Visa and Mastercard are competing to define the trust layer for agentic commerce — and their approaches, while different in implementation, both rely on cryptographic identity verification to let AI agents transact securely.
According to Payments Dive, the two networks are “jockeying to set agentic standards” while simultaneously collaborating with Google and Stripe on shared infrastructure.
Visa’s Trusted Agent Protocol
Visa launched its Trusted Agent Protocol as an open framework designed on existing web infrastructure. Its core function: helping merchants distinguish between malicious bots and legitimate AI agents acting on behalf of consumers. Visa and more than 10 partners completed secure AI transactions in pilot, setting the stage for mainstream adoption. Visa remains on track to deliver secure, AI-enabled commerce to consumers in 2026.
Mastercard’s Agent Pay
Mastercard’s approach, dubbed Agent Pay, integrates directly with Google’s Universal Commerce Protocol. In January 2026, Mastercard launched an “agent suite” to help merchants deploy agentic AI, as reported by Digital Commerce 360. Mastercard continues to collaborate on Google’s Agent Payments Protocol (AP2) and Agent2Agent Protocol.
The Shared Security Architecture
Both networks use public key infrastructure (PKI) and blockchain-based credential systems. AI agents present digitally signed authorization documents that cryptographically prove they have valid permission to conduct transactions. These documents include expiration dates, scope limitations, and revocation mechanisms.
Cloudflare published a technical guide on securing these flows, demonstrating how the infrastructure layer is being built to support both protocols simultaneously.
Where They Diverge
| Dimension | Visa | Mastercard |
|---|---|---|
| Protocol name | Trusted Agent Protocol | Agent Pay |
| UCP integration | Endorsed UCP; separate protocol | Directly integrated with UCP + AP2 |
| Merchant tooling | Partner-driven (10+ partners) | Agent Suite (first-party launch) |
| Framework type | Open framework on existing web infra | Purpose-built for agentic commerce |
| Bot detection | Primary differentiator | Handled through UCP layer |
What Merchants Should Do
The practical answer: support both. Both Visa and Mastercard endorsed UCP, and merchants who implement UCP compatibility will be positioned for either network’s agent payment protocol. The underlying PKI architecture is compatible — the differentiation is in merchant tooling and integration patterns, not in fundamental incompatibility.
The race between them benefits merchants. Competition drives faster deployment, better tooling, and more interoperability. As agent verification becomes standardized, the payment layer becomes a commodity — which is exactly how payment networks have always operated.
Related Reading
- What Is Agentic Commerce?
- AI Agent Verification: How Merchants Know They’re Dealing With a Real Agent
- Verifiable Intent: The Privacy Architecture
Leave a Reply