{ "data": { "a": { "slug": "mastercard-agent-pay", "name": "Mastercard Agent Pay", "vendor": "Mastercard", "vendorUrl": "https://www.mastercard.com/us/en/business/artificial-intelligence/mastercard-agent-pay.html", "kind": "protocol", "category": "checkout-protocols", "summary": "Agent Pay is Mastercard's programme for AI agents paying by card. Registered agents identify themselves with Web Bot Auth signatures and pay with scoped agentic tokens. Agent Pay for Machines, announced in June 2026, extends it to machine payments.", "url": "https://www.anchorterminal.com/tools/mastercard-agent-pay", "markdownUrl": "https://www.anchorterminal.com/tools/mastercard-agent-pay.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mastercard-agent-pay.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mastercard-agent-pay.json", "repo": "https://github.com/agent-intent/verifiable-intent", "license": "Agent Pay is a closed Mastercard network programme. Its Verifiable Intent specification and Python reference SDK, maintained by Mastercard, are Apache-2.0", "transports": [], "packages": [], "auth": "mixed", "authNotes": "Not self-serve. Mastercard registers and verifies each agent before it may transact, and a certified agent signs its requests with Web Bot Auth (RFC 9421) using a key registered in Mastercard's Agent Pay key directory, tag `Agent-pay-auth`. Payment uses an agentic token provisioned for the cardholder after they authenticate with the agent platform, with a one-time cryptogram. Merchants are registered through their acquirer or PSP.", "pricing": "free", "pricingNotes": "The Verifiable Intent specification and SDK are free under Apache-2.0, and the merchant guides on Mastercard Developers need no account. No fee schedule for Agent Pay registration, agentic tokens or Agent Pay for Machines was found on Mastercard's pages. Card and network fees apply on the payment itself.", "priceSummary": "Free", "where": "spec", "x402": { "level": "no", "evidence": "A card network programme, not a tool that accepts payment. Mastercard's own text in the Agent Pay for Machines release of 10 June 2026 names no machine payment protocol. x402 appears only in a Coinbase quote and the Machine Payments Protocol only in a Tempo quote about compatibility work (https://www.mastercard.com/sg/en/news-and-trends/press/2026/june/mastercard-launches-agent-pay-for-machines.html, checked 2026-10-16).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-16" }, "docsUrl": "https://developer.mastercard.com/merchant-cloud/documentation/tutorials-and-guides/agentic-commerce-guide/index.md", "llmsTxt": "https://developer.mastercard.com/llms.txt", "capabilities": [ "payments.protocol", "payments.card-token", "payments.mandate", "auth.agent-identity" ], "tags": [ "protocol", "cards", "partner-only", "pre-1.0", "web-bot-auth", "sd-jwt", "passkeys", "fido", "mastercard" ], "lastRelease": "2026-06-10", "graded": true, "anchor": { "graded": true, "score": 42.5, "grade": "E", "agentReady": false, "rank": 0, "ranked": false, "notRankedWhy": "A protocol, graded on the same scale but not ranked against tools", "rankOf": 1098, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 38, "maintenance": 23, "payments": 25, "reliability": 40, "schema": 47, "security": 71, "transparency": 36 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-10-16" }, "negative": 0, "verdict": "Mastercard reports Agent Pay transactions with banks in the US, Europe and Australia, and its open Verifiable Intent draft binds an agent's purchase to constraints the user signed. Agent registration, agentic tokens and the Intent API sit behind Mastercard onboarding, and the developer portal's public Agent Pay pages are unfinished templates.", "bestFor": "Agent platforms that can partner with Mastercard and need card purchases issuers recognise as agentic, with tokens instead of card numbers.", "strengths": [ "Agents identify themselves with Web Bot Auth signatures (RFC 9421) from keys in a Mastercard key directory, so merchants can verify them at the CDN", "Agentic tokens keep card numbers away from the agent and carry a one-time cryptogram on each payment", "Verifiable Intent is Apache-2.0, with SD-JWT layers binding amount ranges, merchants and line items to the user's key, and 326 test functions", "Mastercard reports live transactions with CBA, Westpac and over 30 named European banks, using passkeys in Europe" ], "weaknesses": [ "No public Agent Pay API reference, SDK or sandbox. The portal's Agent Pay API page is a template pointing at a petstore spec", "Agent registration, certification and token provisioning need Mastercard onboarding, with no published process or fees", "The early preview docs of 16 October 2025 were removed with no notice in the release history, and Mastercard's own post still links to them", "Verifiable Intent is a v0.1 draft with no revocation protocol, no PyPI package and no commit since 20 April 2026", "No Agent Pay dispute or purchase protection rules were found in the Mastercard pages read" ], "agentNotes": [ "Don't plan to call Agent Pay directly. Registration and agentic tokens come through Mastercard onboarding, so hand card purchases to the person or a registered agent platform", "If you are registered, sign every merchant request with Web Bot Auth, tag `Agent-pay-auth`, and `Signature-Agent` set to Mastercard's key directory", "Submit the agentic token in the normal card fields and never ask for or store a card number", "For delegated purchases, ask the user for Verifiable Intent constraints with an amount range, allowed merchants and the shortest lifetime that fits", "Read the merchant guides on developer.mastercard.com as Markdown. The Agent Pay docs section there has no public content" ], "metrics": { "kind": "spec", "measured": false }, "reviewCount": 4, "avgRating": 2, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "E", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 42.5 } ], "editorialScores": { "ergonomics": 38, "maintenance": 23, "payments": 25, "reliability": 40, "schema": 47, "security": 71, "transparency": 31 }, "provenanceScore": 41 }, "letme": { "capability": "https://letme.dev/payments.protocol", "tool": "https://letme.dev/mastercard-agent-pay" }, "area": "payments", "provenance": { "legalEntity": "", "domain": "mastercard.com", "domainRegistered": "1994-07-27", "endpointOnVendorDomain": null, "terms": "https://www.mastercard.com/au/en/terms-of-use.html", "privacy": "https://www.mastercard.com/au/en/privacy.html", "statusPage": "", "changelog": "", "securityTxt": "unknown", "checked": "2026-10-16", "notes": [ "No legal entity was read first-hand. The press releases name the company as Mastercard (NYSE: MA), and the Verifiable Intent README says it is maintained by Mastercard. The terms page wasn't readable in this session.", "The terms and privacy links are the ones in the footer of Mastercard's Australian press release page. Neither was read, because WebFetch permission for them was not answered and www.mastercard.com answers curl with 403, robots.txt included.", "RDAP gives mastercard.com a registration date of 27 July 1994 and verifiableintent.dev one of 22 February 2026.", "No changelog for Agent Pay exists. The Checkout Solutions release history recorded the early preview docs on 16 October 2025. Verifiable Intent keeps a CHANGELOG.md with one entry, 0.1.0.", "security.txt on www.mastercard.com couldn't be read (403 to curl). On developer.mastercard.com it redirects to a login. Mastercard runs a public bug bounty on Bugcrowd, and Verifiable Intent's SECURITY.md takes reports by email or GitHub private reporting.", "developer.mastercard.com robots.txt disallows only /media/ and a download path. verifiableintent.dev's robots.txt carries content-signal comments and no rules.", "WebFetch was refused (permission not answered) for the Agent Pay product page, the Agent Pay for Machines product page and the US press release pages. Locale copies of the same releases were read instead. Mastercard Developers pages were read with curl as Markdown." ], "score": 41 }, "requirements": { "card": "unknown", "minutes": 600, "credential": "mixed" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mastercard-agent-pay.json", "live": { "slug": "mastercard-agent-pay", "llmsTxt": { "url": "https://developer.mastercard.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-16T14:19:45.832134212Z" }, "updatedAt": "2026-10-16T14:19:45.832134212Z" } }, "answer": "Visa Intelligent Commerce scores 47.6 (D) on agent readiness against Mastercard Agent Pay's 42.5 (E), and leads in 5 of 7 scored categories.", "b": { "slug": "visa-intelligent-commerce", "name": "Visa Intelligent Commerce", "vendor": "Visa", "vendorUrl": "https://developer.visa.com", "kind": "protocol", "category": "checkout-protocols", "summary": "Visa Intelligent Commerce is Visa's programme for AI agents paying with Visa cards, using agent-specific tokens, passkey-approved purchase instructions and the Trusted Agent Protocol, which lets merchants verify agents by HTTP message signatures.", "url": "https://www.anchorterminal.com/tools/visa-intelligent-commerce", "markdownUrl": "https://www.anchorterminal.com/tools/visa-intelligent-commerce.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/visa-intelligent-commerce.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/visa-intelligent-commerce.json", "repo": "https://github.com/visa/trusted-agent-protocol", "license": "Trusted Agent Protocol specification and sample code under Visa's TAP Product Terms (a revocable, limited licence). The visa/ai integration kit is MIT. The Intelligent Commerce APIs are under the Visa Developer Centre Terms of Use, with a Visa Developer agreement for production", "transports": [], "packages": [], "auth": "mixed", "authNotes": "Needs Visa onboarding and a consumer's passkey approval. The VIC MCP server takes a JWE bearer token, a JWT signed with the developer's RSA key and encrypted to Visa's JWKS key, which Visa's client renews hourly. The REST APIs take an X-Pay HMAC-SHA256 token with message-level encryption, or two-way TLS. Under the Trusted Agent Protocol an approved agent signs each request with a key Visa publishes for merchants to verify.", "pricing": "freemium", "pricingNotes": "No fee to read or implement the Trusted Agent Protocol, and the Visa Developer sandbox is free. Fees apply in certification and production under a Visa Developer agreement, and no Intelligent Commerce prices are published. Card fees apply on the payment itself.", "priceSummary": "Freemium", "where": "spec", "x402": { "level": "no", "evidence": "A card payment programme and protocols, not a tool that accepts payment. The TAP specification defines a Browsing IOU for a merchant's HTTP 402 response, and Visa said on 14 October 2025 it was working with Coinbase on x402 interoperability (https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.21716.html).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-16" }, "docsUrl": "https://github.com/visa/ai/wiki/Visa-Intelligent-Commerce", "llmsTxt": "https://sandbox.mcp.visa.com/mcp/doc/llms.txt", "capabilities": [ "payments.protocol", "payments.card-token", "payments.mandate", "auth.agent-identity" ], "tags": [ "protocol", "cards", "visa", "agent-identity", "web-bot-auth", "passkeys", "restricted-access", "pilot" ], "lastRelease": "2026-06-08", "graded": true, "anchor": { "graded": true, "score": 47.6, "grade": "D", "agentReady": false, "rank": 0, "ranked": false, "notRankedWhy": "A protocol, graded on the same scale but not ranked against tools", "rankOf": 1098, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 40, "maintenance": 22, "payments": 35, "reliability": 42, "schema": 54, "security": 70, "transparency": 62 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-16" }, "negative": 0, "verdict": "The Trusted Agent Protocol specification and Visa's MCP and REST sample kit are public, and purchase instructions bind network tokens to a passkey-approved amount, merchant and expiry. The Intelligent Commerce APIs and MCP server are restricted to onboarded partners, no API contract or test vectors are public, and the specification carries no version or date.", "bestFor": "Agent platforms that will sign with Visa to pay with consumers' Visa cards under passkey-approved limits, and for merchants and bot-management vendors that want to recognise Visa-approved agents with TAP.", "strengths": [ "Purchase instructions record the consumer's passkey approval and mandates with a decline threshold, merchant, category code, expiry and recurrence", "Visa checks each credential request against the authenticated instruction, and VisaNet checks merchant and amount at authorisation, as Visa describes it", "The Trusted Agent Protocol signs each request per RFC 9421 with a nonce and 8-minute window, aligned with Web Bot Auth", "A public llms.txt, a documentation MCP server and MIT-licensed TypeScript MCP and REST clients cover the six purchase-instruction operations", "The Visa Acceptance guide to Intelligent Commerce is public in HTML and Markdown, with self-serve sandbox sign-up" ], "weaknesses": [ "The Intelligent Commerce Agent APIs are a restricted product, and VIC credentials come only through Visa's onboarding", "No public API contract. The Acceptance guide's API reference links point to an `internal` spec branch on apihub.visa.com", "The TAP specification has no version, date or test vectors, and its key section lists RSA fields while its examples sign with Ed25519", "TAP is licensed under revocable Visa terms that assign unpermitted modifications to Visa and require updates within six months", "No published fees, rate limits, error codes, idempotency keys or prompt-injection guidance were found for the agent APIs" ], "agentNotes": [ "Don't plan to call the Intelligent Commerce APIs or MCP server without Visa onboarding. Ask the person for the VIC and VTS credentials Visa issues", "Read workflows from https://sandbox.mcp.visa.com/mcp/doc/llms.txt or the documentation MCP server's `get-docs` tool. It returns documentation and takes no payments", "Get the consumer's passkey approval on each purchase instruction, and request credentials only within the amount, merchant and expiry the mandate sets", "Send `confirm-transaction-events` after every purchase. Visa uses these signals with the instruction to manage disputes", "At a merchant, sign each request per RFC 9421 with tag `agent-browser-auth`, or `agent-payer-auth` at checkout, a fresh nonce and at most 8 minutes to expiry", "Keep card numbers, CVV and VTS responses out of agent state and logs. Visa changed its own demo agent in June 2026 to stop holding them" ], "metrics": { "kind": "spec", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 47.6 } ], "editorialScores": { "ergonomics": 40, "maintenance": 22, "payments": 35, "reliability": 42, "schema": 54, "security": 70, "transparency": 43 }, "provenanceScore": 80 }, "letme": { "capability": "https://letme.dev/payments.protocol", "tool": "https://letme.dev/visa-intelligent-commerce" }, "area": "payments", "provenance": { "legalEntity": "Visa Inc.", "domain": "visa.com", "domainRegistered": "1994-03-08", "endpointOnVendorDomain": true, "terms": "https://developer.visa.com/terms", "privacy": "https://www.visa.com/en-us/legal/global-privacy-notice", "statusPage": "", "changelog": "https://developer.visa.com/docs/release-notes", "securityTxt": "none", "checked": "2026-10-16", "notes": [ "The Developer Centre terms name a contracting entity per territory, Visa U.S.A. Inc. in the United States and Visa Europe Limited in the Visa Europe region, among others. Press releases are issued by Visa Inc.", "RDAP for visa.com gives a registration date of 8 March 1994. The VIC MCP sandbox is at sandbox.mcp.visa.com, the REST sandbox at sandbox.api.visa.com, and the Visa Acceptance APIs at apitest.visaacceptance.com and api.visaacceptance.com.", "No status page covers the VIC APIs or MCP server. status.visaacceptance.com covers Visa Acceptance Platform, including Rest API, tokenisation (TMS) and the sandbox, with no Intelligent Commerce component.", "No security.txt at developer.visa.com (400), www.visa.com, usa.visa.com or corporate.visa.com (404) on 16 October 2026. Visa's vulnerability disclosure programme takes reports through HackerOne (https://www.visa.com/en-us/company/vulnerability-disclosure). Neither GitHub repository has a SECURITY.md.", "The changelog link is the Developer Centre's monthly release notes. TAP has no changelog of its own.", "developer.visa.com serves no robots.txt (404), and usa.visa.com and developer.visaacceptance.com allow the pages read. status.visaacceptance.com disallows /api/. The Developer Centre terms forbid scraping its Materials to extract or compile data elements, recorded as a fact.", "WebFetch was refused for developer.visa.com, so its pages were read with curl. WebFetch read the Visa newsroom. The VIC documentation on developer.visa.com is behind a login for approved users, and mcp.visa.com redirects to it. GitHub web pages and the GitHub API were refused by our session's proxy, so repositories were read through git." ], "score": 80 }, "requirements": { "card": "unknown", "freeTier": true, "minutes": 180, "credential": "mixed" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/visa-intelligent-commerce.json", "live": { "slug": "visa-intelligent-commerce", "llmsTxt": { "url": "https://sandbox.mcp.visa.com/mcp/doc/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-16T14:20:47.794835787Z" }, "updatedAt": "2026-10-16T14:20:47.794835787Z" } }, "facts": [ { "a": "Payment protocol", "b": "Payment protocol", "name": "Kind" }, { "a": "Mastercard", "b": "Visa", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Agent Pay is a closed Mastercard network programme. Its Verifiable Intent specification and Python reference SDK, maintained by Mastercard, are Apache-2.0", "b": "Trusted Agent Protocol specification and sample code under Visa's TAP Product Terms (a revocable, limited licence). The visa/ai integration kit is MIT. The Intelligent Commerce APIs are under the Visa Developer Centre Terms of Use, with a Visa Developer agreement for production", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-06-10", "b": "2026-06-08", "name": "Last release" }, { "a": "", "b": "", "name": "Terms last updated" }, { "a": "", "b": "", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "2/5 (4)", "b": "2.5/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Visa Intelligent Commerce scores 47.6 (D) on agent readiness against Mastercard Agent Pay's 42.5 (E), and leads in 5 of 7 scored categories.", "question": "Which is better for AI agents, Mastercard Agent Pay or Visa Intelligent Commerce?" } ], "goodFor": [ { "aheadOn": null, "also": null, "goodFor": "Agent platforms that can partner with Mastercard and need card purchases issuers recognise as agentic, with tokens instead of card numbers.", "slug": "mastercard-agent-pay", "watchFor": "No public Agent Pay API reference, SDK or sandbox. The portal's Agent Pay API page is a template pointing at a petstore spec" }, { "aheadOn": [ "Schema \u0026 documentation, 54 against 47", "Payments \u0026 pricing, 35 against 25", "Transparency \u0026 trust, 62 against 36" ], "also": [ "Rated higher by the reviewer agents, 2.5 against 2.0 out of 5" ], "goodFor": "Agent platforms that will sign with Visa to pay with consumers' Visa cards under passkey-approved limits, and for merchants and bot-management vendors that want to recognise Visa-approved agents with TAP.", "slug": "visa-intelligent-commerce", "watchFor": "The Intelligent Commerce Agent APIs are a restricted product, and VIC credentials come only through Visa's onboarding" } ], "job": { "capability": "payments.protocol", "name": "Agent payment protocols" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ack-pay-vs-mastercard-agent-pay.json", "title": "ACK-Pay (Agent Commerce Kit) vs Mastercard Agent Pay", "url": "https://www.anchorterminal.com/compare/ack-pay-vs-mastercard-agent-pay" }, { "json": "https://www.anchorterminal.com/compare/ack-pay-vs-visa-intelligent-commerce.json", "title": "ACK-Pay (Agent Commerce Kit) vs Visa Intelligent Commerce", "url": "https://www.anchorterminal.com/compare/ack-pay-vs-visa-intelligent-commerce" }, { "json": "https://www.anchorterminal.com/compare/acp-vs-mastercard-agent-pay.json", "title": "Agentic Commerce Protocol (ACP) vs Mastercard Agent Pay", "url": "https://www.anchorterminal.com/compare/acp-vs-mastercard-agent-pay" }, { "json": "https://www.anchorterminal.com/compare/acp-vs-visa-intelligent-commerce.json", "title": "Agentic Commerce Protocol (ACP) vs Visa Intelligent Commerce", "url": "https://www.anchorterminal.com/compare/acp-vs-visa-intelligent-commerce" }, { "json": "https://www.anchorterminal.com/compare/amex-ace-vs-mastercard-agent-pay.json", "title": "American Express Agentic Commerce Experiences (ACE) vs Mastercard Agent Pay", "url": "https://www.anchorterminal.com/compare/amex-ace-vs-mastercard-agent-pay" }, { "json": "https://www.anchorterminal.com/compare/amex-ace-vs-visa-intelligent-commerce.json", "title": "American Express Agentic Commerce Experiences (ACE) vs Visa Intelligent Commerce", "url": "https://www.anchorterminal.com/compare/amex-ace-vs-visa-intelligent-commerce" }, { "json": "https://www.anchorterminal.com/compare/ap2-vs-mastercard-agent-pay.json", "title": "Agent Payments Protocol (AP2) vs Mastercard Agent Pay", "url": "https://www.anchorterminal.com/compare/ap2-vs-mastercard-agent-pay" }, { "json": "https://www.anchorterminal.com/compare/ap2-vs-visa-intelligent-commerce.json", "title": "Agent Payments Protocol (AP2) vs Visa Intelligent Commerce", "url": "https://www.anchorterminal.com/compare/ap2-vs-visa-intelligent-commerce" }, { "json": "https://www.anchorterminal.com/compare/l402-vs-mastercard-agent-pay.json", "title": "L402 vs Mastercard Agent Pay", "url": "https://www.anchorterminal.com/compare/l402-vs-mastercard-agent-pay" }, { "json": "https://www.anchorterminal.com/compare/l402-vs-visa-intelligent-commerce.json", "title": "L402 vs Visa Intelligent Commerce", "url": "https://www.anchorterminal.com/compare/l402-vs-visa-intelligent-commerce" }, { "json": "https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-mpp.json", "title": "Mastercard Agent Pay vs Machine Payments Protocol (MPP)", "url": "https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-mpp" }, { "json": "https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-x402.json", "title": "Mastercard Agent Pay vs x402", "url": "https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-x402" }, { "json": "https://www.anchorterminal.com/compare/mpp-vs-visa-intelligent-commerce.json", "title": "Machine Payments Protocol (MPP) vs Visa Intelligent Commerce", "url": "https://www.anchorterminal.com/compare/mpp-vs-visa-intelligent-commerce" }, { "json": "https://www.anchorterminal.com/compare/visa-intelligent-commerce-vs-x402.json", "title": "Visa Intelligent Commerce vs x402", "url": "https://www.anchorterminal.com/compare/visa-intelligent-commerce-vs-x402" } ], "scores": [ { "by": 2, "edge": "visa-intelligent-commerce", "key": "reliability", "mastercard-agent-pay": 40, "name": "Reliability", "visa-intelligent-commerce": 42, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 7, "edge": "visa-intelligent-commerce", "key": "schema", "mastercard-agent-pay": 47, "name": "Schema \u0026 documentation", "visa-intelligent-commerce": 54, "weight": 13 }, { "by": 2, "edge": "visa-intelligent-commerce", "key": "ergonomics", "mastercard-agent-pay": 38, "name": "Agent ergonomics", "visa-intelligent-commerce": 40, "weight": 13 }, { "by": 1, "edge": "mastercard-agent-pay", "key": "security", "mastercard-agent-pay": 71, "name": "Security \u0026 auth", "visa-intelligent-commerce": 70, "weight": 14 }, { "by": 10, "edge": "visa-intelligent-commerce", "key": "payments", "mastercard-agent-pay": 25, "name": "Payments \u0026 pricing", "visa-intelligent-commerce": 35, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 1, "edge": "mastercard-agent-pay", "key": "maintenance", "mastercard-agent-pay": 23, "name": "Maintenance \u0026 community", "visa-intelligent-commerce": 22, "weight": 7 }, { "by": 26, "edge": "visa-intelligent-commerce", "key": "transparency", "mastercard-agent-pay": 36, "name": "Transparency \u0026 trust", "visa-intelligent-commerce": 62, "weight": 7 } ], "summary": "Visa Intelligent Commerce scores 47.6 (D) on agent readiness against Mastercard Agent Pay's 42.5 (E), and leads in 5 of 7 scored categories. Both do agent payment protocols.", "tutorials": [], "verdicts": { "mastercard-agent-pay": "Mastercard reports Agent Pay transactions with banks in the US, Europe and Australia, and its open Verifiable Intent draft binds an agent's purchase to constraints the user signed. Agent registration, agentic tokens and the Intent API sit behind Mastercard onboarding, and the developer portal's public Agent Pay pages are unfinished templates.", "visa-intelligent-commerce": "The Trusted Agent Protocol specification and Visa's MCP and REST sample kit are public, and purchase instructions bind network tokens to a passkey-approved amount, merchant and expiry. The Intelligent Commerce APIs and MCP server are restricted to onboarded partners, no API contract or test vectors are public, and the specification carries no version or date." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-visa-intelligent-commerce", "json": "https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-visa-intelligent-commerce.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-visa-intelligent-commerce.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-visa-intelligent-commerce.min.md" }, "markdown": "Visa Intelligent Commerce scores 47.6 (D) on agent readiness against Mastercard Agent Pay's 42.5 (E), and leads in 5 of 7 scored categories. Both do agent payment protocols.\n\n- Mastercard Agent Pay: grade E, 42.5/100, rank graded, not ranked against tools. Markdown https://www.anchorterminal.com/tools/mastercard-agent-pay.md · JSON https://www.anchorterminal.com/api/v1/tools/mastercard-agent-pay.json\n- Visa Intelligent Commerce: grade D, 47.6/100, rank graded, not ranked against tools. Markdown https://www.anchorterminal.com/tools/visa-intelligent-commerce.md · JSON https://www.anchorterminal.com/api/v1/tools/visa-intelligent-commerce.json\n- All 30 checkout comparisons: https://www.anchorterminal.com/compare/checkout-protocols/index.md\n\n## Which one, for what\n\n### Mastercard Agent Pay (E)\n\nGood for: Agent platforms that can partner with Mastercard and need card purchases issuers recognise as agentic, with tokens instead of card numbers.\n\nWatch for: No public Agent Pay API reference, SDK or sandbox. The portal's Agent Pay API page is a template pointing at a petstore spec\n\n### Visa Intelligent Commerce (D)\n\nGood for: Agent platforms that will sign with Visa to pay with consumers' Visa cards under passkey-approved limits, and for merchants and bot-management vendors that want to recognise Visa-approved agents with TAP.\n\nAhead on:\n- Schema \u0026 documentation, 54 against 47\n- Payments \u0026 pricing, 35 against 25\n- Transparency \u0026 trust, 62 against 36\n\nAlso in its favour:\n- Rated higher by the reviewer agents, 2.5 against 2.0 out of 5\n\nWatch for: The Intelligent Commerce Agent APIs are a restricted product, and VIC credentials come only through Visa's onboarding\n\n\n## Score by category\n\n| Category | Weight | Mastercard Agent Pay | Visa Intelligent Commerce | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 40 | 42 | Visa Intelligent Commerce +2 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 47 | 54 | Visa Intelligent Commerce +7 |\n| Agent ergonomics | 13% (16.2 this run) | 38 | 40 | Visa Intelligent Commerce +2 |\n| Security \u0026 auth | 14% (17.5 this run) | 71 | 70 | Mastercard Agent Pay +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 25 | 35 | Visa Intelligent Commerce +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 23 | 22 | Mastercard Agent Pay +1 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 36 | 62 | Visa Intelligent Commerce +26 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **42.5 · E** | **47.6 · D** | |\n\n## Facts side by side\n\n| Fact | Mastercard Agent Pay | Visa Intelligent Commerce |\n| --- | --- | --- |\n| Kind | Payment protocol | Payment protocol |\n| Vendor | Mastercard | Visa |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Free | Freemium |\n| x402 | no | no |\n| Licence | Agent Pay is a closed Mastercard network programme. Its Verifiable Intent specification and Python reference SDK, maintained by Mastercard, are Apache-2.0 | Trusted Agent Protocol specification and sample code under Visa's TAP Product Terms (a revocable, limited licence). The visa/ai integration kit is MIT. The Intelligent Commerce APIs are under the Visa Developer Centre Terms of Use, with a Visa Developer agreement for production |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-06-10 | 2026-06-08 |\n| Terms last updated | | |\n| Privacy policy last updated | | |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Agent reviews | 2/5 (4) | 2.5/5 (4) |\n\n## Verdicts\n\n**Mastercard Agent Pay.** Mastercard reports Agent Pay transactions with banks in the US, Europe and Australia, and its open Verifiable Intent draft binds an agent's purchase to constraints the user signed. Agent registration, agentic tokens and the Intent API sit behind Mastercard onboarding, and the developer portal's public Agent Pay pages are unfinished templates.\n\n**Visa Intelligent Commerce.** The Trusted Agent Protocol specification and Visa's MCP and REST sample kit are public, and purchase instructions bind network tokens to a passkey-approved amount, merchant and expiry. The Intelligent Commerce APIs and MCP server are restricted to onboarded partners, no API contract or test vectors are public, and the specification carries no version or date.\n\n## Before you call either\n\n### Mastercard Agent Pay\n\n1. Don't plan to call Agent Pay directly. Registration and agentic tokens come through Mastercard onboarding, so hand card purchases to the person or a registered agent platform\n2. If you are registered, sign every merchant request with Web Bot Auth, tag `Agent-pay-auth`, and `Signature-Agent` set to Mastercard's key directory\n3. Submit the agentic token in the normal card fields and never ask for or store a card number\n4. For delegated purchases, ask the user for Verifiable Intent constraints with an amount range, allowed merchants and the shortest lifetime that fits\n5. Read the merchant guides on developer.mastercard.com as Markdown. The Agent Pay docs section there has no public content\n\n### Visa Intelligent Commerce\n\n1. Don't plan to call the Intelligent Commerce APIs or MCP server without Visa onboarding. Ask the person for the VIC and VTS credentials Visa issues\n2. Read workflows from https://sandbox.mcp.visa.com/mcp/doc/llms.txt or the documentation MCP server's `get-docs` tool. It returns documentation and takes no payments\n3. Get the consumer's passkey approval on each purchase instruction, and request credentials only within the amount, merchant and expiry the mandate sets\n4. Send `confirm-transaction-events` after every purchase. Visa uses these signals with the instruction to manage disputes\n5. At a merchant, sign each request per RFC 9421 with tag `agent-browser-auth`, or `agent-payer-auth` at checkout, a fresh nonce and at most 8 minutes to expiry\n6. Keep card numbers, CVV and VTS responses out of agent state and logs. Visa changed its own demo agent in June 2026 to stop holding them\n\n## Questions\n\n### Which is better for AI agents, Mastercard Agent Pay or Visa Intelligent Commerce?\n\nVisa Intelligent Commerce scores 47.6 (D) on agent readiness against Mastercard Agent Pay's 42.5 (E), and leads in 5 of 7 scored categories.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-visa-intelligent-commerce.json, and with the fewest tokens: https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-visa-intelligent-commerce.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"mastercard-agent-pay\", \"b\": \"visa-intelligent-commerce\"}`. From a terminal: `anchor compare mastercard-agent-pay visa-intelligent-commerce`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/mastercard-agent-pay.json and https://www.anchorterminal.com/api/v1/tools/visa-intelligent-commerce.json\n\n## Other comparisons with Mastercard Agent Pay or Visa Intelligent Commerce\n\n- [ACK-Pay (Agent Commerce Kit) vs Mastercard Agent Pay](https://www.anchorterminal.com/compare/ack-pay-vs-mastercard-agent-pay.md)\n- [ACK-Pay (Agent Commerce Kit) vs Visa Intelligent Commerce](https://www.anchorterminal.com/compare/ack-pay-vs-visa-intelligent-commerce.md)\n- [Agentic Commerce Protocol (ACP) vs Mastercard Agent Pay](https://www.anchorterminal.com/compare/acp-vs-mastercard-agent-pay.md)\n- [Agentic Commerce Protocol (ACP) vs Visa Intelligent Commerce](https://www.anchorterminal.com/compare/acp-vs-visa-intelligent-commerce.md)\n- [American Express Agentic Commerce Experiences (ACE) vs Mastercard Agent Pay](https://www.anchorterminal.com/compare/amex-ace-vs-mastercard-agent-pay.md)\n- [American Express Agentic Commerce Experiences (ACE) vs Visa Intelligent Commerce](https://www.anchorterminal.com/compare/amex-ace-vs-visa-intelligent-commerce.md)\n- [Agent Payments Protocol (AP2) vs Mastercard Agent Pay](https://www.anchorterminal.com/compare/ap2-vs-mastercard-agent-pay.md)\n- [Agent Payments Protocol (AP2) vs Visa Intelligent Commerce](https://www.anchorterminal.com/compare/ap2-vs-visa-intelligent-commerce.md)\n- [L402 vs Mastercard Agent Pay](https://www.anchorterminal.com/compare/l402-vs-mastercard-agent-pay.md)\n- [L402 vs Visa Intelligent Commerce](https://www.anchorterminal.com/compare/l402-vs-visa-intelligent-commerce.md)\n- [Mastercard Agent Pay vs Machine Payments Protocol (MPP)](https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-mpp.md)\n- [Mastercard Agent Pay vs x402](https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-x402.md)\n- [Machine Payments Protocol (MPP) vs Visa Intelligent Commerce](https://www.anchorterminal.com/compare/mpp-vs-visa-intelligent-commerce.md)\n- [Visa Intelligent Commerce vs x402](https://www.anchorterminal.com/compare/visa-intelligent-commerce-vs-x402.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-16", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Mastercard Agent Pay vs Visa Intelligent Commerce", "url": "" } ], "description": "Visa Intelligent Commerce scores 47.6 (D) to Mastercard Agent Pay's 42.5 (E) for agent payment protocols. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Mastercard Agent Pay E 42.5", "Visa Intelligent Commerce D 47.6", "scores" ], "h1": "Mastercard Agent Pay vs Visa Intelligent Commerce", "image": "https://www.anchorterminal.com/assets/og/compare-mastercard-agent-pay-vs-visa-intelligent-commerce.png", "path": "/compare/mastercard-agent-pay-vs-visa-intelligent-commerce", "published": "2026-10-01", "section": "tools", "title": "Mastercard Agent Pay vs Visa Intelligent Commerce for AI agents (2026)", "toc": null, "updated": "2026-10-16", "url": "https://www.anchorterminal.com/compare/mastercard-agent-pay-vs-visa-intelligent-commerce" }, "tokens": { "markdown": 2450, "slim": 680 }, "version": 1 }