How can a merchant know an AI agent is authorized to make a purchase?

Answer

A reliable agentic-commerce system should provide evidence linking the agent, the consumer and the authority granted for the transaction. That authority may include limits on merchant, amount, product type, timing or other conditions. Merchants should avoid treating automated requests as inherently trustworthy.

Why this matters

Traditional payment authentication establishes whether a payment instrument is legitimate. Agentic commerce adds the question of whether software was authorized to make this particular decision.

What management should examine

  • Agent identity.
  • Customer authorization.
  • Spending limits.
  • Transaction records.
  • Revocation.

What good looks like

The merchant can reconstruct who authorized the action and what authority existed if a transaction is later disputed.

Related questions and resources

James Thomson – former Amazon executive, four successful exits, board member/investor, and author of two books on marketplace governance and brand strategy.

The Agentic Commerce Brief

What changed in agentic commerce, and what it means for brands.

A concise weekly brief for brand executives navigating the shift from human-led shopping to agent-mediated commerce. Follow the developments that matter, the implications for brand control and governance, and the questions senior teams should be asking now.

Read The Agentic Commerce Brief on Substack