Ask NostroAskSubscribe

Shopify extends Shop Pay checkout to AI agents with card network tokens

For the head of card products at a regional bank

Shopify announced on Oct. 28 that Shop Pay checkout now works inside personal AI agents, starting with Muse from Meta, Claude Duet and Instinct, as part of its Fall '26 Edition.1

According to Shopify, the existing Shop Pay security model carries over to agents, so the buyer stays in control of purchases and the card is never shared with the agent; these are Shopify's own claims.1 Shopify's page does not give technical detail on how the tokens are issued or verified.1

According to Shopify, agent purchases from merchants off its platform use tokens from Mastercard, Visa and Discover, and American Express is listed as coming soon.1

The Defiant reports that agents can pay at stores outside Shopify using single-use card credentials, without those retailers adding a new integration; the sources do not confirm this independently.1

Mastercard CEO Michael Miebach said on the company's third-quarter earnings call on Oct. 29 that Shop Pay is using Mastercard Agent Pay and Mastercard network tokens to preserve consumers' credentials throughout the payment, according to PYMNTS.2

Mastercard CEO Michael Miebach said on the company's Oct. 29 earnings call that a one-time virtual card in an agent purchase is "a bridge to get ready for a fully tokenized transaction," according to PYMNTS, and Mastercard CFO Ling Hai named additional token functionality for agents as an area for development and pricing.2

Why it matters

Issuers and processors may see more agent-initiated purchases arriving as network tokens rather than card numbers, so token handling, authorization rules and dispute processes for these transactions need review. Mastercard's stance against one-time virtual cards, and its pricing comments, point to possible cost and integration changes for processors.

What’s next

Miebach said he expects consumer use of agent checkout to build during holiday shopping.2

From the brief

Our take. Shop Pay pays with your cardholders' cards inside Muse and Claude Duet via network tokens, and an Allow button is all that shows the cardholder, not the agent, chose the espresso machine. Your dispute rules assume a person checked out.

Action. Card disputes: Map agent-initiated Shop Pay token transactions to your chargeback reason codes and decide what evidence of cardholder Allow consent you accept.

What our records say

Mastercard positions itself as a trust layer for agent payments plus a seller of AI fraud, cyber and advisory services built on its network data.1 Mastercard registers and tokenizes AI agents (Agent Pay), proves what a user authorized (Verifiable Intent), and sells AI fraud, cyber and advisory services built on its network data.1

  1. Mastercard: AI programme summary (part 1)

From our records

Sources

  1. ReportShopify extends Shop Pay checkout to AI agents with card network tokens Letsdatascience
  2. Also reported byMastercard Backs Tokenized Card Payments for Agentic Commerce PYMNTS