AI agents can already search, compare and, in pilots and early products, pay. For the owner of a small US business, the hard part is the alphabet: x402, AP2, ACP, MPP, UCP, Agent Pay. This guide maps the main agent payment rails as of October 9, 2026: who stands behind each one, what changed since late July, and why the public adoption numbers do not agree.
Facts link to their primary sources; our own conclusions are marked "our reading".
x402: an open payment standard, now with a foundation
x402 is an open standard under the Apache-2.0 license that lets a service charge for an API or content directly over HTTP. The server answers with the status code 402 Payment Required and payment instructions, the client signs a payment, and the server, often through a facilitator that verifies and settles it, returns the resource. The current protocol is version 2, which uses the PAYMENT-REQUIRED and PAYMENT-SIGNATURE headers; version 1 used X-PAYMENT. Stablecoins such as USDC are the main use case, and the protocol itself charges no fee. See how x402 works for the step-by-step flow.
The Linux Foundation announced its intent to launch the x402 Foundation on April 2, 2026, with Coinbase contributing the protocol. The foundation became operational on July 14 with 40 member organizations, as we covered in our launch article. On October 1 it appointed Michael Hursta, who led payment acceptance for North America at Amazon, as executive director, citing "more than 50 active members".
The public roster, read on October 9, lists 19 Premier, 26 General and 12 Associate members: 57 by our count. Visa, Mastercard, Stripe, Google, AWS, Coinbase, Cloudflare and PayPal are Premier members. One caution: Microsoft was on the April list of supporters but is not on the July list or the current roster, so it is not a member.
Google AP2: proof that the agent had permission
Google's Agent Payments Protocol (AP2), announced in September 2025, solves a different problem. It uses signed "Mandates", tamper-proof records of what the user actually authorized, and it works with cards, stablecoins and real-time bank payments. Google also launched an A2A x402 extension, so AP2 and x402 can work together.
On April 28, 2026, Google released AP2 v0.2 with "Human Not Present" payments, and the FIDO Alliance began developing trusted-agent standards from Google's AP2 and Mastercard's Verifiable Intent.
OpenAI, Stripe and Tempo: ACP and MPP
The Agentic Commerce Protocol (ACP) from OpenAI and Stripe launched in September 2025 with ChatGPT Instant Checkout. Its core is the Shared Payment Token, which lets an app start a payment without exposing the buyer's card and is scoped to one merchant and one basket total. In March 2026 an OpenAI spokesperson told the trade press that Instant Checkout was moving to Apps, with ACP kept as infrastructure. Shopify's help center now calls ChatGPT a "discovery-focused referrer platform".
The Machine Payments Protocol (MPP), co-authored by Stripe and Tempo and launched on March 18, 2026, covers agent-to-service payments in stablecoins and cards. Since June 8, 2026, MPP supports x402 "exact" flows from one SDK, so the two are partly interoperable, not pure rivals. Google and Shopify also back the Universal Commerce Protocol (UCP), a discovery-to-checkout standard with AP2 built in.
Visa and Mastercard: tokens, agent IDs and limits
Visa's Trusted Agent Protocol, built with Cloudflare and released in October 2025, helps merchants tell approved agents from bots. In April 2026 Visa unveiled Intelligent Commerce Connect, in pilot with select partners, which lets merchants accept payments started through TAP, MPP, ACP and UCP. Its June 2026 work with OpenAI describes "spending limits, merchant categories or required approvals".
Mastercard announced Agent Pay for Machines on June 10, 2026; CoinDesk reported that more than 30 companies, including Coinbase, Stripe and Adyen, joined. In the July 14 x402 release, Mastercard tied that work to the x402 Foundation. Details and a spend-control checklist are in our article on Mastercard, Ramp and agentic payments.
Anthropic: a commerce blueprint, not a payment rail
On September 2, 2026, Anthropic released a Commerce Agents blueprint under Apache 2.0, naming Accenture, Mastercard and Visa as partners. It "leaves payment to you, whether that is your existing checkout or an agentic payments provider". We found no Anthropic payment protocol, though Anthropic was a named x402 launch collaborator in 2025.
What changed since July 20
- August 4: Cloudflare introduced Cloudflare Wallets to make it easier for AI agents to try out new APIs.
- August 18: AWS made AgentCore payments generally available, with Coinbase and Stripe Privy wallets, MPP and the x402 "upto" scheme for pay-per-inference pricing.
- August 25: the refund-capable x402 "auth-capture" scheme reached spec v1.1; the protocol itself is still v2.
- September 24: Block joined the foundation and contributed Bitcoin Lightning payments.
- September 30: Cloudflare opened a closed beta of its Monetization Gateway, built to settle in stablecoins over x402.
On September 29, Federal Reserve Governor Waller said that "market participants broadly agree that agentic commerce is in an early phase" and framed the core question: "Who is on the hook if an agent makes the wrong purchase?"
Why the adoption numbers disagree
- The x402.org counter shows 75.41 million transactions, $24.24 million in volume, about 94,000 buyers and 22,000 sellers for the last 30 days. It does not disclose its method.
- Coinbase says its own facilitator has processed more than 100 million transactions and $28 million in volume on Base and Solana, cumulative.
- TokenPost reported a 35-day sample on Base and Solana: about 6.4 million transactions worth $119,900, with 90.8% under one cent and 94.5% on Solana. TokenPost does not say who ran the sample or how payments were selected.
The TokenPost dollar figure is roughly 200 times below the x402.org 30-day volume, and public data cannot reconcile them. Our reading: a 30-day counter, a cumulative total and a sample measure different things, and floods of sub-cent payments may be tests or wash traffic rather than real buyers. Do not plan around one headline number.
What this means for a small US business
Our reading: most of these rails are built for software paying software, such as APIs, data and digital content. An x402 "exact" payment is irreversible once executed: the buyer cannot reverse it, though the seller can refund with a new transfer. x402 has no native fiat off-ramp. For a clinic, law office or local service, the near-term path runs through existing processors. Stripe lists "Sell through agents" (UCP or ACP) and "Accept machine payments" (MPP or x402); the second is an early "Frontier" feature.
The open questions are about authority and loss. US rules on unauthorized transfers and card liability do not mention AI agents, and we found no CFPB or FTC guidance on agent-initiated payments.
Limitations
Sources were read on October 9, 2026. Counters and rosters change, several products are in pilot or beta, and two details (Agent Pay for Machines, the OpenAI checkout change) rest on press coverage because the primary pages could not be read. This is not legal or financial advice.