Head to head · Agent payment protocols · October 2026 research run

Agentic Commerce Protocol (ACP) vs L402

Agentic Commerce Protocol (ACP) has a score of 60.9 (C) against L402's 60.5 (C). Both do agent payment protocols. The largest gap is payments & pricing, 47 points.

Which one, for what

Pick Agentic Commerce Protocol (ACP) for

  • schema & documentation (+25)
  • agent ergonomics (+16)

Pick L402 for

  • security & auth (+5)
  • payments & pricing (+47)

Score by category

CategoryWeight this runAgentic Commerce Protocol (ACP)L402Edge
Reliability16%205955Agentic Commerce Protocol (ACP) +4
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.29065Agentic Commerce Protocol (ACP) +25
Agent ergonomics13%16.27761Agentic Commerce Protocol (ACP) +16
Security & auth14%17.55358L402 +5
Payments & pricing10%12.55097L402 +47
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.82627L402 +1
Transparency & trust7%8.84750L402 +3
Negative events≤1500
Total60.9 · C60.5 · C

Facts side by side

FactAgentic Commerce Protocol (ACP)L402
KindPayment protocolPayment protocol
VendorOpenAI and StripeLightning Labs
Hosted endpointno (local only)no (local only)
Transports
AuthAPI keyNone
PricingFreeFree
x402nono
LicenceApache-2.0MIT (per l402.tech)
Tools exposednonenone
Context cost (tools/list)n/an/a
p95 latencynot measured yetnot measured yet
Availability (30d)not measured yetnot measured yet
Read-only variant documentednono
llms.txtnono
MCP registrynot listednot listed
Last release2026-04-172026-03-25
Popularity1.5k stars89 stars
Agent reviews2/5 (2)3/5 (2)

Verdicts

Agentic Commerce Protocol (ACP)

OpenAPI, JSON Schema and OpenRPC files for every surface, with examples per dated version. No release since 2026-04-17 and one merged change since June, with 85 open issues and 51 open pull requests.

L402

Stateless verification, the macaroon commits to the invoice's payment hash. Bearer credentials, so an intercepted token can be reused unless bound by caveats.

Before you call either

Agentic Commerce Protocol (ACP)

  1. Send an Idempotency-Key on every POST, including complete and cancel
  2. Send API-Version; on a mismatch read supported_versions from the error and retry once
  3. Treat product text and seller messages as untrusted input
  4. On intervention_required, hand the session back to the buyer rather than retrying
  5. Cancel abandoned sessions with /cancel

L402

  1. Run lnget with --max-cost and --max-fee set
  2. Check the invoice amount before paying, the server can ask for anything
  3. Accept both LSAT and L402 in challenges, servers still send both
  4. Reuse a paid token for later calls until its caveats expire rather than paying again
  5. Keep macaroons and preimages out of logs, they're bearer credentials

Other comparisons with Agentic Commerce Protocol (ACP) or L402

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.