For the better part of two years, agentic commerce lived in demos. An agent would browse, fill a cart, and then hand the checkout back to a human, because nobody had solved the part where money actually moves. In June that excuse ran out.

Inside roughly one week, three of the largest names in payments each shipped a way to put their credential inside an AI agent. Visa partnered with OpenAI. Stripe gave merchants tools to sell across multiple agents. PayPal went live with in-app agentic checkout in the UK. Three announcements, one move.

The question is no longer whether agents will pay. It is whose token they carry when they do.

That is the contest now, and it explains why everyone moved at once. The credential an agent reaches for at checkout is the credential it keeps reaching for. First to sit inside the agent wins the default.

Visa wires into OpenAI

Visa used its Payments Forum in San Francisco to announce a partnership with OpenAI that lets agents make payments across OpenAI's platform, Finextra reported. The plumbing underneath is Visa Intelligent Commerce, the tokenized agent program Visa has been building since 2025, which we covered when Visa connected it to live agentic checkout.

The mechanics matter more than the logos. Visa is not letting an agent hold a card number. It is issuing a tokenized credential scoped to the agent, so the agent can transact inside OpenAI's surface without the raw card ever touching the model. That is the same tokenization Visa already uses for contactless and card-on-file, pointed at a new holder. Reaching hundreds of millions of ChatGPT users is the prize, and Digital Commerce 360 framed it as Visa moving deeper into agent-led payments rather than testing the water.

The credential is scoped on purpose. A bank can revoke it, cap it, and tie it to one agent, which is the difference between a card number an agent copies and a token a bank can constrain. That control is what gets issuers comfortable letting an autonomous program spend at all.

The storefronts open agent lanes too

The rails did not move alone. Stripe used the same week to ship tools for UK businesses to sell globally and, in its own words, build for the AI economy, including the ability to sell across multiple AI agents alongside new fraud defenses and multi-currency treasury. PayPal teamed with fashion search startup Hey Savi to launch what they call the UK's first agentic commerce platform with in-app checkout.

Even the destinations are rebuilding around agents. Amazon is retiring its Rufus assistant in favor of a new agentic Alexa for Shopping that automates routine purchases and monitors prices. When the merchant, the wallet, and the rail all cut agent lanes in the same week, the demand signal stops being a forecast.

The real contest is authorization, not checkout

Moving money is the easy part. Any of these companies can settle a transaction. The hard part, the part worth a moat, is proving that a given agent is allowed to spend, within what limits, on whose authority. That is an authorization problem, and it is where these announcements quietly diverge.

A tokenized, scoped, consent-bound credential is a real answer to that problem. It is also a walled one. A Visa agent token works inside Visa's network. A credential issued by a rival rail works inside that rival. An agent that wants to shop across both today has to carry both, and the consent rules do not travel between them. We made this case in our look at agent mandate portability: the credential layer is converging fast, but the mandate, the actual grant of permission, stays locked to whoever issued it.

This is the same gap that machine-native rails like x402 are trying to close from the other side, as we have tracked since its launch. The networks are racing to own the credential. Whether the permission attached to it can move is still open.

What to watch

Two signals will tell you how this resolves. The first is interoperability. If agent tokens stay walled to each rail, the winner is whoever sits inside the most-used agents, which makes the OpenAI partnership look less like a distribution deal and more like a land grab. The second is liability. When an agent buys the wrong thing inside its authorized scope, the dispute has no clean owner yet, and none of these launches names one.

The infrastructure is ahead of the demand, as it has been for most of this cycle. What changed this month is that the infrastructure stopped being a slide and became a token your agent can actually spend.

Sources

If the credential inside your agent comes from a single network, have you chosen a payment method, or chosen who gets to say no?

Charlie Major is a Product Development Manager at Mastercard. The views and opinions expressed in Major Matters are his own and do not represent those of Mastercard.