Agent Payments Protocol (AP2)

Operated by Google · Commerce & Payment Agents
Documentation reviewed

Open protocol for authorizing and auditing agent-initiated payments using cryptographically signed "Mandates."

Operator
Google
Open source
Yes
Payment capability
Yes
Supports MCP
Not indicated
Supports agent-to-agent protocols
Yes
Enterprise-managed
Not indicated
Cryptographically signed
Yes
Independent audit on record
No public independent audit found
Operator confirmed this listing
Not indicated
Last reviewed
2026-09-21
Verification notes: Correction this pass: Google donated AP2 to the FIDO Alliance for ongoing governance — confirmed via FIDO Alliance's own announcement — moving it from a Google-controlled open-source project toward vendor-neutral standardization, similar in spirit to how A2A moved to the Linux Foundation. AP2 also shipped v0.2.0 in April 2026, adding 'Human Not Present' payments that let an agent complete a pre-authorized purchase (e.g. a limited-release ticket drop) without a user actively present at the moment of purchase, still bounded by the same signed Mandate model. Apache-2.0 licensing and the Mandate/Verifiable-Credential mechanism are unchanged. Visa's newly listed Trusted Agent Protocol is explicitly positioned by Visa as complementary to AP2 rather than competing with it. Re-checked this pass. FIDO Alliance governance and the v0.2.0 'Human Not Present' model are unchanged and remain current per FIDO's and Google Cloud's own materials. Additional detail found this pass: roughly 60 organizations are named as contributors to the FIDO-governed effort, including Mastercard, PayPal, Coinbase, Adyen, Salesforce, and ServiceNow, several of which are listed elsewhere in this directory. Mastercard specifically has also pursued a parallel but distinct effort — a cryptographic 'Verifiable Intent' framework co-developed with Google — folded into the newly added Mastercard Agent Pay for Machines listing; worth distinguishing from AP2's own Mandate model rather than assuming the two are the same mechanism. No flag changes. Re-checked this pass: FIDO Alliance governance, the two working groups (Agentic Authentication, Payments), and v0.2 unchanged and re-confirmed via FIDO's and Google's own materials. No flag changes.

Suggest a correction to this profile →