LupaRiel · AP2
AP2
Agent Payments Protocol (Google; FIDO Alliance governance): agents authorize purchases with signed mandates, without seeing credentials.
What it is. Signed Intent / Cart / Payment Mandates let an agent complete a purchase without holding the payment credential. Source: research/ap2.md
(127 rows, snapshot 2026-10-31, last reviewed 2026-10-25).
Who maintains it. Created by Google; governance donated to the FIDO Alliance (Agentic Authentication and Payments working groups).
What it is not. Not a per-request API charge. A press-release partner is not an x402 endpoint.
Note. Mastercard Agent Pay (Pomelo and others) is a proprietary framework: it is not an AP2 ficha. See LatAm.
Price, network, and status only when the table has them. Compare rails: x402 vs AP2 vs ACP vs MPP · PAP. Full AP2 table (Spanish): /ap2/. All listings A–Z: /en/directory/.
Official docs
Methodology
- How LupaRiel verifies entries
- On rail hubs, the status is the one on that rail. On the home page and the Index, the most advanced among its rails.
- Machine-readable catalog · /rieles.json
- Spanish hub + full listing · /ap2/
Protocol updates
- 2026-10-30. PRs #369 and #371 (mandate conformance corpus and verifiers) were closed without merging on 2026-10-29. The published spec does not change. PR #369 · PR #371
- 2026-10-29. CartTrace-100k, by General Machines (2026-10-28), is a simulated benchmark: 101,416 shopping journeys across 1,044 stand-in stores with a scripted shopper and test tokens, over UCP, ACP, AP2, MPP and WebMCP. It is not real usage. The early edge of AP2 mandates comes from the judge, since their final reply lists no shipping options. Restricted to the checks every cell can fail, AP2 lands at 0.95, indistinguishable from one. The MPP cells use the most tokens for the lowest odds. General Machines · CartTrace-100k
- 2026-10-25. Open issue in the AP2 SDK: the constraint check differs from the spec in 3 points, according to the author of an independent implementation who compared 327 cases. The budget evaluator truncates decimals (0.29 becomes 28 cents) and rejects a payment equal to the budget, the execution date is compared as text, so a time with an offset can pass outside the window, and negative amounts pass. No maintainer reply. AP2 issue #388 (open)
- 2026-10-17. Reference demo with AP2 mandates: GoDaddy, Infoblox, Google, and Cloudflare showed the “Chain of Trust” at GovWare 2026 (Singapore, 2026-10-14, with the IMDA regulator), an open reference architecture. The person approves with a passkey, an approval service issues signed AP2 mandates that set what the agent may buy, from whom, and up to what amount, and the agent pays over UCP with Stripe. It was a simulated Madrid–Singapore flight purchase between mock agents: a prototype, not production. Infoblox · Chain of Trust (GovWare 2026, 2026-10-14) · openagentcommerce.org · technical paper
- 2026-09. FIDO put dates on standardization: Google and Mastercard donated AP2 and Verifiable Intent (VI) in April 2026; in September the specs moved to a public repository for review; target: harmonize AP2 and VI by end of 2026 and publish the first consolidated spec in mid-2027. The google-agentic-commerce/AP2 repo has no commits since v0.2 (April 2026). FIDO · W3C/GS1 workshop slides (2026-09)
Protocol updates with a cited source. They are not catalog rows and do not change the snapshot.
Sample entries
- Google Cloud · production · 2026-10-25
- FIDO Alliance · production · 2026-10-25
- Shopify · pilot · 2026-10-25
These names come from the research tables (snapshot 2026-10-31). LupaRiel does not invent rows, prices, networks, or statuses. The complete listing stays on the Spanish hub.
AP2 comparison table
All 127 entries on this rail with domain, price, network, Rail Readiness Level (RRL) and the status on this rail. Ordered by RRL, then status and name. Same rows as the CSV and JSON downloads.
| Name | Domain | Price (table) | Network | RRL | Status |
|---|---|---|---|---|---|
| agent-verifier (goodmeta) | github.com | no per-call price | — | 2 | production |
| AgentWallet (Payouts.com / Payouts Inc) | agentwallet.ai | no per-call price | — | 2 | production |
| ANP (Agent Network Protocol) + Hangzhou Vector Consensus | agent-network-protocol.com | no per-call price | — | 2 | production |
| api-evangelist/mandateshield-com (MandateShield) | github.com | no per-call price | — | 2 | production |
| ar-agents (@ar-agents/ap2) | jsdelivr.com | no per-call price | — | 2 | production |
| Chanl (Elemente, Corp) | channel.tel | no per-call price | — | 2 | production |
| CyberStrategyInstitute/ai-safe2-framework | github.com | no per-call price | — | 2 | production |
| FIDO Alliance | ap2-protocol.org | no per-call price | — | 2 | production |
| Google Cloud | cloud.google.com | no per-call price | — | 2 | production |
| Monkydot (ucp-ready) | github.com | no per-call price | — | 2 | production |
| Parafe (getparafe) | github.com | no per-call price | — | 2 | production |
| PayCentral.ai (Phronetic AI / Infibeam Avenues — AvenuesAI) | paycentral.ai | no per-call price | — | 2 | production |
| UCP Checker | ucpchecker.com | no per-call price | — | 2 | production |
| @codespar/mcp-ap2 (MCP Dev Brasil) | mcpservers.org | no per-call price | — | 2 | pilot |
| AgentPey (vicentewolde) | github.com | no per-call price | — | 2 | pilot |
| AlgoVoi (chopmob-cloud/algovoi-compliance-gate-a2a) | github.com | no per-call price | — | 2 | pilot |
| ap2-evidence-pack (Roberto Locatelli) | github.com | no per-call price | — | 2 | pilot |
| ap2-example (goodmeta) | github.com | no per-call price | — | 2 | pilot |
| CodeSpar (agentic-payments-standards) | github.com | no per-call price | — | 2 | pilot |
| CredentAgent (openmobilehub) | github.com | no per-call price | — | 2 | pilot |
| Cryptorefills/agentic-commerce | github.com | no per-call price | — | 2 | pilot |
| devlab-group/agent-commerce | github.com | no per-call price | — | 2 | pilot |
| EauDoon/mandatebound | github.com | no per-call price | — | 2 | pilot |
| HARTOS / McGroce (hertz-ai) | github.com | no per-call price | — | 2 | pilot |
| HemmaBo | github.com | no per-call price | — | 2 | pilot |
| MandateKit (major-matters) | github.com | no per-call price | — | 2 | pilot |
| micro/go-micro | github.com | no per-call price | — | 2 | pilot |
| Mongolian-travel-agent (enconsanand) | github.com | no per-call price | — | 2 | pilot |
| open-bank-oss (JiRaska) | github.com | no per-call price | — | 2 | pilot |
| Revolut | pymnts.com | no per-call price | — | 2 | pilot |
| sebastienrousseau/ap2-iso20022 | github.com | no per-call price | — | 2 | pilot |
| Shopify | shopify.com | no per-call price | — | 2 | pilot |
| tomtom87/Portage | github.com | no per-call price | — | 2 | pilot |
| tubone24/AP2_demo_app | github.com | no per-call price | — | 2 | pilot |
| XyncPay (plugin-xyncpay-elizaos) | github.com | no per-call price | — | 2 | pilot |
| 0xENX/PulseAP2X402Verifier | github.com | no per-call price | — | 1 | announced |
| 1Password | cloud.google.com | no per-call price | — | 1 | announced |
| a2a-governance (kya-observer) | github.com | no per-call price | — | 1 | announced |
| Accenture | cloud.google.com | no per-call price | — | 1 | announced |
| Adobe | business.adobe.com | no per-call price | — | 1 | announced |
| Adyen | digitalapplied.com | no per-call price | — | 1 | announced |
| AEON | prnewswire.com | no per-call price | — | 1 | announced |
| Affirm | businesswire.com | no per-call price | — | 1 | announced |
| AgentGatePay | github.com | no per-call price | — | 1 | announced |
| agentic-payments (ruvnet) | npmjs.com | no per-call price | — | 1 | announced |
| agentwallet-sdk (up2itnow0822) | github.com | no per-call price | — | 1 | announced |
| Airwallex | cloud.google.com | no per-call price | — | 1 | announced |
| Alibaba.com | martech.org | no per-call price | — | 1 | announced |
| Amazon | businesswire.com | no per-call price | — | 1 | announced |
| American Express | cloud.google.com | no per-call price | — | 1 | announced |
| Ant International | secure.businesswire.com | no per-call price | — | 1 | announced |
| ap2-adk-commerce-agent (rotorresbr) | github.com | no per-call price | — | 1 | announced |
| ap2-conformance (goodmeta) | github.com | no per-call price | — | 1 | announced |
| ap2-payment-handler (up2itnow0822) | github.com | no per-call price | — | 1 | announced |
| ap2-razorpay-gateway (PrinceTomar1) | github.com | no per-call price | — | 1 | announced |
| ap2java (vishalmysore) | github.com | no per-call price | — | 1 | announced |
| AVA-PAY | github.com | no per-call price | — | 1 | announced |
| Blackhawk Network (BHN) | cloud.google.com | no per-call price | — | 1 | announced |
| BVNK | cloud.google.com | no per-call price | — | 1 | announced |
| Checkout.com | checkout.com | no per-call price | — | 1 | announced |
| Cloudflare | digitalcommerce360.com | no per-call price | — | 1 | announced |
| Coinbase | cloud.google.com | no per-call price | — | 1 | announced |
| Confluent | cloud.google.com | no per-call price | — | 1 | announced |
| Crossmint | cloud.google.com | no per-call price | — | 1 | announced |
| CVS Health | businesswire.com | no per-call price | — | 1 | announced |
| cycles-ap2-python (runcycles) | github.com | no per-call price | — | 1 | announced |
| Dell | cloud.google.com | no per-call price | — | 1 | announced |
| Deloitte | cloud.google.com | no per-call price | — | 1 | announced |
| DLocal | cloud.google.com | no per-call price | — | 1 | announced |
| Ebanx | cloud.google.com | no per-call price | — | 1 | announced |
| Eigen Labs (EigenLayer) | cloud.google.com | no per-call price | — | 1 | announced |
| Ethereum Foundation | cloud.google.com | no per-call price | — | 1 | announced |
| Fiuu | technode.global | no per-call price | — | 1 | announced |
| Forter | cloud.google.com | no per-call price | — | 1 | announced |
| Garena | technode.global | no per-call price | — | 1 | announced |
| Global Fashion Group | cloud.google.com | no per-call price | — | 1 | announced |
| Gr4vy | financialit.net | no per-call price | — | 1 | announced |
| Gravitee | cloud.google.com | no per-call price | — | 1 | announced |
| HashKey Group | panewslab.com | no per-call price | — | 1 | announced |
| intelligence-mcp (goodmeta) | github.com | no per-call price | — | 1 | announced |
| Intuit | cloud.google.com | no per-call price | — | 1 | announced |
| JCB | cloud.google.com | no per-call price | — | 1 | announced |
| JusPay | cloud.google.com | no per-call price | — | 1 | announced |
| KCP (Korea Cyber Payment) | cloud.google.com | no per-call price | — | 1 | announced |
| Kite AI | bitget.com | no per-call price | — | 1 | announced |
| Klarna | businesswire.com | no per-call price | — | 1 | announced |
| Lazada | technode.global | no per-call price | — | 1 | announced |
| Lightspark | cloud.google.com | no per-call price | — | 1 | announced |
| Manus (manus.ai) | technode.global | no per-call price | — | 1 | announced |
| Mastercard | mastercard.com | no per-call price | — | 1 | announced |
| MEOK AI Labs — meok-stripe-acp-checkout-mcp | github.com | no per-call price | — | 1 | announced |
| Mesh (Mesh Payments) | cloud.google.com | no per-call price | — | 1 | announced |
| MetaMask | cloud.google.com | no per-call price | — | 1 | announced |
| mnemopay | github.com | no per-call price | — | 1 | announced |
| Monee (ShopeePay / Sea Limited) | pymnts.com | no per-call price | — | 1 | announced |
| Mysten Labs | cloud.google.com | no per-call price | — | 1 | announced |
| Nevermined | nevermined.ai | no per-call price | — | 1 | announced |
| Nexi | cloud.google.com | no per-call price | — | 1 | announced |
| Nuvei | prnewswire.com | no per-call price | — | 1 | announced |
| Okta | businesswire.com | no per-call price | — | 1 | announced |
| OnePay | prnewswire.com | no per-call price | — | 1 | announced |
| OpenAI | openai.com | no per-call price | — | 1 | announced |
| OSL Group (OSL AgentPay) | globenewswire.com | no per-call price | — | 1 | announced |
| Payoneer | cloud.google.com | no per-call price | — | 1 | announced |
| PayPal | cloud.google.com | no per-call price | — | 1 | announced |
| PRAMANA (CODER7657) | github.com | no per-call price | — | 1 | announced |
| PwC | pwc.com | no per-call price | — | 1 | announced |
| Questflow | ar.tradingview.com | no per-call price | — | 1 | announced |
| Ralio | ralio.co | no per-call price | — | 1 | announced |
| Razer | technode.global | no per-call price | — | 1 | announced |
| Salesforce | investor.salesforce.com | no per-call price | — | 1 | announced |
| Sardis | github.com | no per-call price | — | 1 | announced |
| ServiceNow | cloud.google.com | no per-call price | — | 1 | announced |
| shibutatsu/pulse-ap2-x402-conformance | github.com | no per-call price | — | 1 | announced |
| Shopee | cloud.google.com | no per-call price | — | 1 | announced |
| Shopify Agentic MCP Gateway (kuro-tomo) | github.com | no per-call price | — | 1 | announced |
| SkylinePlatform/agentic-payments | github.com | no per-call price | — | 1 | announced |
| Trip.com | technode.global | no per-call price | — | 1 | announced |
| Trulioo | finovate.com | no per-call price | — | 1 | announced |
| UCP (Universal Commerce Protocol) | ucp.dev | no per-call price | — | 1 | announced |
| UnionPay International | cloud.google.com | no per-call price | — | 1 | announced |
| Visa | businesswire.com | no per-call price | — | 1 | announced |
| Worldline | worldline.com | no per-call price | — | 1 | announced |
| Worldpay | developer.worldpay.com | no per-call price | — | 1 | announced |
| xpaysh | github.com | no per-call price | — | 1 | announced |
| Zalora | technode.global | no per-call price | — | 1 | announced |
| Etsy | stripe.com | no per-call price | — | 0 | announced |
Showing 50 of 127. The CSV and JSON have every row.
Download the comparison
127 AP2 entries · name, domain, price, network, rail status and RRL · snapshot .
- RRL 3 0
- RRL 2 35
- RRL 1 91
- RRL 0 1
CSV · /rieles/ap2.csv JSON · /rieles/ap2.json
AP2 is authorization and checkout: there is no per-call price, each merchant sets the amount. The price column says "no per-call price" here and stays empty in the files. 92 of 127 are announced only.
License CC BY 4.0. Cite LupaRiel and the snapshot date. RRL methodology.