Confirmed 13 Nov 2026 · Agents A one-minute read

Sierra shipped version 1.0 of its agent protocol, with over 100 companies signed on.

On November 13 Sierra released Personal Agent Protocol 1.0, which tells a visiting AI agent who it is talking to and what it may do. Sierra says Shopify switched it on for every merchant.

Until now

Agent commerce standards were drafts, with a handful of named partners.

Now

One is at 1.0 and on by default across a whole platform.

Why it matters

Protocols decide who gets to build on top. Poppy sits before the payment layer: it is where a company tells an agent what it is allowed to do at all. Shipped on by default, it is harder to displace than a better specification arriving later.

Established

Sierra published Poppy 1.0 and its spec at personalagentprotocol.org on November 13.
Design partners grew from 8 to more than 100 in 5 weeks.
Sierra names Mercury and Turkish Airlines live, Synchrony as exploratory.

Not established

That Shopify or Meta confirmed it. Both claims come from Sierra.
How many agents or merchants use it. No usage figures are published.
That rival protocols lose. Other standards have their own backers.

The five-minute readThe record, the timeline, the weight and 4 sources

The record

Verified at the primary: we read Sierra's own post at sierra.ai. It surfaced late to us, carried into Saturday's digests, and it belongs to Friday November 13, which is Edition 091's window. It was never carded, so it is carded here under its true event date. Nothing in it is new since Friday.

Sierra published "Releasing Personal Agent Protocol 1.0" on November 13, 2026, stating "v1.0 of the protocol is now available," with the specification at personalagentprotocol.org and a companion implementation kit including a validator. Sierra says v1.0 "reflects what design partners have learned over the past five weeks" and adds staged adoption, so companies can start with basics and add capabilities; refined use of existing standards; expanded ability for companies to give guidance to and collect feedback from the personal agent; and extensions, among them "the commerce extension co-authored by Shopify." The protocol is built largely on MCP, OpenAPI and UCP. Sierra's framing: UCP handles the shopping itself, while Poppy handles what happens first, the agent identifying itself and finding out what it is allowed to do. On adoption, Sierra states Poppy is enabled for every Shopify merchant, with every store automatically publishing a Poppy file; that Poppy is on for all users of Meta's Muse agent, which "automatically looks for Poppy first on every site it visits"; that Mercury is live for agents handling balances, transactions, categorization and budgets, with payments passing "the account's approval policy before anything is sent"; that Turkish Airlines is live for fares, flight status, stopovers and booking lookup, with customer approval required before payment; and that Synchrony's work is exploratory. On safeguards: "With authentication through OAuth, customers control what personal agents can and can't do," and the commerce extension "makes the agent ask the customer before taking certain actions." The design partner list grew from the initial 8, Meta, Genesys, Instinct, NiCE, Rocket, Shopify, Stripe and Walmart, by 60 companies to more than 100; newly named are Affirm, Aflac, Agoda, Cisco, Delta Air Lines, Intuit, Salesforce, Twilio, Wayfair, Wix and Zoom, among others. The October publication was labelled a draft; this one is not. Reported and not in Sierra's post: The Next Web says the specification still permits breaking changes, and that Muse has more than 10 million users. Not established: usage, transaction volume, or any Shopify or Meta statement of their own.

How it got here

Oct 2026
Sierra and Meta publish a draft of Personal Agent Protocol with 8 design partners: Meta, Genesys, Instinct, NiCE, Rocket, Shopify, Stripe and Walmart.
Nov 5
Sierra buys the company that lets its AI agents log into websites. Edition 076.
Nov 6
Meta ships models that remember users across Muse and Meta AI. Edition 078.
Nov 12
OpenAI launches ChatGPT Wallet, letting its agents pay with a stored card. Edition 091's agents card, a different layer of the same stack.
Nov 13
Sierra releases Poppy 1.0, says Shopify enabled it for every merchant and Meta for all Muse users, and names Mercury and Turkish Airlines live.

Who has to react

Shopify and Meta, named as switched on and silent in their own voice so far; Stripe and Walmart, design partners with their own commerce rails; OpenAI and Google, each backing other agent standards; Visa and Mastercard, building agent identity checks; Amazon, which wants shoppers using its own agent; and merchants whose stores began publishing a Poppy file unasked.

What to watch

Would strengthen itA second large platform enables Poppy by default for its merchants or users, or Shopify or Meta publishes its own confirmation, by February 28, 2027.
Would weaken itOpenAI, Google or Amazon ships a competing personal agent handshake with comparable default distribution, or Shopify's Poppy file becomes opt in, by June 30, 2027.
Would strengthen itMeta ships Poppy support into a second surface beyond Muse, or co-authors the next version of the specification with Sierra, by June 30, 2027.

Why it weighs this much

Signal strength

CostMedium

CommitmentHigh

ReversibilityLow

PersistenceYears

Cost is medium: writing a specification is cheap, but 5 weeks of integration work across more than 100 companies, two live financial implementations and a Shopify co-authored extension is not. Commitment is high because a platform wide default is a public promise to merchants who did not opt in, and because Sierra put a version number on it. Reversibility is low: once agents are built against 1.0, breaking it costs everyone who built. Persistence is years, which is how long protocol defaults last once a large platform ships one.

The words

Personal agent: An AI acting for one person across other companies' websites and accounts, rather than a company's own support bot.
MCP: Model Context Protocol, an open standard for connecting models to tools and data. Poppy builds on it.
UCP: Universal Commerce Protocol, the layer that carries carts and checkout. Poppy runs before it, deciding what the agent may do at all.
OAuth: The standard sign in flow that lets a customer grant limited access without handing over a password, and withdraw it later.

Sources

Your call

Which explanation do you believe?

A call is final. Other people's calls show after yours.