Today we’re announcing Personal Agent Protocol — an open standard @Meta and @SierraPlatform are developing along with industry partners at @Genesys, @instinct, @RocketOTD, @Shopify, @stripe, and @Walmart. It will help define how personal agents interact with businesses and is open for anyone to implement.
Read more: sierra.ai/blog/introducing-p…
Oct 6, 2026 · 6:00 PM UTC
I use A2A protocol as communication layer between my agents (different sdks) and adding external personal ai assistants (frontier/open bots) soon, also added a small authorization layer under the A2A protocol. All gates, skills, rules, mcps, etc life inside specialized agent studios, like an ai organization where capabilities are shared, it’s not perfect/elegant but all together it does nearly the same what your blog is teasing. So I’m curious to give it a try!
2
1,715
Great to see! We've been working on an open standard for the service conversation once the door is open: It's built to sit alongside protocols like PAP.
github.com/neos-wave/service…
984
Great to see more of the industry working together to define identity & access standards!
Sessions are great for attaching to an identity, but a stable user identifier is critical for use cases like reservations and ticketing, where you want to rate-limit requests per customer.
Happy to share what we've learned implementing delegated identity in practice across e-commerce and financial services
321
A shared protocol for declared agents is a big step. The flip side for businesses: once well-behaved agents identify themselves, the risky traffic is whatever claims an identity that doesn't match where it comes from, e.g. a "personal agent" arriving via a rotating residential proxy. Checking the request's IP environment is a cheap first gate. Threat Hunter's view: threathunter.com/en/products…
8
How does one participate in the standardisation process? @SierraPlatform @Brett_A_Taylor
82
with OAuth, read vs write is a wide grant for an agent.
Write access that can process a return can usually also change the refund method or the shipping address. Since the session carries across the site, the APIs and the company's agent, that grant goes with it to every channel.
Finer-grained permissions are scoped as future work. A few things we'd push for in the spec:
1. Grants scoped to the task: which actions, which argument limits, and an expiry tied to the job
2. Authority that can only narrow when the personal agent hands work to a sub-agent, or the company agent passes it to a back-office one
3. A signed record of each action that the business can verify and the customer can review
We've been working on this as an OAuth extension (individual IETF draft, profiles RFC 9396). Would like to join the design workshops
1
421
We actually broke down the full list of partners and what this means for the ecosystem here: xitter.twitterapi.xyz/AGTPinsights/status/21…
Meta and Sierra just announced Personal Agent Protocol, an open standard for how AI agents deal with businesses. Here's what you need to know.
The Personal Agent Protocol, or PAP, is being developed by Meta and Sierra, the AI startup run by Bret Taylor. It aims to define how personal agents interact with businesses. It's open for anyone to implement. Sierra announced it on Oct 7, 2026.
This follows the Muse security stories we covered earlier. Muse is Meta's personal agent that handles shopping and payments. PAP is about how agents like it can talk to companies in a standard, secure way.
Seven industry partners are involved: Genesys, Instinct, Rocket, Shopify, Stripe and Walmart. Stripe called them founding partners and said the goal is to design how the many agentic parties play nicely together.
Reaction so far:
- Backers say most merchants handle agent traffic in an ad hoc, brittle way, and PAP brings uniformity
- Shopify says it gives merchants a new way to serve customers, from product questions to purchases
- Some note Amazon is not on the list
- One developer says agents from outside the West need a seat at the table too
Key facts:
- Developed by: Meta and Sierra
- Partners: Genesys, Instinct, Rocket, Shopify, Stripe, Walmart
- Type: open standard, free for anyone to implement
- Announced: Oct 7, 2026
The protocol is still being developed, and no rollout date has been given.
265