Sierra and Meta launch open Personal Agent Protocol for AI agents in enterprises

Sierra and Meta introduced the Personal Agent Protocol (PAP) on October 6 2026, an open specification that gives companies and personal AI agents a common framework for authentication, authorization, and session management. The initiative is backed by a broad coalition of firms, including Genesys, Instinct, Rocket, Shopify, Stripe and Walmart. Its purpose is to create a transparent and interoperable way for an AI agent, driven by a consumer, to discover what a website offers, first sign in as a guest, and then, if needed, obtain access to account functions through OAuth permissions.

How authentication and authorization work

According to Sierra’s announcement, a personal AI agent begins each interaction by analyzing the public content of a website. If the agent only needs to read information, it stays in guest mode. For tasks that require an account, such as placing an order or changing settings, the agent asks the consumer for explicit consent via an OAuth flow. The consumer can then choose read‑only rights or write rights, limiting the agent to perform only the actions approved by the user.

The companies then decide how the agent gains access to their systems. They may opt for a simple interaction through ordinary web pages, or adopt a more structured approach using existing API standards such as MCP (Meta Connect Protocol) and OpenAPI. There is also the option to implement a proprietary corporate agent that is specifically tuned to internal processes. The protocol guarantees that the agent’s session remains consistent across different communication channels – for example web, mobile app or messaging – so the user does not have to log in again each time.

Who is participating and what does this mean for the market?

The first round of participants comprises a mix of technology and retail players. Genesys and Instinct bring expertise in customer contact and conversational AI, while Rocket focuses on cloud infrastructure. Shopify and Stripe, two platforms already deeply involved in e‑commerce and payment processing, have confirmed their participation. Walmart, as one of the world’s largest retailers, is testing the protocol in its digital channels. This diversity shows that the Personal Agent Protocol is not limited to a single sector, but can help a wide range of companies safely and standardly integrate AI agents.

The Next Web noted that Stripe and Shopify are also joining Visa’s competing Trusted Agent Protocol. This parallel development underscores the growing interest of the payments industry in standardized AI agents. At the same time, The Next Web points out that European strong customer authentication (SCA) regulations still do not provide a solution for the specific challenges posed by personal AI agents. The Personal Agent Protocol does not address this directly, but it offers a framework in which future European requirements could be incorporated.

Roadmap, workshops and reference implementation

The first version of the specification, v0.1, will be published later in October. Simultaneously, Sierra and Meta are organizing a series of design workshops where partners can flesh out technical details and provide feedback. A reference implementation will be made available to give developers a concrete foundation for building compatible agents and enterprise integrations. This step is crucial to accelerate adoption, as it enables developers to test a working agent against a standardized set of requirements without extensive own research.

While the core functionality – guest access, OAuth permissions, read and write rights, and cross‑channel session persistence – is already defined, important extensions are planned for the future. The announcement cites payments, push notifications and finer‑grained permissions as topics that will be elaborated later in the roadmap. These elements are essential for a full commercial deployment, because they allow secure transaction execution and real‑time updates to users without repeatedly asking for new consent.

Limitations and open questions

The protocol is still in an early stage and several limitations are explicitly mentioned. First, there is no solution yet for European strong customer authentication, meaning companies subject to that regulation must take additional measures. Second, payments and push notifications remain outside the scope of v0.1, so companies that need these functions will have to develop their own extensions until the standard supports those scenarios. Finally, interoperability between different corporate agents still depends on each company’s implementation choices, which can lead to variation in how agents authenticate.

With the launch of the Personal Agent Protocol, the way consumers interact with AI agents in the digital economy is changing. Consumers gain more control over which rights they grant to an agent, while companies receive a standardized, secure way to give agents access to their systems. In the coming weeks, the specification publication, workshops and reference implementation will constitute the first concrete steps to bring this open protocol into practice.