Agent Surface

Make your product agent-ready

Agentic Commerce

What a merchant or commerce platform needs so agents can find products, trust the listing, check out, pay, and follow up on an order

Last verified 2026-10-29

Summary

Agentic commerce is what happens when the buyer at the other end of a request is a shopping agent instead of a browser. The product, catalog, checkout, and payment surfaces that already exist for people need to work for a caller that reads structured data instead of a page, holds a scoped mandate instead of a wallet, and needs a machine-checkable answer instead of a "thanks for your order" screen.

This section is written for anyone running a store or a commerce platform, and the engineers building it. It is not written for someone building a shopping agent - for that side, Agents and Agent Retrieval are the relevant sections.

  • Product data agents can find and trust comes first - nothing downstream works without it
  • Checkout and payment are separate problems: completing a transaction, and proving who authorized spending it
  • Card networks, Stripe, and browser-level bot verification are converging on the same shape - a signed, scoped, revocable authorization
  • Shopify has shipped much of this as platform features already; other stacks have to build the equivalent by hand
  • Commerce reuses the existing dimensions, applied to a purchase flow

The layers

Treat agent-ready commerce as five layers, each depending on the one before it.

  1. Products agents can find and trust - accurate Product/Offer structured data, a merchant feed a shopping surface can ingest, and a catalog an agent can query directly. See Product Data.
  2. Checkout agents can complete - a session-based protocol (, ) or platform that turns a cart into an order without a human clicking through a web form. See Checkout Protocols.
  3. Payment authority - a verifiable record of what a human authorized an agent to spend, and a settlement mechanism that honours it. See Payments.
  4. Trust and risk - telling a legitimate shopping agent from a scraper or a fraud bot before you let either one near checkout. See Trust and Risk.
  5. After the order - status, cancellation, returns, and refunds as callable operations, not just email confirmations. See Orders and After Purchase.

A gap in an earlier layer breaks everything above it. A perfect checkout integration is wasted if the product feed lists the wrong price, and a signed is wasted if there is no callable way to check whether the order actually shipped.

What to do first, by role

Merchant on a commerce platform (Shopify or similar). Much of layers 1-3 can arrive as a platform feature rather than something you build, depending on the channel, the capabilities negotiated, and your access tier - being listed in a catalog does not make a product eligible for native checkout. Confirm what is switched on, keep your product data and return policy accurate at the source, and read Shopify for exactly what is automatic versus what you must configure. Your real work is layers 4 and 5: fraud thresholds and order are yours regardless of platform.

Merchant with a custom stack. Start at layer 1 - it is cheap and every downstream surface depends on it. Then pick one checkout protocol per Checkout Protocols rather than hand-building a competing flow, and choose the one your platform and the agent clients you care about support. Payment authority (layer 3) follows from whichever payment provider you already use - check what your processor supports before picking a mandate format yourself.

Commerce platform or marketplace operator. You are building layers 1-4 for your merchants, which means protocol choice and trust decisions are platform policy, not per-merchant configuration. The mandate model (a signed, scoped, revocable spending authorization) is the primitive to standardize on internally regardless of which wire protocol you expose.

API or content seller (pay-per-resource, not retail). Layers 1, 2, and 4 mostly do not apply. Go straight to the machine-payment half of Payments - and - which is built for metering a single API call or a piece of content rather than a shopping cart.

How this maps onto the scorecard

Agentic commerce uses the existing ten dimensions of the Surface scorecard, evaluated against a purchase task instead of a generic one:

DimensionWhat a commerce audit checks
Discovery & Product/Offer structured data, merchant feeds, the UCP well-known profile, the platform product-page audit
API Surface / Server / Tool DesignCatalog, cart, checkout, and order operations exposed as callable contracts rather than only an HTML page
AuthenticationSpending mandates, signed-agent verification (, Trusted Agent Protocol), scoped payment credentials
Error HandlingIdempotent order creation, payment failure recovery, webhook retry and dedup
Testing & EvaluationA environment that exercises checkout, payment failure, and order status without touching real money
RetrievabilityLive price and availability accuracy at the moment an agent commits to a purchase
Design, Context FilesUsually N/A for a storefront; score when the product ships a CLI or agent-facing context files

Evaluating Product Journeys already covers the purchase journey (find a product, check price and availability, check out, pay, track the order, return it) end to end - use it as the audit script; use this section as the reference material behind each step.

  1. Product Data
  2. Checkout Protocols
  3. Payments
  4. Shopify
  5. Trust and Risk
  6. Orders and After Purchase
  7. Evaluating Product Journeys

On this page