# Meta, Stripe, and Shopify Unveil Personal Agent Protocol

> Meta, Stripe, and Shopify unveiled the Personal Agent Protocol, swapping fragile scraping and cookie sharing for OAuth and DPoP-signed access tokens.

- URL: https://roobrief.com/en/posts/personal-agent-protocol
- Language: en
- Published: 2026-10-28T02:30:00.000Z
- Tags: ai, dev
- Source: https://personalagentprotocol.org

**Rather than relying on fragile web scraping and shared user passwords, personal AI agents can now connect to merchants via OAuth and DPoP-signed access tokens under the open Personal Agent Protocol.**

On Oct. 6, 2026, Meta and conversational AI company Sierra announced the **Personal Agent Protocol** (PAP, codenamed Poppy) at the Sierra Summit in San Francisco, introducing an open standard for AI agents (programs that carry out multi-step tasks for you on their own). Initial launch partners include Stripe, Shopify, Walmart, Genesys, and Rocket, with the full draft specification published as open source on GitHub.

## Why Open a Front Door Instead of Scraping and Blocking

When autonomous shopping agents attempt to browse or complete checkouts on behalf of consumers, they routinely hit a brick wall. Most personal agents operate by spoofing consumer browser sessions, scraping web pages, or handling raw login credentials and session cookies. This brittle pattern routinely trips web application firewalls (WAF) and introduces severe account takeover and credential leakage risks.

The tension escalated when Amazon blocked Meta's Muse shopping assistant and Perplexity's Comet agent at the edge, subsequently expanding federal court litigation over unauthorized session cookie routing and scraping. PAP was conceived to replace this adversarial dynamic with an authorized front door for AI agents.

## How DPoP Authentication and poppy.json Work

PAP does not compete with the Model Context Protocol (**MCP**, a standard that lets AI use outside tools); instead, it serves as an identity and authorization layer that wraps API tools and MCP endpoints. Participating websites host a machine-readable manifest at `/.well-known/poppy.json`. This document advertises the merchant's OAuth authorization server along with available interaction channels, such as OpenAPI definitions, MCP server endpoints, and conversational agent bridges.

Authentication relies on RFC 9449 Demonstrating Proof-of-Possession (**DPoP**). Rather than storing master user passwords, the agent generates an asymmetric cryptographic key pair and signs short-lived access tokens for every request. Permissions are strictly scoped: `poppy:read` allows product catalog lookups and FAQ searches, while `poppy:write` enables cart additions, order placements, and reservation modifications. High-risk write operations, such as executing financial transactions, require explicit human-in-the-loop confirmation before completion.

## The Agentic Commerce Coalition and Amazon's Wall

The protocol gains immediate ecosystem weight through Shopify's merchant reach and Stripe's payment rails. Integrated with Link by Stripe, agents can finalize purchases using one-time payment credentials without ever touching raw credit card numbers. Walmart and Genesys further extend the standard across high-volume retail checkout and enterprise customer service workflows.

Yet platform fragmentation remains a major hurdle. Amazon continues to enforce closed-door perimeter defenses against automated buyers. In parallel, Visa is advancing its own Trusted Agent Protocol (TAP) centered on RFC 9421 HTTP message signatures, setting up an industry battle over identity and payment governance in agentic commerce.

## What to Watch

- **Shopify and Merchant Adoption of poppy.json**: If Shopify activates PAP manifests by default across hosted storefronts, agentic purchasing will quickly reach millions of independent brands.
- **Amazon's Defense and Visa TAP Interoperability**: Whether Amazon opens an official gateway or maintains strict perimeter blocking, and whether Visa's financial network bridges with PAP, will determine if agentic commerce converges or fractures.

## Sources

- [Personal Agent Protocol Official Site](https://personalagentprotocol.org)
- [Personal Agent Protocol GitHub](https://github.com/personal-agent-protocol/personal-agent-protocol)
- [Sierra Blog](https://sierra.ai/blog/personal-agent-protocol)
- [Reuters Amazon AI Agent Block Report](https://www.reuters.com/technology/amazon-blocks-meta-muse-ai-agent-2026-10-20/)