Sierra and Meta back an open protocol so personal AI agents can authenticate with businesses
In 30 seconds
Sierra and Meta are drafting Personal Agent Protocol, an open rulebook for how personal AI agents present themselves and operate when dealing with companies. Shopify, Stripe and Walmart are among the partners, and Sierra expects version 0.1 to arrive this month. Sierra describes agents starting out as guests and relying on OAuth for account access, with the customer choosing read or change permissions.
AI agents that run errands for people could soon have a common set of rules.
Sierra and Meta are developing Personal Agent Protocol, an open standard that defines how personal AI agents interact with businesses: how they identify themselves and how they act on their websites, through their APIs or with their own agents. Genesys, Instinct, Rocket, Shopify, Stripe and Walmart are also taking part. Sierra plans to publish the first specification, version 0.1, later this month.
The idea is that an agent can start as a guest, for example to check whether a product is available or to ask about a returns policy. When it needs to access the customer's account, the session is built on OAuth, an established standard for authorizing access, and it is the customer who decides whether the agent can only read or can also make changes. The business decides what it makes available. Among possible future extensions, Sierra mentions payments, so that an agent could complete a purchase without sharing card details.
We think this points to a real need: businesses need to tell an automated query apart from an authorized action.
Why it matters · analysis and opinion
More and more errands will be run by an AI agent on someone's behalf, and the business on the other end needs to know whether it is facing a simple query or an authorized order. A common standard would separate what a guest can do, such as checking stock or reading a returns policy, from what requires the customer's permission on their account. It mainly affects online retail, customer service and anyone who sells through a website or an API. A small business does not need to change anything today, but it can review what information it offers without signing in and which actions should require authorization. A developer building integrations can follow version 0.1 once Sierra publishes it. In our view, businesses with clear information and tidy permissions will be better prepared for these agents.
Official source: Sierra · Written with the help of AI: how we make the news
