ACP, UCP, x402, and AP2: Agentic Commerce Rails Compared

Robauto Team · Published · Last updated

A practical map of ACP, UCP, x402, and AP2 for merchants and builders — cited from OpenAI, Google, x402, and AP2 docs — plus how Robauto’s Agentic Commerce scan tier verifies each rail.

Merchants need a map of the rails agents already speak — not another vague “AI shopping” pitch. Four open protocols show up in production docs and in Robauto’s Agentic Commerce scan tier: ACP, UCP, x402, and AP2. This guide compares what each is for, cites primary specs, and shows how Robauto scores them — with no invented fee schedules.

Robauto Agentic Commerce checks: x402, ACP, UCP, AP2, and MPP all passing on robauto.ai

The short map

RailWhat it isPrimary jobSource
ACPAgentic Commerce Protocol (OpenAI + Stripe; open standard)Programmatic product → order flows; merchant remains merchant of recordagenticcommerce.dev; OpenAI Instant Checkout
UCPUniversal Commerce Protocol (Google; open standard)AI interactions → checkout via merchant profile + REST sessionsGoogle UCP guide
x402Open payment standard around HTTP 402Inline machine payments for APIs/resourcesdocs.x402.org
AP2Agent Payments Protocol (Google + partners)Signed mandates proving user authorization for agent-led paymentsap2-protocol.org; Google Cloud AP2 announcement

ACP — catalog and order language for agents

On September 29, 2025, OpenAI announced Instant Checkout in ChatGPT powered by the Agentic Commerce Protocol built with Stripe, and open-sourced ACP. Merchants accept or decline orders, process payment through their provider, and handle fulfillment. Stripe’s Shared Payment Token is documented as a compatible path for Stripe merchants; ACP is designed so other processors can participate.

Builder takeaway: publish ACP discovery agents can find (Robauto evidence on robauto.ai: /.well-known/acp.json).

UCP — Google’s universal checkout profile

Google documents UCP as an open standard to turn AI interactions into sales. Merchant Center guides cover returns/support configuration, product eligibility, native checkout REST session APIs, sandbox testing, and production validation. Discovery uses /.well-known/ucp. Robauto’s scan of robauto.ai reports UCP at protocol version 2025-11-01 (evidence).

x402 — pay for the call itself

docs.x402.org frames x402 around HTTP 402 responses that advertise payment requirements so agents can settle and retry — monetizing machine-accessible resources inline. Robauto’s x402 check passes when a protected route answers 402 with payment requirements (example: /api/v1 on robauto.ai).

AP2 — mandates for trusted agent payments

AP2 focuses on authorization evidence: tamper-evident checkout/cart and payment mandates so merchants and networks can verify an agent was allowed to spend under stated constraints — including human-present and autonomous flows. Documented as compatible with UCP and usable as an A2A extension. Robauto’s ap2 check looks for the AP2 extension on the A2A agent card.

{
  "robauto_agent_scan_example": {
    "domain": "robauto.ai",
    "scanned_at": "2026-09-19T21:59:48.107Z",
    "score": 98,
    "agentic_commerce_tier": {"complete": 5, "total": 5, "pct": 100},
    "checks": {
      "x402": {"status": "pass", "evidence": "https://robauto.ai/api/v1", "spec": "https://docs.x402.org"},
      "acp": {"status": "pass", "evidence": "https://robauto.ai/.well-known/acp.json", "spec": "https://www.agenticcommerce.dev"},
      "ucp": {"status": "pass", "evidence": "https://robauto.ai/.well-known/ucp", "version": "2025-11-01"},
      "ap2": {"status": "pass", "evidence": "https://robauto.ai/.well-known/agent-card.json"},
      "mpp": {"status": "pass", "evidence": "https://robauto.ai/openapi.json"}
    }
  },
  "network_readiness_context": {
    "median_score": 18,
    "scored": 79,
    "attempted": 99,
    "source": "https://robauto.ai/agent-readiness-index"
  },
  "sources": [
    "https://openai.com/index/buy-it-in-chatgpt/",
    "https://www.agenticcommerce.dev",
    "https://developers.google.com/merchant/ucp",
    "https://docs.x402.org",
    "https://ap2-protocol.org/",
    "https://robauto.ai/scan?url=robauto.ai"
  ]
}

How to choose a first rail

  1. Assistant surfaces that speak ACP? Start with ACP discovery + order webhooks.
  2. Google Merchant Center / Google agentic checkout? Prioritize UCP profile + checkout-session APIs.
  3. Metered API or agent tools? Implement x402 on protected routes.
  4. Need cryptographic proof of user intent? Plan AP2 mandates on top of your commerce protocol.

Where Robauto fits

Robauto’s Agentic Commerce tier checks whether your site publishes the machine-readable signals each rail expects. With Agent Readiness Index median still 18, shipping even one honest discovery document is verifiable progress at robauto.ai/scan.

Sources

Where can an agent get this data live?

Robauto MCP — Agent Intelligence & Brand Discovery Infrastructure. A public, stateless Streamable HTTP endpoint at https://mcp.robauto.ai/mcp, callable with no key. Setup and the full tool list are in the Robauto MCP directory.

All blog posts