Agentic Commerce Protocol (ACP)

ACP is OpenAI and Stripe's open standard that lets AI shopping agents buy from your product feed — here's what it is and what ecommerce SEOs must do.

First published: Jun 26, 2026 · Last updated: Jul 19, 2026 · Advanced
demand #1 in AI Commerce#8 in Ecommerce SEO#151 on the site

ACP is an open standard/protocol (Apache 2.0, current stable spec 2026-04-17) that lets AI shopping agents discover products, build carts, and complete purchases by reading a merchant's product feed and APIs instead of crawling the website. OpenAI is the first AI platform to implement it and Stripe the first compatible payment provider — not the only ones the spec allows. It has five protocol-level building blocks — Cart and Feed, Agentic Checkout, Delegate Payment (Stripe's implementation is Shared Payment Tokens), Delegate Authentication (OAuth 2.0), and Orders/Webhooks — and the merchant stays merchant-of-record. Implementing ACP doesn't automatically get you listed in ChatGPT; that requires separate OpenAI merchant approval. ChatGPT's Instant Checkout was its first implementation; industry reporting (not yet an official OpenAI changelog) says OpenAI pivoted it in March 2026 from full in-chat purchase to discovery-plus-redirect, but the feed/discovery layer stays live either way. The SEO consequence: agents bypass your crawled pages, so feed quality, accurate real-time inventory and pricing, complete identifiers (GTIN/MPN/brand), and checkout reliability are the new optimization unit — though reliability as a formal ranking factor is practitioner-reported, not documented policy. ACP currently serves ChatGPT; Google/Shopify's UCP serves Google AI Mode and Gemini — plan to support both.

TL;DR — ACP is an open (Apache 2.0) standard/protocol, current stable spec 2026-04-17, that defines how AI agents discover products and transact with merchants programmatically. OpenAI is the first AI platform to implement it and Stripe the first compatible payment provider — the spec doesn’t limit it to them. Five protocol-level building blocks: Cart and Feed, Agentic CheckoutAgentic checkout is the transaction-completion step of agentic commerce: the mechanism by which an AI agent creates, updates, and finalizes a purchase on a shopper's behalf — selecting fulfillment, calculating tax and shipping, passing a scoped payment token, and triggering order creation — often without the shopper visiting the merchant's site., Delegate Payment (Stripe’s implementation is Shared Payment TokensA token is the smallest unit of text (or image/audio/video) an LLM processes — roughly 4 characters, or about ¾ of an English word. A context window is the maximum number of tokens (input plus output) a model can hold at once, like its short-term memory. — a provider detail, not a universal requirement), Delegate Authentication (OAuth 2.0), and Orders/Webhooks. The merchant stays merchant-of-record. Implementing ACP doesn’t automatically list you in ChatGPT — that needs separate OpenAI merchant approval. ChatGPT’s Instant Checkout was the first implementation; industry reporting (not yet an official OpenAI changelog) describes a March 2026 pivot from full in-chat purchase to discovery-plus-redirectA redirect sends browsers and crawlers from a requested URL to a different one. An HTTP redirect specifically is a 3xx status code paired with a Location header; meta refresh and JavaScript redirects achieve a similar navigation without being a 3xx response themselves. Permanent redirects (301/308) are Google's signal the target should be canonical; temporary ones (302/303/307) aren't., but the feed and discovery layer are documented as live in the current stable spec either way. The SEO consequence is structural: ACP commerce flows query feeds and APIs, so feed freshness (at-least-daily per OpenAI’s current docs), data accuracy, complete identifiers, and checkout reliability become the optimization unit — reliability as a formal ranking factor is practitioner-reported, not documented — and conversions can land with no GA4 session attached. ACP and UCPThe Universal Commerce Protocol (UCP) is an open-source standard (Apache 2.0) led by Google and co-developed with Shopify, Etsy, Wayfair, Target, and Walmart that lets AI agents, merchants, and payment providers transact through a common language instead of bespoke integrations. Merchants advertise their capabilities at /.well-known/ucp. support different implementations and surfaces; verify actual availability before planning for either.

Evidence for this claim ACP is published as an open protocol for connecting agents, merchants, and payment providers through commerce APIs. Scope: Published ACP specification; publication does not imply universal merchant or assistant support. Confidence: high · Verified: ACP GitHub repository Evidence for this claim OpenAI documents product feeds, checkout, delegated payment, and order workflows for merchants integrating with its commerce surfaces. Scope: OpenAI commerce support and integration model; availability can vary by product, merchant, and market. Confidence: high · Verified: OpenAI Commerce documentation

What ACP actually is

The Agentic Commerce Protocol is an open standard interaction model for connecting buyers, their AI agents, and businesses to complete purchases programmatically — without the buyer navigating a traditional website. It defines how agents browse product catalogs, manage carts, validate inventory, and execute checkout securely.

It launched September 29, 2025 from OpenAI and Stripe, who are the Founding Maintainers. It’s governed under an Apache 2.0 open-source license, lives on GitHub at agentic-commerce-protocol/agentic-commerce-protocol, and is currently in beta. The spec uses date-based versioning; the current stable release (2026-04-17) folded cart, feed, orders, authentication, and MCPMCP is an open protocol, created and open-sourced by Anthropic in November 2024, that standardizes how AI applications connect to external tools and data at runtime. It runs on a host–client–server architecture and lets agents call functions, read data, and take actions — the opposite of a static file like llms.txt. compatibility into the core.

The most important framing in the whole topic: ACP is the standard; Instant Checkout was its first implementation. Don’t conflate the protocol with the ChatGPT feature built on top of it — they have different lifespans, as the March 2026 pivot below shows.

The five building blocks

Per the ACP specification and Stripe’s implementation docs, ACP is organized into five capabilities. These are protocol-level primitives — what any ACP-compatible platform and payment provider implement — not a single company’s product. OpenAI is the first AI platform to implement ACP and Stripe is the first compatible payment provider; the spec is written so other platforms and payment providers can implement the same capabilities.

  1. Cart and Feed (the Product Feed). The agent-facing product discovery layer. Agents browse your catalog and manage carts before checkout. This is where your merchandise becomes machine-readable: feeds in JSON, CSV, TSV, or XML, ingested by the agent platform. OpenAI’s current file-upload documentation supports at-least-daily full feed snapshots — freshness is part of the contract, and you should confirm the cadence your specific integration requires rather than assume a fixed number.
  2. Agentic CheckoutAgentic checkout is the transaction-completion step of agentic commerce: the mechanism by which an AI agent creates, updates, and finalizes a purchase on a shopper's behalf — selecting fulfillment, calculating tax and shipping, passing a scoped payment token, and triggering order creation — often without the shopper visiting the merchant's site.. Create, update, and complete checkout sessions: cart management, fulfillment options, tax/shipping calculation, and payment processing. The merchant returns the authoritative cart state.
  3. Delegate Payment. Securely pass payment credentials between buyer, agent, and business using payment handlers. Stripe’s implementation of this block is Shared Payment Tokens (SPTs), scoped to a specific merchant and transaction amount, with raw card data never exposed to the agent — but SPTs are Stripe’s implementation, not a universal feature every ACP payment provider must use.
  4. Delegate Authentication. Authorization via OAuth 2.0, letting an agent act on a buyer’s behalf with a business.
  5. Orders and Webhooks. Track the order lifecycle — confirmation, shipping, delivery, refunds — synced back to the agent and buyer.

One more distinction that trips people up: implementing these capabilities is not the same as being visible in ChatGPT. ACP is an open specification — you can implement it against the spec on your own. Actually showing up as a product source in ChatGPT requires OpenAI’s merchant participation process on top of that; technical conformance and platform listing are separate gates.

The end-to-end flow

Putting the blocks in motion:

  1. A user expresses purchase intent in a conversational AI (e.g., ChatGPT).
  2. The agent queries the merchant’s product feed/catalog via ACP-defined endpoints.
  3. It ranks and surfaces products based on factors OpenAI’s documentation names — availability, price, quality, whether the merchant is the maker or primary seller, and whether checkout is enabled — though OpenAI has not published a full ranking algorithm, so treat this as the documented inputs, not a guarantee of how any specific product gets surfaced.
  4. The user confirms; the agent initiates a checkout session.
  5. The merchant validates inventory, taxes, and shipping and returns authoritative cart state.
  6. A Shared Payment Token is generated, scoped to that merchant and amount.
  7. The merchant receives the order, controls fulfillment, and remains merchant-of-record.
  8. Webhooks sync the order lifecycle back to the agent and buyer.

OpenAI describes ACP as “the infrastructure between merchants and shoppers in ChatGPT.” Two things that flow from this are worth internalizing. First, the merchant keeps the relationship — unlike a marketplace, you control pricing, inventory, fulfillment, and the customer. Second, OpenAI has stated that results are not advertisements and aren’t influenced by partnerships; its documentation names data quality, price, and availability among the inputs, though it stops short of publishing a scored ranking algorithm — read “not ad spend” as the confirmed part and “checkout reliability as a ranking input” as the practitioner-reported part.

The March 2026 pivot — read this carefully

This is the single most misunderstood thing in current coverage, and I want to be precise about how solid the source is: I have not foundA 302 (\"Found\") is a temporary redirect: it forwards users to a new URL while telling search engines the original URL should stay in the index. It's a weak canonicalization signal, not the zero-equity dead end of SEO folklore. an official OpenAI changelog announcing this change. What follows is practitioner reporting (Klaviyo’s 2026 research is the source), not a confirmed OpenAI policy statement — treat it as “reported by industry coverage” until OpenAI publishes something dated on its own docs. With that caveat: reporting says that in March 2026, OpenAI shifted how Instant Checkout works, moving from full in-chat transaction completion to a discovery-plus-redirect model, where shoppers discover products in ChatGPT but complete the purchase on the retailer’s own website or app.

What this reported shift does not mean, even if accurate: ACP is dead, or the feed work was wasted. The ACP repository’s current stable spec (2026-04-17) still includes the checkout capability, and the product feed and discovery infrastructure remain part of the active protocol. If the in-chat purchase closure did roll back, that’s a platform-level product decision, not a change to the spec itself. If you optimize your feed for ACP today, you’re optimizing for capabilities that are documented as live in the current stable spec regardless of how any one platform’s UI currently behaves.

ACP and SEO: what’s structurally different

Here’s the part that matters for anyone who does this for a living. Product discovery is now an agent problem, not a page problem. An AI agent doesn’t crawl your HTML, read your <title>, or weigh your internal linksAn internal link is a hyperlink from one page on a website to another page on the same website. Internal links help search engines discover your pages and pass ranking signals (PageRank and anchor-text context) between them.. It queries your feed and your APIs and evaluates structured dataStructured data is a standardized way of labeling page content (using the schema.org vocabulary in JSON-LD, Microdata, or RDFa) so search engines can understand its meaning. It's not a direct ranking factor — its value is rich results and entity understanding.. The optimization lever moves upstream — from pages to feeds.

Concretely:

  • Feed data quality is the new ranking input. Complete GTINProduct identifiers are the standardized values — GTIN (Global Trade Item Number), MPN (Manufacturer Part Number), and brand — that shopping feeds like Google Merchant Center and Microsoft Merchant Center use to match a product listing to the correct item in their catalog. A GTIN alone is usually enough; without one, brand + MPN is the fallback; products with none declare that with the identifier_exists attribute./MPN/brand identifiers, accurate real-time pricing, correct availability, consistent variant data, clear shipping and return policies. Schema.orgSchema markup is code that uses the schema.org vocabulary to label what your content means so search engines can understand it and show rich results. It's most often written in JSON-LD, and it's not a direct ranking factor. Product is the foundational vocabulary, and your feed must align exactly with your transactional backend — mismatches can get a product delisted.
  • Feed freshness is not optional. OpenAI’s current file-upload documentation supports full feed snapshots at least daily; a stale feed isn’t just suboptimal, it’s a liability. A feed-to-API mismatch (the agent sees one price, checkout returns another) erodes trust fast. Confirm the exact cadence your integration supports rather than relying on any fixed number I could give you here — this is the kind of detail platforms update.
  • Technical reliability looks like a signal, though it isn’t formally documented as one. OpenAI’s own documentation doesn’t publish a scored ranking algorithm or promise that reliability issues guarantee deprioritization. What I can say is that multiple practitioners (including SALT.agency’s technical guide) report that merchants with repeated feed errors, slow checkout responses, or inconsistent pricing see fewer products surfaced — read that as an observed pattern worth guarding against, not a documented policy you can cite to a client as official.
  • Attribution breaks. A purchase can complete with no corresponding GA4 session — the revenue lands in your order system without a website visit. You don’t win because someone clicked your site; you win because the agent picked your product. Build AI agent traffic as its own channel with its own CAC and conversion benchmarks, and use UTM parameters on redirect flows where you can.

The framing the industry is settling on is “Agentic Commerce Optimization” — feed and data quality as evolved SEO. Traditional SEO still matters for human visitors; ACP adds a parallel, agent-facing track.

The protocol landscape: ACP, UCP, AP2, MCP

ACP isn’t alone, and conflating the protocols is a common mistake.

  • ACP (OpenAI + Stripe) — checkout and product-feed standard, whose first and current primary consumer surface is ChatGPT. As an open spec it isn’t tied to ChatGPT by design, but treat “ACP means ChatGPT” as today’s reality, not a permanent architectural limit — verify actual support platform by platform rather than assuming exclusivity either way. Backed by Shopify, Etsy, Walmart, Instacart, Salesforce, BigCommerce, WooCommerce, commercetools.
  • UCP — Universal Commerce Protocol (Google + Shopify, January 2026) — broader, covering the full commerce lifecycle across any agent surface, transport-agnostic (REST, MCP, A2A), powering Google AI Mode and Gemini. Merchants publish capabilities at a /.well-known/ucp endpoint — effectively a robots.txtA plain-text file at the root of a host that tells crawlers which URLs they may and may not request. It controls crawling, not indexing — a blocked URL can still be indexed if it's linked from elsewhere. for commerce agents, discoverable without a central gatekeeper.
  • AP2 — Agent Payments Protocol (Google) — the payments layer specifically, using three signed “Mandates” (Intent, Cart, Payment) as W3C Verifiable Credentials; treats stablecoin rails as equal to cards.
  • MCP — Model Context Protocol (Anthropic) — not a commerce protocol but a tool/context-access layer; ACP added MCP compatibility, and UCP supports it as a transport.

ACP and UCP are specifications built by different companies for different current surfaces, not documented as mutually exclusive — ACP’s current implementation reaches ChatGPT users, UCP reaches Google AI Mode and Gemini users, but that’s an observation about today’s implementations, not a normative rule of either spec. Most merchants should plan to implement both — each unlocks a different set of customer touchpoints today. (For the deep dive on the Google/Shopify side, see the sibling write-up on UCP.)

The economics, briefly

The protocol itself is free — the specification doesn’t define a fee. The fee sits with whichever payment provider processes the transaction. Stripe is reported to charge roughly 4% per transaction through its Agentic Commerce Suite (per Netalico’s analysis; I haven’t found this number published as a fixed rate on Stripe’s own docs, so confirm current pricing directly with Stripe before you quote it to a client). Frame that as a marketplace acquisition cost and compare it against blended paid-search acquisition (often 15–20% of AOV) — for high-intent, pre-qualified, agent-referred buyers, the math can be favorable, but this is a provider-specific number, not a protocol-level requirement. Stripe also describes its own integration for existing Stripe customers as requiring, in their words, as little as one line of code — that’s Stripe’s onboarding claim for its own product, not a property of the ACP spec.

What to do now

  • Audit your product feed first. Completeness and accuracy of identifiers, pricing, availability, and variants — this is your visibility surface.
  • Wire up freshness. Confirm and hit the update cadence your platform requires (OpenAI’s current file-upload docs support full snapshots at least daily) and make sure feed and checkout agree on price and stock.
  • Harden checkout reliability. Slow or error-prone checkout correlates with fewer surfaced products in practitioner reporting, even though it isn’t a documented ranking policy — treat it as a real risk either way.
  • Plan dual implementation. ACP for ChatGPT, UCP (with the /.well-known/ucp endpoint) for Google’s surfaces.
  • Separate “implemented” from “listed.” Implementing ACP against the spec is a technical milestone; actually appearing as a product source in ChatGPT requires applying through and being approved by OpenAI’s merchant participation process. Budget time for that step separately from the engineering work.
  • Build agent attribution. Treat AI-referred revenue as its own channel; don’t expect GA4 sessions to tell the story.
TIP Validate discovery and feed identity before enabling ACP

This offline readiness check does not authenticate, create a cart, submit payment, or certify ACP. It catches public discovery and sampled feed-shape problems before those live tests.

Compare discovery JSON with the feed URL and merchant data you expect using my free AI Commerce Validator Free

  1. Paste the public discovery JSON and the expected feed URL.
  2. Paste the XML or TSV feed so its sampled identity and required-field checks run separately.
  3. Fix the mismatch, rerun, then continue with authenticated checkout, schema, crawler, policy, and lifecycle tests.
An ACP integration can expose a valid endpoint and still point agents at the wrong feed.

The validator passes JSON parsing, endpoint declaration, required feed values, unique sampled IDs, absolute image URLs, and one sampled TSV row. It warns that discovery-products.tsv conflicts with the expected catalog.tsv feed URL and notes that checkout and adjacent checks remain outside scope.

Add an expert note

Pin an expert quote

New person? Create their unclaimed profile at /admin/experts/ → Pin a quote first.