ACP vs. UCP vs. AP2
Agentic Commerce needs standards — and currently, multiple protocols are competing for dominance. The Agentic Commerce Protocol (ACP) by OpenAI and Stripe, the Universal Commerce Protocol (UCP) by Google and Shopify, the Agent Payments Protocol (AP2) by Google and Mastercard — plus several additional approaches. Here is the sober assessment.
Three Protocols, One Goal
All three main protocols pursue the same fundamental goal: AI agents should be able to shop on behalf of their users. The difference lies in the scope — that is, which part of the purchase process the protocol standardizes.
- ACP focuses on the moment of purchase: create cart, pay, confirm.
- UCP covers the entire commerce lifecycle: from product discovery to return management.
- AP2 concentrates on the payment layer: secure, authorized transactions for any type of agent task.
Comparison Table
| Eigenschaft | ACP | UCP | AP2 |
|---|---|---|---|
| Initiator | OpenAI + Stripe | Google + Shopify | Google + Mastercard |
| Fokus | Checkout & Payment | Full Lifecycle | Universal Payment |
| Lizenz | Apache 2.0 | Offen | Offen |
| Status | Beta | Beta | Beta |
| Erste Impl. | ChatGPT | Google Search | Google Wallet |
ACP: Checkout-Centric
The Agentic Commerce Protocol solves a concrete problem: how does an AI agent complete a purchase? The answer: via a standardized Product Feed, a REST-based Checkout API, and tokenized payments (SharedPaymentTokens).
Strengths:
- First production implementation (ChatGPT Instant Checkout)
- Strong payment foundation through Stripe
- Clear, narrow scope — quick to implement
- Apache 2.0, fully open source
Limitations:
- No post-purchase management (tracking, returns)
- No identity linking (customer account with the merchant)
- Currently primarily Stripe as payment provider
UCP: Full Lifecycle
The Universal Commerce Protocol by Google and Shopify has the broadest scope. It defines the entire commerce lifecycle in multiple phases:
- Discovery: Find and compare products
- Identity Linking: Connect customer account with the merchant
- Checkout: Cart and payment
- Order Management: Tracking, returns, customer service
Strengths:
- Holistic approach — covers everything
- Google's reach (Search, Shopping, Maps)
- Shopify's merchant network (millions of stores)
- Compatible with A2A (Agent-to-Agent) and MCP
Limitations:
- More complex to implement than ACP
- Google-centric ecosystem
- No broad third-party implementation yet
AP2: Universal Payment
The Agent Payments Protocol addresses the payment layer — but more broadly than ACP. AP2 defines "Mandates": digitally signed authorizations that specify what an agent may spend, with whom, and under what conditions.
Strengths:
- Strong payment partners (Mastercard, PayPal, American Express)
- Not limited to shopping — also services, subscriptions, bookings
- Tamper-proof and revocable
- Applicable across industries
Limitations:
- No product discovery or checkout logic
- Requires a commerce protocol (ACP or UCP) as a foundation
- Complex mandate system oversized for simple purchases
TACP: Customer Data Preservation
The Trusted Agentic Commerce Protocol (TACP) by Forter is not an alternative to ACP, but a complement. It addresses a specific problem: when customers buy through an agent, the merchant loses valuable customer data — browsing behavior, cart history, preferences.
TACP solves this via JWE-encrypted data containers: the agent collects relevant data with the user's consent and forwards it encrypted to the merchant. The merchant can decrypt it and use it for personalization, fraud detection, and marketing — while the user's privacy remains protected.
x402/mpp: Micropayments
At the edge of the Agentic Commerce ecosystem are two protocols for micropayments:
- x402 (Coinbase): Uses the HTTP status code 402 ("Payment Required") to embed payments directly into HTTP requests. Payment via stablecoins (USDC). Ideal for API access and digital content where credit card transaction fees would be disproportionate.
- mpp (Tempo): An open micropayment protocol that pursues similar goals — machine-readable payments for small amounts.
Both are less relevant for traditional merchandise commerce but important for the machine-to-machine economy — when agents need to pay for API calls, data queries, or premium content.
Comparison Dimensions
| Dimension | ACP | UCP | AP2 |
|---|---|---|---|
| Scope | Checkout + Payment | Full Lifecycle | Payment Only |
| Initiator | OpenAI + Stripe | Google + Shopify | Google + Mastercard |
| License | Apache 2.0 | Open | Open |
| Payment Model | SharedPaymentToken | Flexible (AP2-compatible) | Mandates |
| Implementation | REST API, MCP | A2A, MCP, REST | REST API |
| Ecosystem | ChatGPT, Stripe | Google Search, Shopify | Visa, MC, PayPal |
| Target Audience | E-commerce merchants | E-commerce + services | Payment providers |
Which Protocol for Whom?
- You're a Stripe customer and want to sell quickly in ChatGPT? → ACP. Fastest time-to-market through the Agentic Commerce Suite.
- You're a Shopify merchant? → UCP + ACP. Shopify supports both — ACP via MCP server, UCP natively.
- You're a payment provider or financial services company? → AP2. The protocol defines the payment layer that both ACP and UCP can use.
- You offer digital content or APIs? → x402/mpp. Micropayments without credit card overhead.
- You want to cover all channels long-term? → Multi-protocol strategy. Start with the protocol that fits your primary sales channel and expand.
Coexistence Over Competition
The likelihood of a single protocol "winning" is low. More probable is a scenario similar to the web: multiple standards coexist and complement each other. HTTP, OAuth, JSON-LD, Schema.org — all solve different problems and are used together.
For Agentic Commerce, this could look like:
- UCP as the framework protocol for the commerce lifecycle
- ACP as the checkout specification within that framework
- AP2 as the universal payment layer
- MCP as the communication protocol between agent and tools
The open-source licensing of all protocols facilitates such convergence. And for merchants, it means: you don't have to choose one protocol. You can integrate incrementally and start where the greatest business value lies.
Frequently Asked Questions
Do I have to choose one protocol?
No. The protocols are not mutually exclusive. A merchant can use ACP for ChatGPT purchases, UCP for Google-based agents, and AP2 for the payment layer. Long-term convergence may occur.
Which protocol has the widest adoption?
Currently ACP, as it was the first to be implemented in a mass-market product (ChatGPT Instant Checkout). UCP benefits from the reach of Google and Shopify. AP2 is backed by the payment networks (Mastercard, PayPal).
Will there be a unified standard?
Possibly in the long term. In the short term, fragmentation is likely — similar to messaging protocols or payment standards. The open-source licensing of all protocols facilitates a potential merger.
What is TACP and why is it relevant?
The Trusted Agentic Commerce Protocol (TACP) by Forter addresses a problem with ACP: the loss of customer data for merchants. TACP uses JWE encryption to securely forward customer data to merchants without compromising privacy.
Are x402 and mpp relevant for traditional online stores?
Currently less so. x402 and mpp focus on micropayments via stablecoins — interesting for API access, digital content, and machine-to-machine transactions. For traditional merchandise commerce, ACP and UCP are more relevant.