--- title: Securing the Front Door of Agentic Commerce | daily.dev description: Auth0 lays out how identity and authorization underpin the emerging 'agentic commerce' landscape, where AI agents shop and check out on behalf of customers... canonical: https://daily.dev/posts/securing-the-front-door-of-agentic-commerce-c63jl7mhm twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Securing the Front Door of Agentic Commerce | daily.dev og:description: Auth0 lays out how identity and authorization underpin the emerging 'agentic commerce' landscape, where AI agents shop and check out on behalf of customers... og:url: https://daily.dev/posts/securing-the-front-door-of-agentic-commerce-c63jl7mhm og:image: https://api.daily.dev/og/posts/c63JL7mhm.png og:image:alt: Securing the Front Door of Agentic Commerce og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Securing the Front Door of Agentic Commerce **[Auth0](https://daily.dev/sources/auth0)** · 11 min read · 1 upvotes · 0 comments ## Summary Auth0 lays out how identity and authorization underpin the emerging 'agentic commerce' landscape, where AI agents shop and check out on behalf of customers across four channels: first-party embedded assistants, third-party MCP connectors (Claude, ChatGPT), open commerce protocols like Google's Universal Commerce Protocol (UCP), and personal agents with their own browsers (Meta's Muse, OpenAI's dots). It argues OAuth-based identity linking, scoped delegation, step-up verification (passkeys/MFA), and one-click revocation are needed to recognize agents, tie them to real customers, and distinguish trusted agents from bots. It cites McKinsey and Bain projections ($3-5T economic impact, $300-500B US agentic commerce market) and Target's reported 2,000% YoY AI traffic surge, and introduces Poppy, the Personal Agent Protocol, a draft OAuth-based spec from Sierra that Okta is backing as a design partner alongside Meta, Shopify, Stripe, PayPal, Visa, and others. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the Universal Commerce Protocol (UCP) and who built it? UCP is an open agentic commerce protocol announced by Google and co-developed with Shopify, Etsy, Wayfair, Target, and Walmart, with Amazon, Meta, Microsoft, Salesforce, and Stripe later joining its Tech Council. Its core identity feature, Identity Linking, lets shoppers on UCP platforms retain loyalty or member benefits they'd get signing in directly on a retailer's own site, while the retailer remains merchant of record. _Teams weighing support for emerging commerce protocols can track standards like UCP as they evolve on daily.dev._ ### What is Poppy, the Personal Agent Protocol, and who is backing it? Poppy is a draft OAuth-based identity protocol for personal AI agents, published by Sierra alongside Meta, Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart, with more than 35 design partners including Adyen, Bank of America, Cloudflare, OpenAI, PayPal, Visa, and Okta. Its draft 0.1 specification lets customers grant scoped, revocable access to personal agents instead of agents replaying saved passwords to sign in. _Developers building agent-to-commerce integrations can follow protocol drafts like Poppy on daily.dev as specs mature._ ### How much did Copilot Checkout improve shopping conversion according to Microsoft? Microsoft found that shopping journeys incorporating Copilot yielded 53% more purchases within 30 minutes compared to journeys without it. This was attributed to eliminating identity friction such as CAPTCHAs, guest checkout forms, and password resets when agents are recognized and linked to a known customer account. _Those evaluating AI checkout integrations can compare reported conversion data like this on daily.dev._ ## Similar posts on daily.dev - [Securing Agentic Commerce](https://daily.dev/posts/securing-agentic-commerce-vmk8sxrq1) · Auth0 · 0 upvotes · 0 comments - [How Agentic Commerce Will Change E-Commerce Forever](https://daily.dev/posts/how-agentic-commerce-will-change-e-commerce-forever-nklwisix1) · Codemotion · 1 upvotes · 0 comments - [Google’s Universal Commerce Protocol: Why the Future of Agentic Commerce Depends on Security](https://daily.dev/posts/google-s-universal-commerce-protocol-why-the-future-of-agentic-commerce-depends-on-security-smw7saohv) · Security Boulevard · 0 upvotes · 0 comments - [AI Agents Are The Next Evolution of Retail Commerce](https://daily.dev/posts/ai-agents-are-the-next-evolution-of-retail-commerce-o5j7y6whz) · Auth0 · 1 upvotes · 0 comments --- Tags: [#cloud](https://daily.dev/tags/cloud), [#mcp](https://daily.dev/tags/mcp), [#oauth](https://daily.dev/tags/oauth), [#auth0](https://daily.dev/tags/auth0) [View this post on daily.dev](https://daily.dev/posts/securing-the-front-door-of-agentic-commerce-c63jl7mhm) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Securing the Front Door of Agentic Commerce","url":"https://daily.dev/posts/securing-the-front-door-of-agentic-commerce-c63jl7mhm","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/securing-the-front-door-of-agentic-commerce-c63jl7mhm"},"datePublished":"2026-10-19T13:40:32.224Z","dateModified":"2026-10-20T12:49:22.464Z","description":"Auth0 lays out how identity and authorization underpin the emerging 'agentic commerce' landscape, where AI agents shop and check out on behalf of customers...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6b83fead1d1efa1347f72995e1b73f64?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6b83fead1d1efa1347f72995e1b73f64?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Auth0","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Auth0","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/6510ffa7350449618fbacdddae663b82","url":"https://daily.dev/sources/auth0"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/securing-the-front-door-of-agentic-commerce-c63jl7mhm","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cloud,mcp,oauth,auth0","timeRequired":"PT11M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Auth0","item":"https://daily.dev/sources/auth0"},{"@type":"ListItem","position":3,"name":"Securing the Front Door of Agentic Commerce"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/securing-the-front-door-of-agentic-commerce-c63jl7mhm#faq","mainEntity":[{"@type":"Question","name":"What is the Universal Commerce Protocol (UCP) and who built it?","acceptedAnswer":{"@type":"Answer","text":"UCP is an open agentic commerce protocol announced by Google and co-developed with Shopify, Etsy, Wayfair, Target, and Walmart, with Amazon, Meta, Microsoft, Salesforce, and Stripe later joining its Tech Council. Its core identity feature, Identity Linking, lets shoppers on UCP platforms retain loyalty or member benefits they'd get signing in directly on a retailer's own site, while the retailer remains merchant of record. Teams weighing support for emerging commerce protocols can track standards like UCP as they evolve on daily.dev."}},{"@type":"Question","name":"What is Poppy, the Personal Agent Protocol, and who is backing it?","acceptedAnswer":{"@type":"Answer","text":"Poppy is a draft OAuth-based identity protocol for personal AI agents, published by Sierra alongside Meta, Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart, with more than 35 design partners including Adyen, Bank of America, Cloudflare, OpenAI, PayPal, Visa, and Okta. Its draft 0.1 specification lets customers grant scoped, revocable access to personal agents instead of agents replaying saved passwords to sign in. Developers building agent-to-commerce integrations can follow protocol drafts like Poppy on daily.dev as specs mature."}},{"@type":"Question","name":"How much did Copilot Checkout improve shopping conversion according to Microsoft?","acceptedAnswer":{"@type":"Answer","text":"Microsoft found that shopping journeys incorporating Copilot yielded 53% more purchases within 30 minutes compared to journeys without it. This was attributed to eliminating identity friction such as CAPTCHAs, guest checkout forms, and password resets when agents are recognized and linked to a known customer account. Those evaluating AI checkout integrations can compare reported conversion data like this on daily.dev."}}]} ```