Your Next Customer Might Be an AI Assistant
Customers' assistants are starting to sign in, look things up and book on their behalf. Decide what they may do before they arrive.
By John Martines · October 9, 2026 · 6 min
Meta, Sierra, Walmart, Shopify and Stripe just backed a standard for how a customer's AI assistant signs in to a business. Here is what that means for a small business, and the one-page rule to write this week.
A customer is driving between jobs and says to her phone: "Move my Thursday cleaning to Friday, and ask if they can do the windows too." She never opens your website. Her assistant does. It finds your booking page, signs in as her, sees the open Friday slot, and asks whether it may change the appointment.
Nobody on your staff saw it happen. The only trace is a moved appointment and a note about windows.
That scene is close to real now. On October 6, 2026, two large companies published a plan for exactly this kind of visit, and some of the biggest names in retail and payments signed on.
An AI agent is an assistant that does things, not just answers questions. A personal agent works for one person: it can browse, fill in forms and make requests in that person's name.
The new standard is called the Personal Agent Protocol. Sierra (a company that builds customer service agents) and Meta published it, with Genesys, Instinct, Rocket, Shopify, Stripe and Walmart named as founding partners. It sets out how a customer's agent should introduce itself to a business and what it is allowed to do once inside.
It works in two levels. As a guest, the agent can look around the way any visitor would: check stock, read a returns policy. When the customer signs in through it, the customer chooses whether the agent gets read-only access (look at orders and appointments) or write access (change things). The sign-in uses OAuth, the same "Sign in with..." technology most websites already rely on. The business decides where agents come in: through its website, through its software connections, or by talking to the business's own AI agent.
A first version of the specification is due later this month. Payments are left out of it for now, as a future addition.
How it got here:
- April 29, 2025: Mastercard announced Agent Pay, with special payment tokens so an agent can pay within limits the cardholder sets.
- August 28, 2025: Cloudflare introduced "signed agents," using a method called Web Bot Auth. An agent's requests carry a digital signature, so a website can tell a known agent from an anonymous bot. OpenAI's ChatGPT agent was in the first group.
- September 29, 2025: Stripe and OpenAI released the Agentic Commerce Protocol, the plumbing behind buying inside ChatGPT.
- October 14, 2025: Visa announced its Trusted Agent Protocol, built with Cloudflare, so stores can recognize approved shopping agents. Visa cited Adobe data showing AI-driven traffic to US retail sites up more than 4,700% in a year.
- January 2026: Google launched the Universal Commerce Protocol, with Shopify and Walmart among the retailers involved.
- June 2026: Cloudflare's chief executive, Matthew Prince, said automated traffic now makes more than half of the requests for web pages on its network, a crossover he had not expected until 2027. That count includes search crawlers and other bots, not only shopping assistants.
- October 6, 2026: Sierra and Meta published the Personal Agent Protocol.
Our earlier piece, [Your Customers May Never Visit Your Website](/articles/mcp-apps-explained), covered one direction: a business putting its own tools inside ChatGPT, Claude or Copilot. This is the other direction. The customer's assistant comes to you.
Three things change.
Your "visitor" may be software. It will read your hours, your prices and your policies, and it will act on what it reads. If your site says one thing and your staff say another, the agent will go with the site.
The customer isn't watching each step. A person who books online sees the confirmation screen. A person who asked an assistant may only see a summary. Mistakes surface later, as a no-show or a disputed charge.
It is a new door for fraud. Anything an honest agent can do, a stolen login plus an agent can do faster and at volume. Card networks and Cloudflare are building ways to prove an agent is legitimate because fake ones are already a problem. Refunds, address changes and payment changes are where the damage happens.
The good news: most of what an agent will want in the next year is boring and useful. Check whether you have it in stock. Find an open slot. Look up an order. Move an appointment. Those are the same calls and emails your staff answer all day.
A free account opens the rest of this article and the whole library.