TITLE: Sierra and Meta Launch Personal Agent Protocol for Enterprise AI Access DATE: 2026-10-19 COMPANY: Sierra / Meta TOPIC: Agent Systems SUMMARY: Sierra and Meta have launched the Personal Agent Protocol (PAP), an OAuth-based open standard that lets consumers grant their personal AI agents authenticated access to business systems. Founding partners include Stripe, Shopify, Walmart, Genesys, and Rocket. A competing Visa-backed protocol is in parallel development, with a v0.1 specification expected in late October 2026. WHAT CHANGED: Sierra, the enterprise AI agent platform, and Meta announced the Personal Agent Protocol on 6 October 2026, alongside founding partners Genesys, Shopify, Stripe, Walmart, and Rocket. The protocol defines how personal AI agents, the kind operating on behalf of individual consumers, can authenticate with business systems and be granted defined permissions to take actions. The standard builds on OAuth, meaning businesses can extend their existing identity infrastructure rather than building new authentication layers from scratch. PAP distinguishes between read access, where an agent retrieves account information or checks an order, and write access, where an agent completes a transaction, books a service, or submits a form. A v0.1 specification was expected in late October 2026, ahead of a broader industry consultation. In parallel, a competing protocol backed by Visa and also including Stripe and Shopify is in development. That overlap in founding partners creates genuine interoperability uncertainty for enterprise buyers choosing which standard to prioritise. The timing reflects a shift building across AI deployments throughout 2026: consumers are increasingly using personal AI agents to handle tasks that previously required direct human engagement with business systems, from expense reporting to insurance claims to customer service interactions. WHY IT MATTERS: Businesses that do not plan for agent-to-system traffic are already behind. The companies building PAP are not speculating. Walmart, Shopify, and Stripe are seeing agent-driven interactions now. A protocol gives them a way to handle those interactions at scale, rather than having them land on endpoints designed for humans and handled inconsistently. OAuth compatibility lowers the adoption barrier significantly. Most organisations with a developer team can extend their existing identity infrastructure to PAP without rebuilding from scratch. That removes the typical friction around enterprise standards adoption and means early movers can begin with infrastructure they already maintain. The permission model matters for security and compliance. PAP's distinction between read and write access gives businesses a framework for granting agents the minimum permissions needed for a task. For regulated industries in finance, healthcare, and legal services, that audit trail is not optional. It is the difference between acceptable agent access and a compliance exposure. Competing standards create short-term integration risk. The existence of a parallel Visa-backed protocol means businesses may need to support both in the near term. Technology choices made in the next six months may need revision once one standard prevails, or a bridging layer emerges. Building on OAuth as the shared foundation is the hedge. The architecture of customer interaction is changing structurally. PAP formalises something already happening informally. Businesses that treat this as an IT infrastructure question rather than a customer experience and product strategy question will find themselves reacting rather than setting terms. Agent write-access creates a new category of security exposure. Consumer-delegated agents taking write actions are a new attack surface. Adversarial agents, credential theft targeting agent tokens, and permission creep are threat categories that existing access control frameworks were not designed to address. Security teams need to get ahead of these patterns before agent traffic scales. DAVID & GOLIATH ANALYSIS: The PAP announcement is the clearest sign yet that the question is no longer whether AI agents will interact with your business systems, but how prepared your systems are when they do. The founding partner list is not aspirational. Stripe and Shopify collectively process a substantial portion of global e-commerce. Walmart is the world's largest retailer. These companies are not building infrastructure for a future state. They are standardising interactions they are already managing at volume. For operators running 10 to 200-person organisations, the immediate implication is not to adopt PAP today. It is to audit which customer-facing systems assume human users and which could handle an agent acting with delegated access. That audit will surface gaps in permissions architecture, session management, and abuse detection that matter regardless of which protocol eventually wins. The work is not wasted if PAP loses to the Visa alternative. It is foundational. The competing protocol creates genuine uncertainty, but it also signals that the market for agent authentication is real enough for multiple serious players to pursue simultaneously. The businesses that sit out both standards until one prevails will spend 2027 catching up. The businesses that run a controlled pilot against one now, with OAuth as the common thread, will have institutional knowledge the late movers will have to buy. RELEVANT SYSTEMS: AI Growth Engine, Organisational Intelligence System SOURCE URL: https://davidandgoliath.ai/daily-ai-briefing/sierra-meta-personal-agent-protocol-enterprise-ai-access FEED URL: https://davidandgoliath.ai/daily-ai-briefing/feed --- Published by David & Goliath | https://davidandgoliath.ai Daily AI Briefing: one AI development per day, decoded for business operators. This is a structured companion file optimised for LLM retrieval and citation.