Missing: Who holds the keys, Spending limits enforced outside the agent, Sending funds to new addresses, Transaction preview or simulation. Missing inputs lower the maximum instead of counting as zero.
Input
From official docs
Points
Who holds the keys
Missing: no official source found yet
missing / 20
Spending limits enforced outside the agent
Missing: no official source found yet
missing / 20
Human approval
Protocol score, optional: human-present flows record your authorization of each finalized checkout in a signed mandate; human-not-present flows let the agent pay within an open mandate source
8 / 15
Sending funds to new addresses
Missing: no official source found yet
missing / 15
Transaction preview or simulation
Missing: no official source found yet
missing / 10
Open source and audits
Open specification, SDK and samples (Apache-2.0); no audit report found source
6 / 10
Incident record (last 12 months)
No incident naming this tool in our incident tracker for the last 12 months, and every scored input links an official source source
10 / 10
Total
69% of the points we could check
24 / 35
The Safety score (v1) isn't shown in this section: it is built for tools that place orders. Why
specification, SDK and code samples (v0.2); not a hosted payment service
Order approval / safety
user intent and authorization travel as signed, tamper-evident mandates: a Checkout Mandate shared with the merchant and a Payment Mandate shared with the credential provider and networks; the open Payment Mandate captures constraints such as budget and allowed instruments for autonomous purchases, the closed stage authorizes a specific amount; human-present and human-not-present flows; the page doesn't say who enforces the constraints
2026-10-23 · Added. Agent Payments Protocol (AP2): open protocol started by Google, now standardized at the FIDO Alliance; scored on what the protocol specifies.
Recent changes
2026-10-23New listing New listing: Agent Payments Protocol (AP2), the open protocol started by Google for agent payments built on signed mandates (v0.2, standardization continuing at the FIDO Alliance). Source