Meta, Sierra, and Partners Launch 'Personal Agent Protocol' Open Standard for AI Agents
Summary
Updated Oct 7 — Eight founding partners confirmed; protocol built on OAuth with v0.1 spec due in October 2026.
- • Meta, Walmart, Stripe, and Sierra launch open standard for AI agent-business interactions
- • Protocol provides agent authentication, security rails, and data visibility for businesses
- • Meta's Muse agent has millions of users; Amazon blocked it over scraping concerns
- • OpenAI chair Bret Taylor leads initiative; expects OpenAI and Anthropic to join eventually
Updates
Full founding coalition: eight partners including Genesys, Instinct, Rocket, and Shopify
The founding post names eight total partners — Meta, Sierra, Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart — expanding beyond the four cited in initial CNBC reporting. Instinct is noted as a late addition joining the effort.
Protocol built on OAuth; sessions persist across pre-login and post-login channels
Authentication is based on OAuth, an established web standard for authorizing access. Sessions carry across channels — a question asked before sign-in and an order change made afterward are part of the same visit, enabling seamless agent handoffs.
v0.1 specification due later in October; design workshops and reference implementation planned
Meta and Sierra will publish the v0.1 spec in October 2026, host design workshops with interested parties, and release a reference implementation to help developers get started.
Three business integration routes: website, APIs (MCP/OpenAPI), or company's own agent
Businesses can connect with personal agents via their regular web pages, via APIs built on MCP and OpenAPI standards, or through their own conversational agent for complex tasks like warranty claims. Company decides what routes to offer.
Details
Personal Agent Protocol published as open standard by founding group
Meta, Walmart, Stripe, and Sierra published the 'personal agent protocol,' an open standard governing how AI agents can interact with and access information from business systems.
Bret Taylor leads effort; compares to OAuth and email standards
Taylor (OpenAI chairman, Sierra co-founder) is leading the initiative, comparing it to OAuth login standards and email — open protocols that became universal infrastructure.
Meta's Muse: millions of US users, No. 1 on App Store since September
Meta's Muse personal agent launched early September 2026 and quickly reached the top of Apple's App Store ahead of ChatGPT, with millions of US users, making interoperability standards urgent.
Protocol lets businesses verify if an agent represents a real user
A core feature is authentication: businesses can distinguish genuine personal agents acting on behalf of real users from unauthorized bots, reducing fraud and unauthorized scraping risk.
Standard governs sensitive data sharing — credit cards and personal info
Meta VP David Singleton noted agents need access to credit card and personal data; the protocol creates visibility and control rails for this sensitive access to protect users and businesses.
Amazon blocked Meta's Muse over scraping; previously sued Perplexity
Amazon blocked Meta's Muse and Perplexity's AI agent over scraping concerns and previously sued Perplexity alleging the startup concealed its agents to continue unauthorized website scraping.
OpenAI and Anthropic absent but Taylor expects eventual participation
OpenAI and Anthropic are not currently participating. Taylor said he'd be 'really disappointed' if competitors don't eventually adopt it, emphasizing the whole point is an open protocol.
Based on CNBC Technology reporting from Oct 6, 2026 on the personal agent protocol announcement.
What This Means
The Personal Agent Protocol addresses a critical and growing problem: millions of AI agents like Meta's Muse are attempting to access business systems on behalf of users, with no common standard for authentication or consent. The protocol's foundation on OAuth — an established and widely adopted web standard — lowers the bar for adoption, and the eight founding partners (including Shopify and Rocket alongside Walmart and Stripe) represent meaningful coverage of commerce and financial services. Without such rails, businesses face security vulnerabilities, fraud, and data liability — as Amazon's blocking of Meta and lawsuit against Perplexity illustrates. The v0.1 spec due in October will be the real test of whether the protocol can achieve the universal adoption of its OAuth predecessor.
Sentiment
Cautiously optimistic among practitioners, focused on permissions and B2B gaps
“I like the direction... Every example is B2C and post-purchase. Nothing about a buyer's agent doing vendor research... Companies are already being asked to support MCP, NLWeb, A2A and llms.txt, so another protocol competes...”
CEO of agent-focused B2B sales startup
“The fight is not over which agent is smartest. It is over who writes the permissions layer between the agent and your wallet.”
“Your next support ticket may come from an agent that never gets tired. Who on your team decides what it's allowed to refund?”
“aqui na findup, construindo a aurora, a visão é que o chamado vai começar a ser aberto pelo agente do cliente conversando direto com o nosso. a relação com suporte deixa de ser humano com ia e vira agente com agente”
Split
~60/40 positive/mixed — excitement on consumer agent permissions vs. calls for stronger B2B coverage and governance details (~4 reactions found)