Your Next Customer Might Be an AI Agent. A New Standard Just Made That Real.
Meta, Sierra, and major retailers just agreed on how AI agents will shop on behalf of real people — and any business that is not ready will get skipped.
- Oct 6, 2026
- date announced
- 8
- companies backing it at launch
- 3
- levels of agent access
- End of Oct
- target date for v0.1 spec
AI assistants like ChatGPT and Claude can already answer questions and write emails. Now they are starting to take action — placing orders, checking prices, booking services — on your behalf. On October 6, a group of big companies agreed on the rules for how that should work. How businesses receive customers is about to change.
Meta and Sierra — led by Bret Taylor, former CEO of Salesforce — announced the Personal Agent Protocol. Think of it like a shared front door for AI agents. It is built on OAuth, the same technology behind log in with Google. An AI agent can discover what your business offers, ask for permission, then act on a customer's behalf: check stock, compare prices, or place an order. Three levels of access keep users in control: as a guest, with read-only browsing, or with full permission to buy.
Eight organisations joined at launch: Meta, Sierra, Shopify, Stripe, Walmart, Genesys, Instinct, and Rocket. That list matters. When Shopify and Stripe back a standard, it tends to become the default for online commerce. Businesses not in the protocol risk being skipped entirely. The version 0.1 specification arrives by end of October, with a reference implementation for developers to build on.
If you build or run a product with customers, now is the time to check your API surface. Does your service expose clear, documented endpoints? Do you use MCP or OpenAPI? Those are the doors AI agents will walk through. You do not need to implement the full protocol today — but clean APIs and current documentation mean you will not have to scramble when the spec lands and agents start shopping.