Two announcements, one shift, the same day
On June 10, 2026, Visa and OpenAI announced that tokenized Visa credentials can power agent-initiated checkout inside ChatGPT, letting an AI agent complete a purchase at Visa-accepting merchants on a user's behalf. The same day, Mastercard launched Agent Pay for Machines, an open protocol built to handle high-frequency, low-value payments between agents and machines across cards, bank accounts, and stablecoins. The two moves point in different directions: Visa is chasing consumer distribution through ChatGPT, while Mastercard is building the plumbing for machine-to-machine and business transactions. Treat go-live timing carefully, as Visa described an announced capability without a published consumer launch date.
How tokenized credentials and spending limits work
Both schemes replace the raw card number with a network token that is scoped to a specific agent and use case, so a compromised token cannot be replayed in another context. Visa lets a user set spending limits, require approval before purchase, and restrict the merchant categories an agent can use, with limits enforced before any authorization clears. Mastercard's protocol records agent credentials and permissions on public blockchains, initially Polygon, Solana, and Base, and adds programmatic permissioning plus guaranteed multi-rail settlement. The common thread is that controls move upstream, sitting in the credential itself rather than only at the checkout page.
What this does to the conversion path
The traditional funnel assumes a human moving through search, product pages, cart, and a checkout form. When an agent handles discovery and payment, several of those steps collapse into a single instruction, and the merchant may never render a product page to a person at all. That makes structured, machine-readable product data, pricing, and availability more important than the visual storefront for these transactions. It also changes where trust is established, since the buyer is a credentialed agent operating under preset rules rather than a logged-in shopper.
What merchants should do now
Make sure product feeds, inventory, and pricing are clean and accessible to agents, because that data is what an agent reads when a human does not. Confirm how your payment processor and acquirer plan to support tokenized agentic credentials, noting that Stripe, Adyen, and Checkout.com are among Mastercard's launch partners. Revisit fraud rules, returns, and dispute handling for transactions that originate from an agent rather than a session, and decide how you will measure them. Until go-live details firm up, this is a planning window, not a reason to rebuild your checkout overnight.
Key takeaways
- Visa-OpenAI agentic checkout in ChatGPT and Mastercard Agent Pay for Machines were both announced on June 10, 2026, but Visa has not published a consumer go-live date.
- Security moves into the credential itself: tokens are scoped per agent, with spending limits and merchant restrictions enforced before authorization.
- Agent-driven buying compresses the funnel, so structured, machine-readable product and pricing data starts to matter more than the visual storefront.
- Merchants should clean up product feeds, confirm processor support for tokenized agentic payments, and update fraud and dispute handling for agent-initiated orders.