--- type: Agentic Web Standard title: "Trusted Agent Protocol (TAP)" description: "How does a merchant recognize that an approved commerce agent, rather than a crawler or fraudulent bot, is interacting with its site or API?" resource: "https://developer.visa.com/docs/trusted-agent-protocol/trusted-agent-protocol-specifications" tags: ["identify", "http-header", "single-vendor", "prove-agent-identity", "agent-checkout", "attribute-agent-traffic"] status: draft generated: { by: agenticweb-builder/1.0, at: 2026-10-30T00:00:00Z } verified: { by: process:agenticweb-engine, at: 2026-10-29T00:00:00Z } stale_after: 2026-11-28T00:00:00Z sources: - id: ref-1 resource: "https://developer.visa.com/docs/trusted-agent-protocol/trusted-agent-protocol-specifications" title: "Visa Developer, Trusted Agent Protocol Specifications (undated; no version number on the page), checked 2026-10-29: \"By accessing, downloading, or using this specification, you agree to the terms and conditions outlined in the Visa Trusted Agent Protocol Product Terms.\" \"this protocol is applicable to the scenario when the Agent is initially unknown to the Merchant.\" \"The trust model described hereunder is comprised of three distinct signatures.\" \"The Agent recognition signature is based on the HTTP Message Signatures defined by RCF 9421 [and aligned with web-bot-auth] and offers a secure, standardized, and verifiable way to ensure the legitimacy of clients (bots, agents, or any automated traffic) and the integrity of their requests.\" \"In the case that the public key is associated with Visa, this would imply the Agent's participation in (and compliance with) Visa Intelligent Commerce program requirements.\" \"Will contain the value of agent-browser-auth or agent-payer-auth based on the type of interaction\" \"These validation processes can be performed independently by the Merchant or by a Site Protection Provider on behalf of the Merchant.\" \"For Visa's implementation, Visa will host a well-known URL. The goal would be to have a shared approach across Payment Schemes.\" \"The ID Token is a JSON Web Token (JWT) in line with RFC 7519 and compatible with an OpenID Connect ID Token. The Visa implementation of the ID Token is digitally signed by Visa.\" \"typically CDNs (Content Delivery Networks), trust management systems, or other such proxies\" \"if the Merchant has requested payment using a 402 response code\"" - id: ref-2 resource: "https://developer.visa.com/docs/trusted-agent-protocol" title: "Visa Developer, Trusted Agent Protocol, Getting started, checked 2026-10-29: \"This content is provided for merchants and infrastructure providers who want to securely recognize and transact with Visa-approved AI agents.\" \"The core of the protocol is simple: a trusted agent will include a message signature in its request to your server. A merchant's primary task is to validate this signature.\"" - id: ref-3 resource: "https://developer.visa.com/docs/trusted-agent-protocol/product-terms" title: "Visa Developer, Trusted Agent Protocol product terms, dated October 10, 2025, checked 2026-10-29: \"October 10, 2025\"" last_modified: 2025-10-10T00:00:00Z - id: ref-4 resource: "https://github.com/visa/trusted-agent-protocol" title: "GitHub, visa/trusted-agent-protocol repository, checked 2026-10-29" - id: ref-5 resource: "https://api.github.com/repos/visa/trusted-agent-protocol" title: "GitHub API, visa/trusted-agent-protocol repository record (created \"2025-10-10T02:05:59Z\", license \"Other\"/\"NOASSERTION\"), checked 2026-10-29: \"2025-10-10T02:05:59Z\" \"NOASSERTION\"" last_modified: 2025-10-10T00:00:00Z - id: ref-6 resource: "https://api.github.com/repos/visa/trusted-agent-protocol/commits" title: "GitHub API, visa/trusted-agent-protocol commits (dates in UTC), checked 2026-10-29: \"2025-10-28\" \"2025-10-12\"" last_modified: 2025-10-28T00:00:00Z - id: ref-7 resource: "https://api.github.com/repos/visa/trusted-agent-protocol/releases" title: "GitHub API, visa/trusted-agent-protocol releases (empty list), checked 2026-10-29: \"[]\"" - id: ref-8 resource: "https://api.github.com/repos/visa/trusted-agent-protocol/tags" title: "GitHub API, visa/trusted-agent-protocol tags (empty list), checked 2026-10-29: \"[]\"" - id: ref-9 resource: "https://raw.githubusercontent.com/visa/trusted-agent-protocol/main/README.md" title: "visa/trusted-agent-protocol, README.md, checked 2026-10-29: \"Establishing a universal standard of trust between AI agents and merchants for the next phase of agentic commerce.\" \"Visa's Trusted Agent Protocol provides a standardized, cryptographic method for an AI agent to prove its identity and associated authorization directly to merchants.\"" - id: ref-10 resource: "https://raw.githubusercontent.com/visa/trusted-agent-protocol/main/LICENSE.md" title: "visa/trusted-agent-protocol, LICENSE.md, checked 2026-10-29: \"By using, downloading, or installing this code, you agree to the terms and conditions contained in the Visa Developer Center Terms of Use\"" - id: ref-11 resource: "https://raw.githubusercontent.com/visa/trusted-agent-protocol/main/agent-registry/README.md" title: "visa/trusted-agent-protocol, agent-registry/README.md (sample Agent Registry), checked 2026-10-29: \"Ed25519 and RSA-PSS-SHA256 public keys\"" - id: ref-12 resource: "https://investor.visa.com/news/news-details/2025/Visa-Introduces-Trusted-Agent-Protocol-An-Ecosystem-Led-Framework-for-AI-Commerce/default.aspx" title: "Visa press release, Visa Introduces Trusted Agent Protocol: An Ecosystem-Led Framework for AI Commerce, 2025-10-14, checked 2026-10-29: \"With the release of this protocol – developed in collaboration with Cloudflare – Visa reinforces its commitment to supporting safer and more seamless interactions in the evolving ecosystem of intelligent payments.\" \"Trusted Agent Protocol is available today in the Visa Developer Center and GitHub.\" \"While these initial specifications apply to the Visa network in this phase, enabling agents to safely and securely act on a consumer's behalf requires an open, ecosystem-wide approach.\" \"We are committed to aligning closely with global standards bodies like IETF, OpenID Foundation and EMVCo.\" \"We are working closely with our ecosystem partners to ensure that Trusted Agent Protocol will complement other recently announced protocols like the Agentic Commerce Protocol, and are collaborating with Coinbase to align on interoperability with x402.\" \"Built upon the foundational HTTP Message Signature standard, and aligned with Web Both Auth, Trusted Agent Protocol enables merchants and agents to establish trust using existing web infrastructure – with minimal user experience (UX) changes required on merchant websites or checkout pages – and extendable to non-web message protocols.\" \"In developing this protocol, we have received insightful feedback from other early partners including Adyen, Ant International, Checkout.com, Coinbase, CyberSource, Elavon, Fiserv, Microsoft, Nuvei, Shopify, Stripe and Worldpay.\"" last_modified: 2025-10-14T00:00:00Z - id: ref-13 resource: "https://www.cloudflare.com/press/press-releases/2025/cloudflare-collaborates-with-leading-payments-companies-to-secure-and-enable-agentic-commerce/" title: "Cloudflare press release, Cloudflare Collaborates with Leading Payments Companies to Secure and Enable Agentic Commerce, 2025-10-14, checked 2026-10-29: \"Cloudflare and Visa have worked together to develop and introduce the Trusted Agent Protocol, a new protocol that enables payment networks to integrate Web Bot Auth\" \"Visa is incorporating these new protocols and capabilities into its agentic payment platform, Visa Intelligent Commerce.\" \"Mastercard is incorporating Web Bot Auth into Mastercard Agent Pay\" \"American Express will also leverage Web Bot Auth for use in its agentic commerce program.\"" last_modified: 2025-10-14T00:00:00Z - id: ref-14 resource: "https://blog.cloudflare.com/secure-agentic-commerce/" title: "Rohin Lohe and Will Allen, Cloudflare Blog, Securing agentic commerce: helping AI Agents transact with Visa and Mastercard, 2025-10-24, checked 2026-10-29: \"Through our collaboration, Visa developed the Trusted Agent Protocol and Mastercard developed Agent Pay to help merchants distinguish legitimate, approved agents from malicious bots.\" \"Both Trusted Agent Protocol and Agent Pay leverage Web Bot Auth as the agent authentication layer to allow networks like Cloudflare to verify traffic from AI shopping agents that register with a payment network.\" \"To start, Visa and Mastercard will be hosting their own directories for Visa-registered and Mastercard-registered agents, respectively\" \"Instead, merchants can set the rules for agent interactions on their site and rely upon Cloudflare as the validator.\" \"If the agent is browsing, the tag should be agent-browser-auth. If the agent is paying, the tag should be agent-payer-auth.\"" last_modified: 2025-10-24T00:00:00Z - id: ref-15 resource: "https://investor.visa.com/news/news-details/2025/Akamai-and-Visa-Collaborate-to-Build-Trust-in-Agentic-Commerce/default.aspx" title: "Akamai and Visa press release (copy on investor.visa.com; akamai.com returned 403 to fetches), Akamai and Visa Collaborate to Build Trust in Agentic Commerce, 2025-12-17, checked 2026-10-29: \"Through its integration of Visa's Trusted Agent Protocol with Akamai's edge-based behavioral intelligence, user recognition, and bot and abuse protection, the companies will deliver the identity, authentication, and fraud controls required to let merchants confidently welcome AI agents with commerce intent into their digital storefronts.\" \"With Trusted Agent Protocol supported across Akamai Cloud, the world's most distributed cloud platform, merchants can operate at the speed and scale agentic commerce demands.\" \"By combining Visa Trusted Agent Protocol with Akamai's deep user recognition and threat intelligence, we're working to solve the dual-identity challenge that's crucial to AI commerce. We prove both who the agent is and, critically, who it represents.\"" last_modified: 2025-12-17T00:00:00Z - id: ref-16 resource: "https://www.checkout.com/newsroom/research-from-checkout-com-reveals-40-of-brits-would-let-ai-agents-handle-routine-shopping-tasks" title: "Checkout.com newsroom, Research from Checkout.com reveals 40% of Brits would let AI agents handle routine shopping tasks, 2025-10-29, checked 2026-10-29: \"Specifically, Checkout.com has integrated new capabilities such as Visa Intelligent Commerce and the newly announced Visa Trusted Agent Protocol, Mastercard Agent Pay, and support for Google's Agent Payment Protocol (AP2)\"" last_modified: 2025-10-29T00:00:00Z - id: ref-17 resource: "https://www.nuvei.com/posts/nuvei-supports-visa-trusted-agent-protocol-to-advance-agentic-commerce" title: "Nuvei, Nuvei supports Visa Trusted Agent Protocol to advance agentic commerce, 2025-10-14, checked 2026-10-29: \"MONTREAL, October 14, 2025 – Nuvei today announced its support for the launch of Trusted Agent Protocol, a new framework developed by Visa that enables merchants to securely recognize and transact with trusted AI agents.\"" last_modified: 2025-10-14T00:00:00Z - id: ref-18 resource: "https://www.worldpay.com/en/news/worldpay-collaborates-visa-and-cloudflare-advance-trusted-agent" title: "Worldpay, Worldpay Collaborates with Visa and Cloudflare to Advance Trusted Agent Protocol for Agentic Commerce, 2025-10-14, checked 2026-10-29: \"Worldpay has leveraged its decades of experience in payments innovation to help advance the Trusted Agent Protocol, advising on its applicability and providing broader merchant-centric perspectives.\"" last_modified: 2025-10-14T00:00:00Z - id: ref-19 resource: "https://www.visa.co.uk/about-visa/newsroom/press-releases.3457328.html" title: "Visa UK press release, Visa and Banks Across Europe Reach the Next Phase of Agentic Commerce, Unlocking Secure Access to Merchants, 2026-07-02, checked 2026-10-29: \"with participating merchants including lastminute.com, Frasers, Cleverbridge and BrickDepot.\" \"Merchants' participation was enabled through Visa's Trusted Agent Protocol (TAP) and Agent Directory - designed to help merchants to securely recognise and work with verified AI agents across different platforms and environments.\" \"TAP is designed to work alongside both existing and emerging commerce protocols, allowing merchants to adopt it in a way that fits their preferred platforms and underlying infrastructure without disruption.\" \"Implementation is supported by infrastructure providers including Cloudflare and Akamai, helping embed these capabilities into the systems that underpin merchant websites at scale.\"" last_modified: 2026-07-02T00:00:00Z - id: ref-20 resource: "https://grow.cleverbridge.com/news/cleverbridge-visa-trusted-agent-protocol" title: "Cleverbridge, Cleverbridge Among First to Enable Visa's Trusted Agent Protocol, 2026-07-02, checked 2026-10-29: \"today announced it is working with Visa to enable and test agentic commerce, using Visa's Trusted Agent Protocol and Agentic Directory to securely recognize and manage AI agents interacting with its commerce platform.\" \"Cleverbridge is one of the first merchants to take advantage of these capabilities, allowing it to distinguish trusted agents from unknown or unverified traffic and define how approved agents can access its platform and product information — all within existing risk and control frameworks.\"" last_modified: 2026-07-02T00:00:00Z - id: ref-21 resource: "https://investor.visa.com/news/news-details/2026/Visa-Opens-the-Door-to-AI-Driven-Shopping-for-Businesses-Worldwide/" title: "Visa press release, Visa Opens the Door to AI-Driven Shopping for Businesses Worldwide, 2026-04-08, checked 2026-10-29: \"Enables merchants to accept payments initiated via major agent protocols including: Trusted Agent Protocol, Machine Payments Protocol (MPP), Agentic Commerce Protocol (ACP), and Universal Commerce Protocol (UCP).\"" last_modified: 2026-04-08T00:00:00Z - id: ref-22 resource: "https://www.digitaltransactions.net/akamai-and-visa-team-on-agentic-commerce-controls/" title: "Kevin Woodward, Digital Transactions, Akamai and Visa Team on Agentic Commerce Controls, 2025-12-17, checked 2026-10-29: \"The Visa and Akamai collaboration will see the integration of Visa's Trusted Agent Protocol with Akamai's behavioral intelligence, user recognition, and bot and abuse protection.\"" last_modified: 2025-12-17T00:00:00Z - id: ref-23 resource: "https://fintechmagazine.com/news/agentic-commerce-what-could-we-learn-from-visas-success" title: "Natalia Elliot, FinTech Magazine, Agentic Commerce: What Could We Learn from Visa's Success?, 2025-12-18, checked 2026-10-29: \"The protocol helps merchants distinguish between malicious bots and legitimate AI agents acting on behalf of consumers.\"" last_modified: 2025-12-18T00:00:00Z - id: ref-24 resource: "https://thepaypers.com/payments/news/visa-bill-and-billtrust-pilot-ai-agent-payments-via-supplier-portals" title: "Sinziana Albu, The Paypers, Visa, BILL, and Billtrust pilot AI agent payments via supplier portals, 2026-10-20, checked 2026-10-29: \"Under the model, the BILL Payment Agent is registered through Visa's Trusted Agent Protocol and Agentic Directory.\" \"Once a payment is initiated, Billtrust uses the same protocol to recognise, authenticate, and grant access to the authorised agent\"" last_modified: 2026-10-20T00:00:00Z --- # Trusted Agent Protocol (TAP) Trusted Agent Protocol (TAP) is an agentic-web standard (HTTP header) at step 2, Identify, governed by Visa alone, under its own terms: By accessing, downloading, or using this specification, you agree to the terms and conditions outlined in the Visa Trusted Agent Protocol Product Terms; its status is "Published specification plus a sample implementation: Trusted Agent Protocol is available today in the Visa Developer Center and GitHub". It answers: "How does a merchant recognize that an approved commerce agent, rather than a crawler or fraudulent bot, is interacting with its site or API?" Implementation status is multi-implementation (Cloudflare, Akamai, Checkout.com, Cleverbridge, and merchants in Visa's European live transactions), last verified 2026-10-29. # Overview Trusted Agent Protocol is Visa's specification for letting a merchant tell a registered AI shopping agent from an unknown bot: "This content is provided for merchants and infrastructure providers who want to securely recognize and transact with Visa-approved AI agents." [^ref-2]. The agent signs each request with an HTTP Message Signature that names the site, the page and whether it is browsing or paying, and can add signed objects that identify the consumer and carry payment data [^ref-1][^ref-14]. The merchant, or a CDN acting for it, checks the signature against keys that Visa publishes for agents it has approved [^ref-1][^ref-14]. Visa built it with Cloudflare on top of Web Bot Auth, and it is a Visa specification under Visa's terms rather than an open standard [^ref-1][^ref-12][^ref-13]. # Examples ```http GET https://{tap-key-service}/keys?keyID={kid} # parse: 200 response body is a JWK object (kty, kid, use, alg, and RSA/EC key material) matching the keyID used to sign the agent's request or the Visa-issued ID Token # on absent: The referenced key cannot be retrieved, so the agent-recognition signature or Visa ID Token cannot be verified ``` # Knowledge Graph * **Lifecycle Step**: [2 Identify](/category/identify/index.md) * **Builds on**: [HTTP Message Signatures](/okf/protocols/http-message-signatures.md), [Web Bot Auth](/okf/protocols/webbotauth.md) * **Pairs with**: [Signature Agent Card (Web Bot Auth registry)](/okf/protocols/web-bot-auth-signature-agent-card.md), [Web Bot Auth](/okf/protocols/webbotauth.md), [HTTP Message Signatures](/okf/protocols/http-message-signatures.md), [Agentic Commerce Protocol](/okf/protocols/agentic-commerce-protocol.md), [Agent Payments Protocol (AP2)](/okf/protocols/ap2.md), [x402](/okf/protocols/x402.md) * **Related terms**: [Know Your Agent](/okf/terms/know-your-agent.md), [Agentic EoR (Employer / Entity of Record)](/okf/terms/agentic-eor.md), [Buyer of Record & Merchant of Record (Agentic Commerce)](/okf/terms/buyer-of-record.md) * **Compared in**: [3-D Secure & Card Checkout vs AP2, ACP & UCP (classic vs agentic)](/compare/3d-secure-vs-ap2/index.md), [Web Bot Auth vs Trusted Agent Protocol (TAP)](/compare/webbotauth-vs-tap/index.md), [Trusted Agent Protocol (TAP) vs KYA-OS (Know Your Agent Operating System)](/compare/tap-vs-kya-os/index.md), [Verifiable Intent vs Trusted Agent Protocol (TAP)](/compare/vi-vs-tap/index.md) [^ref-1]: Visa Developer, Trusted Agent Protocol Specifications (undated; no version number on the page), checked 2026-10-29: "By accessing, downloading, or using this specification, you agree to the terms and conditions outlined in the Visa Trusted Agent Protocol Product Terms." "this protocol is applicable to the scenario when the Agent is initially unknown to the Merchant." "The trust model described hereunder is comprised of three distinct signatures." "The Agent recognition signature is based on the HTTP Message Signatures defined by RCF 9421 [and aligned with web-bot-auth] and offers a secure, standardized, and verifiable way to ensure the legitimacy of clients (bots, agents, or any automated traffic) and the integrity of their requests." "In the case that the public key is associated with Visa, this would imply the Agent's participation in (and compliance with) Visa Intelligent Commerce program requirements." "Will contain the value of agent-browser-auth or agent-payer-auth based on the type of interaction" "These validation processes can be performed independently by the Merchant or by a Site Protection Provider on behalf of the Merchant." "For Visa's implementation, Visa will host a well-known URL. The goal would be to have a shared approach across Payment Schemes." "The ID Token is a JSON Web Token (JWT) in line with RFC 7519 and compatible with an OpenID Connect ID Token. The Visa implementation of the ID Token is digitally signed by Visa." "typically CDNs (Content Delivery Networks), trust management systems, or other such proxies" "if the Merchant has requested payment using a 402 response code" (https://developer.visa.com/docs/trusted-agent-protocol/trusted-agent-protocol-specifications) [^ref-2]: Visa Developer, Trusted Agent Protocol, Getting started, checked 2026-10-29: "This content is provided for merchants and infrastructure providers who want to securely recognize and transact with Visa-approved AI agents." "The core of the protocol is simple: a trusted agent will include a message signature in its request to your server. A merchant's primary task is to validate this signature." (https://developer.visa.com/docs/trusted-agent-protocol) [^ref-3]: Visa Developer, Trusted Agent Protocol product terms, dated October 10, 2025, checked 2026-10-29: "October 10, 2025" (https://developer.visa.com/docs/trusted-agent-protocol/product-terms) [^ref-4]: GitHub, visa/trusted-agent-protocol repository, checked 2026-10-29 (https://github.com/visa/trusted-agent-protocol) [^ref-5]: GitHub API, visa/trusted-agent-protocol repository record (created "2025-10-10T02:05:59Z", license "Other"/"NOASSERTION"), checked 2026-10-29: "2025-10-10T02:05:59Z" "NOASSERTION" (https://api.github.com/repos/visa/trusted-agent-protocol) [^ref-6]: GitHub API, visa/trusted-agent-protocol commits (dates in UTC), checked 2026-10-29: "2025-10-28" "2025-10-12" (https://api.github.com/repos/visa/trusted-agent-protocol/commits) [^ref-7]: GitHub API, visa/trusted-agent-protocol releases (empty list), checked 2026-10-29: "[]" (https://api.github.com/repos/visa/trusted-agent-protocol/releases) [^ref-8]: GitHub API, visa/trusted-agent-protocol tags (empty list), checked 2026-10-29: "[]" (https://api.github.com/repos/visa/trusted-agent-protocol/tags) [^ref-9]: visa/trusted-agent-protocol, README.md, checked 2026-10-29: "Establishing a universal standard of trust between AI agents and merchants for the next phase of agentic commerce." "Visa's Trusted Agent Protocol provides a standardized, cryptographic method for an AI agent to prove its identity and associated authorization directly to merchants." (https://raw.githubusercontent.com/visa/trusted-agent-protocol/main/README.md) [^ref-10]: visa/trusted-agent-protocol, LICENSE.md, checked 2026-10-29: "By using, downloading, or installing this code, you agree to the terms and conditions contained in the Visa Developer Center Terms of Use" (https://raw.githubusercontent.com/visa/trusted-agent-protocol/main/LICENSE.md) [^ref-11]: visa/trusted-agent-protocol, agent-registry/README.md (sample Agent Registry), checked 2026-10-29: "Ed25519 and RSA-PSS-SHA256 public keys" (https://raw.githubusercontent.com/visa/trusted-agent-protocol/main/agent-registry/README.md) [^ref-12]: Visa press release, Visa Introduces Trusted Agent Protocol: An Ecosystem-Led Framework for AI Commerce, 2025-10-14, checked 2026-10-29: "With the release of this protocol – developed in collaboration with Cloudflare – Visa reinforces its commitment to supporting safer and more seamless interactions in the evolving ecosystem of intelligent payments." "Trusted Agent Protocol is available today in the Visa Developer Center and GitHub." "While these initial specifications apply to the Visa network in this phase, enabling agents to safely and securely act on a consumer's behalf requires an open, ecosystem-wide approach." "We are committed to aligning closely with global standards bodies like IETF, OpenID Foundation and EMVCo." "We are working closely with our ecosystem partners to ensure that Trusted Agent Protocol will complement other recently announced protocols like the Agentic Commerce Protocol, and are collaborating with Coinbase to align on interoperability with x402." "Built upon the foundational HTTP Message Signature standard, and aligned with Web Both Auth, Trusted Agent Protocol enables merchants and agents to establish trust using existing web infrastructure – with minimal user experience (UX) changes required on merchant websites or checkout pages – and extendable to non-web message protocols." "In developing this protocol, we have received insightful feedback from other early partners including Adyen, Ant International, Checkout.com, Coinbase, CyberSource, Elavon, Fiserv, Microsoft, Nuvei, Shopify, Stripe and Worldpay." (https://investor.visa.com/news/news-details/2025/Visa-Introduces-Trusted-Agent-Protocol-An-Ecosystem-Led-Framework-for-AI-Commerce/default.aspx) [^ref-13]: Cloudflare press release, Cloudflare Collaborates with Leading Payments Companies to Secure and Enable Agentic Commerce, 2025-10-14, checked 2026-10-29: "Cloudflare and Visa have worked together to develop and introduce the Trusted Agent Protocol, a new protocol that enables payment networks to integrate Web Bot Auth" "Visa is incorporating these new protocols and capabilities into its agentic payment platform, Visa Intelligent Commerce." "Mastercard is incorporating Web Bot Auth into Mastercard Agent Pay" "American Express will also leverage Web Bot Auth for use in its agentic commerce program." (https://www.cloudflare.com/press/press-releases/2025/cloudflare-collaborates-with-leading-payments-companies-to-secure-and-enable-agentic-commerce/) [^ref-14]: Rohin Lohe and Will Allen, Cloudflare Blog, Securing agentic commerce: helping AI Agents transact with Visa and Mastercard, 2025-10-24, checked 2026-10-29: "Through our collaboration, Visa developed the Trusted Agent Protocol and Mastercard developed Agent Pay to help merchants distinguish legitimate, approved agents from malicious bots." "Both Trusted Agent Protocol and Agent Pay leverage Web Bot Auth as the agent authentication layer to allow networks like Cloudflare to verify traffic from AI shopping agents that register with a payment network." "To start, Visa and Mastercard will be hosting their own directories for Visa-registered and Mastercard-registered agents, respectively" "Instead, merchants can set the rules for agent interactions on their site and rely upon Cloudflare as the validator." "If the agent is browsing, the tag should be agent-browser-auth. If the agent is paying, the tag should be agent-payer-auth." (https://blog.cloudflare.com/secure-agentic-commerce/) [^ref-15]: Akamai and Visa press release (copy on investor.visa.com; akamai.com returned 403 to fetches), Akamai and Visa Collaborate to Build Trust in Agentic Commerce, 2025-12-17, checked 2026-10-29: "Through its integration of Visa's Trusted Agent Protocol with Akamai's edge-based behavioral intelligence, user recognition, and bot and abuse protection, the companies will deliver the identity, authentication, and fraud controls required to let merchants confidently welcome AI agents with commerce intent into their digital storefronts." "With Trusted Agent Protocol supported across Akamai Cloud, the world's most distributed cloud platform, merchants can operate at the speed and scale agentic commerce demands." "By combining Visa Trusted Agent Protocol with Akamai's deep user recognition and threat intelligence, we're working to solve the dual-identity challenge that's crucial to AI commerce. We prove both who the agent is and, critically, who it represents." (https://investor.visa.com/news/news-details/2025/Akamai-and-Visa-Collaborate-to-Build-Trust-in-Agentic-Commerce/default.aspx) [^ref-16]: Checkout.com newsroom, Research from Checkout.com reveals 40% of Brits would let AI agents handle routine shopping tasks, 2025-10-29, checked 2026-10-29: "Specifically, Checkout.com has integrated new capabilities such as Visa Intelligent Commerce and the newly announced Visa Trusted Agent Protocol, Mastercard Agent Pay, and support for Google's Agent Payment Protocol (AP2)" (https://www.checkout.com/newsroom/research-from-checkout-com-reveals-40-of-brits-would-let-ai-agents-handle-routine-shopping-tasks) [^ref-17]: Nuvei, Nuvei supports Visa Trusted Agent Protocol to advance agentic commerce, 2025-10-14, checked 2026-10-29: "MONTREAL, October 14, 2025 – Nuvei today announced its support for the launch of Trusted Agent Protocol, a new framework developed by Visa that enables merchants to securely recognize and transact with trusted AI agents." (https://www.nuvei.com/posts/nuvei-supports-visa-trusted-agent-protocol-to-advance-agentic-commerce) [^ref-18]: Worldpay, Worldpay Collaborates with Visa and Cloudflare to Advance Trusted Agent Protocol for Agentic Commerce, 2025-10-14, checked 2026-10-29: "Worldpay has leveraged its decades of experience in payments innovation to help advance the Trusted Agent Protocol, advising on its applicability and providing broader merchant-centric perspectives." (https://www.worldpay.com/en/news/worldpay-collaborates-visa-and-cloudflare-advance-trusted-agent) [^ref-19]: Visa UK press release, Visa and Banks Across Europe Reach the Next Phase of Agentic Commerce, Unlocking Secure Access to Merchants, 2026-07-02, checked 2026-10-29: "with participating merchants including lastminute.com, Frasers, Cleverbridge and BrickDepot." "Merchants' participation was enabled through Visa's Trusted Agent Protocol (TAP) and Agent Directory - designed to help merchants to securely recognise and work with verified AI agents across different platforms and environments." "TAP is designed to work alongside both existing and emerging commerce protocols, allowing merchants to adopt it in a way that fits their preferred platforms and underlying infrastructure without disruption." "Implementation is supported by infrastructure providers including Cloudflare and Akamai, helping embed these capabilities into the systems that underpin merchant websites at scale." (https://www.visa.co.uk/about-visa/newsroom/press-releases.3457328.html) [^ref-20]: Cleverbridge, Cleverbridge Among First to Enable Visa's Trusted Agent Protocol, 2026-07-02, checked 2026-10-29: "today announced it is working with Visa to enable and test agentic commerce, using Visa's Trusted Agent Protocol and Agentic Directory to securely recognize and manage AI agents interacting with its commerce platform." "Cleverbridge is one of the first merchants to take advantage of these capabilities, allowing it to distinguish trusted agents from unknown or unverified traffic and define how approved agents can access its platform and product information — all within existing risk and control frameworks." (https://grow.cleverbridge.com/news/cleverbridge-visa-trusted-agent-protocol) [^ref-21]: Visa press release, Visa Opens the Door to AI-Driven Shopping for Businesses Worldwide, 2026-04-08, checked 2026-10-29: "Enables merchants to accept payments initiated via major agent protocols including: Trusted Agent Protocol, Machine Payments Protocol (MPP), Agentic Commerce Protocol (ACP), and Universal Commerce Protocol (UCP)." (https://investor.visa.com/news/news-details/2026/Visa-Opens-the-Door-to-AI-Driven-Shopping-for-Businesses-Worldwide/) [^ref-22]: Kevin Woodward, Digital Transactions, Akamai and Visa Team on Agentic Commerce Controls, 2025-12-17, checked 2026-10-29: "The Visa and Akamai collaboration will see the integration of Visa's Trusted Agent Protocol with Akamai's behavioral intelligence, user recognition, and bot and abuse protection." (https://www.digitaltransactions.net/akamai-and-visa-team-on-agentic-commerce-controls/) [^ref-23]: Natalia Elliot, FinTech Magazine, Agentic Commerce: What Could We Learn from Visa's Success?, 2025-12-18, checked 2026-10-29: "The protocol helps merchants distinguish between malicious bots and legitimate AI agents acting on behalf of consumers." (https://fintechmagazine.com/news/agentic-commerce-what-could-we-learn-from-visas-success) [^ref-24]: Sinziana Albu, The Paypers, Visa, BILL, and Billtrust pilot AI agent payments via supplier portals, 2026-10-20, checked 2026-10-29: "Under the model, the BILL Payment Agent is registered through Visa's Trusted Agent Protocol and Agentic Directory." "Once a payment is initiated, Billtrust uses the same protocol to recognise, authenticate, and grant access to the authorised agent" (https://thepaypers.com/payments/news/visa-bill-and-billtrust-pilot-ai-agent-payments-via-supplier-portals)