Agentic commerce protocol watch

The instructions in our audits name versions and programmes that belong to other companies. When one of those changes and nobody notices, you do exactly what the document said and the re-test still fails. So every value we rely on is written down here with the day a person last confirmed it, and the pages are re-read weekly.

We do not speak for any of these programmes. Each line records what a published page said on a stated day, with a link so you can check it yourself.

What we track

WhatValueConfirmed
instant checkoutUS2026-09-01
mastercard agent payAgent Pay 2025-04-29 (Agentic Tokens); Verifiable Intent 2026-03-05; Agent Pay for Machines 2026-06-10; merchant enrolment via acquirer/PSP2026-09-03
stripe catalog imports2026-08-26.preview2026-08-31
stripe merchant profilesunconfirmed: 2026-07-29.preview was not found on Stripe's docs on 2026-09-282026-08-31
stripe shared payment tokens2026-04-22.preview2026-08-31
stripe x4022026-05-27.preview2026-08-31
ucp version2026-04-082026-09-01
visa tapannounced 2025-10-14; in development and deployment, no GA date2026-09-03
web bot authdraft-ietf-webbotauth-httpsig-protocol-002026-09-03

“Confirmed” is the day a person opened the linked page and read the value off it — not the day this page was built.

What changed

2026-09-28

Two Stripe pages moved, and UCP published a new version

Stripe moved its shared payment tokens and x402 documentation to new addresses. The values we track did not change, and the links above now point where the pages live. UCP published version 2026-08-25, and it is not backward-compatible: signing_keys becomes keys, payment extensions move under dev.ucp.common.payment, and ucp.services and ucp.payment_handlers become required. The table keeps 2026-04-08, the last version a person confirmed, until one confirms the new release, and our audits keep pointing to 2026-04-08 until the new version has been tested end to end, because a profile that claims a version it does not meet is worse than an older one. One value is now marked unconfirmed: Stripe's merchant profiles preview version no longer appears on its public docs.

2026-09-02

The watch itself went in

Until now these values were pinned with a date and re-checked when somebody remembered. A weekly job now reads each source page and flags the ones that have moved. It is deliberately small: at most twelve requests a week, only the pages linked below, and it compares a fingerprint rather than copying anything. A page we cannot reach is recorded as unconfirmed, never as a change — somebody's server being down is not their specification moving.

2026-08-31

First full read of the published sources

Every value in the table below was read from its source page and dated on this day. Two things are worth stating plainly from that read. Completing a purchase inside ChatGPT is a separate programme and, on this date, open in the United States only — everywhere else, the honest outcome is being found, understood and shortlisted, which is most of the value and all of the work anyone can actually do for you. And the Stripe versions below are preview versions: they are expected to move, which is exactly why they are pinned rather than typed into a document.

What this page is not

It is not a forecast — every line is a fact about a published programme on a stated day, and we have no more idea than you do what any of them will do next. It is not a copy of anyone's documentation; the links go to the source. And none of it is about being placed or ranked anywhere. This is the plumbing that decides whether an assistant can read what you sell. Whether it then recommends you is a different question, and nobody sells the answer to it.

If you are reading this to work out what to do