AI agents are moving past chat assistants into actually shopping — picking products, comparing prices, and completing payments on a customer’s behalf. Visa, alongside more than ten partners, is rolling out the Trusted Agent Protocol, an open framework designed to help merchants tell a trustworthy shopping agent apart from a malicious bot. For store owners, this is a shift that can’t be put off indefinitely.
What the Trusted Agent Protocol actually is
The Trusted Agent Protocol is a framework built on existing web infrastructure that enables secure communication between an AI agent and a merchant at every step of a transaction. It relies on agent-specific cryptographic signatures and works with three key elements: agent intent (confirming this is genuinely a trusted agent looking to retrieve product details or make a purchase), consumer recognition (whether the customer already has an account or history with the merchant), and payment information (the agent can carry the payment data needed for the merchant’s preferred checkout method).
The problem it’s solving is simple to state but hard to fix: today, stores struggle to tell a malicious scraper stealing data apart from a legitimate AI agent purchasing on behalf of a real, consenting customer.
Why this is happening now
AI-driven traffic to US retail websites has reportedly surged more than 4,700% over the past year. Surveys also show 85% of shoppers who’ve used AI to shop rate the experience positively. Visa predicts millions of consumers will complete a purchase through an AI agent by this year’s holiday season. That puts pressure on merchants to prepare their sites and checkout flows for a very different kind of “visitor” than they’re used to.
It connects to a broader trend we’ve covered before around AI website builders and AI agents in e-commerce — the difference this time is that it targets payment infrastructure specifically, the exact moment where a transaction either goes through or doesn’t.
What it means for online stores
If you run an e-commerce store, a few practical tasks are on the horizon. First, check with your payment provider or gateway on whether and when they plan to support protocols like this — larger players are rolling support out gradually over the year. Second, think about how machine-readable your product catalog actually is: structured data (schema.org), clean product feeds, and consistent pricing across channels will matter even more than before.
Third, your checkout flow itself needs to handle the scenario where an order isn’t placed by a human clicking through with a mouse and keyboard, but by an agent via API or a structured request. That may require adjustments at the plugin level (WooCommerce and similar) or, at minimum, thorough testing of how checkout behaves under automated access.
Risks worth keeping in mind
Agentic purchasing brings new risks too — fraudulent transactions, spoofed agents, and questions of liability when an agent orders something the customer didn’t actually want. Standards like the Trusted Agent Protocol are meant to reduce these risks, but relying on them alone isn’t enough. Merchants should keep monitoring unusual order patterns; limits and confirmation steps on higher-value orders remain just as important in the agentic era.
The liability question is also still legally unsettled — who’s responsible when an agent buys the wrong size or places a duplicate order? Store terms of service will need to address these scenarios explicitly over time, much like they previously had to catch up with purchases made through mobile apps or voice assistants.
This isn’t just a big-brand problem
It’s tempting to file agentic commerce under “topics for big brands with their own dev team,” but the reality is different. AI agents crawling the web don’t distinguish between a billion-dollar store and a small shop selling handmade goods — both need machine-readable data and a checkout flow that actually works. Smaller stores on platforms like WooCommerce, Shoptet, or Shopify often assume support will just arrive with the next platform update. That’s a reasonable assumption, but it’s worth actively checking the rollout timeline with your provider instead of waiting for the first agentic order to fail silently in the cart.
Conclusion
Agentic commerce isn’t a distant future — Visa is targeting mainstream adoption by this year’s holiday season. Merchants who review their data structure, checkout flow, and payment integrations today will get ahead of competitors who are simply waiting for the first AI purchase to show up on its own. Want to get your store ready for AI shopping? We can help you figure out where to start.
