ap2-payment-mandate

A payment mandate in agentic commerce is a secure structure that signals AI involvement to payment networks and provides cryptographic proof of user authorization for the transaction.

You tokenize payment methods for AI agent transactions by using a Credentials Provider to generate secure tokens (DPAN), which prevents the exposure of raw card details during the authorization process.

Cryptographic proof for AI payment authorization works by incorporating the user's cryptographic signature into the payment mandate, verifying that the user explicitly authorized the AI agent's transaction.

Yes, you can include refund periods for dispute resolution within the payment mandate, alongside transaction details and merchant agent identity, to facilitate risk assessment by payment networks.

Yes, verifiable credentials are needed to securely establish the merchant agent identity and tokenize the payment method, ensuring networks and issuers can trust the AI-initiated transaction.

Tokenization for AI payment mandates relies on a Credentials Provider for DPAN generation, meaning raw card details must be securely handled upstream before the mandate is constructed and shared for risk assessment.