Securing agentic commerce: helping AI Agents transact with Visa and Mastercard
Oct 24, 2025Rohin Lohe, Will Allen
Summary
This post introduces a significant advancement in website security by detailing Cloudflare's partnership with Visa and Mastercard to secure agentic commerce. It leverages the previously introduced Web Bot Auth and HTTP Message Signatures to create a framework (Trusted Agent Protocol and Agent Pay) for cryptographically authenticating AI shopping agents. This enables merchants to distinguish legitimate agents from bots, link agents to consumer identities, and manage transaction expectations, thereby enhancing security and trust in automated commerce.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack