Trusted Agent Protocol

Verification notes: New listing, added this pass. Unveiled October 14, 2025, developed jointly with Cloudflare and built on HTTP Message Signatures, aligned with the Web Bot Auth standard rather than a competing signature scheme. Specification and a reference implementation are published on GitHub (visa/trusted-agent-protocol), but use is governed by Visa's own Trusted Agent Protocol Product Terms rather than a standard OSI license, so openSource stays false — treat it the way this directory treats Mastra's source-available enterprise tier, not as open source. Early feedback partners named in Visa's own release include Adyen, Coinbase, Microsoft, Shopify, and Stripe. Visa positions TAP as complementary to other agentic-commerce protocols, specifically naming Google's Agent Payments Protocol (AP2) and interoperability work with Coinbase's x402. No independent audit of the protocol's security claims has been located. Re-checked this pass via Visa's own December 18, 2025 follow-up release: Visa states hundreds of secure, agent-initiated transactions have now been completed with partners under TAP, and names Akamai as its newest supporting partner, integrating edge-based behavioral intelligence and bot/abuse protection with TAP's identity and authentication layer — see the newly added Akamai Bot & Agent Control listing. 'Hundreds of transactions' is Visa's own reported figure, not independently audited. No flag changes. See also the newly added American Express Agentic Commerce Experiences listing, a third major card network's distinct approach to agent-initiated purchase verification.