---
title: "Agentic Commerce: The Protocols Are Free, the Liability Isn't"
source: https://www.second-breakfast.co/blog/agentic-commerce-pt1
site: "Second Breakfast"
author: "Marc"
date: "2026-09-27"
tags: ["ai", "agents", "crypto", "agentic-commerce", "finance", "investing"]
reading_time_minutes: 41
word_count: 8002
---

# Agentic Commerce: The Protocols Are Free, the Liability Isn't

> The agent-payment protocols are free, and the open ones carry almost no money. The return sits with whoever issues the agent's credential and writes the rule for who eats a bad payment, mostly card networks and issuers, and with whoever owns the shopper's attention.

## TL;DR

On July 14th, 2026 the x402 Foundation went live under the Linux Foundation with [40 member organizations](https://x402.org/linux-foundation-announces-operational-launch-of-x402-foundation-to-standardize-internet-native-payments-for-ai-agents-and-applications/). Its 17 premier members include Visa, Mastercard, American Express, Stripe, Google, Coinbase and Circle. The protocol they steward has [zero fees built in](https://docs.x402.org/introduction). In the week to September 26th it settled about USD 240,000 on [x402stats' public daily data](https://x402stats.io/api/stats/csv), 98% below its busiest week in November 2025. TRM Labs puts what looks like AI agents buying things at [about USD 5,000 to 11,000 a month](https://www.trmlabs.com/trm-tech-blog/whos-actually-paying-measuring-ai-agent-payments-onchain).

The biggest names in payments joined a protocol that charges nothing and barely moves money.

My read: they aren't there to collect a fee. They're there to make sure nobody else can.

My base case: through 2028 the agent-payment protocols earn nothing, and wash-filtered x402 plus MPP volume grows from about USD 11M a year in 2026 to approx USD 100M a year. At least 90% of the USD 0.6B to 1.3B of payment fees on agent purchases in 2028 goes to the networks, issuers and processors that already hold the credentials and the dispute rights. That's my model, which puts agent checkout on cards; Section IV tests how far that can move.

So the return sits with whoever issues the agent's credential and writes the rule for who eats a bad payment, and with whoever owns the shopper's attention. Both are owned today. Public-markets investors get at most a small option inside incumbents. Venture investors get one narrow wedge: evidence for agent errors that aren't fraud.

What would change my mind, fastest first: wash-filtered x402 plus MPP volume above USD 10M a month for two consecutive months before the end of 2027, on a method-disclosed series (it's about USD 0.9M a month now). Structurally: above USD 25M a month for two quarters before the end of 2028, or an independent identity or dispute company disclosing USD 50M of annualized agent-payment revenue.

| Layer | Constraint | Binds through | Where the return sits |
|---|---|---|---|
| **Protocols** (x402, MPP, AP2, UCP, ACP) | None: open licenses, zero fees | n/a | Nowhere, by design |
| **Liability** | Who eats a bad agent payment | Card rules: fraud to the issuer; non-fraud agent errors unallocated | Networks, issuers, processors; one open seam |
| **Identity** | A credential the merchant recognizes | Network agent registration and tokens | Visa and Mastercard; independents as suppliers |
| **Distribution** | The default slot | Assistant defaults | Google, and OpenAI if its ad test scales |
| **Acceptance** | One integration across protocols | Multi-protocol gateways | Processors |
| **Settlement asset** | Balances times rates | USDC: 99.6% of x402's settled value | Circle, and Coinbase for about half (company-reported) |
| **Chains** | Fee per transfer | About USD 0.0006 on Tempo and Solana | Small |

In March I wrote about [Conrad](https://www.second-breakfast.co/blog/how-i-built-a-custom-gtm-agent), my startup's go-to-market agent. Every line of his running cost is a monthly bill against an account. In August I argued that [the rent accrues to the conversion layer](https://www.second-breakfast.co/blog/the-conversion-layer), not the fuel. Agent payments have the same shape: the protocol is abundant, and the scarce thing is whoever stands behind the payment.

Where I sit: I lead capital formation at PL Capital, which has backed three companies in this piece: t54 Labs[^disclosure-t54-labs], an x402 Foundation member, World[^disclosure-world] and Privy[^disclosure-privy], which Stripe acquired in 2025. The one opening I find, the evidence layer for agent errors, is where t54 Labs sells. My thesis implies that independents there end up selling to a network or processor, an outcome that would suit PL Capital. So weigh my read of that seam accordingly; every company claim here links to a public, dated source, and the strongest case against the seam is in Section VIII.

[^disclosure-t54-labs]: PL Capital, where I lead capital formation, co-led t54 Labs' seed round, so I have a reason to want it to do well.

[^disclosure-world]: PL Capital, where I lead capital formation, lists World among its portfolio investments, so I have a reason to want it to do well.

[^disclosure-privy]: PL Capital, where I lead capital formation, lists Privy among its portfolio investments; Stripe acquired Privy in 2025.

### How to read this

| | The question | The number to take away |
|---|---|---|
| **I** | What do the protocols do, and who wrote them? | **40** foundation members; zero protocol fees |
| **II** | How much money moves? | About **USD 5,000 to 11,000 a month** of agent buying over x402 |
| **III** | Who gets paid, and who is liable? | **USD 2.91** on a USD 90 card order; USD 0.001 on an x402 call |
| **IV** | How big is the fee pool? | **USD 0.6B to 1.3B** in 2028 (my model) |
| **V** | Where is the return held? | The fraud floor alone is about **8%** of the acceptance fee (my model) |
| **VI** | Who earns on settlement and discovery? | Circle paid Coinbase **USD 324.6M** in one quarter |
| **VII** | What is investable? | **Non-fraud agent errors**: unsized, under a USD 50M to 110M revenue ceiling (my model, 2028) |
| **VIII** | What would make this wrong? | Wash-filtered volume above **USD 10M a month** for two months before 2028 |
| **IX** | What do I watch first? | Raw x402 settlement below **USD 100K a day** at the end of March 2027 |

---

## I. The protocols compose, and the incumbents wrote them

The protocols are layers, not rivals, and every one of them is free to use. They overlap in two places, and the incumbents are erasing both.

x402 and the Machine Payments Protocol (MPP) put a price on an HTTP request. The server answers with status 402, Payment Required, and its terms; the client pays; the server serves. AP2, UCP and ACP handle authority and checkout, and the card networks bolt agent identity onto rails they already run.

| Protocol | What it standardizes | Who governs and backs it | Rails | Status | Adoption evidence |
|---|---|---|---|---|---|
| **x402** | 402 challenge, signed payment, facilitator settlement; no disputes | x402 Foundation (Linux Foundation); zero protocol fee | Stablecoins on EVM chains and Solana; cards announced | Production | Measured: USD 52.7M gross, USD 25.6M screened, to 2026-09-09 (TRM) |
| **MPP** | A "Payment" HTTP envelope; charges, sessions, subscriptions | Tempo and Stripe; an individual IETF draft | Stablecoins, Stripe cards, Lightning | Live since 2026-03-18 | Measured: about USD 25K in its first weeks |
| **AP2** (Agent Payments Protocol) | Signed mandates for what the user authorized | Google; now at FIDO with Mastercard's Verifiable Intent | Rail-agnostic, cards first | Draft v0.2 | Announcement only |
| **UCP** (Universal Commerce Protocol) | Merchant profiles, checkout sessions, orders | Google with Shopify, Etsy, Wayfair, Target and Walmart | Google Pay tokens | Pilot | No counts disclosed |
| **ACP** (Agentic Commerce Protocol) | Checkout sessions, delegated payment tokens | OpenAI and Stripe | Stripe's Shared Payment Tokens | Instant Checkout pulled back 2026-03-04 | About 12 to 30 Shopify merchants went live |
| **A2A and MCP** | Agent messages and tool access; no payments | Agentic AI Foundation (Linux Foundation) | None | Production | The transport the others ride on |

The overlaps are x402 against MPP at the 402 layer, and ACP against UCP at checkout. Visa's [Intelligent Commerce Connect](https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.22276.html) takes its Trusted Agent Protocol (TAP), MPP, ACP and UCP through one integration. MPP's [core draft](https://datatracker.ietf.org/doc/draft-httpauth-payment/) leaves settlement to whatever payment method a rail defines.

Coinbase built x402; Tempo and Stripe wrote MPP; Google wrote AP2 and led UCP; OpenAI and Stripe wrote ACP.

Each sponsor gives away a protocol that routes to something it owns.

Coinbase completed its contribution of x402 to the Linux Foundation on July 14th. Sixteen days later its [Q2 2026 results](https://investor.coinbase.com/news/news-details/2026/Coinbase-Q2-Earnings-Everything-Exchange-Drives-3rd-Consecutive-Quarter-of-Record-Crypto-Trading-Volume-Market-Share-Revenue-Diversification-and-Resilience/default.aspx) said 97%+ of onchain agentic transactions used "Coinbase's x402 protocol", 90%+ of agentic stablecoin volume ran on Base, and 99%+ of onchain agentic commerce settled in USDC (all company-reported). MPP routes to Tempo and Stripe acceptance, UCP and AP2 to Google Pay, and the networks' agent programs to network tokens.

Joel Spolsky [named this in 2002](https://www.joelonsoftware.com/2002/06/12/strategy-letter-v/): smart companies commoditize their products' complements.

In 2021 I wrote that the web's open protocols [were outpaced by the companies that built services on top of them](https://www.second-breakfast.co/blog/web-2-web3), and that decentralized architecture was the way to reverse it. That argument hasn't aged well here.

The open architecture arrived, and the incumbents wrote it, in under eighteen months.

---

## II. Measured money is a rounding error

Very little money moves. The headline counts overstate what agents spend by one to two orders of magnitude.

[x402stats](https://x402stats.io/api/stats/csv) publishes every day of x402 settlement since launch. Summed by month:


**Figure 1 — Three months of speculation, then a long tail · Raw x402 settlement volume by calendar month, USD millions, across the facilitators and chains x402stats tracks; not wash-filtered. October to December 2025 carried 75% of all the value x402 has ever settled. · Source: x402stats daily data (accessed 2026-09-27), summed by month. Author's calculation.**


- Oct 2025: 4.01
- **Nov 2025: 28.79**
- Dec 2025: 8.41
- Jan 2026: 1.80
- Feb 2026: 2.24
- Mar 2026: 2.42
- Apr 2026: 2.05
- May 2026: 1.15
- Jun 2026: 1.00
- Jul 2026: 0.73
- Aug 2026: 1.45




TRM Labs says that in late 2025 ["the volume was speculation, much of it consistent with meme-token minting"](https://www.trmlabs.com/trm-tech-blog/whos-actually-paying-measuring-ai-agent-payments-onchain). Coinbase's own head of AI product [estimates](https://www.coindesk.com/business/2026/08/23/crypto-s-next-billion-users-might-be-ai-agents-and-they-re-paying-with-stablecoins) that 25% to 30% of x402 transactions may have come from people climbing public leaderboards.

Since January, raw volume has run at about USD 19M a year.

By "wash-filtered" I mean volume after a published wash-and-test filter, before any test for agents.


**Figure 2 — Of USD 52.7M that crossed x402, TRM's broadest agent test finds USD 1.9M · Cumulative x402 settlements through known facilitators on Base, Solana and Polygon, May 2025 to 2026-09-09, USD millions. The agentic rows apply TRM's two tests to the screened total; TRM notes its test may undercount single-purpose agents. · Source: TRM Labs, 'Who's Actually Paying? Measuring AI Agent Payments Onchain' (2026-09-09). Dollar values of the agentic shares are the author's calculation.**


- Gross x402 settlements: 52.7
- After TRM's anomaly screens: 25.62
- **Looks agentic, permissive test (7.5%): 1.9**
- Looks agentic, strict test (0.6%): 0.15




A [Visa and Artemis report](https://www.visa.com/en-us/thought-leadership/innovation/agentic-payments-from-the-ground-up), commissioned and funded by Visa, threw out 89% of x402's raw dollar volume as wash and test activity. That left about USD 15.0M adjusted across 109.6M transactions to April 21st, about 14 cents each. A [preprint](https://arxiv.org/abs/2607.12575) covering 280 days of x402 on Base could prove that only USD 187,861 reached a nameable service, against USD 44.1M gross.

Every serious count shrinks the number.

The trackers can't even agree on the raw total (Artemis USD 135.7M to April, TRM USD 52.7M to September, x402stats and Coinbase about USD 55M), so I never mix them. The x402stats organic filter, the loosest of the three, puts the latest 30 days at about USD 0.87M. That's where my USD 11M a year comes from; MPP adds about USD 25,000 from its first weeks.

One signal points the other way: Chainalysis finds that payments of USD 1 or more rose from 49% of x402 volume in early 2025 to 95% by early 2026. Real use is forming, at a scale that doesn't yet cover anyone's payroll.

The card side can't be measured at all, because no listed incumbent reports agent-payment volume. Visa said partners had completed ["hundreds" of controlled, real-world agent transactions](https://investor.visa.com/news/news-details/2025/Visa-and-Partners-Complete-Secure-AI-Transactions-Setting-the-Stage-for-Mainstream-Adoption-in-2026/default.aspx) by December 18th, 2025. Mastercard's [10-K](https://www.sec.gov/Archives/edgar/data/1141391/000114139126000013/ma-20251231.htm) says all US cardholders were enabled for Agent Pay in 2025, which is eligibility, not use. OpenAI [promised](https://openai.com/index/buy-it-in-chatgpt/) Instant Checkout to over a million Shopify merchants; [about a dozen](https://www.forbes.com/sites/jasongoldberg/2026/03/10/why-openais-checkout-retreat-spells-trouble-for-its-commerce-strategy/) to [about 30](https://www.cnbc.com/2026/03/20/open-ai-agentic-shopping-etsy-shopify-walmart-amazon.html) went live before it pulled back in March to [focus on product discovery](https://www.cnbc.com/2026/03/24/openai-revamps-shopping-experience-in-chatgpt-after-instant-checkout.html).

Announcements are plentiful. Money is not.

---

## III. One purchase, two answers

Who gets paid, and who is liable, depends on which of two markets the purchase sits in.

Walk A is a consumer's agent buying a USD 90 order in Google's AI Mode. It runs on the card stack as the specs describe it: UCP for the session, AP2 mandates for authority, a Google Pay token for payment.

| Step | What happens | Who gets paid | Who carries the risk |
|---|---|---|---|
| 1. Discovery | The agent reads the merchant's UCP profile; Google may show a paid Direct Offer | Google, if an offer runs | The shopper |
| 2. Authorization | An AP2 mandate locks the cart; the agent signs against a network's agent directory | Nobody | The network and credential provider, if the token is invalid |
| 3. Payment | A Google Pay token; the processor authorizes | About USD 2.91 at Stripe's list price of 2.9% plus 30 cents, shared with issuer and network | The issuer, for fraud on a validly issued token |
| 4. Settlement | Card clearing; the retailer is merchant of record | As step 3 | The merchant |
| 5. Receipt | UCP order management | Nobody | Nobody |
| 6. Dispute | Fraud goes to the issuer; "my agent bought the wrong thing" has no clean rule | Chargeback fees; dispute vendors | The merchant or the issuer, case by case |

Walk B is an agent buying one Exa search over x402, the same search Conrad buys through an account. [Exa charges](https://exa.ai/docs/reference/x402-guide) USD 0.007 a call in USDC on Base, with no account, API key or subscription.

| Step | What happens | Who gets paid | Who carries the risk |
|---|---|---|---|
| 1. Discovery | Coinbase's Bazaar lists the endpoint once Coinbase's facilitator has settled a payment for it | Nobody | The buyer |
| 2. Authorization | The wallet signs for exactly USD 0.007; the x402 v2 spec leaves budgets to the client | The wallet provider, if any | The operator: a tricked agent spends real money |
| 3. Payment | Coinbase's facilitator verifies for free and settles | The facilitator: nothing on Exa's first 1,000 settlements a month, then USD 0.001 each, about 14% of this ticket | The payer, until settlement |
| 4. Settlement | USDC moves on Base in seconds | Circle and Coinbase, on balances rather than this flow | Nobody, after finality |
| 5. Receipt | A PAYMENT-RESPONSE header carries the settlement | Nobody | Nobody |
| 6. Dispute | None in the protocol: a refund is a new transfer | Nobody | The payer, entirely |

Much of the gap between the walks is what it costs to have someone stand behind the payment: fraud liability, chargeback rights and, on a credit card, the loan.

On cards, the incumbents collect nearly all the fees and write the loss rules. Issuers carry fraud on properly authenticated tokens. Merchants still carry most card-not-present fraud losses, on the Kansas City Fed's debit data, and they fight the disputes. On the stablecoin rail the fee is a tenth of a cent and the payer eats everything.

Coinbase's [launch post on Hacker News](https://news.ycombinator.com/item?id=43908129) pitched x402 to sellers as "micropayments without fraud".

From the buyer's side, every mistake is final.

### Where the micro rail pays, and why it stays small


**Figure 3 — Under about USD 4, card pricing takes more than a tenth of the ticket · Payment cost as a share of the ticket, by rail and ticket size. The average wash-adjusted x402 payment was about USD 0.14, and only the bottom two rows serve it. The facilitator fee applies after 1,000 free settlements a month. · Sources: Stripe pricing; Regulation II (12 CFR 235); FedNow 2026 fee schedule; Coinbase CDP facilitator pricing; Tempo fee specification (all accessed 2026-09-27). Debit row is issuer interchange only. Author's calculation.**


| Cost as % of ticket | USD 0.10 | USD 1 | USD 10 | USD 100 |
|---|---|---|---|---|
| Card, Stripe list (2.9% + 30c) | **302.9%** | 32.9% | 5.9% | 3.2% |
| Debit, Regulation II interchange cap | 220.05% | 22.05% | 2.25% | 0.27% |
| FedNow (USD 0.045 a transfer) | 45.0% | 4.5% | 0.45% | 0.045% |
| x402 via Coinbase facilitator (USD 0.001) | 1.0% | 0.1% | 0.01% | 0.001% |
| Tempo transfer at fee cap (USD 0.0006) | 0.6% | 0.06% | 0.006% | 0.0006% |




Stripe's [list price](https://stripe.com/pricing) of 2.9% plus 30 cents takes more than 10% of any ticket under USD 4.23, and never less than 2.9%.

Only stablecoin or batched rails serve tickets of about 14 cents.

But the real substitute for an agent's API spend isn't a card swipe. It's an account with a key and a monthly bill. Conrad calls the same handful of services every day, and for that pattern a spend-capped account beats a signature on every call.

The incumbents are buying that position: Stripe [bought Metronome](https://stripe.com/newsroom/news/stripe-completes-metronome-acquisition), a usage-billing company, and [agreed to buy OpenRouter](https://stripe.com/newsroom/news/stripe-agrees-to-acquire-openrouter), a router for model spend. Even Frames, a catalog built for per-call payments, sells [prepaid credit plans](https://api.frames.ag/).

The per-request rail wins where no account exists: a one-off purchase from a seller the agent has never met. That's a real market, just not most of the spend. Pricing on it is a fixed fee per call, with upto and batch schemes in the [spec](https://github.com/x402-foundation/x402) and no negotiated one. MPP adds sessions and subscriptions, which is the account model again.

---

## IV. The size of the prize

On my numbers, fees on agent-initiated payments come to roughly USD 0.6B to 1.3B in 2028 and USD 2.3B to 5.1B in 2030.

Nearly all of it is fees that already exist.

I built it two ways, counting fees only. The band is wide because nobody discloses agent GMV.


**COLLAPSE — How the two routes are built**


Route A is top-down. About USD 1.65T of US e-commerce in 2028 times a 3% agent share is USD 49.5B of GMV. In 2030, about USD 1.93T times [Morgan Stanley's](https://www.morganstanley.com/insights/articles/agentic-commerce-market-impact-outlook) 10% base-case share is USD 193B. Acceptance fees of 2.5% plus agent-layer fees of 0.15% give USD 1.31B in 2028 and USD 5.11B in 2030, plus machine-to-machine fees of USD 3M and USD 17.8M.

Route B is bottom-up, on my own assumptions. In 2028, 263M US adults, 12% of them buying through agents, 8 orders a year at USD 90, is USD 22.7B of GMV and USD 0.60B of fees. In 2030, 265M adults, 30% and 12 orders give USD 85.9B and USD 2.28B. For calibration, Morgan Stanley's survey found roughly 23% of Americans had bought something using AI in the past month, which is AI-assisted buying, not agent-completed.

The routes disagree about frequency: matching route A's 2030 GMV at route B's adoption takes about 27 agent orders per buyer a year, not 12. The base band is route B to route A. The full range, low of lows to high of highs, is USD 0.06B to 3.4B in 2028 and USD 0.29B to 13.4B in 2030, 47 times wide.





**Figure 4 — About 94% of the modeled 2030 fee pool is money incumbents already collect · Fees and margins on agent-initiated payments in 2030, route A base case, USD millions: US consumer agentic commerce plus global machine-to-machine payments. Forecast built on 2025-12 GMV forecasts; route B's base total is USD 2,278M. · Model: author's calculation from Morgan Stanley (2025-12-08), Stripe pricing, Circle and x402 data. Forecast, not measured.**


- **Card and processor acceptance fees: 4825**
- Incremental agent-layer fees: 290
- Machine-to-machine fees: 18
- Protocol fees: 0




What's new is small: agent-layer fees (payment tokens, agent verification) of USD 0.13B to 0.29B in 2030, and machine-to-machine fees of about USD 3M to 18M. The agent-layer input rests on Stripe's [listed](https://stripe.com/pricing) USD 0.15 per Shared Payment Token; halving it moves the total by about 3%.

The 90% is partly an input, because my model puts agent checkout on cards. Say 20% of route A's 2030 agent GMV moved to open stablecoin rails at an all-in 0.5%, and independents kept every cent. Their share of the fee pool would be under 5%. The 90% breaks only if roughly 37% of agent GMV moves to open rails with independents keeping all of it, or about 57% if they keep half (my arithmetic on the model's inputs).

Cheap rails also shrink the pool as they take share. And on [Riskified's Q4 2025 call](https://www.fool.com/earnings/call-transcripts/2026/03/04/riskified-rskd-q4-2025-earnings-call-transcript/), its CEO said he expects cards "to remain dominant in most categories".

The open rail barely registers. Grow 2026's roughly USD 11M of wash-filtered x402 plus MPP volume at 40% to 250% a year. You get about USD 21M to 133M by the end of 2028, with USD 52M in the middle. The band is a judgment call: Token Terminal counted transfers doubling in the week of August 17th, while value sat 96% below its November peak. At a 1% take, generous for a rail that charges a tenth of a cent a call, even USD 133M is about USD 1.3M of fees. That's a tenth to a fifth of a percent of the pool.

Anyone pricing an agentic-commerce story off the 2030 GMV forecasts (Morgan Stanley's USD 190B to 385B; [Bain's](https://www.bain.com/insights/2030-forecast-how-agentic-ai-will-reshape-us-retail-snap-chart/) USD 300B to 500B, which counts agent-influenced purchases) should turn GMV into fees first. The fee on USD 193B is about USD 5B.

---

## V. Liability is where the return is held

On cards, fraud has an answer, and the networks write it. The seam is the agent error that isn't fraud. The loss itself is small next to the fee. What matters is who writes the rule, because the rule-writer also issues the credential that collects the fee.

Mastercard's Agent Pay page says ["Only registered agents can transact"](https://www.mastercard.com/us/en/business/artificial-intelligence/mastercard-agent-pay.html), on its network tokens, and its machine-payments service promises ["guaranteed settlement"](https://www.mastercard.com/us/en/news-and-trends/press/2026/june/mastercard-launches-agent-pay-for-machines.html) across cards, accounts and stablecoins. Visa onboards agents to Intelligent Commerce, issues agent-specific tokens and collects "commerce signals", the user's original instruction and each authorized purchase. It says those signals will [allow for "the quick resolution of most disputes"](https://developer.visa.com/capabilities/visa-intelligent-commerce).

That's the dispute-evidence layer, and the network is building it itself. Visa describes the product as in development, and Worldpay says Intelligent Commerce Connect is in pilot. Visa lists the service as free in its sandbox, with production fees on request.

According to [FBT Gibbons](https://fbtgibbons.com/the-payment-infrastructure-layer-how-network-rules-already-govern-agentic-commerce/), the public Visa Core Rules have carried express agentic provisions since April 2026, requiring identity verification under Intelligent Commerce specifications and use of the provisioned token. The same firm reads Mastercard's operating rules as still silent on agents.

When the agent authenticates and the token is valid, Worldpay's head of agentic commerce [says](https://www.worldpay.com/en/insights/articles/agentic-commerce-liability-is-still-being-written) liability "generally follows" existing tokenized-transaction rules: the issuer carries fraud, and the cardholder keeps chargeback rights. No agent-specific liability shift exists yet, and EMVCo has set up a task force.

So the networks are building a registration moat, not a liability shift.

Register your agent and you inherit the rules. Skip it and you carry the risk yourself.

The hole is the dispute that isn't fraud: the agent misread an instruction, bought the wrong thing or went past its brief. Worldpay, which sells dispute tooling, says current frameworks have no clean answer for who absorbs that. It concedes that "only the card networks can close the liability gap at scale." The usual evidence is a human clicking "buy". Here there isn't one.

The law narrows the seam. Under [Regulation E](https://www.consumerfinance.gov/rules-policy/regulations/1005/2/), a consumer who hands an access device to someone who exceeds the authority given is liable until they tell the bank. Applying that to AI agents is my inference, untested by the CFPB or the courts. On credit cards, Regulation Z's [claims-and-defenses right](https://www.consumerfinance.gov/rules-policy/regulations/1026/interp-12/) tends to push the loss back to the merchant. American Express backs cardholders on purchases by registered agents. As Worldpay notes, that leaves the merchant's side of a non-fraud dispute open.

That side is where an evidence vendor sells.

On the stablecoin rail the payer eats every loss. The [GENIUS Act](https://www.govinfo.gov/content/pkg/PLAW-119publ27/html/PLAW-119publ27.htm) gives holders no chargeback right. In May 2025 the CFPB [withdrew](https://www.federalregister.gov/documents/2025/05/15/2025-08646/electronic-fund-transfers-through-accounts-established-primarily-for-personal-family-or-household) a proposal that could have extended Regulation E to some of these payments.

### What the liability is worth

Card-not-present fraud on US debit cards ran above 19 basis points of transaction value in 2023, on the [Kansas City Fed's count](https://www.kansascityfed.org/research/payments-system-research-briefings/new-data-on-card-present-and-card-not-present-fraud-rates-in-the-united-states/). At that rate, my 2028 agent GMV of USD 22.7B to 49.5B would carry at least USD 44M to 95M of fraud. That floor alone is about 8% of the acceptance fee: 19 basis points against 250.

| 2028, my model | Route B | Route A |
|---|---|---|
| Agent GMV | USD 22.7B | USD 49.5B |
| Acceptance fees at 2.5% | USD 568M | USD 1,238M |
| **Fraud losses, floor (US online debit fraud exceeded 19.2 bp in 2023)** | **USD 44M** | **USD 95M** |
| Dispute fees per 0.1% of agent orders disputed, at USD 15 | USD 4M | USD 8M |

The non-fraud slice, the one an independent could own, is unsized, because nobody publishes a dispute rate for agent errors.

Agent-error disputes in 2026 look like counterfeit card fraud before October 2015. Everyone can see the loss coming, and the question is which rule the networks write.

| Historical case | Mechanism imported | Confounders | Where it breaks |
|---|---|---|---|
| The October 2015 EMV liability shift in US card payments | The networks decided by rule who eats counterfeit fraud; merchant fraud loss rates on signature card-present transactions [rose sixfold](https://www.kansascityfed.org/research/research-working-papers/initial-effects-emv-migration-2018/), concentrated in magnetic-stripe transactions | Card-not-present fraud rose at the same time; 3-D Secure had already moved online liability by the same method | The stablecoin rail has no network to write a rule |

The analogue points both ways. The rule-writer sets the price of liability. But card-not-present fraud, which the 2015 rule didn't cover, stayed with merchants, and merchant-side guarantors such as Riskified built businesses there.

If agent rules follow the same path, the non-fraud seam is where an independent lives.

---

## VI. Float pays the distributor, and attention pays the surface

### The settlement asset is a rate trade

USDC carries 99.6% of x402's settled value on TRM's count. But an issuer earns on balances and interest rates, not on flow. In Q2 2026 Circle's USDC onchain volume [grew 151% year over year](https://www.circle.com/pressroom/circle-reports-second-quarter-2026-results) while its reserve income grew 5%, because a 66 basis-point fall in the reserve return rate ate most of the balance growth.

On my float model, USD 1B a year of agent payments held 30 days on average keeps about USD 82M in balances. At the 3.48% reserve return rate Circle [reported for Q2](https://www.fool.com/earnings/call-transcripts/2026/08/12/circle-crcl-q2-2026-earnings-call-transcript/), that earns about USD 2.9M a year. The same flow at 10-cent tickets would pay about USD 10M in facilitator fees, more than three times the float.


**Figure 5 — One quarter of Circle's payments to Coinbase is six times everything x402 has ever settled · Distribution costs Circle incurred under its Coinbase agreements in the three months to 2026-06-30, against cumulative x402 volume since launch (gross, company-reported, 2026-09-22). More than half of Circle's revenue goes out in distribution and transaction costs, about four-fifths of that to Coinbase. · Sources: Circle Form 10-Q for Q2 2026; Coinbase, 'Coinbase for Agents adds equities and x402 payments' (2026-09-22). Author's calculation.**


- All x402 volume ever, May 2025 to Sep 2026 (company-reported): USD 54M
- **Circle's payments to Coinbase, Q2 2026 alone: USD 324.6M**




The issuer doesn't keep most of the float. Circle's distribution and transaction costs were 58.5% of its USD 701.3M of revenue and reserve income in Q2 2026, and [USD 324.6M of it](https://www.sec.gov/Archives/edgar/data/1876042/000187604226000248/crcl-20260630.htm) went to Coinbase. Coinbase says it has captured about half of all USDC economics over the past year. On the open rail it takes the largest share, about half, of what little money there is.

Even the chains are incumbent-sponsored. Tempo, incubated by Stripe and Paradigm, [raised USD 500M](https://cointelegraph.com/news/tempo-stripe-blockchain-5b-valuation-funding-round) at a reported USD 5B valuation, and Circle's Arc counts Visa and Mastercard among its [founding validators](https://www.circle.com/pressroom/circle-announces-founding-validator-cohort-and-major-integrations-for-arc-ahead-of-september-16-mainnet-launch).

### Discovery is an ad market inside the surfaces

Google attached a paid [Direct Offers pilot](https://blog.google/products/ads-commerce/agentic-commerce-ai-tools-protocol-retailers-platforms/) to AI Mode on the day it launched UCP, and OpenAI started [showing ads in ChatGPT](https://openai.com/index/testing-ads-in-chatgpt/) in February. For machine buyers the catalogs are thin and unpriced: the Bazaar indexes what Coinbase's own [facilitator](https://docs.cdp.coinbase.com/x402/seller/facilitator) settles, and the official MCP Registry has no price or ranking fields.

Placement still matters, because agent choice can be steered. Rewriting a tool's description lifted agents' selection of it from about 20% to as high as 81% in [one preprint](https://arxiv.org/abs/2510.02554). Microsoft Research's [Magentic Marketplace](https://arxiv.org/abs/2510.25779) found severe first-proposal bias in every frontier model it tested.

The value is the default slot, and the runtime owner controls it.

I can't size this leg from disclosed data, so my 90% covers the payment-fee pool only. The watch-list thresholds give a bound. On route A's USD 193B of 2030 agent GMV, a 0.10% toll on issuers would be about USD 190M. A 2% take from merchants would be about USD 3.9B, or 80% of the USD 4.8B card-acceptance pool.

For now I expect the low end, because Direct Offers is a pilot and ChatGPT's ads are a test.

---

## VII. The opportunity map

Four tests, set before any company appears. A winner:

1. owns a complement the others can't give away: credentials, acceptance, balances or the default slot;
2. holds or prices the liability for a bad agent payment;
3. sits where the purchase decision is made;
4. survives at today's volume, without needing agent flow to pay its bills.

By incumbent I mean a company that held one of those complements at scale before x402 launched in May 2025: a payment credential, an acceptance contract, a stablecoin balance or a consumer surface.

I picked the companies below because each shows a mechanism, and I've included two failures. Three of them, t54 Labs, World and Privy, are PL Capital portfolio companies (see the footnotes above).

| Company | Relationship | What it shows | Tests met |
|---|---|---|---|
| Coinbase | None | The only full stack: protocol, leading facilitator (49.3% of 30-day seller volume on x402stats), Base, about half of USDC economics (company-reported) | 1, 4 |
| Stripe | None | Co-authors MPP and ACP; bought Privy and Metronome, agreed to buy OpenRouter: hedges every protocol, buys the meter | 1, 2, 4 |
| Visa and Mastercard | None | Write the liability rules, register the agents; Mastercard closed its USD 1.5B BVNK purchase on 2026-08-03 | 1, 2, 4 |
| Google | None | UCP sessions, Google Pay credentials, Direct Offers in AI Mode | 1, 3, 4 |
| OpenAI | None | Tried to own checkout, pulled back after about five months, now tests discovery and ads | 3 |
| Circle | None | Issues the settlement asset; distribution and transaction costs took 58.5% of its Q2 2026 revenue and reserve income | 1, 4 |
| t54 Labs | PL Capital portfolio | One of more than 30 [initial participants](https://www.mastercard.com/us/en/news-and-trends/press/2026/june/mastercard-launches-agent-pay-for-machines.html) in Mastercard's Agent Pay for Machines; t54 says it adds Know Your Agent verification and an evidence layer for chargebacks and disputes (company-reported) | 2, as a supplier |
| World | PL Capital portfolio | [AgentKit](https://world.org/blog/announcements/now-available-agentkit-proof-of-human-for-the-agentic-web) lets an agent prove a verified human is behind it; Exa's [Bazaar listing](https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources?limit=1&offset=0) gives such agents 100 free calls, an identity-based price on x402 | 2, on Coinbase's rail |
| Privy | PL Capital portfolio | Embedded wallets; Stripe acquired it in 2025, and it now [powers AWS's agent payments](https://stripe.com/newsroom/news/aws-stripe-agentcore-privy) with Coinbase | An exit to an incumbent |
| Payman | None | [Pivoted](https://paymanai.com/blog/access-over-ownership) in 2025 from agent-owned wallets to access to existing accounts | None: a pivot |
| Chimoney | None | Repositioned around agent wallets in late 2025; [wound down](https://www.technext24.com/news/chimoney-shutdown-founder-exclusive/) in May 2026 | None: a wind-down |

For a public-markets investor there is no pure play and no disclosed agent revenue. The exposure is an option inside the incumbents, and it's small: a modeled agent-layer pool of USD 0.13B to 0.29B in 2030 would be immaterial to any of them. On the defensive reading in Section VIII, it's worth nothing.

I'd treat it as free, on businesses owned for other reasons.

On the venture side, the funding ledger behind this piece counts USD 1.53B of disclosed venture money across 22 rounds since the start of 2025, a third of it Tempo's. Trust, identity and liability drew six rounds worth USD 113.3M, among them [Baselayer's USD 35M](https://news.crunchbase.com/ai/verifying-ai-agents-baselayer-35m-raise/) and [Catena Labs' USD 30M](https://www.theblock.co/post/402029/catena-labs-lands-30-million-series-a-files-for-national-trust-bank-charter-to-underpin-agentic-finance).

Capital is far ahead of volume, and the exits so far go to incumbents.

There's no clean base rate for open payment standards against bundled networks. The nearest precedents in this piece, the 2015 EMV shift, 3-D Secure and Apple Pay's issuer fee, each left the economics with the network or the surface.

The one wedge that still looks open is evidence for non-fraud agent errors, sold into network and processor programs. It's unsized. The nearest pricing comparable is Riskified, which books revenue on the orders it approves: [USD 344.6M of FY2025 revenue](https://www.sec.gov/Archives/edgar/data/1851112/000185111226000007/rskd-20251231.htm), up 5%, on [USD 155.1B of GMV reviewed](https://www.fool.com/earnings/call-transcripts/2026/03/04/riskified-rskd-q4-2025-earnings-call-transcript/), or about 0.22%. At that rate, a vendor screening every agent order in 2028 would book USD 50M to 110M.

That's a ceiling on revenue, not a size for the seam.

New channels price higher at first. Riskified's CEO [said](https://www.fool.com/earnings/call-transcripts/2026/03/04/riskified-rskd-q4-2025-earnings-call-transcript/) the general-purpose LLM channel carries higher risk, so the "average take rate there would likely be higher right now", though it could shift over time. At twice the blended rate, the ceiling is USD 100M to 220M.

My USD 50M falsifier sits somewhere between a quarter of that ceiling and all of it.

What I would not back:

- protocol tokens, because nothing in the mechanism needs one;
- a protocol itself, because Apache-2.0 and zero fees leave no toll;
- standalone agent wallets without distribution;
- independent API catalogs, because nobody pays for placement;
- new chains as a bet on agent flows, which carry USD 3M to 18M of machine-to-machine fees in 2030 on my base cases.

---

## VIII. The case against all of this

| What has to be true | Signpost | Falsified if | Check by |
|---|---|---|---|
| The protocol layer earns no fee | Fee schedules of facilitators, MPP, UCP and agent directories | A mandatory protocol, registry or directory fee is paid on at least 25% of agent-payment volume | 2028-06-30 |
| Open-rail volume stays too small to carry independent layers | Wash-filtered x402 plus MPP volume, monthly | Above USD 25M a month for two consecutive quarters | 2028-12-31 |
| Independent identity and risk vendors end up as suppliers or acquisitions | Agent-payment revenue at independents | An independent discloses USD 50M or more of annualized agent-payment revenue (early signpost: USD 10M by 2027-12-31) | 2028-12-31 |
| Networks keep agent liability inside their own programs | Visa and Mastercard dispute rules for agent transactions | Networks leave non-fraud agent errors to contract, and an independent sells a paid guarantee with disclosed covered GMV | 2027-12-31 |
| Agent checkout stays on card and processor rails | Share of agent GMV settled on open stablecoin rails outside incumbent processors | Above about 40% | 2028-12-31 |
| Agent payments add revenue for incumbents rather than just moving it | Priced agent-layer fees, agent-specific fee revenue | Priced agent-layer fees imply under USD 100M a year, so incumbent capture is defensive | 2030-12-31 |

Two of those falsifiers are regime detectors, not trend tests. Reaching USD 25M a month for two quarters needs roughly 4.5x to 6x growth a year from here. That's above the top of my own growth band. USD 50M of independent revenue would be two-thirds to one and a half times the whole modeled 2028 agent-layer pool of USD 34M to 74M. They fire only on a structural change, which is why the TL;DR and the watch-list lead with a faster test.

**The machine economy is real, and x402 is just the wrong meter.** AI inference and API spend is large, and it flows through prepaid credits and API keys. If per-request settlement became the norm for that spend, open-rail volume could jump by orders of magnitude with no new demand. That's the best case against my volume number. It points at an incumbent again: Stripe owns the usage-billing meter and has agreed to buy the router.

**A steward, or a surface, can turn default status into a toll.** Coinbase runs the leading facilitator, and the Bazaar lists what that facilitator settles. The precedent exists: card issuers pay Apple 0.15% on credit and half a cent on debit for Apple Pay. An issuer class [claims](https://www.macrumors.com/2026/09/25/apple-pay-antitrust-lawsuit-advances/) that totals up to USD 1B a year. If an agent runtime does the same, "incumbents capture" splits into winners and losers among incumbents. For a public-markets reader, that matters more than my line between independents and incumbents.

**Independents can own the trust layer.** a16z's Noah Levine [argues](https://www.coindesk.com/markets/2026/03/11/coinbase-backed-ai-payments-protocol-wants-to-fix-micropayment-but-demand-is-just-not-there-yet) that processors can't underwrite a tool with no website, entity or track record. If networks buy attestation rather than build it, independents capture real value. My reply: Mastercard [open-sourced Verifiable Intent](https://www.mastercard.com/global/en/news-and-trends/stories/2026/verifiable-intent.html) and gave it to FIDO. AP2 routes its mandates into [existing network representation](https://ap2-protocol.org/ap2/specification/), and Visa is building its own dispute signals. The evidence layer may become a free standard. At its strongest, this argument supports an exit thesis.

**Consumers may not delegate checkout at all.** Walmart said purchases made inside ChatGPT [converted at a third of the rate](https://searchengineland.com/walmart-chatgpt-checkout-converted-worse-472071) of click-outs to its own site. If that holds, even the incumbents' agent pool stays near zero through 2028. The honest answer to "what is investable" is then "nothing yet".

**Incumbents may earn nothing incremental.** About 94% of the modeled pool is fees on orders a human might have placed anyway. The costs arrive first: issuers carry fraud on agent tokens, and Amex funds purchase protection. Shopify says agentic orders carry [exactly the same economics](https://www.investing.com/news/transcripts/earnings-call-transcript-shopify-tops-q2-2026-estimates-as-shares-jump-18-93CH-4838020) as its online-store orders.

This argument weakens my own public-market case: on this reading the option is worth close to nothing, and the incumbents are spending to defend fees they already had.

One caution on all of it: the numbers this market runs on come from interested parties. The counter on x402.org appears frozen since about March, and the main adjusted study was funded by Visa. I've used method-disclosed counts only, with their boundaries next to each.

---

## IX. What I'm watching

1. **Raw x402 settlement, weekly.** The seven-day average on x402stats was about USD 34,200 a day in the week to September 26th. Still below USD 100,000 a day at the end of March 2027, after Cloudflare's Monetization Gateway and Coinbase Business acceptance have had time to work, and the recovery case is dead.
2. **Wash-filtered volume, monthly.** About USD 0.9M a month now. Above USD 10M a month for two consecutive months before the end of 2027, on a method-disclosed series with no counterparty above 25% of the month, breaks the open-rail half of my base case.
3. **The rail mix, by the end of 2027.** If disclosed volumes show less than about 63% of agent GMV settling on card and processor rails, where the 90% breaks if independents keep every cent (Section IV), the base case is wrong. At 90% or more, my model becomes a measurement. If nobody discloses by then, the 90% stays a model, and I'll say so.
4. **The agent-error rule, by the end of 2027.** If the networks fold non-fraud agent errors into existing chargeback categories and nobody sells a paid guarantee, the one open seam closes. A rule that gives third-party evidence a paid role opens it.
5. **Know-your-agent consolidation, by mid-2028.** If two or more of Persona, Baselayer, Vouched, Skyfire, t54 Labs and Prove's agent unit are acquired or pivot while neither network prices a third-party attestation path, identity is a feature.
6. **A surface toll, by mid-2028.** An agent surface charging issuers or processors at least 0.10% per agent checkout, or merchants at least 2%, moves the pool from the networks to the surface owners.
7. **Rules with dates.** Treasury expects the GENIUS Act to take effect on [January 18th, 2027](https://home.treasury.gov/news/press-releases/sb0605). If the EU's final Payment Services Regulation text still requires strong customer authentication for agent-initiated stablecoin transfers, with no delegated-authority exemption, by mid-2027, EU agent spending tilts further toward cards.

---

## X. Threads I keep pulling

**The meter.** Whether per-request settlement replaces prepaid credits for inference and API spend. The obvious experiment is moving one of Conrad's services from an account to x402. I plan to run that test and publish what breaks.

**A number nobody publishes.** There is no method-disclosed monthly series of wash-filtered agent payments. The daily data is public; the filter is the work. That's the piece I want to build next.

---

## Coda

Forty organizations sit in the foundation behind a payment protocol that charges nothing and carries, on TRM's count, five to eleven thousand dollars a month of agents buying things. At the top of this piece that looked like an anomaly. On my reading, they're there to keep it free.

Everything that makes a payment worth accepting still costs money: a credential someone vouches for, a rule that says who eats the loss, a surface where the decision gets made, a balance that earns a rate. Those are owned, mostly by the names on that membership list.

The protocols are free. The liability layer is not. The companies that already price it for a living wrote themselves into the agent era before the agents showed up with any money.

---

## A note on the numbers

I calculated these from primary data: the x402 monthly and weekly figures, the dollar values behind TRM's agentic shares, the break-even table, the two-route sizing, the rail-mix stress test, the growth range, the liability table, the float model, the wedge's revenue ceiling and the cross-source ratios. Everything else is someone else's number, named and dated where it appears.

The data freeze is 2026-09-27, and no figure was updated after it. Mastercard's Agent Pay page, its Agent Pay for Machines release and Visa's Intelligent Commerce page were re-read on 2026-09-28 for quotes; no figure changed. Two limits are worth knowing. I did not read the card networks' rulebooks directly: the rule descriptions come from Visa's and Mastercard's own product pages, Worldpay and one law firm's reading, each named where it's used. And no one publishes a method-disclosed monthly series of wash-filtered agent payments, so every volume figure here is a snapshot with its boundary stated, never an average of snapshots. The companion data and scripts are available; just ask.

---

## References

**Primary data**

- Linux Foundation, *Operational Launch of x402 Foundation* (2026-07-14): members, premier tier, Coinbase's completed contribution. [x402.org](https://x402.org/linux-foundation-announces-operational-launch-of-x402-foundation-to-standardize-internet-native-payments-for-ai-agents-and-applications/)
- x402 Foundation, docs and README (accessed 2026-09-27): license, fees, schemes. [docs.x402.org](https://docs.x402.org/introduction); [github.com](https://github.com/x402-foundation/x402)
- IETF Datatracker, *draft-httpauth-payment-01* (2026-09-09): MPP's draft status. [datatracker.ietf.org](https://datatracker.ietf.org/doc/draft-httpauth-payment/)
- x402stats, *daily stats CSV* (accessed 2026-09-27): Figure 1, weekly totals, organic 30-day volume. [x402stats.io](https://x402stats.io/api/stats/csv)
- TRM Labs, *Who's Actually Paying?* (2026-09-09): Figure 2, agentic tests, USDC share. [trmlabs.com](https://www.trmlabs.com/trm-tech-blog/whos-actually-paying-measuring-ai-agent-payments-onchain)
- Visa and Artemis, *Agentic Payments from the Ground Up* (2026-07-14), commissioned by Visa: adjusted volume. [visa.com](https://www.visa.com/en-us/thought-leadership/innovation/agentic-payments-from-the-ground-up)
- *How Agentic Is Agentic Commerce?* (preprint, arXiv 2607.12575, 2026-07-14): provable value on Base. [arxiv.org](https://arxiv.org/abs/2607.12575)
- Circle, Form 10-Q for Q2 2026 (2026-08-05): distribution and transaction costs, payments to Coinbase. [sec.gov](https://www.sec.gov/Archives/edgar/data/1876042/000187604226000248/crcl-20260630.htm); *Q2 2026 results* (2026-08-05): onchain volume, reserve income. [circle.com](https://www.circle.com/pressroom/circle-reports-second-quarter-2026-results); Q2 2026 earnings call transcript (2026-08-05): reserve return rate. [fool.com](https://www.fool.com/earnings/call-transcripts/2026/08/12/circle-crcl-q2-2026-earnings-call-transcript/); Arc validators (2026-08-05). [circle.com](https://www.circle.com/pressroom/circle-announces-founding-validator-cohort-and-major-integrations-for-arc-ahead-of-september-16-mainnet-launch)
- Coinbase, *Q2 2026 results* (2026-07-30): agentic shares, USDC economics. [investor.coinbase.com](https://investor.coinbase.com/news/news-details/2026/Coinbase-Q2-Earnings-Everything-Exchange-Drives-3rd-Consecutive-Quarter-of-Record-Crypto-Trading-Volume-Market-Share-Revenue-Diversification-and-Resilience/default.aspx); *Coinbase for Agents adds equities and x402 payments* (2026-09-22): cumulative x402 volume. [coinbase.com](https://www.coinbase.com/developer-platform/discover/launches/c4a-equities-x402)
- Coinbase Developer Platform, *CDP Facilitator* and discovery API (accessed 2026-09-27): pricing, Bazaar, Exa's listing. [docs.cdp.coinbase.com](https://docs.cdp.coinbase.com/x402/seller/facilitator); [api.cdp.coinbase.com](https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources?limit=1&offset=0)
- Mastercard, Form 10-K for 2025 (2026-02-11): Agent Pay eligibility. [sec.gov](https://www.sec.gov/Archives/edgar/data/1141391/000114139126000013/ma-20251231.htm); *Mastercard Agent Pay* (accessed 2026-09-28): registered agents. [mastercard.com](https://www.mastercard.com/us/en/business/artificial-intelligence/mastercard-agent-pay.html); *Agent Pay for Machines* (2026-06-10): initial participants including t54 Labs, guaranteed settlement. [mastercard.com](https://www.mastercard.com/us/en/news-and-trends/press/2026/june/mastercard-launches-agent-pay-for-machines.html); *Verifiable Intent* (2026-03-05). [mastercard.com](https://www.mastercard.com/global/en/news-and-trends/stories/2026/verifiable-intent.html); BVNK completion (2026-08-03). [investor.mastercard.com](https://investor.mastercard.com/investor-news/investor-news-details/2026/Mastercard-completes-acquisition-of-BVNK-to-advance-global-stablecoin-capabilities/default.aspx)
- Visa, *Visa Intelligent Commerce* developer page (accessed 2026-09-28): agent onboarding, agent tokens, commerce signals, fees. [developer.visa.com](https://developer.visa.com/capabilities/visa-intelligent-commerce); *Intelligent Commerce Connect* (2026-04-08). [usa.visa.com](https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.22276.html); partner transactions (2025-12-18). [investor.visa.com](https://investor.visa.com/news/news-details/2025/Visa-and-Partners-Complete-Secure-AI-Transactions-Setting-the-Stage-for-Mainstream-Adoption-in-2026/default.aspx)
- Google, *UCP and Direct Offers* (2026-01-11). [blog.google](https://blog.google/products/ads-commerce/agentic-commerce-ai-tools-protocol-retailers-platforms/); AP2 to FIDO (2026-04-28). [blog.google](https://blog.google/products-and-platforms/platforms/google-pay/agent-payments-protocol-fido-alliance/); AP2 specification (accessed 2026-09-27): representment. [ap2-protocol.org](https://ap2-protocol.org/ap2/specification/)
- FIDO Alliance, *AP2 and Verifiable Intent* (2026-05-26). [fidoalliance.org](https://fidoalliance.org/building-the-trust-layer-for-agentic-payments-with-ap2-and-verifiable-intent/); A2A Project, *Joining the Agentic AI Foundation* (2026-08-27). [a2a-protocol.org](https://a2a-protocol.org/latest/blog/2026/08/27/a-new-chapter-for-a2a-joining-the-agentic-ai-foundation/)
- OpenAI, *Buy it in ChatGPT* (2025-09-29) and *Testing ads in ChatGPT* (2026-02-09). [openai.com](https://openai.com/index/buy-it-in-chatgpt/); [openai.com](https://openai.com/index/testing-ads-in-chatgpt/)
- CFPB, Regulation E 1005.2 and Regulation Z commentary to 1026.12 (accessed 2026-09-27): consumer liability. [consumerfinance.gov](https://www.consumerfinance.gov/rules-policy/regulations/1005/2/); [consumerfinance.gov](https://www.consumerfinance.gov/rules-policy/regulations/1026/interp-12/); withdrawal notice (2025-05-15). [federalregister.gov](https://www.federalregister.gov/documents/2025/05/15/2025-08646/electronic-fund-transfers-through-accounts-established-primarily-for-personal-family-or-household)
- Public Law 119-27, *the GENIUS Act* (2025-07-18): holder protections. [govinfo.gov](https://www.govinfo.gov/content/pkg/PLAW-119publ27/html/PLAW-119publ27.htm); US Treasury, sb0605 (2026-08-17): expected effective date. [home.treasury.gov](https://home.treasury.gov/news/press-releases/sb0605)
- Federal Reserve Bank of Kansas City, *The Initial Effects of EMV Migration on Chargebacks in the United States* (2018-12-06): the 2015 liability shift. [kansascityfed.org](https://www.kansascityfed.org/research/research-working-papers/initial-effects-emv-migration-2018/); *New Data on Card-Present and Card-Not-Present Fraud Rates in the United States* (2026-02-25): 2023 fraud rates. [kansascityfed.org](https://www.kansascityfed.org/research/payments-system-research-briefings/new-data-on-card-present-and-card-not-present-fraud-rates-in-the-united-states/)
- Riskified, Form 20-F for 2025 (2026-03-06): revenue and pricing on approved GMV. [sec.gov](https://www.sec.gov/Archives/edgar/data/1851112/000185111226000007/rskd-20251231.htm); Q4 2025 earnings call transcript (2026-03-04): GMV reviewed, agentic take rates, card mix. [fool.com](https://www.fool.com/earnings/call-transcripts/2026/03/04/riskified-rskd-q4-2025-earnings-call-transcript/)
- World, *AgentKit* (2026-03-17). [world.org](https://world.org/blog/announcements/now-available-agentkit-proof-of-human-for-the-agentic-web); Stripe, AWS AgentCore payments on Privy (2026-05-07). [stripe.com](https://stripe.com/newsroom/news/aws-stripe-agentcore-privy); Payman, *Access over ownership* (2025-05-13). [paymanai.com](https://paymanai.com/blog/access-over-ownership)

**Analysis and market**

- Worldpay, *Agentic commerce liability is still being written* (2026-07-30): liability reading. [worldpay.com](https://www.worldpay.com/en/insights/articles/agentic-commerce-liability-is-still-being-written)
- FBT Gibbons, *The Payment Infrastructure Layer* (2026-05-05): Visa and Mastercard rules on agents. [fbtgibbons.com](https://fbtgibbons.com/the-payment-infrastructure-layer-how-network-rules-already-govern-agentic-commerce/)
- Chainalysis, *Agentic Payments Cross the Threshold* (2026-06-03): payment-size mix. [chainalysis.com](https://www.chainalysis.com/blog/x402-agentic-payments-adoption/)
- CoinDesk on leaderboard farming (2026-08-23) and on underwriting machine merchants (2026-03-11). [coindesk.com](https://www.coindesk.com/business/2026/08/23/crypto-s-next-billion-users-might-be-ai-agents-and-they-re-paying-with-stablecoins); [coindesk.com](https://www.coindesk.com/markets/2026/03/11/coinbase-backed-ai-payments-protocol-wants-to-fix-micropayment-but-demand-is-just-not-there-yet)
- Forbes (2026-03-10) and CNBC (2026-03-20, 2026-03-24) on Instant Checkout. [forbes.com](https://www.forbes.com/sites/jasongoldberg/2026/03/10/why-openais-checkout-retreat-spells-trouble-for-its-commerce-strategy/); [cnbc.com](https://www.cnbc.com/2026/03/20/open-ai-agentic-shopping-etsy-shopify-walmart-amazon.html); [cnbc.com](https://www.cnbc.com/2026/03/24/openai-revamps-shopping-experience-in-chatgpt-after-instant-checkout.html)
- Morgan Stanley, *Here Come the Shopping Bots* (2025-12-08): GMV forecast, survey. [morganstanley.com](https://www.morganstanley.com/insights/articles/agentic-commerce-market-impact-outlook)
- Bain & Company, *2030 forecast: how agentic AI will reshape US retail* (2025-12-17): GMV range including agent-influenced purchases. [bain.com](https://www.bain.com/insights/2030-forecast-how-agentic-ai-will-reshape-us-retail-snap-chart/)
- Shopify, Q2 2026 earnings call transcript (2026-08-05): agentic order economics. [investing.com](https://www.investing.com/news/transcripts/earnings-call-transcript-shopify-tops-q2-2026-estimates-as-shares-jump-18-93CH-4838020)
- Stripe, Metronome (2026-01-14) and OpenRouter (2026-08-19). [stripe.com](https://stripe.com/newsroom/news/stripe-completes-metronome-acquisition); [stripe.com](https://stripe.com/newsroom/news/stripe-agrees-to-acquire-openrouter)
- Cointelegraph, Tempo's Series A (2025-10-17). [cointelegraph.com](https://cointelegraph.com/news/tempo-stripe-blockchain-5b-valuation-funding-round)
- MacRumors, Apple Pay issuer fees (2026-09-25). [macrumors.com](https://www.macrumors.com/2026/09/25/apple-pay-antitrust-lawsuit-advances/)
- Search Engine Land, Walmart's in-ChatGPT conversion (2026-03-19). [searchengineland.com](https://searchengineland.com/walmart-chatgpt-checkout-converted-worse-472071)
- Technext, Chimoney's shutdown (2026-05-16). [technext24.com](https://www.technext24.com/news/chimoney-shutdown-founder-exclusive/)
- ToolTweak (arXiv 2510.02554) and Magentic Marketplace (arXiv 2510.25779), preprints on agent choice. [arxiv.org](https://arxiv.org/abs/2510.02554); [arxiv.org](https://arxiv.org/abs/2510.25779)
- Crunchbase News on Baselayer (2026-09-22); The Block on Catena Labs (2026-05-20). [news.crunchbase.com](https://news.crunchbase.com/ai/verifying-ai-agents-baselayer-35m-raise/); [theblock.co](https://www.theblock.co/post/402029/catena-labs-lands-30-million-series-a-files-for-national-trust-bank-charter-to-underpin-agentic-finance)
- Hacker News, *Show HN: x402* (2025-05-06): launch pitch. [news.ycombinator.com](https://news.ycombinator.com/item?id=43908129)
- Joel Spolsky, *Strategy Letter V* (2002-06-12). [joelonsoftware.com](https://www.joelonsoftware.com/2002/06/12/strategy-letter-v/)
- Disclosure sources: The Block on t54 Labs' seed (2026-02-25). [theblock.co](https://www.theblock.co/news/deals/2026-02-25-ripple-franklin-templeton-ai-agent-trust-startup-t54-labs-391273); PL Capital (Lacey Wisdom and Kacey Fisher), *Rethinking Identity* (2025-09-23), my employer's publication listing World and Privy as portfolio investments. [medium.com](https://medium.com/@lacey_63095/rethinking-identity-cryptos-answer-to-broken-legacy-systems-66ee459d7b41)

**Prices and current conditions**

- Stripe, *Pricing & Fees* (accessed 2026-09-27): card, dispute and token prices. [stripe.com](https://stripe.com/pricing)
- Exa, *Pay with x402* (accessed 2026-09-27): USD 0.007 a search. [exa.ai](https://exa.ai/docs/reference/x402-guide)
- FedNow 2026 fee schedule; Regulation II (12 CFR 235): Figure 3 rows. [frbservices.org](https://www.frbservices.org/resources/fees/fednow-2026); [ecfr.gov](https://www.ecfr.gov/current/title-12/chapter-II/subchapter-A/part-235)
- Tempo, fee specification; *Tempo Mainnet is live* (2026-03-18). [tempo.xyz](https://tempo.xyz/developers/docs/protocol/fees/spec-fee); [tempo.xyz](https://tempo.xyz/blog/mainnet/)
- Frames (accessed 2026-09-27): prepaid credit plans. [api.frames.ag](https://api.frames.ag/)

**Prior work in this series**

- [*How I Built A Custom GTM Agent*](https://www.second-breakfast.co/blog/how-i-built-a-custom-gtm-agent), Second Breakfast, March 2026.
- [*The Conversion Layer*](https://www.second-breakfast.co/blog/the-conversion-layer), Second Breakfast, August 2026.
- [*Web 2 --> Web3*](https://www.second-breakfast.co/blog/web-2-web3), Second Breakfast, April 2021.

---

*Disclosures: PL Capital, where I lead capital formation, co-led t54 Labs' seed round, so I have a reason to want it to do well. PL Capital, where I lead capital formation, lists World among its portfolio investments, so I have a reason to want it to do well. PL Capital, where I lead capital formation, lists Privy among its portfolio investments; Stripe acquired Privy in 2025. Views are my own and do not represent PL Capital or Protocol Labs. Nothing here is investment advice. Do your own diligence.*

---

Source: https://www.second-breakfast.co/blog/agentic-commerce-pt1