{"slug":"sierra-and-meta-s-agent-handshake-splits-the-industry-before-it-ships","citations":[{"url":"https://thenextweb.com/news/personal-agent-protocol-sierra-meta","committed_hash":"sha256:5ec05be7af8b4f2cf21172b9ca817e63b4083a610e0b49a03a3b376d411e1fd3","committed_hash_short":"sha256:5ec05be7…411e1fd3","mime_type":"text/html","committed_at":"2026-10-14T08:00:23.326343+00:00","content_snapshot":"\n\n\n\n\n\n \n \n \n \n \n \n\n \n\n \n\n \n \n Sierra announces Personal Agent Protocol, an open standard for personal AI agents\n\n \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n \n \n\n \n \n\n \n\n \n \n \n\n\n\n\n \n\n Skip to content\n\n
\n\n
\n\n \n\n \n
\n
\n \n\n\n\n\n\n
\n
\n
\n\n \n \n
\n
\n
\n \n

Sierra announces Personal Agent Protocol, an open standard for personal AI agents

\n

Personal Agent Protocol is built on OAuth, lets a business decide whether an agent reaches it through a website, an API or an agent of its own, and arrives with Stripe and Shopify as partners, both of which have already joined a rival protocol run by Visa

\n
\n
\n
\n \n
\n
\n \n
\n
\n\n
\n
\n
\n \"Diagram\n
\n\n
\n\n

Sierra’s diagram of how Personal Agent Protocol would sit between personal agents and a company’s website, APIs and its own agent.

\n
\n \n
\n \"Image\n \n Credit: Sierra\n \n
\n \n
\n \n
\n
\n \n \n
\n
\n

Sierra and Meta are developing Personal Agent Protocol, an open standard defining how personal AI agents authenticate with businesses and what those businesses let them do, with Genesys, Instinct, Rocket, Shopify, Stripe and Walmart. A v0.1 specification is due this month, and payments are listed as a future extension rather than part of it.

\n

Meta and Sierra are writing a standard for how personal AI agents talk to businesses. Stripe and Shopify are among the partners. Both have already joined a rival protocol run by Visa.

\n

Personal Agent Protocol is meant to handle authentication and show companies what agents are doing on their sites, Sierra said in a post by Bret Taylor and Clay Bavor. The other partners named are Genesys, Instinct, Rocket and Walmart. A v0.1 specification is due later this month.

\n

Sessions are built on OAuth. An agent can start as a guest to check stock or a returns policy, and once a customer signs in they decide whether it gets read-only or write access. The session carries across channels, so a question asked before signing in and an order changed afterwards belong to one visit.

\n

The company chooses whether the agent works through its website, through its APIs using standards such as MCP and OpenAPI, or through an agent of its own.

\n

We reported in June that Visa had plugged into ChatGPT so agents could buy from about 175 million merchants, under a Trusted Agent Protocol that Microsoft, Stripe, Shopify and Worldpay had already joined.

\n

Stripe and Shopify are now in both.

\n

Rocket’s statement names Meta’s Muse agent moving across its platform from finding a home to arranging the financing. Muse launched four weeks ago and pays using saved cards through Stripe’s Link.

\n

The agents are arriving faster than the arrangements they will work under.

\n

Hark released an agent this morning that buys groceries, books cars and pays bills, a year before its hardware is due.

\n

All of them reach Europe eventually.

\n

A payment approved by software on somebody’s behalf has no carve-out from strong customer authentication, which was written for a person approving a transaction tied to a named payee and an amount. Sierra lists payments as a future extension rather than part of the first specification.

\n

Push notifications and more detailed permissions are also future work.

\n

One partner has a European headquarters, and it is Stripe, which runs dual headquarters in San Francisco and Dublin. No European retailer, bank or payment company has been named as joining.

\n
\n\n \n \n
\n

Get the TNW newsletter

\n

Get the most important tech news in your inbox each week.

\n
\n
\n \n
\n \n \n
\n
\n \n \n \n \n \n \n
\n \n \n
\n

\n
\n

Thanks! Check your inbox to confirm your subscription.

\n

By subscribing you agree to our Privacy Statement.

\n
\n
\n
\n\n \n \n
\n
Published
\n Back to top\n
\n\n \n\n
\n\n \n\n \n
\n
\n
\n\n \n
\n\n
\n
\n\n \n\n \n \n","snapshot_chars":181969,"live_check":"matches"},{"url":"https://datafloq.com/meta-and-sierras-personal-agent-protocol-starts-with-login-not-payments/","committed_hash":"sha256:631ecea81f64ed8e9786978827eacd551592f91ca377bc748d8689e97925db98","committed_hash_short":"sha256:631ecea8…7925db98","mime_type":"text/html","committed_at":"2026-10-14T08:00:23.720120+00:00","content_snapshot":"\n\n\n\t\n\t\n\t\n\n\t\n\t\n\n\t\n\tMeta and Sierra's Personal Agent Protocol Starts With Login, Not Payments | DataFLOQ\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\t\n\t\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n\n\tSkip to content\n\n\t\r\n
\r\n\r\n
\r\n
\r\n \r\n \r\n \r\n \r\n \r\n
\r\n
\r\n \r\n
\r\n\r\n \r\n
\r\n\r\n \r\n
\r\n
\r\n\r\n \t\t
\r\n\t\t\t\t\t\t\t\r\n\t\t\t \r\n \r\n\t\t\t
\r\n\t\t\t\t\t\t\t
\r\n\t\t
\r\n\t\t\r\n \r\n \r\n \r\n\r\n
\r\n \t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\tLight\n\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\tDark\n\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\tSystem\n\t\t\t\t\n\t\t\t\t\t
\n\t
\n\t
\r\n
\r\n
\r\n \r\n \r\n
\r\n\r\n \r\n
\r\n\r\n \r\n
\n\t\n\t
\n\n\t\t\t\t\n\t\t
\n\n\t\t\t\n\t
\n\n\t\t\n\n
\n\n\t\n\t\n\t
\n\t\tPosted in

Meta and Sierra’s Personal Agent Protocol Starts With Login, Not Payments

by Datafloq Team••0
\t
\n\n\t\t\t\t\t
\n\t\t\t\t\t\"Illustrated\t\t\t\t\t\t\t\t
Meta and Sierra’s Personal Agent Protocol (PAP) introduces an open standard focused on secure login and OAuth authentication, rather than immediate transaction capability.
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\n\t
\n\t\t\n

Sixteen days after Amazon began blocking Meta’s Muse agent from its retail site, Meta and Sierra announced an open standard for how personal AI agents deal with businesses. The Personal Agent Protocol (PAP) arrived on October 6, 2026 with Walmart, Shopify and Stripe on its partner list and no specification attached. Sierra says the v0.1 spec will follow later this month.

\n\n\n\n

What Sierra and Meta announced

\n\n\n\n

Sierra co-founders Bret Taylor and Clay Bavor introduced PAP as an open standard that Meta and Sierra are developing with Genesys, Instinct, Rocket, Shopify, Stripe and Walmart. It covers authentication, consumer control and company visibility when an agent acts through a website, an API or a company’s own agent. Meta’s partner list, as CMSWire reported it, adds NiCE and Decagon and leaves out Instinct.

\n\n\n\n

The backdrop is Muse, the personal agent Meta announced on September 8. Amazon began blocking it on September 20, and an Amazon spokesperson said that apps buying on customers’ behalf should operate openly and respect the choices of the businesses they shop. Adweek relayed a further Amazon claim, that Muse does not identify itself. That claim comes from Amazon and has not been independently verified. Meta’s October 6 post, which acknowledged that some businesses have blocked personal agents, put its argument in one line: “Turning away a personal agent means turning away the customer behind it.”

\n\n\n\n

How a session works

\n\n\n\n

Sierra’s design starts at the company’s website. An agent discovers what a business offers from there and can begin as a guest, for example to check stock or a returns policy. For account tasks, the customer signs in on the company’s own page or uses credentials already set up with the agent, and chooses read-only or write access. Sessions run on OAuth and carry across channels, so a question asked before sign-in and an order change made afterward belong to the same visit.

\n\n\n\n

Businesses pick from three routes: ordinary web pages, APIs built on standards such as MCP and OpenAPI, or the company’s own agent, which Sierra points to for conversational tasks like a warranty claim. The examples reach well past shopping. Rocket Companies CTO Shawn Malhotra said Rocket and Redfin are building agents that can move from home search to financing.

\n\n\n\n

Payments wait for a later version

\n\n\n\n

Sierra’s post lists three possible extensions: more detailed permissions, push notifications such as a delayed-flight alert, and payments. Each is described as something that could come, with no dates attached. The payments extension could let an agent complete a purchase without sharing card details.

\n\n\n\n

Three earlier efforts center on buying. OpenAI’s Agentic Commerce Protocol (ACP), co-developed with Stripe and open-sourced on September 29, 2025, carries order details from ChatGPT to a merchant’s backend. Visa’s Trusted Agent Protocol (TAP), built with Cloudflare and announced October 14, 2025, uses cryptographic signatures so merchants can recognize approved agents, with Shopify and Stripe among its early partners. Google’s Universal Commerce Protocol (UCP), announced January 11, 2026, was co-developed with Shopify, Etsy, Wayfair, Target and Walmart and spans discovery through post-purchase support.

\n\n\n\n

The same names keep appearing. Stripe is a partner in PAP, a co-developer of ACP, an early partner in TAP and an endorser of UCP. Shopify sits in PAP, TAP and UCP, and Walmart in PAP and UCP.

\n\n\n\n

My take: leading with identity and permissions is the sounder order. A payment standard is only as useful as a merchant’s confidence about who is asking and what that party may do, and PAP puts the customer’s read-only or write choice at the front of the design. The catch is that none of this can be tested until the spec exists.

\n\n\n\n

A published spec already exists next door

\n\n\n\n

Decagon, which Meta lists as a partner, published its own Personal Agent Consent & Trust Protocol, PACT, on the same day. Decagon says PACT is built on the Agent2Agent protocol and OAuth 2.0, was co-developed with Instinct, and has its spec at openpactprotocol.org/spec. Decagon also says it is joining the Personal Agent Protocol working group announced by the team behind Muse.

\n\n\n\n

Instinct therefore appears on both sides: Sierra says it is joining PAP, and Decagon says it co-developed PACT. The shared membership suggests the two efforts could converge rather than compete, though that is an inference. The v0.1 text will show how much of PACT’s approach carries over.

\n\n\n\n

What the announcement leaves open

\n\n\n\n

Membership is still moving. The Daily Caller News Foundation, citing CNBC, reports that Taylor expects both OpenAI and Anthropic to sign on, and describes Taylor as OpenAI’s chairman. OpenAI already backs its own commerce protocol, so its choice would say a good deal about how the field settles.

\n\n\n\n

Governance is the larger gap. Sierra’s announcement names no governing body, licence or standards organization. It says the protocol is open for anyone to implement and builds on OAuth, MCP and OpenAPI. Open for implementation describes who can build against a protocol. It does not say who decides how the protocol changes.

\n\n\n\n

Agent identification is the third. Sierra’s post explains how customers sign in and set permissions, but Amazon’s stated complaint was that Muse does not say who it is. Whether v0.1 gives a business a way to confirm which agent is calling will matter as much as the sign-in flow.

\n\n\n\n

When the spec arrives, three things will show whether PAP is a standard or a partner announcement: the licence and governance terms, the mechanism for identifying an agent, and how the text treats PACT. Until then, PAP is a plan with a long partner list.

\n\t
\n\n\t\t\t\t\t\n\t\t\t\n\t\n
\n\t\t\t
\n\t\t\t\n\t\t\t\t\t\t\t\n\t\t
\n\t\t
\n\t\t
Datafloq Team
\n\t\t

The Datafloq Team publishes news and analysis on data, AI and emerging technology.

\n
\n\t\t\n\t\t\tMore by Datafloq Team\t\t\n\t
\n
\n\n\t\n
\n\n\n\t\n
\n\n\t\t
\n\t\t

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

\n

\n

\n

\n

\n\n

\t
\n\t\n
\n\n\t
\n\n\n\n\t
\n\n
\n\n\n\n\n\n
\n\n\n\n\t\t\n\t\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\t\n\t\n\t\n\t
\n\t\t \n\t\t\n\t\t\t\t
\n\t\t\n
\n\t\"\"\n
\n\n\t\t
    \n\t\t\t\n
  • \n\t\n
    • \n\n\t
  • \n\t\n\t
    • \n\n\n\t
  • \n\t\n\t
    • \n\n\n\n\t\t
\n\t\t\n
\n\t
\n\n\t\t
\n\t\t\n\t\t
\n\t\t
\n\t\t\t \n\t\t
\n\t\t\n\t\t
\n\n\t\t\t
\n\t\t\t\n
\n\t\tPrivacy Overview\n\t\t
\n\t

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.

\n\t\t
\n\t\n\n
\n\n\t\t\t\n
\n Necessary Cookies\n
\n

Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.

\n
\n
\n
\n \n
\n \n
\n \n
\n \n \n
\n \n
\n \n\t\t\t\n
\n Marketing cookies\n
\n

This website uses Google Analytics to collect anonymous information such as the number of visitors to the site, and the most popular pages.

\n

Keeping this cookie enabled helps us to improve our website.

\n
\n
\n
\n \n
\n \n
\n \n
\n \n \n
\n \n
\n \n\t\t\t\n\t\t\t\t\t\t\t\t\t\n\t\t\t
\n\t\t\t\n\t\t
\n\t\t\n\t\t
\n\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t
\n\n\t\t
\n\t\t\n\t\t
\n\t\t\n\n\t\t
\n\n\t
\n\t\n\t\n\t\n\t\n\n\n\n\n\n\n","snapshot_chars":112802,"live_check":"changed"},{"url":"https://dev.to/techpulse01239/meta-and-sierra-want-to-give-your-ai-agent-a-handshake-inside-the-personal-agent-protocol-408","committed_hash":"sha256:8c73bf7ba56f249a33d194861100e4a7d6cd4d930c359d6ef34548b0725d8e99","committed_hash_short":"sha256:8c73bf7b…725d8e99","mime_type":"text/html","committed_at":"2026-10-14T08:00:23.846654+00:00","content_snapshot":"\n\n \n \n Meta and Sierra Want to Give Your AI Agent a Handshake: Inside the Personal Agent Protocol - DEV Community\n \n \n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n\n\n\n \n\n\n\n\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n\n \n \n \n \n \n \n \n \n\n \n\n\n\n
\n \n
\n
\n \n
\n
\n\n
\n \n Skip to content\n
\n \n \n \n \n \"DEV\n\n\n\n
\n
\n
\n
\n \n \n\n \n Powered by Algolia\n Search\n \n\n\n \n
\n
\n
\n
\n\n
\n \n
\n
\n
\n\n
\n
\n
\n

DEV Community

\n\n \n
\n\n
\n
\n
\n
\n
\n\n\n
\n
\n
\n
\n\n \n\n\n\n\n\n\n \n\n\n\n\n \n\n \n
\n \n\n
\n
\n\n\n
\n \n
\n\n
\n
\n
\n
\n
\n \"TechPulse\n
\n
\n TechPulse \n \n \n

\n Posted on \n\n\n\n

\n
\n
\n
\n\n \n\n

\n Meta and Sierra Want to Give Your AI Agent a Handshake: Inside the Personal Agent Protocol\n

\n \n
\n #ai\n #meta\n #sierra\n #aiagents\n
\n
\n
\n\n
\n
\n

\n \n \n Meta and Sierra Want to Give Your AI Agent a Handshake: Inside the Personal Agent Protocol\n

\n\n

If 2025 was the year AI agents learned to think, 2026 is the year they are learning to knock. On October 6, at Sierra Summit in San Francisco, Sierra co-founders Bret Taylor and Clay Bavor announced the Personal Agent Protocol (PAP) — an open standard co-developed with Meta that defines how a personal AI agent authenticates with a business, what it is allowed to do once inside, and how the whole interaction stays trustworthy. The founding partner list reads like a commerce and infrastructure dream team: Walmart, Shopify, Stripe, Rocket, Genesys and Instinct.

\n\n

It is a quietly enormous announcement. The race to build agentic commerce has so far produced a thicket of incompatible approaches, defensive walls, and outright bans. PAP is the most credible attempt yet to replace that chaos with a common handshake.

\n\n

\n \n \n The Problem: Agents Are Customers Now\n

\n\n

Personal AI agents are no longer a futuristic demo. People already use them to schedule appointments, book flights, shop for car insurance, and reorder groceries. But the way these agents interact with businesses is comically primitive: most of them browse websites the way a human does — loading pages, reading forms, clicking buttons. When that fails, the agent may try the company's support line or web chat, a path that can take an enormous amount of time and still end in failure.

\n\n

Businesses, meanwhile, have responded with suspicion. Reports of account suspensions for users relying on AI agents have surfaced across major platforms, and several large retailers and services currently prohibit unauthorized automated traffic outright. The status quo is bad for everyone: consumers get blocked, and companies lose a customer who arrived ready to spend.

\n\n

\n \n \n How the Protocol Works\n

\n\n

The design of PAP is deliberately boring — and that is its strength. Sessions are built on OAuth, the same battle-tested standard you use whenever you sign in to an app with your Google or Apple account. An agent can start as a guest to do lightweight things like checking stock availability or a return policy. When the customer signs in, they explicitly grant the agent either read-only or write access, and the session carries across channels — a question asked before sign-in and an order change made afterward are part of the same visit.

\n\n

Just as importantly, the protocol gives businesses three doors to open: agents can interact through the company's website, its APIs (via MCP or OpenAPI), or the company's own AI agent. The company decides which door exists and what a guest agent versus a signed-in agent may read or change. Meta's David Singleton, VP at Meta Superintelligence Labs and former CTO of Stripe, compared the ambition to email: \"We're defining rails that we hope personal agents and business agents can run over for the future.\"

\n\n

\n \n \n The Missing Names Tell the Story\n

\n\n

For all the heavyweight backing, what is absent is just as telling. OpenAI, Anthropic, Amazon and Google are not on the partner list. Stripe and Shopify are notably hedging their bets — both have already joined Visa's Trusted Agent Protocol, while Walmart and Shopify also participate in Google's Universal Commerce Protocol, and Stripe co-developed the Agentic Commerce Protocol with OpenAI back in 2025.

\n\n

That fragmentation is the real obstacle. If every major player backs a different standard, the industry simply rebuilds the compatibility mess it was trying to escape. Sierra says it welcomes all partners and will host design workshops, but whether the protocol becomes the \"email of agentic commerce\" or just another entry in a crowded field depends on those missing giants.

\n\n

\n \n \n Trust, Payments, and the Hard Questions\n

\n\n

The protocol's tiered permission model is a genuine step forward for consumer trust. But hard problems remain on the roadmap. Payments, notably, are listed as a future extension rather than part of the first specification — and for good reason. As early analyses pointed out, a payment approved by software on someone's behalf has no carve-out from strong customer authentication rules, which were written assuming a human approving a specific payee and a specific amount.

\n\n

There are also open governance questions. At launch, no specification, licence, or independent governing body had been published. The v0.1 spec and a reference implementation are due by the end of October, and developers are wise to wait for that text before writing PAP-specific code.

\n\n

\n \n \n Why It Matters\n

\n\n

The Personal Agent Protocol is not a product launch — nothing shipped on October 6. But it marks a strategic shift in how the industry thinks about AI agents: from adversarial scraping and blocking to standardized, permissioned access. For developers, it signals that OAuth-style agent authentication is likely to become a core competency. For businesses, it offers a way to welcome agent traffic on their own terms — deciding what agents can see, do, and buy. And for consumers, it hints at a near future where your AI assistant is a first-class customer, not a suspicious bot to be shown the door.

\n\n

The rails are being laid. The next few months — the v0.1 spec, the reference implementation, and whether OpenAI and Google decide to board the train — will determine whether your next checkout is done by you, or for you.

\n\n\n
\n\n
\n
\n
\n
\n
\n
\n
\n
\n

\n Top comments (0)\n

\n
\n\n\n
\n
\n Subscribe\n
\n
\n
\n
\n \n\n
\n\n\n
\n\n \n\n \n \n \n\n \n \"pic\"\n \n
\n
\n \n\n
\n\n
\n
\n \n \n
\n\n
\n
\n
\n
\n\n \n Create template\n \n

Templates let you quickly answer FAQs or store snippets for re-use.

\n
\n\n
\n\n
\n \n \n Dismiss\n
\n
\n\n
\n
\n\n\n
\n
\n
\n\n
\n\n\n \n\n
\n\n\n
\n
\n
\n

\n Are you sure you want to hide this comment? It will become hidden in your post, but will still be visible via the comment's permalink.\n

\n \n

\n \n

\n
\n

For further actions, you may consider blocking this person and/or reporting abuse

\n
\n\n\n\n \n\n
\n
\n
\n
\n\n \n
\n \n\n \n
\n\n
\n
\n\n
\n \n\n\n\n\n \n
\n\n\n
\n
\n
\n\n \n\n\n
\n\n
\n
\n
\n \"DEV\n
\n
\n

\n We're a place where coders share, stay up-to-date and grow their careers.\n

\n
\n
\n \n Log in\n \n \n Create account\n \n
\n
\n
\n\n\n\n
\n
\n \n \n \n \n \n
\n\n \n\n \n \n \n \n \n","snapshot_chars":78473,"live_check":"changed"}]}