Amex Places a Big Bet on Agentic Commerce With Agent Purchase Protection

American Express just placed a big bet on agentic commerce.

In April 2026, American Express launched the ACE Developer Kit, a framework that lets AI agents make authenticated, intent-driven payments directly on the Amex network. But the real move is Amex Agent Purchase Protection. Amex is telling Card Members: if a registered AI agent makes a purchase on your behalf and there is an error, we cover it.

That is not a feature. That is a trust architecture for autonomous transactions.

Luke Gebb, EVP Global Innovation at Amex: “As AI agents reshape how Card Members make everyday transactions, the company is bringing its longstanding tradition of trust, security, and service into AI-powered commerce.”

The Five Services Behind It

The trust problem in agentic commerce was never mainly technical. Amex approached it with five integrated services:

1. Agent registration: verify who is transacting. The issuer knows which agent is acting.
2. Intent intelligence: capture what the cardholder actually authorized, such as a budget, a product or a time window.
3. Payment credentials: tokenized credentials an authenticated agent can use, without exposing the card number.
4. Cart context: pre- and post-transaction details, so the issuer and the merchant can see what was bought.
5. Account enablement: the Card Member registers their account for agentic transactions.

This is deliberate orchestration. Each piece answers a question that an issuer, merchant or cardholder would ask if something went wrong.

Why the Protection Matters More Than the SDK

The hardest question in agentic commerce is liability. When an agent buys the wrong thing, is that an authorized transaction or a fraudulent one? Card dispute rules were written for humans who either made a purchase or did not. “The AI misunderstood me” does not fit neatly into either category.

By offering purchase protection for registered agents, Amex answers that question for its own Card Members before the industry has a standard. That lowers the fear of trying agent payments. It also gives Amex a reason to require registration, which gives it better data about agent traffic.

Amex can do this more easily than the four-party networks because it runs a largely closed loop. It usually issues the card and often acquires the merchant, so it controls more of the chain and can make a promise end to end.

What It Means for the Industry

Tokenization just became table stakes

Every network token in production now has to answer a new question: can an authenticated agent use it? Tokens scoped to one agent, one merchant or one spending limit are the credential model for agent payments. Visa and Mastercard are building their own versions. For the basics, see Network Tokenization vs PCI Tokenization.

Merchants will expect protection as a baseline

Merchants building agentic experiences will start to expect issuer-backed protection for agent purchases as a baseline, not a premium feature. Stripe, PayPal and Square just got a clock running.

Fraud teams need a new category

Agent transactions need to be recognized, scored and reported separately from human transactions. Otherwise they either get declined as anomalies, or they slip through rules built for human behavior. I wrote about the cost of declining good transactions in Fraud Declines vs. No-Fraud Declines.

Questions for Payments Teams

• Can our checkout recognize a registered agent and pass that signal to the issuer?
• Do our tokens support agent-scoped credentials on each network?
• How will we handle disputes on agent-initiated purchases?
• What intent data do we capture and keep, and for how long?

Are you building products that enable agentic commerce, or waiting for the standard to settle?

Source: American Express press release, 14 April 2026.

Agent Purchase Protection: Key Takeaways

• Agent purchase protection covers Card Members when a registered AI agent makes a purchase error.
• Agent purchase protection answers the liability question before an industry standard exists.
• Registration, intent capture and tokens are what make agent purchase protection possible.
• Expect merchants to treat agent purchase protection as a baseline, not a premium feature.

FAQ

What is the Amex ACE Developer Kit?

A framework launched by American Express in April 2026 that lets AI agents make authenticated, intent-driven payments on the Amex network. It combines agent registration, intent capture, tokenized agent-usable credentials, cart context and account enablement.

What is Amex Agent Purchase Protection?

A protection from American Express covering Card Members when a registered AI agent makes a purchase on their behalf and there is an error.

Why does agent registration matter?

Issuers need to know which agent initiated a transaction and that the cardholder authorized it. Without that signal, agent-initiated payments look unusual and are more likely to be declined as fraud.

A shorter version of this analysis was first published on LinkedIn on May 24, 2026.

Related Reading

• Network Tokenization vs PCI Tokenization: What’s the Difference?
• Network Tokenization vs. Vendor Tokenization
• Fraud Declines vs. No-Fraud Declines
• What Is a Risk Decisioning Platform? Workflow, AI, and Design Principles