An Agentic Commerce Protocol is a set of technical rules that lets an AI interface discover products and prepare structured checkout requests with merchant systems. It defines how information and requests are exchanged; it does not, by itself, grant an agent authority to purchase or replace a merchant’s order validation and payment processing.
In cybersecurity, the protocol’s boundaries matter because an agent may handle purchase details or interact with payment workflows. Strong implementations authenticate requests, limit permissions to specific actions, validate orders, prevent replay or duplicate processing, and keep audit logs. These controls help reduce risks such as unauthorized purchases, repeated orders, and exposure of sensitive data. Human confirmation and payment authorization can remain separate gates, so structured checkout does not automatically mean autonomous buying.