PRESSR: Visa introduces Trusted Agent Protocol: An ecosystem-led framework for AI commerce

Cairo, Egypt – Visa Inc. V today unveiled Trusted Agent Protocol, establishing a foundational framework for agentic commerce that enables secure communication between AI agents and merchants during every step of a transaction. Trusted Agent Protocol aims to address the unique challenges facing agent-driven commerce, ushering in a new era where AI can search, compare and pay on behalf of consumers, while ensuring trust between merchants and AI agents. With the release of this protocol – developed in collaboration with Cloudflare – Visa reinforces its commitment to supporting safer and more seamless interactions in the evolving ecosystem of intelligent payments. Trusted Agent Protocol is available today in the Visa Developer Center and GitHub.

Over the past year, AI-driven traffic to retail websites in the United States surged over 4,700%, and 85% of shoppers[1] who have used AI to shop say it improved their shopping experience. But as more AI agents browse and buy on behalf of consumers, merchants face new challenges:

• Managing bot detection systems that can mistakenly block legitimate agentic transactions
• Supporting agent-driven guest and logged-in checkout
• Preserving visibility into the consumer behind the agent and payment data

Trusted Agent Protocol intends to address these challenges by enabling approved agents to securely pass critical information to merchants. This provides a much-needed framework for recognizing trusted agents with commerce intent and distinguishes them from malicious automation and rogue bots. In developing this protocol, we have received insightful feedback from other early partners including Adyen, Ant International, Checkout.com, Coinbase, CyberSource, Elavon, Fiserv, Microsoft, Nuvei, Shopify, Stripe and Worldpay.

“We believe the entire payments ecosystem has a responsibility to ensure sellers can trust AI agents as much as they trust their best customers and networks,” said Jack Forestell, Chief Product & Strategy Officer, Visa. “For the past year, we’ve worked closely with sellers, issuers and partners to make sure agent-initiated transactions are as seamless and secure as any payment today. Our new agent protocol is focused on creating no-code functionality for merchants to securely identify agents with an intent to buy and provide a better payments and personalized experience for its known users.”

“Securing the future of commerce is a shared responsibility, especially as AI agents begin to act on behalf of consumers,” said Stephanie Cohen, Chief Strategy Officer, Cloudflare. “Our work with Visa on the Trusted Agent Protocol is a vital step in building the necessary guardrails for this new ecosystem.”

Supporting Merchants in the Age of AI-Driven Shopping

In an agentic world, merchants need a way to recognize trusted agents, verify their credentials, and maintain customer relationships without overhauling their systems.

Trusted Agent Protocol addresses these challenges with new specifications that use agent-specific cryptographic signatures and includes the following information:

• Agent Intent – An indication that the agent is a trusted agent with an intent to retrieve additional details about, or purchase, a specific product from a merchant.
• Consumer Recognition – Data elements that indicate whether a consumer has an existing account or has previously interacted with the merchant.
• Payment Information – Agents have the option to carry payment data to support a merchant’s preferred checkout or payment method.

Built for the Future of Commerce Interoperability

While these initial specifications apply to the Visa network in this phase, enabling agents to safely and securely act on a consumer’s behalf requires an open, ecosystem-wide approach. We are committed to aligning closely with global standards bodies like IETF, OpenID Foundation and EMVCo. We are working closely with our ecosystem partners to ensure that Trusted Agent Protocol will complement other recently announced protocols like the Agentic Commerce Protocol, and are  collaborating with Coinbase to align on interoperability with x402.

Built upon the foundational HTTP Message Signature standard, and aligned with Web Both Auth, Trusted Agent Protocol enables merchants and agents to establish trust using existing web infrastructure – with minimal user experience (UX) changes required on merchant websites or checkout pages – and extendable to non-web message protocols.

About Visa

Visa V is a world leader in digital payments, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories. Our mission is to connect the world through the most innovative, convenient, reliable and secure payments network, enabling individuals, businesses and economies to thrive. We believe that economies that include everyone everywhere, uplift everyone everywhere and see access as foundational to the future of money movement. Learn more at Visa.com.

Media Contacts

Conor Febos

press@visa.com

[1]Source: Adobe Data Insights, August 2025, Growth in AI-driven visit share

Disclaimer: The contents of this press release was provided from an external third party provider. This website is not responsible for, and does not control, such external content. This content is provided on an “as is” and “as available” basis and has not been edited in any way. Neither this website nor our affiliates guarantee the accuracy of or endorse the views or opinions expressed in this press release.

The press release is provided for informational purposes only. The content does not provide tax, legal or investment advice or opinion regarding the suitability, value or profitability of any particular security, portfolio or investment strategy. Neither this website nor our affiliates shall be liable for any errors or inaccuracies in the content, or for any actions taken by you in reliance thereon. You expressly agree that your use of the information within this article is at your sole risk.

To the fullest extent permitted by applicable law, this website, its parent company, its subsidiaries, its affiliates and the respective shareholders, directors, officers, employees, agents, advertisers, content providers and licensors will not be liable (jointly or severally) to you for any direct, indirect, consequential, special, incidental, punitive or exemplary damages, including without limitation, lost profits, lost savings and lost revenues, whether in negligence, tort, contract or any other theory of liability, even if the parties have been advised of the possibility or could have foreseen any such damages.