Your AI agent has learned to shop, but it still has to knock on the store’s door — and until now, every store has answered differently. On Friday, Sierra released version 1.0 of the Personal Agent Protocol, nicknamed Poppy, an open standard telling a business how to recognise an agent, check what it may do, and let it in. Shopify switched it on for every store; Meta’s Muse now looks for it first on every site.

It is the other half of this week’s agent-commerce story. OpenAI’s ChatGPT Wallet, launched the same day, solved the payment half: how an agent pays without ever seeing your card. Poppy solves the entry half: how the agent introduces itself and learns a shop’s rules.

What Poppy actually does#

The mechanics are deliberately boring. A company publishes a small file, poppy.json, at a fixed address on its domain — /.well-known/poppy.json — advertising what it offers, what an agent may do, and how to sign in. The agent reads the file, introduces itself, and works through the company’s agents, website or APIs.

Identity is the core of it. A signed Session header identifies the personal agent and a pseudonymous user, tying activity together across channels. Standard OAuth authorises actions on a customer’s account, and signed-out interactions can work without an OAuth server at all, so a company can expose limited functionality first. A user’s ID stays stable at one company but is opaque and different at every other, so businesses cannot match the same person across sites.

The security rules are written for the failure mode everyone worries about: company content must be treated as data, never as instructions, so a doctored listing cannot steer the agent, and access tokens, private keys and authorisation codes must stay out of model context. Messages are labelled person or AI, and a conversation can hand off to a human.

A glowing AI agent orb shaking hands with a storefront gate, an identity card and a green approval checkmark between them
AI-generated illustration: the agent introduces itself before the store lets it in. Credit: AI Frontier Post

Shopify flips it on everywhere#

The launch partner that turns a standard into infrastructure is Shopify. It powers businesses in more than 175 countries, and every Shopify store now automatically publishes a Poppy file — merchants do nothing.

The division of labour with the Universal Commerce Protocol is clean. UCP handles the shopping itself: finding products, filling a cart, checking out. Poppy handles what happens before that: the agent shows up, says who it is, and finds out what it is allowed to do. Every Shopify store already supports UCP by default. Shopify also co-authored Poppy’s commerce extension, which links the two: an agent can shop as a guest or sign in, must ask the customer before certain actions, and can talk directly to the store’s agent through UCP Ask.

Muse checks first, and more than 100 companies are in#

On the agent side, the distribution is Meta’s. Muse, the company’s AI agent, now automatically looks for Poppy first on every site it visits — and any company can implement it independently.

Sixty new companies joined as design partners, bringing the total past 100 — including Cisco, Delta Air Lines, Intuit, Salesforce, Twilio and Zoom — after five weeks of testing drafts against real websites, APIs and agents.

Mercury lets agents check balances, review transactions, keep budgets up to date, and initiate payments subject to the account’s approval policy. Synchrony is exploring agent-led shopping that weighs affordability and financing offers across its 500,000-plus merchant locations. Turkish Airlines lets agents check fares and flight status, pull up bookings, and find upgrades that members approve before paying.

A person approving a payment on a smartphone while a small robot assistant stands at a shop counter
AI-generated illustration: the customer still approves consequential actions. Credit: AI Frontier Post

Still a draft — and that’s the honest part#

Sierra calls it v1.0; the specification and kit call it draft 1.0, and the spec permits further fixes, including breaking changes. Shopify and Muse give Poppy immediate reach before its foundation is fully settled.

The implementation kit covers the company side: a coding-agent skill and a command-line validator that acts as a test personal agent. Building starts only after the company approves the design. For each deployment, the boundary is company-selected channels, user-approved OAuth scopes, and approval policies for consequential actions. Poppy does not decide what an agent may do. It gives the company a standard way to say so, and the customer a standard way to control it.

What to watch#

First, whether other agent makers adopt it: a standard only Muse checks is a Meta feature, not a web standard. If OpenAI’s dots and Google’s Gemini start looking for poppy.json too, Poppy becomes the default handshake. If they build their own, the web gets competing front doors.

Second, whether the draft settles, and whether the permission model survives contact with real money. The first agent that buys the wrong thing at scale will test the approval policies and the data-not-instructions rule.

Entry and payment landed on the same day. The agent-commerce stack is assembling fast — the question is whether it assembles around open standards like Poppy, or around each platform’s own rules.

Sources: Sierra — Releasing Personal Agent Protocol 1.0 (Nov. 13, 2026); Unite.AI — Sierra Releases Poppy 1.0 With Shopify and Meta Muse Support (Nov. 13, 2026); Personal Agent Protocol — Partners. Prior coverage: Sierra and Meta launch the Personal Agent Protocol: open rules so your AI agent can shop, book, and pay; OpenAI launches ChatGPT Wallet, letting its dots agents pay without ever seeing your card.