Can payment tokens let AI agents checkout safely?

Stripe announces that ChatGPT users in the United States can buy from Etsy merchants, and soon Shopify merchants, inside the chat, and releases the Agentic Commerce Protocol (ACP), "an open standard codeveloped with OpenAI." The mechanism named is a new payment primitive: "Stripe issues a Shared Payment Token (SPT), a new payment primitive that lets applications like ChatGPT initiate a payment without exposing the buyer's payment credentials." Stripe states "SPTs are scoped to a specific merchant and cart total," and that once issued, "ChatGPT passes the token to the merchant via API."

The flow Stripe describes: a ChatGPT user asks for product recommendations, is presented with a Stripe-powered checkout inline in the chat, and pays with their preferred method, including Link, "Stripe's consumer payments product." The merchant can then process the transaction through Stripe, "or, if preferred, handle the payment with another provider while still benefiting from Stripe's risk scores for fraud protection." Orders flow from ChatGPT to the merchant's backend via ACP, and the merchant "can accept or decline the order, charge the payment method, calculate and remit sales tax, and handle fulfillment and returns, as they normally would." Stripe frames the underlying problem as one of fragmentation: "with many AI agents emerging, it's not realistic for businesses to maintain integrations with each one," so ACP aims to be "a shared language between businesses and AI agents" that works with a single integration and, Stripe says, even "across AI agents" and with payment providers other than itself.

Against Can a protocol split agent access from agent incentives?, the two protocols divide the same problem differently: PAP governs what access a personal agent holds across a business's web, API, and conversational channels and names a payments extension — completing a purchase without sharing credit card information — only as a future, unbuilt feature, with Stripe itself listed among PAP's industry partners. ACP is the payment leg built and shipping now, with a live Etsy integration rather than a design intent. Against Does naming a payments brand increase trust in AI transactions?, Stripe's SPT design bets on the same fix Visa's survey points toward: consumers distrust generic AI with money movement, so the credential-shielding architecture puts a familiar payments brand underneath the agent rather than asking the buyer to trust ChatGPT directly with card details.

The excerpt is a vendor announcement by the two companies building ACP, quoting their own executives, with no independent data on fraud rates, dispute outcomes, or chargeback liability when a merchant routes payment through a non-Stripe provider while still using Stripe's risk scores. It does not say whether the inline checkout includes an explicit buyer confirmation step comparable to the pre-purchase approval that Do consumers want to approve AI shopping purchases before they happen? reports consumers want, only that the SPT itself is scoped to merchant and cart total. What the excerpt establishes is that one major payments processor and one major AI lab have a working, named implementation of agent-initiated checkout; it does not establish that the credential-shielding mechanism resolves fraud, liability, or consent questions beyond the one it was built to solve.