FIDO Alliance, Google and Mastercard Team Up on a Standard for AI Shopping Agents

AI agents that make purchases on your behalf are moving past the concept stage. The question is no longer "will they" but "how safely," and that is the question FIDO Alliance, Google and Mastercard have now taken up.

Why this has become urgent

Autonomous shopping is no longer an experiment. OpenAI launched Operator, an agent that controls a browser in real time, searches for products, picks the right items and clicks "Pay" without a human involved. Google introduced Agent Mode in Chrome, Anthropic is testing Computer Use, and dozens of startups are building similar features into search and browsers.

The problem is that no single standard exists for authenticating AI agents during transactions. Each company handles the issue on its own, or ignores it altogether. While agentic shopping remains a niche feature, the risks are manageable. Once it lands in every smartphone, users will pay the price of the inconsistency.

Without a common protocol, obvious gaps open up:

• An agent makes purchases without the user's explicit consent
• An attacker hijacks an agent's session and carries out unauthorized transactions
• An agent lands on a phishing store and hands over card details
• Several competing agents duplicate the same order
• The absence of budget limits leads to unexpected spending

Who has taken on the task

FIDO Alliance is a nonprofit organization that created the passkey and passwordless authentication standards now supported by Apple, Google, Microsoft and most large banks. It has announced a partnership with Google and Mastercard. The goal is an open standard for authenticating AI agents when they make payments: a protocol that links the agent's identity, the user's consent and the payment infrastructure into a single secure chain.

This is not the first time FIDO Alliance has tackled a task of this scale. A few years ago, SMS codes seemed an inseparable part of online banking. Today passkeys are displacing them on all major platforms. It was the partnership with Apple, Google and Microsoft that turned passkeys from an academic project into a real market shift. Without infrastructure players of that caliber, any standard remains a recommendation on paper.

Google controls Chrome and Android, the platforms through which most of the world's online purchases pass. Mastercard runs one of the largest payment networks, processing billions of transactions every year. Together they cover the whole chain: authentication → browser → transaction.

How the protection could work

The specifications are still in development, but the architectural logic is clear from FIDO Alliance's earlier standards: an open protocol available to any developer, not a proprietary solution from a single corporation. Likely key elements:

• Delegated tokens: the agent receives a limited one-time key rather than permanent access to card details
• Contextual verification: the payment system confirms that the transaction is initiated by an authorized agent within pre-agreed parameters
• Explicit limits: the user sets a budget, permitted stores and product categories
• Audit log: every agent action is recorded and remains available for review

If major platforms and payment networks adopt the standard, agent developers will have to support it. That is how infrastructure standardization works: whoever controls the infrastructure sets the rules.

What this means

The race for autonomous AI agents is in full swing, and the industry is finally acknowledging that speed of rollout without security standards creates real risks for users. The initiative from FIDO Alliance, Google and Mastercard is an attempt to set the rules before agentic transactions become mass-market and costly.

If the standards take hold, asking an agent to order groceries or buy a plane ticket could turn out to be safer than typing card details by hand on an unfamiliar site.