Imagine being able to tell your AI assistant, "buy concert tickets the moment they’re released for a maximum of SEK 800" – and it does exactly that, securely and automatically. That scenario became reality when Google announced Agent Payments Protocol (AP2), a groundbreaking protocol that enables secure, autonomous AI transactions across e-commerce platforms.

According to Google’s official announcement on 16 September 2025, AP2 represents the first industry-standardised solution to address a critical problem: how can AI agents make purchases on users’ behalf without compromising security or accountability?

What the AP2 protocol means for different players

For retailers, AP2 opens up entirely new sales channels where AI agents can complete complex purchases autonomously, from automatic reorders to coordinated multi-vendor purchases. That could mean higher conversion and the ability to capture purchase intent that would previously have been lost.

For platform providers such as Viskan, AP2 creates the opportunity to integrate advanced AI functionality without having to build security solutions from scratch. The protocol’s open standard ensures interoperability and reduces development costs.

For end customers, AP2 transforms shopping from active searching into intelligent, proactive purchasing, where AI agents can monitor prices and availability and automatically complete transactions based on predefined criteria.

"What we’re seeing with the AP2 protocol is not just a technical innovation – it’s the start of a fundamental shift in how we think about e-commerce interactions," explains Serkan Selcuk, Product Owner at Viskan. "For the businesses we work with, this means future competitiveness will be defined by how well they can integrate and benefit from autonomous AI agents in their sales processes."

Security through cryptographic mandates

At the heart of the AP2 protocol is its innovative use of "Mandates" – cryptographically signed digital contracts that serve as tamper-proof proof of a user’s instructions. This solves the critical trust problem in AI-driven commerce by creating a complete audit trail from intent to completed transaction.

How it works in practice

At the core of the AP2 protocol are its "Mandates" – cryptographically signed digital contracts that act as verifiable proof of a user’s instructions. The system handles two primary scenarios:

Real-time purchases: When you ask your AI agent, "find me a new pair of white running shoes", an Initial Intent Mandate is created that captures the full context. Once the agent has presented a basket, you sign a Cart Mandate – a critical security measure that creates an immutable record of the exact items and price.

Delegated tasks: When you give the agent the instruction, "buy concert tickets the moment they’re released", you sign a detailed Intent Mandate in advance. This mandate specifies all conditions – price limits, timing and other requirements – and acts as pre-authorised proof.

What does this mean for businesses?

For e-commerce businesses, the AP2 protocol creates opportunities that were previously unthinkable. The protocol opens the door to entirely new business models where AI agents can carry out complex, coordinated purchases across multiple platforms.

Imagine telling your AI agent: "Book me a trip to Palm Springs for the first weekend in November with a budget of SEK 7,000." The agent could then interact with both airlines and hotels, and when it finds a combination that fits the budget, it can complete both bookings at the same time – securely and verifiably.

The protocol is backed by major names in crypto such as Coinbase and the Ethereum Foundation, which shows how broadly applicable it is, from traditional payments to emerging web3 solutions.

Security as a foundation

One of the most critical aspects of the AP2 protocol is its focus on security and accountability. By creating a complete chain of evidence – from intent to basket to payment – it establishes a non-repudiation chain that answers the key questions around authorisation and authenticity.

Strategic implications for the e-commerce industry

"The real strength lies in the protocol’s open nature. Instead of creating yet another fragmented solution, Google and its partners have created a shared foundation the whole industry can build on. That will accelerate the pace of innovation and make it possible for smaller players to compete on equal terms," continues Serkan Selcuk.

Looking ahead

With support from more than 60 payment players, including Mastercard, PayPal and American Express, the AP2 protocol reflects a level of serious industry collaboration that is rarely seen in the tech sector. This is not just Google building its own system – it is a genuine attempt to create an industry standard.

For Swedish e-commerce businesses, this means future investments in AI and automation can now be made with greater confidence. The protocol provides a stable foundation to build on, while also opening up innovative use cases that were previously practically impossible to implement securely.

The protocol’s technical specifications and reference implementations are available in Google’s public GitHub repository, making it easier for developers to start experimenting and building solutions today.

E-commerce is facing one of its most significant shifts since the introduction of secure online payments. The AP2 protocol is not just a technical framework – it is the key to the next generation of commercial interactions.

Serkan Selcuk – Product Owner, Viskan

Serkan Selcuk is Product Owner at Viskan with more than 17 years of experience in e-commerce solutions. He is an authority on developing scalable e-commerce platforms and strategic third-party integrations that meet modern B2B and B2C e-commerce needs. Serkan combines deep technical expertise with commercial understanding to help businesses optimise their e-commerce strategy and build future-proof solutions.

Serkan’s areas of expertise include:

E-commerce platform strategy for growth
Seamless integrations with ERP, PIM and logistics systems
Development of scalable systems for high traffic
Customer-centric solutions for the best possible user experience (UX)