The AI agent payments landscape in 2026

Traditional ecommerce assumes a human behind every transaction. You browse, add to cart, enter card details, click purchase. Fraud systems look for human behavior; checkouts are designed for human eyes. Agentic commerce inverts that model: an agent researches, compares, navigates checkout, and initiates payment, while the human sets policy and approves exceptions.

The volume is no longer hypothetical. Salesforce estimates AI and agents influenced roughly 20 percent of global online orders during the 2025 holiday season, about 262 billion dollars. Adobe measured AI-referred traffic to US retail sites up 693 percent year over year in the same window, and by March 2026 that traffic was converting 42 percent better than other channels. Around one in seven frequent US online shoppers has now let an agent complete a purchase.

Supporting that shift takes new infrastructure: identity credentials merchants can verify, payment instruments with programmatic controls, execution environments that can complete real checkouts, and protocols that let all of it interoperate. The companies building it fall into distinct layers.

The foundation is the ability for an agent to hold value and initiate transactions, and the architectural approaches diverge sharply.

PayOS builds on network-issued agent tokens, credentials that work at any card-accepting merchant. It spent 2026 turning pilots into production: in March it completed the first live end-to-end AI agent payment on European bank infrastructure with Mastercard and Santander, and in June it was named an initial participant in Mastercard's Agent Pay for Machines launch.

Nekuda focuses on capturing user intent through agentic mandates: signed specifications of what an agent may buy, under which conditions, with what limits. Backed by Madrona, Amex Ventures, and Visa Ventures, it remains a launch partner for Visa Intelligent Commerce and has been shipping free ecosystem tooling while the consumer pilots run.

Prava came out of the lab in March 2026 with a live developer API: prepaid wallets that fund one-time tokenized cards locked to a single merchant and a single price, aimed at agents like Claude Code and OpenClaw runtimes. One wallet funds many agents, each with its own rules.

A new cohort arrived this year. Catena Labs, founded by Circle cofounder Sean Neville, raised a 30 million dollar Series A in May led by Acrew Capital and a16z crypto and simultaneously filed for an OCC national trust bank charter, an attempt to build an AI-native bank that can hold funds for agents directly. AIsa raised 6.5 million dollars from Alibaba and Tribe Capital in July for a unified transaction layer covering the things agents actually buy most: APIs, data, and compute. Sponge, three ex-Stripe Crypto engineers in Y Combinator's winter batch, spans bank accounts, cards, and crypto behind one gateway. And a crowd of products named some variant of agent card, from YC startup Agentcard to launches by Alchemy and Corpay, signals how fast the category is commoditizing at the instrument level.

Signets approaches the problem from the fragmentation angle. Agents do not transact on one rail; they buy from merchants, pay vendors, meter APIs, and collect revenue, and each of those runs on different rails today. A Signet is funded once and lets an agent transact on any rail through one API, with limits and controls enforced before money moves rather than reconstructed after.

Each architecture encodes a bet. Tokens optimize for network reach, mandates for provable intent, scoped cards for isolation, unified accounts for developers who do not want to pick a rail before they have picked a use case.

Skyfire has built the most complete identity system for agents through its KYAPay protocol. KYA stands for Know Your Agent: signed JSON Web Tokens carry verified information about the agent's owner, authorized spend, and payment credentials, so merchants can verify an agent without seeing the underlying secrets. The protocol now has an IETF draft, and 2026 brought distribution: F5 integrated Skyfire-verified agent traffic into its bot defense in March, and Fastly followed at the edge in June. Verified agents get through; unverified bots get blocked.

Visa's Trusted Agent Protocol brings identity to the network level: agents register public keys with Visa, sign their requests, and merchants verify that a given agent acts for a given cardholder. The bigger move came in April 2026 with Intelligent Commerce Connect, a single integration that is deliberately network-agnostic. It works with non-Visa cards and supports TAP, the Machine Payments Protocol, Stripe's ACP, and Google's UCP, bundling tokenization, spend controls, and catalog discoverability.

The Agentic Commerce Consortium, formed around Basis Theory with Lithic, Skyfire, Rye, and Crossmint among the founders, has grown past 20 members. Its 2026 workstreams cover merchant opt-in standards, authorization and verification, catalog discovery, and unified cart APIs. Basis Theory itself raised a 33 million dollar Series B in March to fund the push, and consortium member Crossmint raised 23.6 million dollars from Ribbit Capital in April before releasing an agentic card payments API built with Visa Intelligent Commerce in June.

Lithic positions itself as purpose-built for agentic commerce: per-card authorization rules evaluated in real time, an MCP server for agent workflows, and a programmable decisioning layer spanning cards, 3DS, tokenization, and ACH. Marqeta brings enterprise scale, with an MCP server (still in beta) that lets agents provision virtual cards, manage spend, and file disputes against infrastructure that processes over 200 billion dollars a year.

Highnote differentiates on settlement speed: its stablecoin settlement capability with Cross River, running USDC over Solana under Visa's pilot, cuts settlement from days to minutes, and earned it a second consecutive Forbes Fintech 50 spot in February. Rain, which issues cards backed by on-chain stablecoin wallets, had the loudest year in the layer: a 250 million dollar Series C led by ICONIQ in January at a 1.95 billion dollar valuation, active cards up 30x, more than 3 billion dollars in annualized transactions, and Mastercard issuance added alongside Visa in May.

The clearest 2026 signal in this layer is who else showed up. Mercury shipped Agent Cards in August, giving each agent its own credential, limits, and audit trail inside a business bank account. Corpay launched its own Agent Card in July. And American Express released its Agentic Commerce Experiences developer kit in April with what it calls an industry first: purchase protection that covers cardholders when a registered agent gets a purchase wrong. When incumbents start absorbing agent-error liability, the category has left the experiment phase.

A wallet and a card are not enough; something still has to complete the purchase. Rye remains the reference point for universal checkout: browser automation plus fraud mitigation that completes purchases from a product URL, now claiming more than 15,000 merchants, 99.9 percent order reliability, and sub-five-second Shopify checkouts.

The platforms had a whiplash year. OpenAI launched Instant Checkout in ChatGPT in September 2025 with Etsy live and over a million Shopify merchants promised. By early March 2026 it had reversed course, moving purchases to merchant apps inside ChatGPT (Target, DoorDash, Instacart), with reporting suggesting only a small fraction of those Shopify merchants ever went live. The lesson the whole industry took: merchants will meet agents halfway on discovery, but they want to keep the sale, the data, and the customer relationship on their own surface.

Amazon folded its Rufus assistant into Alexa for Shopping in May, including Buy for Me, which completes purchases on other retailers' sites using stored Amazon payment details, over loud retailer objections. Perplexity won a notable round in August when the Ninth Circuit vacated the preliminary injunction Amazon had secured against its Comet shopping agent, reasoning that it is the user, not Perplexity, who accesses Amazon's systems. The case continues, but agents shopping on merchant sites without permission just got harder to enjoin. Meanwhile Square gave its sellers a ChatGPT app and a Claude plugin in July, and Shopify reported AI-driven traffic to its stores up 8x year over year, with orders from AI searches up roughly 13x.

Natural had the breakout year in B2B agent payments. After emerging from stealth in October 2025 with a 9.8 million dollar seed, it announced a 30 million dollar Series A led by Forerunner Ventures in July 2026. The team, drawn from Stripe, Ramp, and Square, frames the company as an agent orchestration layer and an explicit Stripe competitor: at that announcement, six of thirteen planned products were live, including FDIC-insured agent wallets, payments, requests, and transfers across bank rails and stablecoins, with voice, acceptance, and cards rolling out next.

Payman has evolved from paying humans for agent-assigned tasks toward letting AI execute banking transactions on banks' existing rails with policy controls and audit trails, and joined the ICBA ThinkTECH accelerator in May. Brex and Ramp keep automating the corporate spend side, with expense agents that collect receipts, check policy, catch fraud, and sync to the ERP; Ramp reported a million dollars in fraudulent invoices flagged within 90 days of launching its AP agents.

Visa Intelligent Commerce entered 2026 with more than 100 partners and completed pilot transactions, then expanded pilots into Asia Pacific and Europe. Its April launch of Intelligent Commerce Connect, which supports rival protocols and non-Visa cards, is the strongest consolidation signal in the market.

Mastercard Agent Pay went from rollout to live production: the first authenticated agentic transactions ran in Malaysia in March with CIMB, Maybank, and RHB, and June brought Agent Pay for Machines, machine-to-machine payments across cards, bank accounts, and stablecoins with more than 30 partners including Coinbase, Stripe, Adyen, and Cloudflare, with agent credentials recorded on Polygon, Solana, and Base.

Stripe has turned Link into the clearest consumer distribution play in agent payments. Link's wallet for agents gives an agent programmatic access to a single-use card or Shared Payment Token backed by payment methods already in the user's wallet, without exposing the raw credentials. Each purchase currently requires the user to approve the total. Instinct and Grok Bot adopted the wallet first; Meta integrated it into Muse in September. Muse can check out directly at more than one million Link businesses, while Link issues a scoped single-use virtual card for other merchants. Stripe says Link now reaches about 300 million users globally.

Stripe's wider stack matters as much as the wallet. Issuing for agents provides the card and authorization primitives underneath Link, Shared Payment Tokens carry scoped payment authority into agentic checkout, and the Agentic Commerce Protocol it maintains with OpenAI gives merchants an open integration path. The result is both sides of the market: a wallet that equips agents to buy and infrastructure that helps merchants recognize and accept them.

Google made the biggest standards play of the year. The Universal Commerce Protocol launched at NRF in January, co-developed with Shopify, Etsy, Wayfair, Target, and Walmart and endorsed by Visa, Mastercard, Stripe, and American Express, with Klarna joining in February. By May's I/O, Universal Cart carried one persistent cart across Search, Gemini, YouTube, and Gmail. The Agent Payments Protocol reached v0.2 with support for payments while the human is not present, and the A2A protocol shipped v1.0 under the Linux Foundation with more than 150 supporting organizations.

x402, the HTTP 402 pattern for paying per request in stablecoins, tells a more complicated story. Chainalysis counted more than 138 million cumulative transactions on Base by the third quarter of 2026, more than 87 percent of them under 10 cents, and companies including Cloudflare, Google, Visa, and Mastercard have adopted or integrated it. But settlement volume has fallen more than 90 percent this year, Artemis estimates most of the late-2025 peak was testing and incentive activity, and Solana has overtaken Base in daily transactions. The primitive is real; sustained demand for machine micropayments is still forming.

Stripe has substantially reduced the work required to give a consumer agent safe access to an existing wallet. For an assistant making a purchase with its owner present, Link's distribution, approval flow, and merchant reach are difficult to beat. The remaining fragmentation appears when the agent becomes an ongoing financial operator rather than a checkout assistant.

Signets is the unified account for that operating model: one API across every rail agents transact on. An agent working from a Signet can buy from merchants, pay vendors and APIs, and collect revenue without its developer integrating each rail separately. Fund the account once; the routing, controls, approvals, and records come with it.

The multi-rail surface changes how safety works, too. Limits and approvals are enforced before money moves on every rail. On reversible rails like cards, Signets pursues recovery when something slips through; on irreversible rails like wires and stablecoins, prevention is the product, because there is no dispute button after the fact. One rail-aware policy layer instead of one policy rebuild per rail.

For agents that shop, the Checkout API completes a retail purchase through a single endpoint. If you are building an agent that moves money, tell us what you are building and we will get you into the sandbox.

Consolidation is no longer a prediction; it is visible. Visa's Connect supports competing protocols, Google's UCP has pulled networks and retailers into one spec, and Stripe is distributing one Link agent wallet through Instinct, Grok Bot, and Muse while packaging merchant acceptance as a suite. The stitching era is ending, and the winners will own a trusted interface on either the consumer, agent, or merchant side of the transaction.

Liability is the open question that will shape architecture. No US federal law yet addresses agent purchase liability, the EU has pushed the AI Act's high-risk obligations back to December 2027, and Amex says it is the first to protect registered-agent purchases. Expect protection guarantees to become table stakes, and expect them to favor infrastructure that can prove what the agent was authorized to do.

Merchant adoption will follow the OpenAI lesson: agents win where merchants keep the sale and the relationship. Protocols that encode merchant opt-in, catalog discovery, and loyalty, which is exactly where UCP and the Agentic Commerce Consortium are working, will set the pace of mainstream adoption.

A year and a half ago this infrastructure barely existed. Now there are live network transactions, funded companies at every layer, court rulings, and competing standards converging toward interoperability. AI agents are becoming economic actors, and the infrastructure to support them is being built right now.

What payment rails can AI agents use in 2026?

Card rails remain the default because acceptance is universal, and network programs like Visa Intelligent Commerce and Mastercard Agent Pay now support live agent-initiated transactions. Bank transfers and stablecoins are growing quickly for B2B and machine-to-machine payments. Most production systems end up mixing rails, which is why unified, rail-agnostic interfaces are emerging.

Do AI agents need their own payment credentials?

Yes. Sharing a human's card or token with an agent creates blast-radius and audit problems. The ecosystem is converging on scoped, verifiable credentials per agent, whether a network token, a signed mandate, or a scoped card, with limits enforced before money moves rather than disputed after.

What is the x402 protocol?

x402 uses the HTTP 402 Payment Required status code to charge for requests programmatically, usually settling in stablecoins. It has passed 138 million cumulative transactions on Base, with backing from companies including Cloudflare, Google, Visa, and Mastercard, though settlement volume has fallen sharply this year and steady demand for machine micropayments is still forming.

What changed in agentic commerce in 2026?

Networks moved from pilots to live transactions, Google's Universal Commerce Protocol pulled retailers and rival networks into one standard, and Stripe turned Link into an agent wallet distributed through Instinct, Grok Bot, and Meta's Muse. Funding also landed across every layer, including Natural's Series A, Rain's Series C, and new entrants like Catena Labs.