{
 "acronym": "Poppy",
 "adoption": {
  "level": "unmeasured",
  "by": null,
  "probe_run": null
 },
 "aliases": [
  "Poppy"
 ],
 "analog": "OAuth sign-in, applied to the agent acting for a customer",
 "audience": [
  "agent-builder",
  "site-owner",
  "platform"
 ],
 "collisions": [],
 "discovery": {
  "mechanism": "Well-known file published by the company",
  "path": "/.well-known/poppy.json"
 },
 "dispute": null,
 "evidence": [
  {
   "claim": "personalagentprotocol.org describes the protocol: personal agents discover participating companies, sign users in, and get things done through APIs, web pages and company agents.",
   "label": "VERIFIED",
   "url": "https://personalagentprotocol.org/",
   "date": "2026-10-09",
   "retrieved_at": "2026-10-16T10:30:00Z",
   "source_type": "issuer",
   "http_status": 200,
   "detector": "phase-a-fix@2026-10-16"
  },
  {
   "claim": "Sierra's announcement (2026-10-09) presents the Personal Agent Protocol draft as built on OAuth, JWT, OpenAPI and MCP, with 35+ design partners including OpenAI, Visa, Mastercard and Okta, and promises a reference implementation. Discovery is one file at /.well-known/poppy.json; sessions, OAuth sign-in and one token across APIs, website and company agent are the other building blocks.",
   "label": "VERIFIED",
   "url": "https://sierra.ai/blog/poppy",
   "date": "2026-10-09",
   "retrieved_at": "2026-10-15T22:21:21Z",
   "source_type": "issuer",
   "http_status": 200,
   "content_sha256": "fcf29d4c175273bf866e08dd472f5d110d42b05ab3dc1cfc7b85e85a3e3efd8f",
   "detector": "phase-a@2026-10-15"
  }
 ],
 "form": "endpoint",
 "governance": "Sierra with design partners including OpenAI, Visa, Mastercard and Okta; no standards body named",
 "group": null,
 "history": [
  {
   "date": "2026-10-15",
   "note": "curated update 2026-10-15; placement at the identify step is a judgement, permit is the alternative"
  },
  {
   "date": "2026-10-16",
   "note": "discovery path /.well-known/poppy.json and the protocol site added from the Sierra announcement"
  },
  {
   "date": "2026-10-16",
   "note": "use-case tags (auto)"
  }
 ],
 "id": "personal-agent-protocol",
 "implementation": "none-found",
 "last_verified": "2026-10-16",
 "name": "Personal Agent Protocol (Poppy)",
 "native_status": "Draft published 2026-10-09; reference implementation promised",
 "origin": {
  "org": "Sierra, with Meta and others",
  "date": "2026-10-09"
 },
 "part_of": null,
 "parties": [
  "agent-site",
  "agent-human"
 ],
 "phase": "draft",
 "probe": {
  "method": "GET",
  "path": "{origin}/.well-known/poppy.json",
  "parse": "A JSON document means the company publishes a Personal Agent Protocol discovery file; the draft's schema for its contents was not reviewed for this record.",
  "on_absent": "404 or non-JSON means no Poppy discovery file is published at that origin."
 },
 "question": "How does a customer's personal agent identify itself to a business and show it has the customer's permission to act?",
 "scope": "general",
 "spec_url": "https://sierra.ai/blog/poppy",
 "step": "identify",
 "summary_md": "The Personal Agent Protocol, nicknamed Poppy, is a draft from Sierra with Meta and others for how a customer's personal agent identifies itself to a business and receives the customer's permission [1]. Companies publish one discovery file at `/.well-known/poppy.json`; Sierra says the protocol is built on OAuth, JWT, OpenAPI and MCP and names 35+ design partners including OpenAI, Visa, Mastercard and Okta [1].\n\nThe draft was published on 2026-10-09 and a reference implementation is promised, not yet seen [1]. No standards body is named. The step placement is a judgement: it covers both identification and permission, and sits at identify here.\n\nEverything above is Sierra's own account in a single announcement.",
 "track": "vendor-consortium",
 "use_cases": [
  "prove-agent-identity",
  "delegate-user-authority",
  "discover-my-api"
 ],
 "version": {
  "label": "draft",
  "date": "2026-10-09"
 },
 "watch": [
  {
   "type": "page",
   "url": "https://sierra.ai/blog/poppy",
   "selector": "main",
   "cadence": "weekly"
  }
 ],
 "pairs_with": [
  "mcp",
  "oauth-metadata-for-agents",
  "identity-assertion-authz-grant",
  "ap2",
  "web-bot-auth-signature-agent-card"
 ],
 "prerequisites": [
  "oauth-metadata-for-agents"
 ],
 "freshness": "current"
}