center feed + UCP endpoint

Live since NRF 2026 (Jan 11, 2026)

AP2 (Agent Payments Protocol)

Google + payment networks

60+ orgs (Adyen, Amex, Coinbase, Mastercard, PayPal)

Cryptographic-mandate verification at authorization

Live since Sept 16, 2025

MCP (Model Context Protocol)

Anthropic, Linux Foundation AAIF

Any merchant with an MCP server (catalog/inventory exposure)

Self-hosted MCP server or PIM-managed (Akeneo MCP Server)

Live; donated to Linux Foundation Dec 2025

x402

Coinbase

Machine-to-machine micropayments; ~69k active agents

HTTP 402 endpoint with USDC settlement

Live; Stripe added support Feb 2026

Visa TAP (Trusted Agent Protocol)

Visa + Cloudflare

Merchants verifying agent identity

RFC 9421 signed-header verification at edge

Live since Oct 14, 2025

The protocol-selection rule of thumb: pick the protocol your platform already ships, then layer additional protocols on top as the buyer mix evolves. A Shopify merchant gets ACP and UCP through Agentic Storefronts; layering Visa TAP at the edge buys stronger fraud signals; layering MCP exposes the catalog to any model. Coverage decisions should also account for protocol-level retirement risk — OpenAI retired ChatGPT Instant Checkout in March 2026 after only ~12 Shopify merchants went live, replacing it with retailer-app integrations (Walmart, Target, Instacart). Diversification across protocols hedges against any single retirement.

Product Data and AI Visibility

Agents read product data, not storefront pages. A merchant accepting agent payments needs an ACP-compliant or MCP-exposed feed with structured attributes (IDs, titles, descriptions, pricing, availability, media, certifications) plus the trust signals that AI ranking models reward (verified source, timestamp, approval). Product Information Management (PIM) vendors — Salsify, Syndigo, Akeneo, Productsup, SAP, ReFiBuy, Wildcard — own this layer.

Catalog optimization is the difference between being discoverable and being recommended. The agent does not see HTML, CSS, customer reviews on the page, or banner imagery; it sees a structured feed and ranks merchants on the completeness, accuracy, and trustworthiness of that feed. PIM vendors moved aggressively through 2025-2026 to ship ACP-compliant export channels and MCP servers so brands can publish once and syndicate everywhere.

Salsify

Salsify launched its OpenAI channel in October 2025, exposing brand-approved content as ACP-compliant feeds and validating product data against OpenAI's specification through a Salsify Readiness Report. Salsify Intelligence Suite (recognized as RetailTech AI Innovation of the Year in April 2026) supports OpenAI, Google, Anthropic, and Azure AI Foundry as content providers; SalsifyIQ is the company's commerce-tuned proprietary AI service.

Syndigo

Syndigo launched OpenAI Connect and Syndigo GEO on October 20, 2025. OpenAI Connect publishes product content directly to ChatGPT using ACP specifications across Syndigo's network of 15,000 brands and 3,500 retailers. Syndigo GEO (Generative Engine Optimization) optimizes product content for how LLMs interpret and present products — handling claims, certifications, ratings, and FAQ content with built-in source, timestamp, and approval metadata.

Akeneo

Akeneo's Winter Release 2026 introduced an expanded MCP Server, the Digital Showroom, Custom Components, and a Stripe Agentic Commerce Suite partnership. The Akeneo MCP Server connects any AI model directly to product data with governance controls; the Stripe partnership shares near real-time product, price, and availability with AI agents from inside the Akeneo PIM. Akeneo is the open-source option in the PIM cluster.

Productsup

Productsup ships a ChatGPT product feed integration that publishes catalog data into OpenAI's agentic commerce surface with feed validation and AI-powered enrichment. Productsup is the feed-management default for many mid-market brands selling across Google Shopping, Meta catalogs, and now ChatGPT.

SAP Catalog Optimization Agent

SAP announced the Catalog Optimization Agent at NRF 2026 as part of SAP Commerce Cloud. The agent scales to catalogs with more than 10 million items and claims 70% faster content improvement, a 5% lift in data completeness, and a 63% reduction in maintenance effort. The pitch is operational: in an agent-driven world, product content stops being marketing and becomes operational infrastructure that AI agents must be able to interpret confidently.

ReFiBuy and Wildcard

ReFiBuy built a closed-loop Commerce Intelligence Engine that evaluates, enriches, and monitors product data across AI shopping engines. The Build with ReFiBuy developer platform launched in March 2026 with a REST API, MCP server, and CLI for embedding ReFiBuy intelligence inside existing PIM and feed workflows. Wildcard tracks ChatGPT Shopping rankings and visibility, surfacing merchant-level data on whether and how products appear inside ChatGPT for given queries — closing the loop between catalog optimization and measurable AI-search outcomes.

Trust, Identity, and Fraud

Trust verification gives merchants a cryptographic answer to the question "is this agent legitimate?" Visa TAP, Web Bot Auth, Forter, Riskified, and the bot-management edge (Cloudflare, Akamai, HUMAN Security, Kasada, DataDome) each handle a slice. The standard primitive across the trust layer is the RFC 9421 HTTP Message Signature: the agent signs requests with a private key, the merchant verifies against a public key in a trust directory, and unsigned or stale requests get blocked or downgraded.

The trust layer matters because the existing fraud stack assumes a human buyer. Chargeback rules, dispute windows, KYC checks, and bot-detection heuristics all break when the buyer is software acting under user-signed mandates. Merchants that scale agentic-checkout volume without updating the trust stack absorb the fraud delta directly.

Visa Trusted Agent Protocol (TAP)

Visa launched TAP on October 14, 2025 with Cloudflare. TAP layers RFC 9421 HTTP Message Signatures into requests with two header tags — `agent-browser-auth` (the agent is acting as a browser) and `agent-payer-auth` (the agent is acting as a payer with delegated authority). The merchant's edge verifies the signature against Visa's directory; signatures must be created within an 8-minute window, and unsigned messages can be blocked at the merchant's discretion. Launch partners (October 14, 2025) include Adyen, Ant International, Checkout.com, Coinbase, CyberSource, Elavon, Fiserv, Microsoft, Nuvei, Shopify, Stripe, and Worldpay. The Visa TAP explainer covers the full handshake.

Web Bot Auth

Web Bot Auth is the IETF standardization track for the same primitive. The IETF chartered a Web Bot Auth Working Group after the BoF session at IETF 123, with standards-track specifications due to the IESG by April 2026 and a Best Current Practice document by August 2026. Cloudflare has shipped early support; AWS, Akamai, and others have aligned implementations as the spec moves toward IESG. Cloudflare's Web Bot Auth documentation covers the verification flow at the CDN edge.

Forter Identity Monitoring for Agentic Commerce

Forter shipped Identity Monitoring for Agentic Commerce in mid-2025 — a service that distinguishes legitimate AI-assisted shoppers from malicious automated agents and visualizes agentic activity inside a merchant's existing Forter dashboard. Forter additionally published the Trusted Agentic Commerce Protocol on GitHub as an open standard for agent-merchant authentication and data encryption. Forter's models classify reflex-, goal-, and learning-based agents and feed anonymized cross-merchant insights into the merchant's risk model.

Riskified AI Agent Intelligence

Riskified expanded its AI Agent Intelligence platform in March 2026 to cover native conversational agents on retail sites in addition to third-party agent traffic. The Q1 2026 Agentic Commerce Pulse data — 53.9% of consumers fearing AI-driven fraud, 61.5% using AI for product discovery — frames Riskified's pitch: chargeback rules and policy-abuse detection (refund fraud, reseller arbitrage, promotion abuse) need rewriting around delegated-authority buyers. The 2026 World Economic Forum projection that one in four data breaches by 2028 could result from AI agent exploitation gives the upper bound on the exposure.

Bot management edge

HUMAN Security, Kasada, DataDome, Cloudflare, and Akamai sit at the network edge and gate agent traffic before it reaches the merchant's checkout pipeline. Each has shipped agent-aware policy primitives: allowlist legitimate Layer 1 surfaces (OpenAI, Google, Anthropic, Microsoft) while blocking unauthorized scrapers. Cloudflare's pay-per-crawl program treats agent traffic as a chargeable category, and Cloudflare is Visa's TAP partner for signed-header verification at the edge. The bot-management edge is where the trust signal becomes a deterministic gate rather than a probabilistic score.

Eco's Role: Cross-Chain Stablecoin Settlement for Agent Payments

Eco operates a cross-chain stablecoin orchestration sublayer between the payment protocol and the underlying chain rails. When a merchant accepts agent payments denominated in USDC — through x402, AP2, the Stripe Machine Payments Protocol, or a direct stablecoin-rail integration — Eco resolves which chain to settle on, sources liquidity through Hyperlane and CCTP partner rails, and finalizes settlement within seconds across 15 supported chains.

The relevance for merchants is narrow but consequential: stablecoin agent payments are growing fast (Stripe Sessions 2026 added stablecoin micropayments via the Machine Payments Protocol on Tempo; x402 reached approximately 69,000 active agents by April 2026) and the rail-fragmentation problem is real. A buyer's agent paying in USDC on Base may need to settle with a merchant's treasury on Solana, Arbitrum, or Tron. The combined stablecoin float backing this layer is roughly $318 billion as of April 29, 2026 (DeFiLlama), with USDT at $189.5B and USDC at $77.3B. Eco abstracts the cross-chain routing so a merchant accepting USDC doesn't have to maintain bridging infrastructure or hold inventory on every chain. For the wider stablecoin-payments picture see the stablecoin payments for AI agents article and cross-chain agent payments.

Related reading

Merchant-side accept-the-payment readiness composes with the protocol-level, payments-level, and stack-level explainers in this cluster. Each article below goes deeper on one piece of the merchant integration puzzle: the buyer-side picture, an individual protocol, the agent-wallet surface, the stablecoin rails, the cross-chain orchestration sublayer, the trust layer, or the spend-control patterns that govern how a delegated agent transacts.

Sources and methodology. Stripe Agentic Commerce Suite launch partners and Stripe Sessions 2026 figures verified against Stripe newsroom releases. Shopify Agentic Storefronts activation timeline verified against Shopify Winter '26 Edition release notes. Visa TAP technical mechanics verified against Visa's developer documentation and the RFC 9421 HTTP Message Signatures specification. Web Bot Auth IETF milestones verified against the working-group charter draft. Stablecoin supplies pulled from DeFiLlama on April 29, 2026. Figures refresh quarterly.

Did this answer your question?