Sixteen days after Amazon started blocking Meta’s Muse agent from its retail website, Meta and Sierra introduced an open customary for a way private AI brokers take care of companies. The Private Agent Protocol (PAP) arrived on October 6, 2026 with Walmart, Shopify and Stripe on its accomplice listing and no specification hooked up. Sierra says the v0.1 spec will comply with later this month.
Sierra co-founders Bret Taylor and Clay Bavor launched PAP as an open customary that Meta and Sierra are creating with Genesys, Intuition, Rocket, Shopify, Stripe and Walmart. It covers authentication, shopper management and firm visibility when an agent acts by way of a web site, an API or an organization’s personal agent. Meta’s accomplice listing, as CMSWire reported it, provides NiCE and Decagon and leaves out Intuition.
The backdrop is Muse, the non-public agent Meta introduced on September 8. Amazon started blocking it on September 20, and an Amazon spokesperson stated that apps shopping for on prospects’ behalf ought to function overtly and respect the alternatives of the companies they store. Adweek relayed an additional Amazon declare, that Muse doesn’t determine itself. That declare comes from Amazon and has not been independently verified. Meta’s October 6 put up, which acknowledged that some companies have blocked private brokers, put its argument in a single line: “Turning away a private agent means turning away the shopper behind it.”
How a session works
Sierra’s design begins on the firm’s web site. An agent discovers what a enterprise presents from there and may start as a visitor, for instance to test inventory or a returns coverage. For account duties, the shopper indicators in on the corporate’s personal web page or makes use of credentials already arrange with the agent, and chooses read-only or write entry. Periods run on OAuth and carry throughout channels, so a query requested earlier than sign-in and an order change made afterward belong to the identical go to.
Companies choose from three routes: peculiar net pages, APIs constructed on requirements comparable to MCP and OpenAPI, or the corporate’s personal agent, which Sierra factors to for conversational duties like a guaranty declare. The examples attain effectively previous purchasing. Rocket Corporations CTO Shawn Malhotra stated Rocket and Redfin are constructing brokers that may transfer from dwelling search to financing.
Funds watch for a later model
Sierra’s put up lists three doable extensions: extra detailed permissions, push notifications comparable to a delayed-flight alert, and funds. Every is described as one thing that might come, with no dates hooked up. The funds extension may let an agent full a purchase order with out sharing card particulars.
Three earlier efforts middle on shopping for. OpenAI’s Agentic Commerce Protocol (ACP), co-developed with Stripe and open-sourced on September 29, 2025, carries order particulars from ChatGPT to a service provider’s backend. Visa’s Trusted Agent Protocol (TAP), constructed with Cloudflare and introduced October 14, 2025, makes use of cryptographic signatures so retailers can acknowledge accredited brokers, with Shopify and Stripe amongst its early companions. Google’s Common Commerce Protocol (UCP), introduced January 11, 2026, was co-developed with Shopify, Etsy, Wayfair, Goal and Walmart and spans discovery by way of post-purchase assist.
The identical names maintain showing. Stripe is a accomplice in PAP, a co-developer of ACP, an early accomplice in TAP and an endorser of UCP. Shopify sits in PAP, TAP and UCP, and Walmart in PAP and UCP.
My take: main with id and permissions is the sounder order. A fee customary is barely as helpful as a service provider’s confidence about who’s asking and what that social gathering could do, and PAP places the shopper’s read-only or write selection on the entrance of the design. The catch is that none of this may be examined till the spec exists.
A broadcast spec already exists subsequent door
Decagon, which Meta lists as a accomplice, printed its personal Private Agent Consent & Belief Protocol, PACT, on the identical day. Decagon says PACT is constructed on the Agent2Agent protocol and OAuth 2.0, was co-developed with Intuition, and has its spec at openpactprotocol.org/spec. Decagon additionally says it’s becoming a member of the Private Agent Protocol working group introduced by the group behind Muse.
Intuition due to this fact seems on either side: Sierra says it’s becoming a member of PAP, and Decagon says it co-developed PACT. The shared membership suggests the 2 efforts may converge fairly than compete, although that’s an inference. The v0.1 textual content will present how a lot of PACT’s strategy carries over.
What the announcement leaves open
Membership remains to be transferring. The Day by day Caller Information Basis, citing CNBC, studies that Taylor expects each OpenAI and Anthropic to signal on, and describes Taylor as OpenAI’s chairman. OpenAI already backs its personal commerce protocol, so its selection would say an excellent deal about how the sector settles.
Governance is the bigger hole. Sierra’s announcement names no governing physique, licence or requirements group. It says the protocol is open for anybody to implement and builds on OAuth, MCP and OpenAPI. Open for implementation describes who can construct in opposition to a protocol. It doesn’t say who decides how the protocol modifications.
Agent identification is the third. Sierra’s put up explains how prospects register and set permissions, however Amazon’s said grievance was that Muse doesn’t say who it’s. Whether or not v0.1 offers a enterprise a approach to affirm which agent is asking will matter as a lot because the sign-in circulation.
When the spec arrives, three issues will present whether or not PAP is a typical or a accomplice announcement: the licence and governance phrases, the mechanism for figuring out an agent, and the way the textual content treats PACT. Till then, PAP is a plan with a protracted accomplice listing.
Sixteen days after Amazon started blocking Meta’s Muse agent from its retail website, Meta and Sierra introduced an open customary for a way private AI brokers take care of companies. The Private Agent Protocol (PAP) arrived on October 6, 2026 with Walmart, Shopify and Stripe on its accomplice listing and no specification hooked up. Sierra says the v0.1 spec will comply with later this month.
Sierra co-founders Bret Taylor and Clay Bavor launched PAP as an open customary that Meta and Sierra are creating with Genesys, Intuition, Rocket, Shopify, Stripe and Walmart. It covers authentication, shopper management and firm visibility when an agent acts by way of a web site, an API or an organization’s personal agent. Meta’s accomplice listing, as CMSWire reported it, provides NiCE and Decagon and leaves out Intuition.
The backdrop is Muse, the non-public agent Meta introduced on September 8. Amazon started blocking it on September 20, and an Amazon spokesperson stated that apps shopping for on prospects’ behalf ought to function overtly and respect the alternatives of the companies they store. Adweek relayed an additional Amazon declare, that Muse doesn’t determine itself. That declare comes from Amazon and has not been independently verified. Meta’s October 6 put up, which acknowledged that some companies have blocked private brokers, put its argument in a single line: “Turning away a private agent means turning away the shopper behind it.”
How a session works
Sierra’s design begins on the firm’s web site. An agent discovers what a enterprise presents from there and may start as a visitor, for instance to test inventory or a returns coverage. For account duties, the shopper indicators in on the corporate’s personal web page or makes use of credentials already arrange with the agent, and chooses read-only or write entry. Periods run on OAuth and carry throughout channels, so a query requested earlier than sign-in and an order change made afterward belong to the identical go to.
Companies choose from three routes: peculiar net pages, APIs constructed on requirements comparable to MCP and OpenAPI, or the corporate’s personal agent, which Sierra factors to for conversational duties like a guaranty declare. The examples attain effectively previous purchasing. Rocket Corporations CTO Shawn Malhotra stated Rocket and Redfin are constructing brokers that may transfer from dwelling search to financing.
Funds watch for a later model
Sierra’s put up lists three doable extensions: extra detailed permissions, push notifications comparable to a delayed-flight alert, and funds. Every is described as one thing that might come, with no dates hooked up. The funds extension may let an agent full a purchase order with out sharing card particulars.
Three earlier efforts middle on shopping for. OpenAI’s Agentic Commerce Protocol (ACP), co-developed with Stripe and open-sourced on September 29, 2025, carries order particulars from ChatGPT to a service provider’s backend. Visa’s Trusted Agent Protocol (TAP), constructed with Cloudflare and introduced October 14, 2025, makes use of cryptographic signatures so retailers can acknowledge accredited brokers, with Shopify and Stripe amongst its early companions. Google’s Common Commerce Protocol (UCP), introduced January 11, 2026, was co-developed with Shopify, Etsy, Wayfair, Goal and Walmart and spans discovery by way of post-purchase assist.
The identical names maintain showing. Stripe is a accomplice in PAP, a co-developer of ACP, an early accomplice in TAP and an endorser of UCP. Shopify sits in PAP, TAP and UCP, and Walmart in PAP and UCP.
My take: main with id and permissions is the sounder order. A fee customary is barely as helpful as a service provider’s confidence about who’s asking and what that social gathering could do, and PAP places the shopper’s read-only or write selection on the entrance of the design. The catch is that none of this may be examined till the spec exists.
A broadcast spec already exists subsequent door
Decagon, which Meta lists as a accomplice, printed its personal Private Agent Consent & Belief Protocol, PACT, on the identical day. Decagon says PACT is constructed on the Agent2Agent protocol and OAuth 2.0, was co-developed with Intuition, and has its spec at openpactprotocol.org/spec. Decagon additionally says it’s becoming a member of the Private Agent Protocol working group introduced by the group behind Muse.
Intuition due to this fact seems on either side: Sierra says it’s becoming a member of PAP, and Decagon says it co-developed PACT. The shared membership suggests the 2 efforts may converge fairly than compete, although that’s an inference. The v0.1 textual content will present how a lot of PACT’s strategy carries over.
What the announcement leaves open
Membership remains to be transferring. The Day by day Caller Information Basis, citing CNBC, studies that Taylor expects each OpenAI and Anthropic to signal on, and describes Taylor as OpenAI’s chairman. OpenAI already backs its personal commerce protocol, so its selection would say an excellent deal about how the sector settles.
Governance is the bigger hole. Sierra’s announcement names no governing physique, licence or requirements group. It says the protocol is open for anybody to implement and builds on OAuth, MCP and OpenAPI. Open for implementation describes who can construct in opposition to a protocol. It doesn’t say who decides how the protocol modifications.
Agent identification is the third. Sierra’s put up explains how prospects register and set permissions, however Amazon’s said grievance was that Muse doesn’t say who it’s. Whether or not v0.1 offers a enterprise a approach to affirm which agent is asking will matter as a lot because the sign-in circulation.
When the spec arrives, three issues will present whether or not PAP is a typical or a accomplice announcement: the licence and governance phrases, the mechanism for figuring out an agent, and the way the textual content treats PACT. Till then, PAP is a plan with a protracted accomplice listing.
