All Articles
Published 5 min read

SIXTY ORGANIZATIONS JOINED GOOGLE'S AP2 DONATION TO FIDO

Agentic CommerceAP2FIDO AllianceAgent as BuyerPayment InfrastructureStandards Body
AUTHOR
Slobodan "Sani" Manic

SLOBODAN "SANI" MANIC

No Hacks

CXL-certified conversion specialist and WordPress Core Contributor helping companies optimise websites for both humans and AI agents.

Today Google donated the Agent Payments Protocol to the FIDO Alliance, and the headline writes itself. The story underneath is the list of names sitting next to Google in the announcement.

Adyen. American Express. Ant International. Coinbase. Etsy. Forter. Intuit. JCB. Mastercard. Mysten Labs. PayPal. Revolut. Salesforce. ServiceNow. UnionPay International. Worldpay. Sixty organizations in total.

Cross-industry payment infrastructure does not arrive on the same standards-body announcement by accident. The signal is that these specific competitive ecosystems aligned on one agent-payment protocol on the same day. The donation framing is the cover story.

GET WEEKLY WEB STRATEGY TIPS FOR THE AI AGE

Practical strategies for making your website work for AI agents and the humans using it. Podcast episodes, articles, videos. Plus exclusive tools, free for subscribers. No spam.

What Google Donated

AP2 v0.2 published on GitHub today. Two pieces matter for operators reading the announcement.

The first is "Human Not Present" payments. A mechanism for agents to execute pre-authorized transactions when the human owner is not on the call. Google's named example is securing and purchasing limited-run tickets at the moment they go on sale. The general case is any transaction that has to complete on a clock the human cannot be present for.

The second is "Verifiable Intent, Not Inferred Action," co-developed with Mastercard and also donated to FIDO. It is the spec's name for the cryptographic substrate. AP2 implements it through Mandates: user-signed verifiable digital credentials. A Checkout Mandate authorizes the cart and gets shared with the merchant. A Payment Mandate authorizes the payment and gets shared with the credential provider, networks, and merchant payment processor. Each Mandate exists in an Open state (capturing user constraints for autonomous execution) and a Closed state (binding to a finalized transaction). The cryptographic answer to "did the human approve this?" lives inside the protocol now, not inside vendor-specific compliance language.

Both pieces matter because they shift the conversation about agent payments from "can it work" to "what does the audit log look like and who governs the spec." Standards-body governance and tamper-proof intent logs are how regulated payment infrastructure absorbs new transaction classes. The plumbing is now in flight.

The v0.2 release also lands a PaymentReceipt primitive, X402 payment-method support inside the human-in-the-loop samples, and a Go SDK alongside the existing Python one. Each is small on its own. Together they signal that the spec is moving past prototype scope into the surfaces real implementers ask for first: receipts, crypto-rail payment methods, and a second language binding.

The 60-Organization List Is the Story

The spec defines six roles: Shopping Agent, Credential Provider, Merchant, Merchant Payment Processor, Trusted Surface, and Network and Issuer. The 60-organization list maps to those roles in the patterns below.

Walk the list by category and the structural shape comes into view.

The card networks. Mastercard sits at the center as Verifiable Intent co-developer. American Express is in the room. Visa is absent from the announcement copy and already shipping Visa TAP on a parallel track. Three of the four major US card networks are converging on the same agent-payment problem in the same week, with Visa running its own track.

The processors. Adyen, Worldpay, Forter. Three of the largest non-card-network payment infrastructure players in the western world.

The wallets and consumer-payment apps. PayPal, Revolut. PayPal carrying agent-payment language while it ships AP2 support matters. PayPal is one of the few consumer wallets where agents already have a real transaction surface today.

The crypto rails. Coinbase. Mysten Labs, the Sui foundation. Crypto-native settlement infrastructure showing up next to American Express on the same announcement page is the part most non-crypto operators will skim past, and probably should not.

The merchants. Etsy is the named merchant on a payments-protocol announcement. Retailer expectations downstream get signaled by which retailer-side names show up at this stage.

The international networks. JCB anchored in Japan, UnionPay International anchored in China, Ant International as the Alipay parent. Asia-Pacific is at the table from day one. AP2's adoption is being framed cross-jurisdictionally on purpose.

The B2B infrastructure. Intuit, Salesforce, ServiceNow. Agent-payment use cases inside SaaS vendors that handle invoicing, expense, and procurement workflows. The agent-as-buyer surface is not retail-only.

Sixty organizations on a standards announcement is what cross-industry payment infrastructure looks like when the major players decide to align before the first major regulatory frame lands.

What Operators Should Do This Week

The agent-as-buyer transaction surface has a standards-body-governed protocol layer in flight. Practitioners running e-commerce websites should expect the AP2 / FIDO stack to land in their payment-platform vendor's roadmap within the next 6-12 months. Two concrete moves work today.

Read AP2 on GitHub. The v0.2 release notes and the Human Not Present mechanics are public. One afternoon is enough to identify which integration surfaces your platform will need to support: PSP integration, checkout flow modifications, agent-identity verification.

Start the conversation with your payment platform. Ask for their AP2 integration timeline. Ask whether Verifiable Intent support will require merchant-side opt-in or whether it ships as platform-default. Ask what their Human Not Present payment policy looks like, what categories will be allowed, what spending caps will apply by default.

The platforms whose answers are vague today will lose merchant-side adoption to the platforms whose answers are specific. Which payment infrastructure your e-commerce stack runs on is becoming a competitive variable in a way it has not been since Stripe Connect launched.

The Stake

Cross-vendor alignment at standards-body level is how vendor-specific protocols become interoperable infrastructure. AP2 went to FIDO today. Standardization continues inside FIDO's Agentic Authentication Technical and Payments Technical Working Groups. Sixty organizations signed off. The agent-as-buyer protocol layer is now governed by a standards body.

The next layer that ships at this composition decides who runs agentic-commerce infrastructure for the next decade.

QUESTIONS ANSWERED

What is Google's Agent Payments Protocol?

The Agent Payments Protocol (AP2) is a protocol for AI agents to make payments on behalf of users. Google released v0.2 on GitHub on April 28, 2026, alongside donating the protocol to the FIDO Alliance for community governance. The v0.2 release added Human Not Present payments (agents executing pre-authorized transactions when the human is not on the call) and Verifiable Intent (a tamper-proof log of user-authorized agent actions, co-developed with Mastercard and also donated to FIDO).

Why does it matter that Google donated AP2 to the FIDO Alliance?

Donating to a standards body shifts AP2 from vendor-controlled to community-governed. Standards-body governance is how regulated payment infrastructure typically absorbs new transaction classes. The donation also surfaced the 60-organization list of contributors, including Mastercard, American Express, PayPal, Adyen, Coinbase, Etsy, Forter, Intuit, JCB, Mysten Labs, Revolut, Salesforce, ServiceNow, UnionPay International, and Worldpay. Cross-industry alignment at this scale is what makes a vendor-specific protocol into interoperable infrastructure.

What should e-commerce operators do about AP2?

Two concrete moves today. First, read the AP2 spec on GitHub and the protocol documentation at ap2-protocol.org to identify which integration surfaces your platform will need to support (PSP integration, checkout flow modifications, agent-identity verification). Second, ask your payment platform about their AP2 integration timeline and whether Verifiable Intent support will require merchant-side opt-in. Vendors with vague timelines will lose merchant-side adoption to vendors with specific ones.

NEW TO NO HACKS?

Practical strategies for making your website work for AI agents and the humans using it. Read by SEOs, developers, and AI researchers. Exclusive tools, free for subscribers.