Poppy personal agent protocol gains backing from Meta, OpenAI, Stripe, Visa and Walmart

Ethan Walkrman @ethanwalkermanOriginally posted 2026.10.16

Open original on X

Meta, OpenAI, Stripe, Visa, and Walmart rarely agree on anything. Yet this week, in the span of 72 hours, they all lined up behind a new open standard called the Personal Agent Protocol — or "Poppy" for short. If you strip away the Silicon Valley PR, Poppy isn't just another tech spec. It is a peace treaty for the internet's weirdest shadow war. Until now, personal AI agents have been forced to act like polite identity thieves. Because there was no standard way for your AI to do chores for you online, it had to ask for your raw password, spin up a hidden browser, and pretend to be a human clicking through web forms. When websites broke, agents literally started calling customer service hotlines using fake AI voices. The situation got so out of hand that Poppy’s official engineering guide actually includes a rule begging developers: "Don't phone a company that publishes a poppy.json". The breaking point came in late September when Amazon blocked Meta’s new shopping agent, Muse, just 12 days after launch for hiding its AI identity and hoarding user logins. Poppy is the truce: a digital customs checkpoint for bots. Instead of sneaking in through the window, a personal agent shows a cryptographic passport at a simple /.well-known/poppy.json file on the company's website. You log in on the brand's own page via OAuth to decide what your agent is allowed to do, and the business independently decides what it will allow. One continuous session follows the agent everywhere: from checking stock as a guest, to viewing orders (poppy:read), to processing a return (poppy:write). The protocol itself is free and open-source, so how does everyone make money? Follow the architecture. Poppy lets a business route incoming agents through three doors: its regular website, its APIs (like MCP), or its own "Company Agent". Most traditional enterprises are terrified of exposing raw backend APIs to outside bots, which makes putting their own AI bouncer at the door the safest default option. And who builds those enterprise customer service agents? Sierra — the $15 billion AI startup leading this exact protocol. While Sierra sells the bouncer at the door (and even sells a voice-detection model called fleming-1 to catch rogue AI callers), giants like Visa, Mastercard, and Stripe joined to make sure that when bots start shopping, every transaction still pays toll fees on traditional card rails. What makes Poppy fascinating is that its moat isn't code. Technically, it invents almost nothing; it just cleverly stitches together existing OAuth, JWTs, and hardware-bound keys (DPoP) while keeping secret tokens completely out of the LLM's context window so they can't be leaked by prompt injection. The real moat is pure Silicon Valley diplomacy. Sierra’s CEO is Bret Taylor, the former CTO of Meta, former co-CEO of Salesforce, and current Board Chair of OpenAI. He is arguably the only person on earth who could get rivals Meta and OpenAI into the same room with 45 giant banks, airlines, and retailers in three days, forcing rival protocols like PACT to immediately fold into his working group. Still, the gap between Silicon Valley’s ambition and everyday reality is wild: > Only 11% of US consumers trust AI to make basic purchases, yet Poppy’s flagship demo showed Meta’s agent negotiating a home mortgage pre-approval with Rocket’s AI agent in seconds. > Meta claims its agent won't abuse company systems because it runs philosophical "honest person" self-tests, which analysts already called total bunk, because an agent's job is to win for its user. > For a grand commerce standard, Draft 0.1 doesn't even support payments or push notifications yet, and both Amazon and Anthropic noticeably refused to join the party. We are watching the new gatekeepers of the web draw up the borders in real time. Customer service is officially shifting from "humans talking to chatbots" to "your personal AI negotiating with a brand's corporate AI", and nobody wants their bot left outside the velvet rope. https://personalagentprotocol.org/