AP2: The Trust Layer That Makes Agent Payments Legally Defensible
Discovery and execution are necessary but not sufficient. AP2 — the Agent Payments Protocol, governed by Google — mandates cryptographically signed authorizations so every agent transaction is non-repudiable, scoped, and audit-ready.
Discovery (UCP) and execution (ACP) are necessary but not sufficient. For agentic commerce to scale beyond novelty, every transaction an agent makes must be trustworthy, attributable, and legally defensible. That is the job of the Agent Payments Protocol — AP2 — the trust layer of agentic commerce.
Get The Daily Adam in your inbox — free.
Daily intelligence on quantum, critical minerals, markets, and policy.
The Trust Layer
AP2 mandates that agent-initiated transactions carry cryptographically signed authorizations. Every payment an agent makes on a user's behalf is backed by a signed mandate that records who authorized it, under what constraints, and when. The result is a non-repudiation audit trail: a record that a user cannot later disavow, and that a merchant can prove was legitimately authorized.
Governed by Google, AP2 sits alongside UCP as the trust companion to the discovery layer — ensuring that the same agentic ecosystem that makes commerce frictionless also makes it accountable.
The Three Pillars
Verifiable Credentials (W3C). AP2 uses W3C Verifiable Credentials to express authorizations — cryptographically signed, tamper-evident credentials that a third party can independently verify. A user's spending authorization to an agent is itself a verifiable credential, not a proprietary token.
Cryptographic mandates. Each agent transaction is bound to a signed mandate defining its scope: amount ceiling, merchant category, time window, single-use vs. recurring. The mandate is enforced at execution and recorded for audit.
Enterprise audit trail. Every AP2 transaction produces an immutable, verifiable record. For enterprises, this is the difference between agentic commerce that is a compliance liability and agentic commerce that is audit-ready. Finance teams can reconstruct any agent-initiated spend with cryptographic proof of authorization.
Why AP2 Matters
Without a trust layer, agentic commerce fails at the enterprise. No CFO will authorize agents that can spend money without attribution. No regulator will tolerate payment systems where a user can plausibly deny a transaction they actually authorized. AP2 makes agent payments non-repudiable, scoped, and auditable — the prerequisites for trust at scale.
Together, UCP, ACP, and AP2 form a complete stack: discovery, execution, and trust. AP2 is the layer that turns agentic commerce from a consumer convenience into infrastructure that enterprises, banks, and regulators can adopt.