The FIDO Alliance launches two working groups to develop industry standards for securing AI agent transactions; Google contributes its Agent Payments Protocol
Context & Ripple Effects
Google introduced its Agent Payments Protocol (AP2) as a cross-platform mechanism for agent-led payments with support from more than 60 organizations. It is now contributing that protocol to FIDO Alliance working groups focused on securing AI-agent transactions.
The move sits alongside broader efforts to make agent ecosystems interoperable: Google previously donated Agent2Agent specifications and SDKs to a Linux Foundation project, while major AI companies have also been pursuing open-source agent standards and secure-AI practices.
First-order effects
- FIDO Alliance’s two working groups create a forum for participants to turn AI-agent transaction security into shared industry specifications.
- Google shifts AP2 from a Google-launched protocol toward a multi-party standards process, giving implementers a common starting point for payment-related agent authorization and security.
Second-order effects
- Companies building agent payment and commerce flows will have stronger incentives to align with the FIDO-led work rather than create isolated transaction-security schemes.
- The standards effort can connect payment-specific agent protocols with adjacent interoperability work such as Agent2Agent, increasing pressure on platform providers to support compatible identity, authorization, and transaction controls.
Third-order effects
- If competing agent standards bodies converge on compatible security primitives, agentic commerce could move from platform-bound experiments toward permissioned transactions that work across services.
- Governance of agent authority becomes a core layer of the AI stack: durable adoption will depend not just on capable agents, but on widely accepted rules for what an agent may authorize and how that authority is verified.
The trend: AI companies are moving from proprietary agent features toward shared standards for interoperable, permissioned agent transactions.