Visa Mastercard PayPal Agentic AI Commerce: What UK Shops Can Use

Agentic AI commerce is shopping in which an AI agent helps a customer discover products, decide and complete part or all of the purchase. That is close to how Visa describes agentic commerce, and the card networks and PayPal now publish merchant-facing pieces for it. Between them they cover recognising a trusted agent, accepting a credential made for agents and taking payment from an assistant.

In practice, most of the payment work sits with your acquirer or payment provider. The merchant's own job is narrower: let verified agents reach a checkout they can call.

What do Visa, Mastercard and PayPal each offer for agentic AI commerce?

The table maps each offer to the credential it uses, how the agent is checked and where a merchant starts. The sections below take each in turn.

Mastercard Agent Pay: agentic tokens and intent binding

Mastercard Agent Pay is Mastercard's framework for certified AI agents to conduct secure commerce transactions on behalf of consumers. Its credential is the Agentic Token, a tokenised payment credential provisioned specifically for transactions that AI agents initiate. That lets issuers identify and authorise agentic commerce flows.

Tokens come from the Mastercard Digital Enablement Service (MDES), a platform for issuers, wallet providers, merchants and other token requestors. For the checkout itself, Mastercard's agentic commerce guide tells merchants to validate agent identity through Web Bot Auth headers. At Level 3 of that guide, agents submit tokens in API request bodies and the payment object is validated directly. At that level, intent validation is required before checkout proceeds, and the payment token is bound to a verified intent ID.

Merchants on Mastercard Merchant Cloud can let Agent Pay handle the full payment process, including transactions, pages and payment details. For everyone else, in practice it is the acquirer or payment provider that decides which agent credentials reach the store. Mastercard's guide lists no regions, so ask your acquirer whether Agentic Tokens are live for UK cards.

Visa Intelligent Commerce and the Trusted Agent Protocol

Visa Intelligent Commerce is Visa's portfolio for agent payments. Its developer APIs come in two sets. Tokenization and authentication covers token provisioning and lifecycle, step-up verification of the cardholder and passkey management. Payment instructions and signals covers two stages. First an agent-specific token is enrolled and the user's instruction submitted. Then credentials are retrieved to fulfil it, and the purchase outcome is reported.

For a merchant, the nearer piece is the Trusted Agent Protocol. Visa notes that merchants, CDNs and bot-mitigation services have usually treated automated traffic as bots and blocked it. As agent use grows, merchants need to tell trusted shopping agents from malicious bots.

The protocol uses signatures that are specific to the merchant and purpose, time bound, and cannot be replayed or relayed. A signed request can state the agent's intent and carry consumer details, such as a loyalty account or a country and postal code. It can also shape payment details to the merchant's processing method. Visa says the protocol is still in development and deployment and may not be available in all markets, so confirm UK coverage with your acquirer.

The risk to plan for is your own edge. Bot rules that block every non-browser client will block a signed agent too; our guide to agentic commerce risks covers the controls to keep. Fix that before you chase any one programme.

PayPal Agent Ready and Store Sync

PayPal's agentic commerce services have two parts. Agent Ready lets merchants accept payments through AI assistants with minimal changes to their current payment setup, while PayPal handles security and compatibility across platforms.

The Agent Ready overview lists two integrations, both through Braintree. The Agentic Commerce Protocol integration serves ChatGPT: the customer authorises PayPal and your app receives a delegated token. The Universal Commerce Protocol integration serves Google AI Mode and Gemini: the customer pays with Google Wallet and Google returns a single-use payment token.

Store Sync makes products discoverable to AI shopping assistants and places orders into your existing order management system. Its eligibility rules matter for UK sellers. Per the Store Sync overview, only merchants selling physical goods to US customers in USD are eligible as of October 2026. You also need an existing PayPal merchant account, Orders v2 or a compatible Braintree setup, a shareable product catalogue and approved access from PayPal's AI team.

Where Stripe and OpenAI fit alongside the networks

Stripe's shared payment tokens (SPTs) give sellers scoped access to a customer's payment method for agent-initiated purchases. The token carries seller details and usage limits. SPTs are available in the US, Canada and select European countries, and Stripe links the full country list from that page.

The Agentic Commerce Protocol used by ChatGPT defines how a delegated payment reaches the merchant. OpenAI prepares a one-time delegated payment request. It sets a maximum chargeable amount and an expiry based on what the buyer selected in ChatGPT. OpenAI calls the provider's payment delegation endpoint, and the provider returns a token that OpenAI passes to the merchant to complete the checkout. OpenAI is not the merchant of record, and eligible cards are upgraded using network tokenisation. Our explainer on how ACP, MCP and UCP fit together covers the protocol side.

A worked example: a UK homeware store choosing its first route

Take a homeware store selling physical goods to UK customers in GBP, with cards on Stripe and PayPal running through Braintree. Walk it through the options in order.

1. Store Sync: not available today, because the store sells in GBP outside the US.
2. Agent Ready: the closest fit, since Braintree already carries its PayPal payments. The overview lists no regions, so confirm with PayPal that a UK store selling in GBP qualifies, and that the assistant's checkout is open to UK shoppers.
3. Stripe SPTs: look the UK up on Stripe's linked country list before planning around them.
4. Card network tokens: leave Agentic Tokens and Visa agent credentials to the acquirer, rather than integrating MDES or Visa's APIs directly.
5. Edge rules: make sure the bot layer can let a signed agent reach the checkout API.

If the payment provider itself is up for review, our Adyen and Stripe comparison for UK stores covers the gateway decision. The checkout side is in our agentic checkout architecture guide.

What should you do first?

Start with the payment provider you already use, not with a network integration.

If you want that scoped against your own stack, our ecommerce development team can map it.