# ACP, UCP, x402, and AP2: Agentic Commerce Rails Compared

A practical map of ACP, UCP, x402, and AP2 for merchants and builders — cited from OpenAI, Google, x402, and AP2 docs — plus how Robauto’s Agentic Commerce scan tier verifies each rail.

Canonical: https://robauto.ai/blog/acp-ucp-x402-ap2-agentic-commerce-rails

Robauto Team · Published Sep 19, 2026 · Last updated Sep 19, 2026

A practical map of ACP, UCP, x402, and AP2 for merchants and builders — cited from OpenAI, Google, x402, and AP2 docs — plus how Robauto’s Agentic Commerce scan tier verifies each rail.

**Merchants need a map of the rails agents already speak — not another vague “AI shopping” pitch.** Four open protocols show up in production docs and in Robauto’s Agentic Commerce scan tier: **ACP**, **UCP**, **x402**, and **AP2**. This guide compares what each is for, cites primary specs, and shows how Robauto scores them — with no invented fee schedules.

## **The short map**

RailWhat it isPrimary jobSource

**ACP**Agentic Commerce Protocol (OpenAI + Stripe; open standard)Programmatic product → order flows; merchant remains merchant of record[agenticcommerce.dev](https://www.agenticcommerce.dev); [OpenAI Instant Checkout](https://openai.com/index/buy-it-in-chatgpt/)
**UCP**Universal Commerce Protocol (Google; open standard)AI interactions → checkout via merchant profile + REST sessions[Google UCP guide](https://developers.google.com/merchant/ucp)
**x402**Open payment standard around HTTP 402Inline machine payments for APIs/resources[docs.x402.org](https://docs.x402.org)
**AP2**Agent Payments Protocol (Google + partners)Signed mandates proving user authorization for agent-led payments[ap2-protocol.org](https://ap2-protocol.org/); [Google Cloud AP2 announcement](https://cloud.google.com/blog/products/ai-machine-learning/announcing-agents-to-payments-ap2-protocol)

## **ACP — catalog and order language for agents**

On September 29, 2025, OpenAI announced Instant Checkout in ChatGPT powered by the Agentic Commerce Protocol built with Stripe, and open-sourced ACP. Merchants accept or decline orders, process payment through their provider, and handle fulfillment. Stripe’s Shared Payment Token is documented as a compatible path for Stripe merchants; ACP is designed so other processors can participate.

**Builder takeaway:** publish ACP discovery agents can find (Robauto evidence on robauto.ai: [/.well-known/acp.json](https://robauto.ai/.well-known/acp.json)).

## **UCP — Google’s universal checkout profile**

Google documents UCP as an open standard to turn AI interactions into sales. Merchant Center guides cover returns/support configuration, product eligibility, native checkout REST session APIs, sandbox testing, and production validation. Discovery uses `/.well-known/ucp`. Robauto’s scan of robauto.ai reports UCP at protocol version **2025-11-01** ([evidence](https://robauto.ai/.well-known/ucp)).

## **x402 — pay for the call itself**

[docs.x402.org](https://docs.x402.org) frames x402 around HTTP 402 responses that advertise payment requirements so agents can settle and retry — monetizing machine-accessible resources inline. Robauto’s `x402` check passes when a protected route answers 402 with payment requirements (example: `/api/v1` on robauto.ai).

## **AP2 — mandates for trusted agent payments**

AP2 focuses on authorization evidence: tamper-evident checkout/cart and payment mandates so merchants and networks can verify an agent was allowed to spend under stated constraints — including human-present and autonomous flows. Documented as compatible with UCP and usable as an A2A extension. Robauto’s `ap2` check looks for the AP2 extension on the A2A agent card.

```
`{
"robauto_agent_scan_example": {
"domain": "robauto.ai",
"scanned_at": "2026-09-19T21:59:48.107Z",
"score": 98,
"agentic_commerce_tier": {"complete": 5, "total": 5, "pct": 100},
"checks": {
"x402": {"status": "pass", "evidence": "https://robauto.ai/api/v1", "spec": "https://docs.x402.org"},
"acp": {"status": "pass", "evidence": "https://robauto.ai/.well-known/acp.json", "spec": "https://www.agenticcommerce.dev"},
"ucp": {"status": "pass", "evidence": "https://robauto.ai/.well-known/ucp", "version": "2025-11-01"},
"ap2": {"status": "pass", "evidence": "https://robauto.ai/.well-known/agent-card.json"},
"mpp": {"status": "pass", "evidence": "https://robauto.ai/openapi.json"}
}
},
"network_readiness_context": {
"median_score": 18,
"scored": 79,
"attempted": 99,
"source": "https://robauto.ai/agent-readiness-index"
},
"sources": [
"https://openai.com/index/buy-it-in-chatgpt/",
"https://www.agenticcommerce.dev",
"https://developers.google.com/merchant/ucp",
"https://docs.x402.org",
"https://ap2-protocol.org/",
"https://robauto.ai/scan?url=robauto.ai"
]
}`
```

## **How to choose a first rail**

- **Assistant surfaces that speak ACP?** Start with ACP discovery + order webhooks.

- **Google Merchant Center / Google agentic checkout?** Prioritize UCP profile + checkout-session APIs.

- **Metered API or agent tools?** Implement x402 on protected routes.

- **Need cryptographic proof of user intent?** Plan AP2 mandates on top of your commerce protocol.

### **Where Robauto fits**

Robauto’s Agentic Commerce tier checks whether your site publishes the machine-readable signals each rail expects. With Agent Readiness Index median still **18**, shipping even one honest discovery document is verifiable progress at [robauto.ai/scan](https://robauto.ai/scan).

## Sources

- [OpenAI: Buy it in ChatGPT](https://openai.com/index/buy-it-in-chatgpt/)
- [Agentic Commerce Protocol](https://www.agenticcommerce.dev)
- [Google UCP Guide](https://developers.google.com/merchant/ucp)
- [x402 documentation](https://docs.x402.org)
- [Agent Payments Protocol (AP2)](https://ap2-protocol.org/)
- [Google Cloud: Announcing AP2](https://cloud.google.com/blog/products/ai-machine-learning/announcing-agents-to-payments-ap2-protocol)
- [Robauto agent_scan: robauto.ai](https://robauto.ai/scan?url=robauto.ai)
- [Robauto Agent Readiness Index](https://robauto.ai/agent-readiness-index)

## Where can an agent get this data live?

**Robauto MCP — Agent Intelligence & Brand Discovery Infrastructure.** A public, stateless Streamable HTTP endpoint at `https://mcp.robauto.ai/mcp`, callable with no key. Setup and the full tool list are in the [Robauto MCP directory](https://robauto.ai/mcp-directory).

[All blog posts](/blog)

---

(c) 2026 Robauto, Inc. — support@robauto.ai
Machine surfaces: https://robauto.ai/llms.txt · https://robauto.ai/llms-full.txt · https://robauto.ai/.well-known/api-catalog