Author: Hualin Wudwang
Edited by: Jingyu
The era of agents "consuming" on behalf of users has finally arrived.
On November 13, 2026, U.S. time, two companies held two launches on the same day. On one side, enterprise-grade conversational agent company Sierra, in collaboration with Meta, officially launched the Personal Agent Protocol Poppy v1.0, solving the problem of how an assistant can “get inside.” On the other side, OpenAI introduced the ChatGPT Wallet for personal assistants, addressing how an assistant can “make payments.”
Connecting entry and checkout on the same day is intriguing in itself. More noteworthy is the fact that the same group of names stands behind both solutions. Visa and Mastercard appear on both lists, while companies like Shopify and Stripe, which manage e-commerce and payment infrastructure, are among Poppy’s core partners.
The next competition among agents appears on the surface to be a race among giants for entry points, but beneath lies a strategic preemptive positioning around commercial channels.
Personal Agent Protocol, PPP
Sierra and Meta jointly release the Personal Agent Protocol Poppy v1.0 | Image source: Sierra's official blog
In the past, personal assistants accessing corporate websites could only act like invisible visitors; businesses couldn't identify who they were and dared not entrust them with sensitive tasks such as checking orders, changing addresses, booking flights, or financial pre-approval.
Poppy, introduced by Meta and Sierra, addresses the core issue of trust by enabling businesses to cryptographically verify three things when a request is received: which assistant is knocking, which user it represents, and what level of permissions it has.
The core of the Poppy protocol is "house number," "foundation," and "two-way authorization."
“Door sign.” Companies integrating with Poppy place a configuration file at the standard website path /.well-known/poppy. Think of it as a visitor guide posted at the entrance of a shop, clearly listing which endpoints are open, how to log in, and what actions are permitted. When an assistant arrives, there’s no need to guess how to click buttons—just check the door sign and follow the rules.
"Foundation." Poppy does not overturn existing internet communication methods; it is directly built on OAuth authorization, HTTPS encrypted transmission, OpenAPI, and the Model Context Protocol. If a user is simply checking product prices, the assistant can interact as an anonymous visitor; however, any account-related operations require authorized login to verify the user's identity.
Two-way authorization. On the user side, you can choose whether to grant the assistant read-only access or allow it to modify information and execute transactions. On the enterprise side, you define how far an external assistant can go within your own system. Both sides must agree for any interaction to be authorized.
From the announcement, Sierra and Meta have partnered to drive this protocol, and their roles are highly complementary. Sierra, founded by former Salesforce co-CEO Bret Taylor and former Google executive Clay Bavor, specializes in helping businesses build their own customer service agents—naturally placing them on the “host” side. Meanwhile, Meta’s personal assistant, Muse, is a classic “visitor,” needing to access countless websites. Both sides contributed equally to make this standard a reality. Currently, when Muse visits participating sites, it automatically prioritizes locating and invoking the Poppy protocol.
Open protocols most fear the cold start dilemma of "which came first, the chicken or the egg." This time, what truly helped Poppy cross the threshold was the e-commerce infrastructure giant Shopify.
At the time of the protocol’s launch, Shopify automatically enabled and generated Poppy discovery files for every merchant across more than 175 countries worldwide, requiring no manual configuration. Coupled with over 100 design partners—including industry leaders such as Delta Air Lines, 1Password, Okta, and Cloudflare—this access system established a broad reach from day one.
Cashless Agent
Now that the entry issue is resolved, the next challenge is making the payment.
Having an agent spend money on your behalf triggers resistance in most people. OpenAI’s ChatGPT Wallet is explicitly designed to enable agents to complete transactions without ever accessing actual funds.
In the actual shopping process, users can have their DOT search for products, compare prices, add items to the cart, and prepare the checkout page. But once they reach the payment step, DOT must pause and hand control back to the human. The user must personally verify the product list, total amount, and selected credit card, then authorize the transaction through biometric methods such as facial recognition or fingerprint scanning.
OpenAI Personal Assistant dot (Rufus) initiates a "Review Purchase" checkout confirmation during the conversation | Image source: OpenAI
More critical security features are handled in the background. Whether it’s the runner or the merchant receiving payment, neither ever sees your actual credit card number during the transaction. After you authorize the payment, the partnered card network generates a one-time payment credential containing a temporary card number, security code, and expiration date. The merchant receives only this temporary information—your real card number is never exposed.
To implement this system, OpenAI partnered with American Express, Mastercard, and Visa to co-develop it, fully preserving existing credit card rewards, benefits, and chargeback protections. At launch, OpenAI explicitly clarified that the ChatGPT Wallet is not a cryptocurrency wallet, does not use blockchain or stablecoin payments, and operates entirely on traditional fiat banking and card network infrastructure.
From publicly available information, the commercial motivations of all parties are clear. For OpenAI, if a personal assistant can only offer advice or share links, it will remain stuck in the role of a guide; by keeping the checkout process within the conversational ecosystem, Dots can evolve from an advisor into a converter. For traditional card networks, once agents become new entry points for consumption, no one wants to see transaction traffic diverted to new payment networks. Through this partnership, the three major card networks have naturally reintegrated the new channel back into their own settlement networks.
Even so, OpenAI's first step was still quite restrained.
The ChatGPT Wallet will initially be available in a limited release to U.S.-based ChatGPT Pro subscribers aged 18 and older, supporting eligible U.S.-issued debit and credit cards, including Amex, Visa, Mastercard, and cards issued by Chase. Based on publicly available information, starting with paying users likely reflects a cautious approach to risk management.
When giants join forces
Placing these two news stories side by side reveals an interesting cross-sectional picture.
Among Poppy’s initial core partners are Shopify, Stripe, PayPal, Visa, and Mastercard; on the ChatGPT Wallet side, the developers backed are Amex, Visa, and Mastercard. The only ones truly spanning both are Visa and Mastercard, which appear on Poppy’s list and are also development partners for the Wallet.
More intriguingly, OpenAI’s own name appears prominently among Poppy’s list of over 100 design partners.
Over 100 design partners have joined the Personal Agent Protocol’s inaugural cohort, including OpenAI, Visa, and Mastercard | Image credit: Sierra
In the consumer market, Meta’s Muse and OpenAI’s Dots are direct competitors, both vying fiercely to be the first app users open each day. But when it comes to enterprise access, these two giants sit at the same conference table, preparing to share the same access card. The reason is clear: airlines or retailers are unlikely to maintain separate, incompatible interfaces for each model provider. On the C-side, everyone competes to win entry points; on the B-side, everyone must build a unified pass.
There is also a signal on the technological roadmap. Automated trading between agents was once seen by many as a potential use case for stablecoins. However, in this round of implementation, both financial and e-commerce infrastructure have opted for a gradual approach—using a standardized authorization agreement combined with a one-time virtual card credential—temporarily setting aside crypto-based solutions. By first integrating established risk management and settlement systems to get transactions running, this path is the most straightforward for traditional business systems.
Of course, a mystery remains in the public information.
Poppy and the ChatGPT Wallet have not yet clarified whether they have been integrated. It remains to be verified whether, in the future, when a user’s dot enters a Shopify store that has enabled the Poppy protocol, it can seamlessly complete the handshake and proceed with payment via the Wallet.
The agent's autonomy stops at the shopping cart.
When you compare Poppy’s two-factor authorization with ChatGPT Wallet’s mandatory biometric authentication, you can see the industry’s shared底线—Human in the loop.
Whether reading data, modifying orders, or processing actual payments, the assistant’s autonomy stops precisely at the shopping cart. It can compare prices across the web and fill out checkout fields for you, but the final decision to confirm must always remain with the user.
This design maintained security but left several unanswered questions.
For example, there is ambiguity regarding responsibility for transactions. If the assistant misinterprets your intent when selecting products, or is misled by hidden malicious prompts while browsing the web, resulting in an unauthorized purchase—even if you ultimately authenticated with facial recognition—current bank chargeback protections have not clearly defined whether they cover errors made by the assistant.
Coverage and access barriers for participating in protocol transactions still exist. While Shopify has enabled a massive number of merchants, how long will it take for countless long-tail websites on the internet to display the Poppy sign? Meanwhile, the ChatGPT Wallet is currently only available to Pro subscribers in the United States; how long other markets and regular users will have to wait remains uncertain.
Moreover, requiring biometric verification for every transaction certainly enhances a sense of security. But imagine a future where you’re accustomed to having your assistant order coffee and buy daily essentials every day—each small task requiring you to pull out your phone and scan your face. The convenience promised by fully automated agents could instead become a new source of friction in high-frequency scenarios.
At this stage, where assistants are not yet perfect and social trust has not been fully established, allowing users to retain the final power of “clicking confirm” may be a cost the industry must pay to gain entry—and it also determines the pace at which personal assistants can be commercialized.
Next time, when you ask your AI assistant to change your shipping address and pick up your order, it won’t be blocked as a bot anymore. It presents its compliant identity, enters the store, reads the signage, fills your cart, then pauses at checkout, handing you your phone and waiting for your face to align with the camera.
Today’s facial recognition is the final barrier before people entrust their assistant. But one day, when everyone is accustomed to letting programs handle daily transactions, will this single confirmation become just a trivial tap, dismissed without thought—like all the authorization agreements on websites that almost no one truly understands or bothers to read carefully?