# Agent Payments Protocol (AP2) agent risk score and pricing

> Agent Payments Protocol (AP2): payments for AI agents. Live trading. Agent risk 69% (partial). Free open protocol. Sourced, checked 2026-10-26.

Canonical: https://tradingagentstack.com/tool/agent-payments-protocol-ap2/

1. [Home](https://tradingagentstack.com/)

2. [AI agent payments](https://tradingagentstack.com/category/agent-payments/)

A

# Agent Payments Protocol (AP2)

[**69****Agent Risk Score**69% of the points we could check · partial, 3 of 7 inputsHow much an AI agent could lose here if it is wrong, hacked or prompt-injected. Higher is safer.](#agent-risk-score)

Last checked **2026-10-26****2** official sources linked[How we score](https://tradingagentstack.com/methodology/)[Incident tracker](https://tradingagentstack.com/incidents/)

Category[Agent payments](https://tradingagentstack.com/ai-agent-payments/)
Pricingfree open protocol (Apache-2.0)
Best forAgent payments · card payments (initial version), x402 stablecoin sample
Verified2026-10-26

[Visit Agent Payments Protocol (AP2)](https://tradingagentstack.com/go/agent-payments-protocol-ap2/?from=/tool/agent-payments-protocol-ap2/)

Official site (source): [https://ap2-protocol.org/](https://ap2-protocol.org/)

## Agent Risk Score (v2)

[Agent risk 69% (partial, 3 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score) If an agent using this tool is wrong, hacked or prompt-injected, how much money can it lose? Higher is safer. Each input links to the vendor's own docs; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/methodology/#agent-risk-score) · [Incidents](https://tradingagentstack.com/incidents/)

Missing: Who holds the keys, Spending limits enforced outside the agent, Sending funds to new addresses, Transaction preview or simulation. Missing inputs lower the maximum instead of counting as zero.

| Input | From official docs | Points |
| --- | --- | --- |
| Who holds the keys | Missing: no official source found yet | missing / 20 |
| Spending limits enforced outside the agent | Missing: no official source found yet | missing / 20 |
| Human approval | Protocol score, optional: human-present flows record your authorization of each finalized checkout in a signed mandate; human-not-present flows let the agent pay within an open mandate [source](https://ap2-protocol.org/) | 8 / 15 |
| Sending funds to new addresses | Missing: no official source found yet | missing / 15 |
| Transaction preview or simulation | Missing: no official source found yet | missing / 10 |
| Open source and audits | Open specification, SDK and samples (Apache-2.0); no audit report found [source](https://github.com/google-agentic-commerce/AP2) | 6 / 10 |
| Incident record (last 12 months) | No incident naming this tool in our incident tracker for the last 12 months, and every scored input links an official source [source](https://tradingagentstack.com/incidents/) | 10 / 10 |
| Total | 69% of the points we could check | **24 / 35** |

The Safety score (v1) isn't shown in this section: it is built for tools that place orders. [Why](https://tradingagentstack.com/methodology/#agent-wallets-v1)

## Full facts

| Category | AI agent payments |
| --- | --- |
| Assets | card payments (initial version), x402 stablecoin sample |
| Live vs paper | specification, SDK and code samples (v0.2); not a hosted payment service |
| Order approval / safety | user intent and authorization travel as signed, tamper-evident mandates: a Checkout Mandate shared with the merchant and a Payment Mandate shared with the credential provider and networks; the open Payment Mandate captures constraints such as budget and allowed instruments for autonomous purchases, the closed stage authorizes a specific amount; human-present and human-not-present flows; the page doesn't say who enforces the constraints |
| Pricing / free tier | free open protocol (Apache-2.0) |
| Rate limits | not applicable (protocol) |
| Official / community | official |
| Last checked | 2026-10-26 |
| Source | [ap2-protocol.org](https://ap2-protocol.org/) |
| Repository | [https://github.com/google-agentic-commerce/AP2](https://github.com/google-agentic-commerce/AP2) |

## Change log

- **2026-10-23** · Added. Agent Payments Protocol (AP2): open protocol started by Google, now standardized at the FIDO Alliance; scored on what the protocol specifies.

## Recent changes

- **2026-10-23** New listing New listing: Agent Payments Protocol (AP2), the open protocol started by Google for agent payments built on signed mandates (v0.2, standardization continuing at the FIDO Alliance). [Source](https://ap2-protocol.org/)

[All changes across tools](https://tradingagentstack.com/changes/)

## Related: Agent payments

- [Stripe Issuing for agents](https://tradingagentstack.com/tool/stripe-issuing-for-agents/)

- [x402](https://tradingagentstack.com/tool/x402/)

- [Coinbase Agentic Wallet](https://tradingagentstack.com/tool/coinbase-agentic-wallet/)

- [Link agent wallet](https://tradingagentstack.com/tool/link-agent-wallet/)

- [Lightning Agent Tools](https://tradingagentstack.com/tool/lightning-agent-tools/)

Are you the maker? [Claim this listing](mailto:hello@tradingagentstack.com?subject=Claim%20listing%3A%20Agent%20Payments%20Protocol%20%28AP2%29) (adds a separate "Provided by vendor" box; it never changes our sourced facts), [Add a "Listed on TradingAgentStack" badge](https://tradingagentstack.com/badge/) or [send a correction](https://tradingagentstack.com/submit/).

## More in Build an AI agent
[Broker MCP servers](https://tradingagentstack.com/category/broker-mcp/)[Market data MCPs](https://tradingagentstack.com/category/data-mcp/)[Agent frameworks](https://tradingagentstack.com/category/agent-framework/)[Risk & paper trading](https://tradingagentstack.com/trading-bot-risk-safety-tools/)[Agent wallets](https://tradingagentstack.com/ai-agent-wallets/)[Agent payments](https://tradingagentstack.com/ai-agent-payments/)[TAS Guard: limits for AI orders](https://tradingagentstack.com/guard/)[How each broker MCP gates orders](https://tradingagentstack.com/broker-mcp-safety-controls/)[Best broker for AI agents](https://tradingagentstack.com/best-broker-for-ai-agents/)[Best paper trading and guardrails](https://tradingagentstack.com/best-paper-trading-and-guardrails-for-ai-agents/)[Setup guides](https://tradingagentstack.com/guides/)

Other paths: [Trade with a bot](https://tradingagentstack.com/trade-with-a-bot/) · [Markets & infrastructure](https://tradingagentstack.com/markets-and-infrastructure/) · [Learn](https://tradingagentstack.com/learn-algorithmic-trading/) · [Search all tools](https://tradingagentstack.com/tools/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)