Agentic Commerce Protocol
Last reviewed
Jun 7, 2026
Sources
17 citations
Review status
Source-backed
Revision
v1 · 2,042 words
Improve this article
Add missing citations, update stale details, or suggest a clearer explanation.
Suggest edit
CtrlK
Last reviewed
Jun 7, 2026
Sources
17 citations
Review status
Source-backed
Revision
v1 · 2,042 words
Add missing citations, update stale details, or suggest a clearer explanation.
The Agentic Commerce Protocol (ACP) is an open technical standard, co-developed by OpenAI and Stripe and announced on September 29, 2025, that lets AI agents complete purchases on behalf of users while the merchant stays in control of the sale. ACP defines a common set of messages exchanged by three parties (the buyer and their AI agent, the AI platform such as ChatGPT, and the merchant), so a shopper can discover a product inside a chat and pay for it without leaving the conversation. It is the standard behind ChatGPT's "Instant Checkout" feature. ACP is published under the Apache 2.0 license, with OpenAI and Stripe as founding maintainers. It is one of several competing standards in the emerging field of agentic commerce, and it is distinct from Google's Agent Payments Protocol (AP2), which addresses payment authorization rather than checkout.
| Fact | Detail |
|---|---|
| Full name | Agentic Commerce Protocol (ACP) |
| Developers / maintainers | OpenAI and Stripe (founding maintainers) |
| Announced | September 29, 2025 |
| License | Apache 2.0 (open source) |
| Repository | github.com/agentic-commerce-protocol |
| Core specs | Agentic Checkout Spec; Delegated Payment Spec; product feed |
| Payment primitive | Shared Payment Token (SPT), scoped to one merchant and cart |
| Merchant of record | The merchant (not OpenAI or Stripe) |
| First platform | ChatGPT Instant Checkout (United States) |
| First merchants | US Etsy sellers (Sept 29, 2025); Shopify merchants to follow |
| Notable later adopters | PayPal (Oct 2025), Walmart, and others |
| MCP support | Added in the April 17, 2026 spec release |
| Main rivals | Google AP2 and UCP; Amazon's closed stack; Perplexity |
ACP describes itself, in its public repository, as "an interaction model and open standard for connecting buyers, their AI agents, and businesses to complete purchases seamlessly." The motivation is that as AI assistants move from answering questions to taking actions, buyers want to finish a purchase inside the assistant, and merchants want to reach those buyers without rebuilding their checkout for every AI app. ACP lets a merchant integrate once and then accept orders from any ACP-compatible agent.
OpenAI and Stripe announced ACP on September 29, 2025, alongside Instant Checkout in ChatGPT, and open-sourced the specification under Apache 2.0. The two companies act as founding maintainers and have said they intend to move the project toward broader community governance, and eventually neutral foundation stewardship, as the ecosystem matures. The specification has been revised several times since launch. Its published changelog records fulfillment enhancements in December 2025, capability negotiation in January 2026, extensions, discounts and payment handlers later in January 2026, and a cart, feed, orders, authentication and Model Context Protocol update on April 17, 2026.
ACP keeps a clean separation between the agent that talks to the buyer and the merchant that fulfills the order. It has two main parts.
The Agentic Checkout Spec defines REST endpoints that a merchant exposes so an agent can create, update, and complete a checkout session. When a ChatGPT user is ready to buy, ChatGPT calls these endpoints. The merchant validates the cart, calculates shipping and sales tax, runs its own fraud and risk checks on its own stack, and returns the full checkout state with every response. Webhooks notify the agent of order events such as shipment.
The Delegated Payment Spec governs money movement. Rather than handing the merchant a raw card number, the agent tokenizes the buyer's chosen payment credential and "delegates" it to the merchant under strict constraints, an allowance that fixes a maximum amount and an expiry. In OpenAI and Stripe's implementation this token is the Shared Payment Token (SPT), a payment primitive Stripe created so an application like ChatGPT can initiate a payment without exposing the buyer's card details. The token is scoped to a single merchant and cart and cannot be reused outside the approved purchase.
Crucially, the merchant remains the merchant of record. The merchant, not OpenAI or Stripe, charges the card through its own payment service provider, owns the customer relationship, decides which products can be sold and how they are displayed, and chooses whether to accept or decline each order based on its own risk signals. ACP is deliberately payment-provider neutral. A business already on Stripe can enable it by updating as little as one line of code, while a business on another processor can implement the open spec with its existing infrastructure. The protocol covers physical and digital goods, subscriptions, and asynchronous "buy for me" purchases, and it supports both single-item and multi-item carts. ACP is built on familiar web primitives (large language model agents calling ordinary REST APIs over HTTPS), which is part of why merchants can adopt it without a bespoke integration for each AI platform.
Instant Checkout is OpenAI's first ACP product and the reason the protocol exists in practice. Announced on September 29, 2025, it lets ChatGPT users in the United States buy a recommended product inside the chat. When a shopper asks for a recommendation and decides to buy, a Stripe-powered checkout appears inline, the buyer confirms with a saved payment method, and the order is placed with the merchant. OpenAI has reported that ChatGPT reaches roughly 700 million weekly users, a large potential funnel for participating merchants.
At launch the feature handled single-item purchases from US-based Etsy sellers, with support for more than a million Shopify merchants (named examples included Glossier, Vuori, Spanx, and SKIMS) described as coming soon. OpenAI later expanded the experience to multi-item carts and additional retailers, and connected it to generative AI product recommendations in the chat.
The early rollout struggled, and the difficulties were documented widely in March 2026 by CNBC, Retail Dive, and Search Engine Land. Merchant onboarding was slow, and the first version of the experience forced each recommended product into its own separate transaction, shipment, and delivery, which shoppers disliked. Walmart, which had made about 200,000 products available through Instant Checkout, said the in-chat checkout converted roughly three times worse than sending shoppers to Walmart.com. Walmart executive Daniel Danker disclosed the figure at a Morgan Stanley conference on March 4, 2026, and called the experience "unsatisfying." In response, OpenAI began shifting away from in-chat checkout toward retailer "apps" inside ChatGPT that hand the shopper off to the retailer's own site to pay, using ACP mainly for product discovery. Walmart relaunched inside ChatGPT through an app powered by its own Sparky shopping agent. According to CNBC, retailers that integrated ACP for discovery include Target, Sephora, Nordstrom, Lowe's, Best Buy, The Home Depot, and Wayfair.
Reported participants and milestones, attributed to the sources below, include:
Actual adoption in the first months was narrower than the headline merchant counts suggested. CNBC reported only a few dozen Shopify merchants live early on, reflecting the onboarding friction that OpenAI and its partners then worked to reduce.
ACP is frequently confused with Google's AP2, but the two sit at different layers and are best understood as complementary rather than as direct substitutes.
ACP (OpenAI and Stripe) is a commerce-and-checkout protocol. It standardizes the messages for building a cart, completing a checkout session, and delegating a payment token to a merchant who remains the merchant of record. Its center of gravity is the merchant integration and the buying experience inside an agent.
AP2 (Agent Payments Protocol), announced by Google on September 16, 2025, with a coalition of more than 60 firms including Mastercard, American Express, PayPal, Coinbase, and Adyen, is a payment-authorization and trust protocol. Its core idea is the mandate, a cryptographically signed statement that proves a user authorized an agent to spend within defined limits. AP2 is payment-method agnostic (cards, real-time payments, and digital assets) and is designed as an extension of Google's Agent2Agent (A2A) protocol and the Model Context Protocol.
The simplest way to keep them apart: ACP describes how a checkout happens, while AP2 describes how a payment is authorized and proven. Google's closest counterpart to ACP on the commerce side is its separate Universal Commerce Protocol (UCP), which Google designed to compose with AP2, with UCP shaping the checkout session and AP2 supplying the cryptographic mandate. Because ACP is neutral about the underlying payment method, ACP and AP2 can in principle interoperate.
Both ACP and AP2 are distinct from the Model Context Protocol (MCP), the open standard for connecting AI models to external tools and data. MCP is about giving an agent context and capabilities, not moving money. ACP added MCP support in its April 17, 2026 release so that commerce can be exposed to agents as MCP tools. Another adjacent effort is Coinbase's x402, which uses the HTTP 402 "Payment Required" status code for programmatic stablecoin payments. Industry analysts generally frame ACP, AP2, UCP, and x402 as layers of an emerging agentic-commerce stack rather than as winner-take-all rivals.
ACP marked one of the first times a major AI platform put a working purchase flow directly inside a chatbot used by hundreds of millions of people, and it set a template that competitors matched quickly. Within weeks Google had countered with AP2, and later UCP. Amazon kept building a closed stack around its Rufus assistant (used by an estimated 250 million customers) and its "Buy for Me" feature, which it began piloting in April 2025; in November 2025 Amazon sued Perplexity over its Comet shopping agent and won a preliminary injunction on March 10, 2026 that blocked Comet from logging into Amazon accounts. The contest is now less about whether agents will shop and more about who controls the checkout, the customer relationship, and the resulting data.
The early Instant Checkout results also tempered expectations. The Walmart conversion data and OpenAI's pivot toward discovery-plus-handoff apps suggested that, at least through early 2026, many shoppers were not yet comfortable completing entire purchases inside a chat, and that the hardest problems were merchant onboarding, cart and fulfillment logic, and trust rather than the payment plumbing. As an open, Apache 2.0 standard with a published spec and reference implementations from both OpenAI and Stripe, ACP's longer-term importance may lie less in any single feature than in whether it becomes shared infrastructure that many agents and merchants adopt, the way earlier web and payment standards eventually did.