DEV Community

mengyu2022-sudo
mengyu2022-sudo

Posted on

Personal agents got a front door: notes on the Personal Agent Protocol

#ai #agents #webdev #discuss

I am not affiliated with any of the companies mentioned. This is a summary of public announcements and reporting as of October 27, 2026.

On October 6, 2026, Sierra and Meta announced the Personal Agent Protocol (PAP): an open standard that defines how a personal AI agent identifies itself to a business, states what it is allowed to do, and carries out tasks on a customer's behalf. Founding collaborators include Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart. A v0.1 specification is planned for later in October 2026, with design workshops and a reference implementation to follow.

The problem it answers

Personal agents no longer just chat. Meta's Muse began operating in September 2026; OpenAI's Dots and Anthropic's Claude Duet followed within weeks. These agents browse websites and fill in forms the way a person would, because that is the only interface most businesses offer them.

That friction is already visible. Within two weeks of launch, Amazon blocked Muse, saying the agent did not identify itself as an agent and that unauthorized agent access violated its terms. Other companies reportedly did the same. Businesses currently have no standard way to tell a customer's authorized agent from a scraper.

What PAP proposes

  • Authentication on OAuth. The agent proves who it acts for, building on infrastructure sites already understand.
  • Split control. Customers decide what access their agent receives (for example read-only vs. write); businesses decide which actions agents may perform on their systems.
  • Visibility. Companies can see when an agent is acting for a customer and what it is doing, instead of guessing from traffic patterns.

Two honest caveats from the announcement itself: payments are not in the first version (identity and permissions come first), and neither OpenAI nor Anthropic is participating yet. PAP is a proposal at v0.1 stage, not an adopted industry standard.

A crowded field

PAP is not the only contender. Google's Universal Commerce Protocol (UCP) covers the commerce journey; the Agentic Commerce Protocol (ACP), co-developed by Stripe and OpenAI, routes purchases through chatbot interfaces; Visa's Trusted Agent Protocol and Mastercard's Agent Pay work at the network layer; Google's AP2 works at the protocol layer with cryptographic mandates. Expect overlap and a shakeout.

What builders can do now

The practical preparation is the same work that makes a site agent-ready under any of these standards:

  1. Expose structured, machine-readable interfaces (MCP servers or OpenAPI endpoints) instead of relying on agents scraping pages.
  2. Design for scoped, revocable access — read and write permissions separated, with the customer's agent identifiable in logs.
  3. Decide your agent policy before agents arrive at scale: what may an authorized customer agent do on your site, and what must stay human-only?

Whether PAP wins or not, the direction is set: agents are becoming a channel, and channels need a front door.

References

Top comments (0)