Changes
What's new
Spec repository activity and timeline events from the last 90 days: 2026-07-17 to 2026-10-15. This is a snapshot taken when the site was built, not a live feed.
Timeline events since 2026-07-17
- ERC-8004: Trustless AgentsSecurityVerified
Single externally owned account owns the proxies on Ethereum and Base Source [1]
Holder not published.
- MarketMarketVerified
Observed: x402.org counter unchanged, 8004scan passes 561,000 registrations Source [2, 3, 4]
x402.org still shows 75.41M transactions and $24.24M for the last 30 days, values seen since mid August; 8004scan shows 561,614 agents across 30 networks; mppscan shows 127.4K transactions in what appears to be a 7-day window.
- StandardsReleaseVerified
ERC-8226 adds per-asset mandates Source [5]
Mandates keyed by agent, principal and asset (PR #2060). Still Draft.
- Stripe MPP (Machine Payments Protocol)ReleaseVerified
mppx 0.13.4 released Source [6]
- PolicyPolicyVerified
MAS issues Guidelines on AI Risk Management Source [7, 8]
Effective 2027-10-07, with some expectations phased to 2028-10-07. MAS plans to consult on more agentic AI guidance in 2027.
- AP2ReleaseVerified
TypeScript SDK pull request closed unmerged Source [9]
PR 305.
- Mastercard Agent PayLaunchVerified
Trust Framework named; probability score testing in the US; Skyfire as KYA partner Source [10]
- x402PilotVerified
Cloudflare Monetization Gateway closed beta Source [11]
Settles USDC on Base through Coinbase's facilitator; US only.
- Stripe MPP (Machine Payments Protocol)GovernanceVerified
Generic session intent pull request closed unmerged Source [12]
- ERC-8004: Trustless AgentsMarketVerified
CSOAI census of 505,635 agent ids Source [13]
- UCPReleaseVerified
Draft lodging booking capability merged on main Source [14, 15]
- x402ReleaseVerified
exact on Lightning (lnbtc) Source [16]
- UCPMarketReported
Reported automatic enrollment of US Shopify merchants in Google native checkout Source [17]
- Stripe MPP (Machine Payments Protocol)GovernanceVerified
draft-ryan-httpauth-payment expired Source [18]
- StandardsReleaseVerified
Web Monetization draft republished Source [19]
WICG Draft Community Group Report with Interledger Foundation editors; not a W3C standard. No agent program announced.
- PolicyPolicyReported
NPCI AI-agent registry for UPI reported Source [20]
Reuters-relayed report of a planned agent registry and framework; no NPCI publication found.
- PolicyPolicyReported
Ant International, Mastercard and Visa start Know Your Agent interoperability work Source [21, 22]
A collaboration through the MAS-convened BuildFin.ai platform, building on Visa TAP, Mastercard Verifiable Intent and Ant's Agentic Mobile Protocol. No network rule change announced.
- AP2SecurityVerified
Whisper attacks and A-VIP defense Source [23]
arXiv:2609.11757.
- Stripe MPP (Machine Payments Protocol)ReleaseVerified
draft-httpauth-payment-01 posted Source [24, 25]
A revision, not a rename; expires 2027-03-13.
- Stripe MPP (Machine Payments Protocol)ReleaseVerified
XRPL charge and session methods merged Source [26]
- UCPAnnouncementVerified
UCP sessions at the W3C and GS1 workshop Source [27]
- AP2ReleaseVerified
draft-stone-vcap-ap2-binding-01 Source [28]
Third-party individual Internet-Draft; still names v0.1 objects.
- UCPGovernanceVerified
Payments Tech Council formed Source [14]
- Mastercard Agent PayGovernanceVerified
EMVCo draft agentic framework names Verifiable Intent Source [29]
- PolicyPolicyVerified
EMVCo publishes a draft framework for card-based agentic payments Source [29, 30]
Draft for comment until 2026-09-30, proposing Intent Services. EMVCo lists Know Your Agent and Agentic Transaction Indicators as possible future work.
- Visa Trusted Agent ProtocolGovernanceVerified
Web Bot Auth working group draft -00 Source [31]
TAP predates and does not conform to it.
- Stripe MPP (Machine Payments Protocol)ReleaseVerified
mppx 0.9.0 dual MPP and x402 wrappers Source [32]
- AP2ReleaseVerified
UCP renames the extension and aligns with v0.2 Source [33, 34]
dev.ucp.common.payment.ap2_mandate in release v2026-08-25.
- Stripe MPP (Machine Payments Protocol)ReleaseVerified
header parameter and Payment-Authorization merged Source [35]
- UCPReleaseVerified
Release v2026-08-25: actions, 3DS2, split payments, AP2 rename Source [34, 36]
dev.ucp.shopping.ap2_mandate became dev.ucp.common.payment.ap2_mandate.
- AP2SecurityVerified
Beyond the Mandate security analysis Source [37]
48 threats to v0.2, eight High.
- x402ReleaseVerified
Client spend controls Source [38, 39]
@x402/core 2.23.0: spendControls with a $1 default per payment.
- ERC-8004: Trustless AgentsLaunchVerified
Robinhood Chain listed as the 25th mainnet Source [40]
- Visa Trusted Agent ProtocolReleaseVerified
TAP attestation in mppx Source [41]
- UCPGovernanceVerified
Lodging Tech Council formed Source [14]
- PolicyPolicyVerified
Ninth Circuit vacates the Amazon v. Perplexity injunction Source [42]
The user, not Perplexity, accessed Amazon using the agent as a tool; Amazon unlikely to succeed under the CFAA or CDAFA on these facts. Remanded.
- Stripe MPP (Machine Payments Protocol)ReleaseVerified
TAP and Web Bot Auth attestation merged in mppx Source [43, 44]
Shipped in 0.8.17 on 2026-08-10; blog 2026-08-12.
- PolicyPolicyVerified
EU AI Act general application date, including Article 50 transparency Source [45, 46]
The general date of application of Regulation (EU) 2024/1689, kept by the Digital Omnibus. Chatbot-style disclosure duties under Article 50 apply from here.
- PolicyPolicyReported
Worldpay: no liability shift yet for agent card payments Source [47]
Analysis from an acquirer: properly tokenized agent transactions follow existing rules, while liability for disputes short of fraud is unresolved.
- Stripe MPP (Machine Payments Protocol)ReleaseVerified
Subscription intent with Stripe and Tempo methods merged Source [48]
- PolicyPolicyVerified
EU Digital Omnibus on AI enters into force Source [45]
Regulation (EU) 2026/1744 moves Annex III high-risk obligations to 2027-12-02 and Annex I to 2028-08-02, and adds a grace period to 2026-12-02 for Article 50(2) marking by existing generative systems.
- MarketMarketReported
Visa and Artemis adjust x402 volume to $15.0 million Source [49]
Adjusted from $135.7 million raw; data to 2026-04-21. MPP measured at about $25,000.
- Agentic Commerce Protocol (ACP)ReleaseVerified
Last commit to date Source [50]
Optional product url on checkout items (unreleased); no commits through 2026-10-11.
- Mastercard Agent PaySecurityReported
Verifiable Intent issue 29 on duplicate digests opened Source [51]
Dated after the build
Scheduled or effective dates later than 2026-10-15.
- PolicyVerified
GENIUS Act latest effective date (scheduled) Source [52, 53]
Spec repositories
Latest release and latest commit on the default branch for 27 repositories, read from the GitHub API on . A "new" mark means the date falls on or after 2026-07-17.
| Repository | Latest release | Latest commit |
|---|---|---|
| ethereum/ERCs (external link) The Ethereum Request for Comment repository | No releases | b1f2bd8 new |
| x402-foundation/x402 (external link) A payments protocol for the internet. Built on HTTP. | No releases | f8f8330 new |
| tempoxyz/pympp (external link) Python SDK for the Machine Payments Protocol | v0.11.0 (external link) new | 1303c1b new |
| Universal-Commerce-Protocol/ucp (external link) Specification and documentation for the Universal Commerce Protocol (UCP) | v2026-08-25 (external link) new | ad9950b new |
| wevm/mppx (external link) TypeScript Interface for Machine Payments Protocol | mppx@0.13.4 (external link) new | d8d800f new |
| tempoxyz/mpp (external link) Website for the Machine Payments Protocol | No releases | 6c5a0c6 new |
| tempoxyz/mpp-specs (external link) Specifications for the Machine Payments Protocol - powered by the "Payment" HTTP authentication scheme | spec-artifacts-50309c8e67e6d64b5547f1cc354fb327bda1301e (external link) new | 50309c8 new |
| Universal-Commerce-Protocol/.github (external link) This repository is for cross-repository configs (Code of Conduct, Linters) and implements PR triage via GitHub Code Owners | No releases | 95b77fd new |
| Universal-Commerce-Protocol/js-sdk (external link) The official JavaScript SDK for UCP | v0.5.1 (external link) new | 6f7a6da new |
| Universal-Commerce-Protocol/python-sdk (external link) The official Python SDK for UCP | v2026-08-25 (external link) new | 8f13fda new |
| Universal-Commerce-Protocol/samples (external link) Samples for UCP | No releases | cdb291c new |
| mastercard/developers-agent-toolkit (external link) The Mastercard Developers Agent Toolkit allows popular agent frameworks to integrate with Mastercard Developers Platform for service discovery and integration guides. | No releases | 2c6781c new |
| visa/mcp (external link) Integration toolkit for connecting AI agents to the Visa Intelligent Commerce platform. | No releases | 1c544e5 new |
| Merit-Systems/x402scan (external link) x402 Ecosystem Explorer | @x402scan/mcp@0.3.1 (external link) | 131a5d3 new |
| Universal-Commerce-Protocol/conformance (external link) Conformance Tests for UCP | No releases | 016ecbc new |
| erc-8004/erc-8004-contracts (external link) Registry contracts curated by the 8004 team | No releases | b9e466c new |
| agentic-commerce-protocol/agentic-commerce-protocol (external link) The Agentic Commerce Protocol (ACP) is an interaction model and open standard for connecting buyers, their AI agents, and businesses to complete purchases seamlessly. The specification is currently maintained by OpenAI and Stripe. | No releases | 7fdd78d new |
| Repository | Latest release | Latest commit |
|---|---|---|
| visa/vic-reference-agent (external link) Open source reference app to run and experience agentic commerce functionality. | No releases | 39bc93d |
| google-agentic-commerce/a2a-x402 (external link) The A2A x402 Extension brings cryptocurrency payments to the Agent-to-Agent (A2A) protocol, enabling agents to monetize their services through on-chain payments. This extension revives the spirit of HTTP 402 "Payment Required" for the decentralized agent ecosystem. | v0.1.0 (external link) | 125db55 |
| google-agentic-commerce/AP2 (external link) Building a Secure and Interoperable Future for AI-Driven Payments. | v0.2.0 (external link) | e1ea56d |
| coinbase/x402 (external link) A payments protocol for the internet. Built on HTTP. | No releases | dd927a2 |
| agent-intent/verifiable-intent (external link) Open specification for cryptographic agent authorization in commerce | No releases | 356c296 |
| lightninglabs/L402 (external link) Pay for APIs with Lightning. Authenticate with the receipt. HTTP 402, realized. | No releases | 592203a |
| agent0lab/agent0-py (external link) Agent0 is the SDK for agentic economies: open discovery and trust for agents | No releases | 943433e |
| agent0lab/agent0-ts (external link) TypeScript SDK for agent portability, discovery and trust based on ERC-8004. | No releases | a6fb487 |
| erc-8004/best-practices (external link) | No releases | 8a99b86 |
| visa/trusted-agent-protocol (external link) Establishing a universal standard of trust between AI agents and merchants for the next phase of agentic commerce. | No releases | 16d59bd |
Sources
- On-chain reads of the ERC-8004 proxies (owner, getVersion, ERC-1967 implementation slot) on Ethereum and Base (external link)
- x402.org home page Last 30 Days counters (observed 2026-10-11) (external link)
- 8004scan home page statistics (observed 2026-10-11, later fetch) (external link)
- mppscan: Machine Payments Protocol explorer (observed 2026-10-11) (external link)
- ERC-8226 file history in ethereum/ERCs (PRs #1679, #1844, #1982, #2060) (external link)
- mppx on npm (external link)
- MAS Sets Out Supervisory Expectations on Responsible AI Adoption by Financial Institutions (external link)
- Guidelines on Artificial Intelligence Risk Management for Financial Institutions (external link)
- AP2 issues and pull requests opened since 2026-04-29 (GitHub issues API) (external link)
- Mastercard Advances Agentic Commerce With New Trust and Intelligence Services (external link)
- Monetization Gateway beta (external link)
- mpp-specs PR #280: docs: add generic session intent (external link)
- ERC-8004 agent census (measured read, 2026-09-26) (external link)
- UCP announcements (external link)
- UCP repository main branch schemas (draft, commit ad9950b) (external link)
- x402 PR #2861: Specify exact Lightning on BIP-122 (external link)
- Google switched on AI Mode checkout for Shopify stores without asking (external link)
- draft-ryan-httpauth-payment (IETF Datatracker record and history) (external link)
- Web Monetization (Draft Community Group Report) (external link)
- India plans AI-agent registry for UPI payments (external link)
- Ant International, Mastercard and Visa initiate collaboration on Know Your Agent interoperability to scale agentic commerce (external link)
- Visa and Mastercard team with Ant on Know Your Agent framework (external link)
- Signing the Transaction but Not the Decision: Whisper Attacks and a Binding Defense for AP2 (external link)
- draft-httpauth-payment (IETF Datatracker record and history) (external link)
- mpp-specs PR #351: fix: renew IETF draft from Datatracker expiry (external link)
- XRP Ledger Charge and Session Intents (draft-xrpl-charge-00, draft-xrpl-session-00) (external link)
- W3C/GS1 Workshop: E-commerce for Humans and AI Agents, agenda (external link)
- VCAP-AP2 Binding: Verified Delivery Settlement for the Agent Payments Protocol (draft-stone-vcap-ap2-binding-01) (external link)
- EMVCo Requests Feedback on Framework for Secure, Interoperable and Scalable Card-Based Agentic Payments (external link)
- How EMVCo is Working to Enable Secure, Interoperable and Scalable Card-Based Agentic Payments (external link)
- draft-ietf-webbotauth-httpsig-protocol-00: HTTP Message Signatures for automated traffic (external link)
- mppx CHANGELOG.md (external link)
- UCP GitHub releases (v2026-01-11, v2026-01-23, v2026-04-08, v2026-08-25) (external link)
- payment_ap2_mandate.json (v2026-08-25) (external link)
- mpp-specs PR #328: Alternate payment credential header (external link)
- Release v2026-08-25 (external link)
- Beyond the Mandate: A Systematic Security Analysis of the Agent Payments Protocol (AP2) (external link)
- @x402/core CHANGELOG.md (external link)
- @x402/core on npm (external link)
- Commit history of erc-8004-contracts README.md (external link)
- Expanding identity support in mppx (blog) and advanced/identity.mdx (external link)
- Amazon.com Services, LLC v. Perplexity AI, Inc., No. 26-1444 (9th Cir.), opinion (external link)
- mppx PR #732: feat: add TAP and Web Bot Auth attestation (external link)
- Expanding identity support in mppx (MPP blog) (external link)
- Regulation (EU) 2026/1744 (Digital Omnibus on AI), OJ L 2026/1744 of 24.7.2026 (external link)
- Regulation (EU) 2024/1689 (Artificial Intelligence Act) (external link)
- Agentic commerce liability is still being written (external link)
- mpp-specs PR #230: Subscriptions: Intent + Stripe and Tempo Implementations (external link)
- Visa/Artemis: The $0.14 Reality of Agent Commerce (external link)
- GitHub commits API for agentic-commerce-protocol/agentic-commerce-protocol (per-path history) (external link)
- VI v0.1 L2 format lists each mandate disclosure digest in both _sd and delegate_payload; RFC 9901 requires verifiers to reject the credentials (external link)
- Public Law 119-27, GENIUS Act (S. 1582) (external link)
- OCC Promises Final Rule for GENIUS Act by November (external link)