Artificial Intelligence & Machine Learning,
Next-Generation Technologies & Secure Development
AP2 Protocol Introduces ‘Mandates’ to Ensure Accountability in Agent-Led Transactions

In an innovative move, Google has unveiled a new “agent payments protocol,” enabling artificial intelligence to facilitate consumer shopping while ensuring necessary permissions are obtained. This framework, announced on Wednesday, provides a structured approach for AI-assisted purchases, emphasizing accountability through a new concept called ‘mandates.’
This protocol, dubbed AP2, builds upon Google’s previous Agent2Agent data-sharing system and Anthropic’s Model Context Protocol. It is designed as an open, payment-agnostic infrastructure, allowing AI entities to execute transactions independently on behalf of individuals or organizations. Rather than merely granting agents access to corporate funds, enterprises will delineate transaction parameters via cryptographically secure ‘mandates.’ These contracts outline user intentions, permissible actions of the agent, and specific operational conditions.
According to Google, this structure provides essential validation for merchants, payment processors, and financial institutions, as it links user intent with agent activities in a verifiable manner. The potential applications of the protocol are extensive, offering a way to create transparent audit trails that address crucial questions surrounding authorization and authenticity.
Google’s vision encompasses various purchasing scenarios. In situations where users are physically present, like selecting items in a store, they initiate an “intent mandate” capturing their desires. Once the AI agent curates a shopping cart, users approve it through a “cart mandate,” detailing the selected items and their prices. Conversely, for tasks where the user isn’t physically present, such as late-night ticket purchases under specific price constraints, users can predefine enhanced conditions within the intent mandate, allowing the agent to generate a cart mandate autonomously upon meeting those criteria.
This interconnected process of intent, cart, and payment not only enhances user experience but also establishes a robust audit trail for transactions, bolstering accountability. More than 60 organizations, including payment titans like Mastercard and American Express, as well as tech leaders such as Salesforce and Adobe, have expressed their support for this innovative protocol.
The AP2 protocol’s capabilities extend into the domain of cryptocurrencies through an add-on feature known as x402. Early adopters, including Coinbase and the Ethereum Foundation, view this development as a significant step toward facilitating automated agent-to-agent transactions in the crypto landscape.
However, challenges remain, particularly concerning liability. The question of accountability arises when an agent misinterprets instructions and inadvertently authorizes a purchase. Regulatory compliance may also vary, as different jurisdictions interpret digital signatures inconsistently. Furthermore, integrating the AP2 protocol with existing enterprise systems necessitates adaptations in fraud detection, identity verification, and governance protocols to accommodate agent-driven transactions.
In its commitment to transparency, Google has made AP2’s technical specifications publicly accessible on GitHub, inviting engagement from standards bodies, payment providers, and developers to refine and expand its capabilities further.