acp-delegated-payment

To process payments without handling credit card data directly, you implement a delegated payment flow using SharedPaymentTokens. This provisions single-use, scoped tokens via payment gateways like Stripe to complete secure, agent-mediated transactions.

A SharedPaymentToken (SPT) is a single-use, scoped token provisioned by a payment service provider like Stripe. It secures agentic commerce by allowing AI agents to facilitate transactions without directly accessing sensitive buyer payment card information.

You manage 3D Secure authentication for agent-mediated transactions by using a delegated payment flow that handles the challenge-response process. This ensures transaction authorization when required by the payment gateway during checkout.

Yes, Stripe integration supports PCI compliance for automated checkout sessions by tokenizing payment credentials and managing the SPT lifecycle. This approach mitigates PCI DSS scope by ensuring agents never directly handle cardholder data.

You handle webhook events for payment status updates by configuring your delegated payment flow to listen for gateway notifications. This manages the SPT lifecycle and ensures compliance with payment constraints throughout the transaction process.