Anthropic Built the Shopping Brain and Skipped the Wallet

Anthropic just unveiled a commerce agent spec with Visa and Mastercard. The pitch: AI agents that can browse products, compare options, and make purchases on behalf of consumers. Shopping, automated.

The spec describes how an agent selects a product. It does not describe how that agent proves it has permission to spend $400 of your money.

What the spec covers

The agent side is well-specified. An AI agent receives a shopping intent from a user, browses merchant catalogs, evaluates options against preferences and constraints, and presents a recommendation or executes a purchase. Anthropic's Claude handles the reasoning. Visa and Mastercard provide the merchant network and transaction infrastructure.

This is a real capability. An agent that can comparison-shop across twenty merchants, filter by your dietary restrictions, check your purchase history to avoid duplicates, and negotiate bundle pricing would save hours of human time. The AI works.

What it doesn't cover

The spec says nothing about how the agent actually pays. When the agent is ready to buy, it needs to authorize a transaction. Today, that means one of two things: the agent stores your card number and submits it through a checkout flow designed for humans, or the agent triggers a notification asking you to approve the charge manually.

The first option is a security problem. An AI agent holding a card number, CVV, and billing address is a credential storage risk that Visa and Mastercard have spent decades building PCI-DSS to prevent.

The second option defeats the purpose. If the agent has to ask you every time it wants to buy something, it's a recommendation engine with an extra step.

The missing piece is scoped authorization. An agent needs a token that says "you can spend up to $200 at grocery merchants this week" without ever touching the underlying card credentials. Merchant-category-scoped, amount-limited, time-bounded, and revocable.

Card networks have the building blocks for this in tokenization and merchant category codes. The spec doesn't assemble them.

The Catena comparison

Catena Labs shipped an answer to this problem in 2025 with the Agent Commerce Kit. The agent gets a cryptographic identity, trust scopes that limit what it can do, and a receipt layer so every transaction is auditable.

The agent never holds card credentials. It holds a scoped authorization token that the merchant can verify independently.

That architecture was purpose-built for agents. The Anthropic spec takes the opposite approach: make the agent smart enough to navigate infrastructure built for humans. One designs new rails for a new actor. The other forces a new actor onto old rails.

Where this goes

Three-quarters of consumers surveyed by Visa don't trust AI agents to make payments autonomously. The commerce agent spec doesn't solve that. The agent can decide what to buy. The payment infrastructure has no native way to let it pay.

This gap will close. The question is whether it closes by retrofitting card rails with agent-scoped tokens, or by building agent-native payment protocols from scratch.

The card networks will push the first approach because it keeps them at the center. Startups like Catena, and potentially Stripe with OpenRouter's Machine Payments Protocol, will push the second.

Both will probably coexist. The card networks will handle agent commerce that looks like human commerce with a proxy. The new protocols will handle agent-to-agent transactions where no human is involved at all.

The boundary between those two categories will shift as agents get more autonomous. Whoever defines that boundary defines the next generation of payment infrastructure.

Update: Sep 11

Four days after I published this piece, Visa, Mastercard, and Ant International announced a joint AI agent trust framework. The card networks are building the authentication layer I described as missing. Meanwhile, Poland's BLIK payment system completed a pilot transaction executed independently by an AI agent, no human in the loop. The gap between "agents can shop" and "agents can pay" is closing fast.