# AP2 Explained: How AI Agents Can Pay Without Losing Trust Source: https://hlab.in/blog/ap2-agent-payments-protocol [Blog](https://hlab.in/blog) AP2 Explained: How AI Agents Can Pay Without Losing Trust # AP2 Explained: How AI Agents Can Pay Without Losing Trust reading time 2 min published 3 Nov 2026 industry AI agents AP2, the Agent Payments Protocol, lets AI agents buy on your behalf with proof of what you approved. Learn mandates, trust and what builders should do. Industry [AI agents](https://hlab.in/industries/ai-agentic-development) Topics [AI Agents](https://hlab.in/blog/tag/ai-agents) Published 3 Nov 2026 Reading time 2 min [Let’s talk growth](https://h.hlab.in/contact) On this page - [The core idea: mandates](#the-core-idea-mandates) - [How it fits with other protocols](#how-it-fits-with-other-protocols) - [What it changes for builders](#what-it-changes-for-builders) - [What to do now](#what-to-do-now) - [The takeaway](#the-takeaway) Letting an agent browse is easy. Letting it spend money is hard. If an agent buys the wrong thing, who is responsible? Did the user really authorize it? Payment systems were built for a human clicking “pay”, and they have no good answer. **AP2, the Agent Payments Protocol, is an open protocol from Google and partners that adds verifiable proof of user intent to agent-led purchases.** Its aim is to let merchants, payment providers and users trust a transaction even when an agent, not a person, completed it. ## The core idea: mandates AP2 uses **mandates**: signed, tamper-evident records of what the user authorized. They are built on verifiable credentials, so each party can check who signed what. ``` flowchart LR U["User"] -->|"Signs"| I["Intent mandate: what the agent may buy and limits"] A["Shopping agent"] --> K["Cart mandate: exact items and price"] U -->|"Approves"| K K --> P["Payment mandate: signals to the payment network"] ``` - **Intent mandate.** Used when the user is not present. It records the rules: what to buy, budget, time window and conditions. - **Cart mandate.** Used when the user is present. It locks the exact items and price the user approved. - **Payment mandate.** Shared with the payment network and issuer so they know an AI agent was involved and whether a human was present. Together these form an audit trail from the user’s intent to the final charge. In a dispute, the question “did the user approve this?” has a checkable answer. ## How it fits with other protocols AP2 is designed to extend open agent protocols. It works alongside A2A for agent communication and MCP for tool access, and it is meant to be payment-method agnostic: cards and other methods can sit underneath. ## What it changes for builders - **Merchants** can distinguish agent-led orders and verify the authorization behind them. - **Agent developers** must collect explicit, scoped approval and store the signed result. - **Payment providers** get signals to assess risk instead of guessing. ## What to do now - **Design spending limits first.** Budget, merchant allow-list and expiry belong in the intent, not in a prompt. - **Require human approval above a threshold,** and show the exact cart before it is signed. - **Keep the signed records.** They are your evidence for audits and disputes. - **Separate keys.** The agent should never hold the user’s long-term credentials. - **Treat the spec as young.** Standards in this area are still changing, so isolate the integration behind one module. ## The takeaway Agents will only handle real money if everyone in the chain can verify what was approved. AP2’s mandates are a serious attempt at that proof. Teams building agent commerce should understand them before writing a checkout flow. ## Explore more articles - AI agents ### MCP Explained: The Model Context Protocol for Agent Tools 2 min read 5 Nov 2026 [MCP Explained: The Model Context Protocol for Agent Tools](https://hlab.in/blog/mcp-model-context-protocol-explained) - AI agents ### ANP: The Agent Network Protocol and the Open Web of Agents 2 min read 4 Nov 2026 [ANP: The Agent Network Protocol and the Open Web of Agents](https://hlab.in/blog/anp-agent-network-protocol) - AI agents ### What Is A2A? The Agent2Agent Protocol Explained 2 min read 2 Nov 2026 [What Is A2A? The Agent2Agent Protocol Explained](https://hlab.in/blog/a2a-agent2agent-protocol) ## Next stop: a 30-minute call. Tell us what you are building. A senior lead will tell you honestly what it takes to ship it and take it to market. [Let’s talk growth](https://h.hlab.in/contact) [Email us](mailto:business@hlab.in)