Opening the Front Door to AI Agents: Sierra and Meta's Personal Agent Protocol
Published
This English page is a machine translation of the Korean original, so some phrasing may read awkwardly.
Sierra and Meta have announced an open standard for how personal AI agents log in to business services and get things done. The v0.1 specification is due in late October.
Read the original at Sierra Blog ↗
AI agents currently visit websites the way people do. They open pages and fill out forms one field at a time. Personal Agent Protocol, an open standard announced by Sierra and Meta on October 6, proposes giving those agents a dedicated front door instead of a human interface.
That front door is built on OAuth. An agent can enter as a guest to ask about inventory or return policies. When a task requires an account, the customer logs in on the business's page. The customer chooses whether to grant the agent read-only or write access. Businesses decide both what agents can do and how they can connect. They can offer a website, an API using standards such as MCP or OpenAPI, or their own agent.
Shopify, Stripe, Walmart, and Genesys are among the named partners. But there is no specification yet. The v0.1 specification is due later this month, and payments are reserved for a future extension rather than included in the core protocol.
This changes the question developers need to answer. Until now, the problem was how to block automated traffic. With a front door in place, the problem becomes what to let authenticated agents do. Services need to separate read and write permissions for each capability and decide which to expose to agents. Just as Mabinogi Mobile kept its marketplace and payments closed to AI, that list is the design.
There is no need to rush. In October 2025, Visa introduced Trusted Agent Protocol with Cloudflare to verify agent identities through signatures. Stripe and Shopify were also named in that initiative. The rules for letting agents in have yet to converge on a single standard.
So the job right now is a list, not an implementation. Sort out in advance which capabilities agents may read and which they may change. Whatever standard arrives, that list will determine how wide the front door opens.
Sources
- Sierra: Introducing Personal Agent Protocol, October 6, 2026, by Bret Taylor and Clay Bavor.
- Visa: Visa Introduces Trusted Agent Protocol: An Ecosystem-Led Framework for AI Commerce, October 14, 2025.
A question to think about
Once agents have their own front door, should we keep blocking those that come through the human interface?