--- title: Teaching agents to pay — Anna Spysz, Stripe | daily.dev description: A Stripe engineer demos building an AI shopping agent using the Universal Commerce Protocol (UCP) to buy headphones from a local Portland music shop. The talk... canonical: https://daily.dev/posts/teaching-agents-to-pay-anna-spysz-stripe-hsz9dopmz twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Teaching agents to pay — Anna Spysz, Stripe | daily.dev og:description: A Stripe engineer demos building an AI shopping agent using the Universal Commerce Protocol (UCP) to buy headphones from a local Portland music shop. The talk... og:url: https://daily.dev/posts/teaching-agents-to-pay-anna-spysz-stripe-hsz9dopmz og:image: https://api.daily.dev/og/posts/hsz9DoPMz.png og:image:alt: Teaching agents to pay — Anna Spysz, Stripe og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Teaching agents to pay — Anna Spysz, Stripe **[AI Engineer](https://daily.dev/sources/aidotengineer)** · 19 min read · 0 upvotes · 0 comments ## Summary A Stripe engineer demos building an AI shopping agent using the Universal Commerce Protocol (UCP) to buy headphones from a local Portland music shop. The talk walks through making a merchant 'agent ready' via a merchant capabilities manifest and structured JSON catalogs, then shows how system prompts and personas shape agent behavior (an aggressive salesman persona pushes expensive products with dark patterns, versus a helpful mentor persona). It covers guardrails for agentic commerce (disclosure, spend limits, cancellation rights, logging) and explains shared payment tokens, which let agents complete purchases without ever handling raw credit card numbers, with the payment provider enforcing transaction limits. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is a shared payment token in agentic commerce and why does it matter for security? A shared payment token represents a raw card number or wallet (like Google Pay or Apple Pay) instead of exposing the actual credentials to an agent or merchant. It can carry fraud signals and customer reputation data. The agent passes the token to the seller, who unwraps it and forwards it to the payment provider, which enforces limits and approves or rejects the charge, so neither the agent nor the merchant ever sees the raw card number. _Developers wiring up agent-to-agent payments can follow daily.dev to track how tokenized payment flows evolve._ ### What is a merchant capabilities manifest and where does it live on a website? A merchant capabilities manifest is a publicly accessible JSON file placed in a .well-known folder at the root of a website, a location agents know to check automatically. It declares a store's capabilities, supported payment methods, and API endpoints so that AI shopping agents can understand what the merchant sells and how to transact, without having to parse the full HTML page. _Teams adapting storefronts for agent traffic can follow daily.dev for updates on emerging commerce protocols._ ### What guardrails should an agentic commerce shopping agent follow to avoid manipulating users? An agent should always disclose it is an AI, disclose fees upfront, respect stop or cancel commands immediately, never exceed the maximum spend amount set by the user, avoid urgency language or other dark patterns, and log every decision for auditability. These behaviors are shaped largely by the system prompt, since a persona written to be a pushy salesperson can push more expensive options and use manipulative language even with identical underlying tools. _Anyone designing AI agent personas can follow daily.dev to stay ahead of best practices for trustworthy agents._ ## Similar posts on daily.dev - [10 things we learned building for the first generation of agentic commerce](https://daily.dev/posts/10-things-we-learned-building-for-the-first-generation-of-agentic-commerce-q5kt2jhyu) · Stripe · 2 upvotes · 0 comments - [Google’s Universal Commerce Protocol: Why the Future of Agentic Commerce Depends on Security](https://daily.dev/posts/google-s-universal-commerce-protocol-why-the-future-of-agentic-commerce-depends-on-security-smw7saohv) · Security Boulevard · 0 upvotes · 0 comments - [Google’s Universal Commerce Protocol aims to simplify life for shopping bots… and devs](https://daily.dev/posts/google-s-universal-commerce-protocol-aims-to-simplify-life-for-shopping-bots-and-devs-saubaotgn) · InfoWorld · 0 upvotes · 0 comments --- Tags: [#architecture](https://daily.dev/tags/architecture), [#ai-agents](https://daily.dev/tags/ai-agents), [#stripe](https://daily.dev/tags/stripe) [View this post on daily.dev](https://daily.dev/posts/teaching-agents-to-pay-anna-spysz-stripe-hsz9dopmz) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Teaching agents to pay — Anna Spysz, Stripe","url":"https://daily.dev/posts/teaching-agents-to-pay-anna-spysz-stripe-hsz9dopmz","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/teaching-agents-to-pay-anna-spysz-stripe-hsz9dopmz"},"datePublished":"2026-09-01T16:22:51.761Z","dateModified":"2026-09-01T18:35:50.853Z","description":"A Stripe engineer demos building an AI shopping agent using the Universal Commerce Protocol (UCP) to buy headphones from a local Portland music shop. The talk...","image":"https://i.ytimg.com/vi/A-zeQiYkmXk/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/A-zeQiYkmXk/sddefault.jpg","isAccessibleForFree":true,"articleSection":"AI Engineer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"AI Engineer","logo":"https://media.daily.dev/image/upload/s--u5PucxNT--/f_auto/v1724338940/logos/aidotengineer","url":"https://daily.dev/sources/aidotengineer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/teaching-agents-to-pay-anna-spysz-stripe-hsz9dopmz","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"architecture,ai-agents,stripe","timeRequired":"PT19M","video":{"@type":"VideoObject","name":"Teaching agents to pay — Anna Spysz, Stripe","description":"A Stripe engineer demos building an AI shopping agent using the Universal Commerce Protocol (UCP) to buy headphones from a local Portland music shop. The talk...","thumbnailUrl":"https://i.ytimg.com/vi/A-zeQiYkmXk/sddefault.jpg","uploadDate":"2026-09-01T16:22:51.761Z","duration":"PT19M","url":"https://api.daily.dev/r/hsz9DoPMz","embedUrl":"https://www.youtube.com/embed/A-zeQiYkmXk"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"AI Engineer","item":"https://daily.dev/sources/aidotengineer"},{"@type":"ListItem","position":3,"name":"Teaching agents to pay — Anna Spysz, Stripe"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/teaching-agents-to-pay-anna-spysz-stripe-hsz9dopmz#faq","mainEntity":[{"@type":"Question","name":"What is a shared payment token in agentic commerce and why does it matter for security?","acceptedAnswer":{"@type":"Answer","text":"A shared payment token represents a raw card number or wallet (like Google Pay or Apple Pay) instead of exposing the actual credentials to an agent or merchant. It can carry fraud signals and customer reputation data. The agent passes the token to the seller, who unwraps it and forwards it to the payment provider, which enforces limits and approves or rejects the charge, so neither the agent nor the merchant ever sees the raw card number. Developers wiring up agent-to-agent payments can follow daily.dev to track how tokenized payment flows evolve."}},{"@type":"Question","name":"What is a merchant capabilities manifest and where does it live on a website?","acceptedAnswer":{"@type":"Answer","text":"A merchant capabilities manifest is a publicly accessible JSON file placed in a .well-known folder at the root of a website, a location agents know to check automatically. It declares a store's capabilities, supported payment methods, and API endpoints so that AI shopping agents can understand what the merchant sells and how to transact, without having to parse the full HTML page. Teams adapting storefronts for agent traffic can follow daily.dev for updates on emerging commerce protocols."}},{"@type":"Question","name":"What guardrails should an agentic commerce shopping agent follow to avoid manipulating users?","acceptedAnswer":{"@type":"Answer","text":"An agent should always disclose it is an AI, disclose fees upfront, respect stop or cancel commands immediately, never exceed the maximum spend amount set by the user, avoid urgency language or other dark patterns, and log every decision for auditability. These behaviors are shaped largely by the system prompt, since a persona written to be a pushy salesperson can push more expensive options and use manipulative language even with identical underlying tools. Anyone designing AI agent personas can follow daily.dev to stay ahead of best practices for trustworthy agents."}}]} ```