When your AI agent starts spending your money, here’s what to know
The short version. In 2026, AI agents moved from finding things to paying for them. Visa, Mastercard and Google have all shipped the rails: agents can now initiate real payments inside limits a human sets in advance, using tokenized credentials — never your raw card number. But for ordinary consumers this is still pilots and early access, not everyday checkout. “Announced” does not mean “available to you.” This site tracks what is actually live, with a date and a source for every claim.
What’s live as of 7 November 2026
| Capability | Stage | Since | Note |
|---|---|---|---|
| Visa Intelligent Commerce | pilot | 2025-12-18 | Merchant tools and live pilots; US transactions reported. |
| Visa Agent Score | announced | 2026-06-10 | Merchant readiness check; no general-availability evidence. |
| Visa Agentic Directory | pilot | 2026-10-20 | Registry used in the BILL pilot. |
| Visa / BILL / Billtrust first live pilot | pilot | 2026-10-20 | First live end-to-end agent invoice payments. |
| Mastercard Agent Pay | live | 2025-11 | All US cardholders scheduled to be enabled by mid-November 2025. |
| Mastercard Agent Pay for Machines (AP4M) | early-access | 2026-10-20 | Developer opening; program still pilot-stage for commercial use. |
| Santander Europe first live agent payment | pilot | 2026-03-02 | Controlled-environment transaction on live bank infrastructure. |
| Mastercard Agent Pay Trust Framework | announced | 2026-09-30 | Framework announced; component services announced same day. |
| Google Agent Payments Protocol (AP2) | standard | 2026-04-28 | FIDO-governed authorization standard. |
| x402 | live | 2025-05-06 | Production machine-payment volume on Base. |
| x402 Foundation | standard | 2026-07-14 | Linux Foundation governance, 40 members. |
Full detail, stage history and sources: What’s live. Dataset: live-status.json.
Four questions to ask before you let an agent pay
- What exactly did I authorise? A spending limit, merchant categories, and whether approval is required for each purchase. If a product cannot show you these three things, do not enable it.
- What happens if it buys the wrong thing? Ask the issuer or merchant what the dispute and refund path is before you enable agent payments. This is still being defined in most products.
- Can I revoke it? Turning off an agent’s authority should be one action, not a maze. Test the off switch before you need it.
- Whose credentials is it using? Legitimate agent payments use tokenized credentials — a stand-in for your card, with limits attached. If a product asks for your raw card number to hand to an agent, do not.
Recent updates
- 7 Nov 2026 — Datasets checked against primary sources: Visa Intelligent Commerce restaged from live to pilot, seven timeline events added
- 27 Oct 2026 — Site expanded: event timeline, protocol map, what’s live, liability tracker, glossary and downloadable datasets.
- 26 Oct 2026 — This site launched.
- 20 Oct 2026 — Visa, BILL and Billtrust run the first live pilot of AI agents paying supplier invoices
- 20 Oct 2026 — Mastercard opens Agent Pay for Machines to developers: 9 payments, 2 merchants, 1 budget
- 28 Apr 2026 — Google’s agent-payment protocol goes neutral: AP2 v0.2 donated to FIDO
What this site is
A data service for payments professionals tracking agentic commerce: what agents can pay for, what the controls are, and what goes wrong. We record dated, sourced facts; we do not sell. There are no affiliate links and no sponsored content in this launch version. How we check every claim is on the Method page.