During 2026, AI platforms stopped being just a place where people search for products and started becoming a place where, increasingly, they also buy. OpenAI, Google, Visa and Mastercard launched or updated protocols that let an AI agent compare prices, build a cart and complete a payment on a person's behalf. The model is still settling, but there are already concrete decisions an online store can make today to avoid being left out as that traffic grows.
From "buy inside the chat" to "discover in the chat, buy on your site"
OpenAI launched Instant Checkout inside ChatGPT in September 2025, promising that a user could complete a purchase without ever leaving the conversation. Six months later, in March 2026, the feature was scaled back: merchant adoption stayed low, and keeping prices and stock in sync in real time inside the chat turned out to be harder than expected. OpenAI shifted the product toward a different model: ChatGPT helps people discover and compare products, but the payment gets finished on the merchant's own site, like a normal purchase. In June 2026, Visa and OpenAI announced that tokenized Visa credentials can now be used to let an agent initiate checkout inside ChatGPT, reopening the door to more direct purchases, but on a sturdier payments foundation than before.
The protocols shaping this ecosystem
In parallel, several competing (and in some cases complementary) standards emerged to define how an agent identifies itself and pays: OpenAI's ACP, Google's AP2 and UCP, Visa's Trusted Agent Protocol, and Mastercard's Agent Pay. In simple terms, they all solve two problems: how an agent proves it's acting with a real person's actual permission (Google's AP2 uses cryptographically signed "mandates" for intent, cart and payment), and how a merchant tells a legitimate shopping agent apart from a malicious bot (Visa's Trusted Agent Protocol attaches a cryptographic signature to every agent request so the merchant can verify it). There's no single winner yet, so the sensible move for a small or mid-sized business is not to bet its entire technical integration on just one protocol.
What your store needs for an agent to be able to buy from it
The first thing — and what matters most right now — isn't integrating with any new protocol: it's having accurate, complete, real-time product data (price, stock, variants, shipping) with proper structured markup (schema.org Product) on every page. That was the most cited failure behind Instant Checkout: stale catalog data. An AI agent, just like a search engine, can only recommend or buy what it can read with confidence. Second, it's worth checking with your payment provider (or whoever processes your transactions) whether they already support, or have concrete plans for, verified agents under Visa's Trusted Agent Protocol or Mastercard Agent Pay. Third, if you have meaningful traffic volume, start looking at your site logs to identify AI agent traffic (via user-agent) and make a deliberate decision about what access you grant, instead of blocking it outright or letting it in unchecked by default.
What still hasn't changed
Most online purchases in 2026 are still completed on the merchant's own site, through a traditional checkout, and brand trust is still a human factor no protocol replaces. You don't need to rebuild your store for "AI agents" before you've nailed the basics: speed, a simple checkout, clean product data. That's also, not coincidentally, exactly what any agent needs to be able to recommend you with confidence.
If you want to check whether your catalog and your site are ready for this shift — from structured markup to your payment gateway integration — we can audit your online store and tell you exactly what to fix first.