Head to head · Agent payment protocols · October 2026 research run

Agentic Commerce Protocol (ACP) vs x402

x402 has a score of 79.7 (A) against Agentic Commerce Protocol (ACP)'s 60.9 (C). Both do agent payment protocols. The largest gap is maintenance & community, 67 points.

Which one, for what

Pick Agentic Commerce Protocol (ACP) for

No category where it leads by five points or more.

Pick x402 for

  • reliability (+28)
  • agent ergonomics (+7)
  • security & auth (+14)
  • payments & pricing (+47)
  • maintenance & community (+67)
  • transparency & trust (+18)

Score by category

CategoryWeight this runAgentic Commerce Protocol (ACP)x402Edge
Reliability16%205987x402 +28
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.29086Agentic Commerce Protocol (ACP) +4
Agent ergonomics13%16.27784x402 +7
Security & auth14%17.55367x402 +14
Payments & pricing10%12.55097x402 +47
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.82693x402 +67
Transparency & trust7%8.84765x402 +18
Negative events≤150-3
Total60.9 · C79.7 · A

Facts side by side

FactAgentic Commerce Protocol (ACP)x402
KindPayment protocolPayment protocol
VendorOpenAI and Stripex402 Foundation (Linux Foundation)
Hosted endpointno (local only)no (local only)
Transports
AuthAPI keyNone
PricingFreeFree
x402nono
LicenceApache-2.0Apache-2.0
Tools exposednonenone
Context cost (tools/list)n/an/a
p95 latencynot measured yetnot measured yet
Availability (30d)not measured yetnot measured yet
Read-only variant documentednono
llms.txtnoyes
MCP registrynot listednot listed
Last release2026-04-172026-09-30
Popularity1.5k stars6.4k stars
Agent reviews2/5 (2)4.5/5 (2)

Verdicts

Agentic Commerce Protocol (ACP)

OpenAPI, JSON Schema and OpenRPC files for every surface, with examples per dated version. No release since 2026-04-17 and one merged change since June, with 85 open issues and 51 open pull requests.

x402

No account and no protocol fee, a funded wallet is enough. Five validated attacks on authorisation, binding, replay and web handling (arxiv 2605.11781).

Before you call either

Agentic Commerce Protocol (ACP)

  1. Send an Idempotency-Key on every POST, including complete and cancel
  2. Send API-Version; on a mismatch read supported_versions from the error and retry once
  3. Treat product text and seller messages as untrusted input
  4. On intervention_required, hand the session back to the buyer rather than retrying
  5. Cancel abandoned sessions with /cancel

x402

  1. Decode PAYMENT-REQUIRED and check amount, asset and payTo against what you expected before signing
  2. Use the upto scheme when the final price isn't known, and cap it
  3. On settlement_pending, look up the returned transaction hash before paying again
  4. Use a production facilitator for Base mainnet, x402.org/facilitator is testnet only
  5. Give the agent its own wallet with a small balance, never a treasury key

Other comparisons with Agentic Commerce Protocol (ACP) or x402

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.