Meta, Walmart, Stripe Launch Personal Agent Protocol to Standardize AI Agent Interactions

Meta Leads Coalition to Build Open Standard for AI Agents

Meta has joined forces with Walmart, Stripe, Shopify, Genesys, Instinct, Rocket, and enterprise AI startup Sierra to develop the Personal Agent Protocol, an open standard defining how personal agents interact with businesses1

1

2

2

. The initiative, led by Bret Taylor, co-founder of Sierra and OpenAI Chairman, arrives roughly one month after Meta launched Muse, its personal AI agent that now has millions of users in the U.S. and continues growing rapidly2

2

. The protocol addresses a critical gap in AI governance as companies face mounting challenges distinguishing between AI bots and human customers accessing their platforms.

Authentication Crisis Drives Need to Standardize AI Agent Interactions

"It is kind of chaos until such a standard exists," Taylor told CNBC, highlighting the urgent need to secure AI agent interactions2

2

. The Personal Agent Protocol tackles authentication by building on OAuth, allowing businesses to verify whether an AI agent is acting on behalf of a real person3

3

. David Singleton, head of Meta Superintelligence Labs, emphasized the security dimension, noting that effective agent use requires consumers to share credit card and personal information2

2

. The standard will provide visibility into what personal agents are doing through websites, similar to how users currently sign into services with Google or Facebook credentials—technology Taylor helped develop during his tenure at Facebook2

2

4

4

.

How Personal Agents Interact with Businesses Under New Framework

The protocol establishes clear parameters for AI agent-business interactions. Consumers decide what access to give their personal agents, while companies set boundaries for what those agents can do1

1

. An AI agent can start as a guest to check stock or returns policies, and once a customer signs in, they determine whether it receives read-only or write access3

3

. Sessions carry across channels, ensuring a question asked before signing in and an order changed afterwards belong to one visit3

3

. Companies choose whether agents work through existing websites and APIs, or through an agent of their own, using standards such as MCP and OpenAPI1

1

3

3

. A v0.1 specification is due later this month, with payments listed as a future extension rather than part of the initial release3

3

.

Website Scraping Concerns Fuel Adoption Push

The friction the standard addresses has already surfaced publicly. Amazon blocked Meta Muse over concerns about website scraping, and similarly blocked Perplexity's AI agent before suing the startup in November, alleging the company concealed its AI agents to continue scraping Amazon's website without approval2

2

4

4

. Perplexity dismissed the lawsuit as a "bully tactic"2

2

. These conflicts underscore why businesses demand reliable mechanisms to verify and control AI bots interact with businesses. Singleton compared the proposed framework to email protocols: "If you think about email, it works great because it is a standard that everyone can use to talk to each other, and we think this is going to be quite similar"2

2

4

4

.

Competing Standards and Industry Adoption Outlook

While OpenAI and Anthropic aren't currently participating, Taylor expressed expectations they will join, saying he would be "really disappointed" if competitors don't adopt it2

2

4

4

. The initiative faces competition from Visa's Trusted Agent Protocol, which already counts Microsoft, Stripe, Shopify, and Worldpay as partners3

3

. Notably, both Stripe and Shopify now participate in both protocols3

3

. Meta has been expanding AI agents across its platforms, recently launching Meta Business Agent globally on WhatsApp, Instagram, and Messenger with capabilities including customer inquiries, product suggestions, and transaction completion4

4

. As agents arrive faster than the governance arrangements they require, watch for how businesses balance innovation with security, and whether European regulators—where strong customer authentication rules apply—accept software-approved payments on behalf of users3

3

.