Sierra and Meta launch the Personal Agent Protocol: open rules so your AI agent can shop, book, and pay
Sierra, Meta, Walmart, Stripe, Shopify, Instinct, Rocket and Genesys unveiled the Personal Agent Protocol — an open standard for how personal AI agents authenticate and transact with businesses. A v0.1 spec is planned for later this month.
On Tuesday, Sierra announced the Personal Agent Protocol — an open standard that Meta and Sierra are developing with Genesys, Instinct, Rocket, Shopify, Stripe and Walmart. The goal is to define exactly how a personal AI agent — the kind that books your flights, buys your gifts and reschedules your dentist — interacts with businesses, and how those businesses can tell it apart from a random bot.
Why now: Muse went viral, and the bots arrived uninvited
The timing is no accident. A month after Meta launched Muse, its personal agent became a viral sensation — soaring to the top of Apple's App Store, ahead of ChatGPT, where CNBC reports it remains. Meta's David Singleton, head of Meta Superintelligence Labs and former technology chief at Stripe, says Muse already has millions of users in the US and is growing rapidly, with people using it for everything from signing kids up for classes to finding gifts.
That explosion is exactly what triggered the friction. Amazon has already blocked Meta's agents, citing worries about website scraping, and blocked Perplexity's AI agent over the same concern. For Sierra co-founder Bret Taylor — who is also OpenAI's chairman and is leading the initiative — the lesson is that businesses need ground rules before they open the door.
"Companies will know when it's a personal agent versus an actual person. For a lot of companies there's a risk: you don't want just a random bot that isn't acting on behalf of a person to have access to this service," Taylor told CNBC. "It is kind of chaos until such a standard exists."
What the protocol actually does
Two problems sit at the center: authentication and visibility. Taylor compared the effort to the "log in with Google or Facebook" experience — a technology he worked on as Facebook's tech chief — arguing the protocol will help businesses authenticate agents the same way they authenticate people, while giving users visibility into what those agents do on their behalf.
Singleton made a bigger comparison: email. "We're defining rails that we hope personal agents and business agents can run over for the future," he said. "If you think about email, it works great because it is a standard that everyone can use to talk to each other, and we think this is going to be quite similar."
The security argument is the practical one. For agents to complete purchases and bookings, customers must share credit card and personal information. The standard, Singleton argued, creates the visibility and control that makes that safe — so a shopper's agent can pay a merchant without either side flying blind.
Open — but not yet universal
Two conspicuous absences: OpenAI and Anthropic aren't signed on. Taylor says he expects the AI giants to participate and would be "really disappointed" if competitors don't adopt it. "The whole point of this is to be an open standard," he said.
The first concrete deliverable is a v0.1 specification, planned for later this month. That version will show whether the protocol is a real standard or a launch-day coalition — and whether the companies that need it most (retailers like Amazon, who are currently blocking agents outright) ever come to the table.
Still, the lineup matters. Shopify and Stripe handle the checkout; Walmart is one of the biggest merchants in the world; Genesys, Instinct and Rocket bring the enterprise and messaging channels. If this standard sticks, "your agent bought this for you" could become as ordinary as a checkout button.