The Root Of TrustMastercard's Agent Pay Explained
In the last post I talked about how Visa's Trusted Agent Protocol proves an agent is real. Say that check passes. You now know a genuine agent is behind the request. The next worry follows right away. What is this agent actually allowed to spend.
That is the question Mastercard's Agent Pay is built around. Not who the agent is, but what it can do.
The way it works is with a tokenized credential. If you have ever tapped your phone to pay, you have already used tokenization. Your real card number never gets handed over. A stand-in number does, and it only works in certain ways. Agent Pay takes that same idea and ties the stand-in to one specific agent, with the limits set in advance. How much it can spend. Which kinds of stores it can spend at. How long the permission lasts. And a switch to shut that one agent off without touching any of your other agents or your real card.
The part that matters most is who enforces those limits. It is the network, not the agent. The agent is never trusted to behave itself. Even if it gets hijacked or talked into something it should not do, it still cannot spend past its cap or buy somewhere it was never allowed. The guardrails sit outside the agent, where a compromised agent cannot reach them.
Think of it like a prepaid card you hand a teenager. You load fifty dollars on it, you set it to work only at the bookstore, and you can cancel it from your phone the second something looks off. It does not matter how the card gets used. It simply cannot do more than what you set.
And here is what Agent Pay does not do. It does not confirm the exact cart. It keeps the agent inside its lane, but it does not check that the specific basket of items and the specific price are the ones you actually approved. That is a separate job.
So if Trusted Agent Protocol is the bouncer checking ID, Agent Pay is the spending limit set on the card before the agent ever starts shopping. Real protection, and it caps the damage, but there is still one question left. Did you agree to this exact purchase. That is the one the last framework answers.