What Is Mastercard Agent Pay?

Mastercard Agent Pay is Mastercard's agentic-payments program that lets AI agents initiate purchases on a consumer's or business's behalf using Agentic Tokens — dynamic, permissioned digital payment credentials that extend Mastercard's existing tokenization infrastructure to autonomous agents.

Key facts

  • Announced April 29, 2025, per Mastercard's investor news release, introducing what Mastercard describes as its Agentic Payments Program, intended to let AI agents initiate purchases inside conversational interfaces while preserving security and consumer control.
  • Agentic Tokens build on existing tokenization, not a new payment rail. Per Mastercard's press release, the technology "builds upon proven tokenization capabilities that today power global commerce solutions like mobile contactless payments, secure card-on-file, and Mastercard Payment Passkeys, as well as programmable payments like recurring expenses and subscriptions" — rather than introducing a separate crypto or stablecoin settlement layer.
  • Tokens carry defined permissions and limits, and identify which agent acted. Mastercard states that Agentic Tokens "have been built to register, verify and recognize agentic transactions," and that "each time an agent acts on your behalf... it does so with the permissions and limits you define, keeping you in full control," with every transaction tied to "a specific, authorized Mastercard Agent Pay interaction so that you understand which agent acted on your behalf and from where the goods were purchased."
  • Tokens are described as cryptographic credentials aimed at improving approval rates, not just security. Per Mastercard's materials, "agentic tokens are secure cryptographic credentials that safeguard sensitive payment data, improve approval rates and enable programmable transaction-level controls" — framing the tokens as solving both a fraud problem and a payment-authorization/decline-rate problem for merchants and issuers.
  • Named technology partners at launch include Microsoft and IBM on the AI-platform side, and Braintree and Checkout.com on payment processing. Per Mastercard's press release, integrations were named with Microsoft (including Azure OpenAI Service and Copilot Studio) and IBM (watsonx Orchestrate), alongside processing partners Braintree and Checkout.com.
  • Mastercard's Chief Product Officer framed it as a continuation of Mastercard's existing strategy. Jorn Lambert stated: "Mastercard is transforming the way the world pays for the better by anticipating consumer needs on the horizon," per Mastercard's announcement materials.

How it works

  1. A consumer or business links a Mastercard-issued card or account to an AI agent (e.g., an assistant built on a partner platform like Microsoft Copilot Studio or IBM watsonx Orchestrate).
  2. The user defines the permissions and limits that will govern what that specific agent is allowed to do — Mastercard's own materials describe this as keeping the user "in full control" of what the agent can spend.
  3. Mastercard issues an Agentic Token scoped to that agent, extending the same underlying tokenization technology used for mobile contactless payments and card-on-file storage, rather than exposing the underlying card number to the agent or merchant.
  4. When the agent initiates a purchase, the token is presented to the merchant/processor (e.g., via Braintree or Checkout.com), which can verify it was issued for that specific agent, cardholder, and permission set.
  5. The transaction is tied back to that specific agent and Agent Pay interaction, so the cardholder can later see which agent made a given purchase and from which merchant.
  6. Because the credential is a scoped, revocable-style token rather than a raw card number, Mastercard positions this as both a fraud-reduction measure and an approval-rate improvement for merchants, since the token carries verifiable context about the transaction's legitimacy.

Mastercard Agent Pay vs. Visa Trusted Agent Protocol vs. AP2

Mastercard Agent Pay Visa Trusted Agent Protocol AP2
Announced April 29, 2025 October 14, 2025 September 16, 2025
Core mechanism Agentic Tokens (extended tokenization) HTTP Message Signatures (RFC 9421) verifying agent identity Signed Intent/Cart/Payment Mandates (Verifiable Digital Credentials)
What it primarily verifies That a specific, permissioned agent is transacting on the cardholder's behalf That an incoming request is genuinely from a Visa-trusted agent (vs. a bot) That a transaction reflects what the user actually authorized
Card-network specific Yes — Mastercard Yes — Visa No — rail-agnostic
Named platform partners Microsoft, IBM, Braintree, Checkout.com Cloudflare (core), plus Adyen, Stripe, Shopify, and others 60+ launch partners across card networks, processors, and platforms
Governance Mastercard Visa Donated to FIDO Alliance (April 28, 2026)

FAQ

What is an Agentic Token? A dynamic, cryptographic payment credential Mastercard issues for a specific AI agent, built on its existing tokenization technology, that carries defined spending permissions and limits and identifies which agent used it, per Mastercard's press release.

When did Mastercard announce Agent Pay? April 29, 2025, per Mastercard's investor news release.

Does Agent Pay require a new type of Mastercard account? Not specified in the primary sources reviewed. Mastercard's materials describe Agentic Tokens as building on existing tokenization used for mobile contactless payments and card-on-file, rather than introducing a separate account type.

Who can build on Mastercard Agent Pay? Named platform integrations at launch include Microsoft (Azure OpenAI Service, Copilot Studio) and IBM (watsonx Orchestrate), with Braintree and Checkout.com named as payment-processing partners, per Mastercard's press release.

Is Mastercard Agent Pay compatible with AP2 or Visa's Trusted Agent Protocol? Not specified in the primary sources reviewed for this article. Mastercard is listed as a launch partner in Google's AP2 announcement, but the Agent Pay press materials reviewed here do not themselves describe interoperability with AP2 or with Visa's protocol.

Does Agent Pay let consumers set a spending cap for an agent? Mastercard's materials state agents act "with the permissions and limits you define," indicating user-set limits are part of the design, though the specific mechanics (e.g., how a cap is entered or changed) are not detailed in the primary sources reviewed.

Related terms