Meta, Walmart and Stripe just built the rules for AI shopping agents

On 6 October 2026, Meta, Walmart, Stripe and the enterprise AI company Sierra published a new open standard called the Personal Agent Protocol. It's designed to govern how AI agents log in and act on behalf of customers on business websites. If it gets wide adoption, it will decide whether an AI agent shopping for your customer can see your products, check stock and make a purchase at all, which makes it a direct AEO and GEO issue, not just a technical footnote.

What changed?

Sierra published a blog post by Bret Taylor and Clay Bavor on 6 October 2026, announcing the Personal Agent Protocol as an open standard being developed with Meta, Genesys, Instinct, Rocket, Shopify, Stripe and Walmart, according to Yahoo Tech. It defines how personal agents interact with businesses.

The protocol builds on a familiar foundation. It's built on OAuth, letting a personal agent discover what a business offers, start a guest session, then act with user-granted read-only or write access through the company's website, APIs such as MCP or OpenAPI, or its own agent, PYMNTS reports. Users can choose from three levels of agent permissions.

The effort is led by one of the most connected people in AI right now. Bret Taylor, co-founder of Sierra and chairman of OpenAI, told CNBC that the standard addresses a core business concern: companies currently have no reliable way to tell whether they are being accessed by an AI agent or a human user.