The supply side
of agentic commerce
is not ready.
Most merchants cannot be reliably verified by an AI agent, most PSPs have not adopted the protocols that make agent transactions safe, and the financial liability that accumulates in between sits in places no one in the payments stack has agreed to own.
How we measured the gap
47 interviews across card schemes, PSPs, acquirers, merchants and AI platforms, triangulated against Ballerine's merchant portfolio and published research from analysts, networks, and regulators.
Demand is growing an order of magnitude faster than supply. That mismatch is where the risk accumulates.
The audience for agentic commerce is moving roughly an order of magnitude faster than the infrastructure underneath it. AI-sourced retail traffic grew about 1,200 percent year over year going into 2026. Adobe Analytics measured 4,700 percent year over year growth in AI-driven visits to US retail sites in 2025. On the supply side, close to three quarters of online merchants are still standardizing their product pages for AI agents or have not started at all. Outside Stripe, no payment service provider can credibly claim production maturity across the three protocols that matter. The result is that AI agents are already routing real shoppers to merchants they cannot reliably verify, through payment rails that were not built for them, with the financial liability sitting in places no one has agreed on.
letting AI complete a purchase
protocols, none interoperable
by 2030, Morgan Stanley low
The merchant supply side is not ready, and the scale of the gap is larger than published estimates.
Independent assessments place roughly 40 percent of e-commerce businesses still in the process of standardizing product pages for agentic AI, and another 33 percent not started at all. Of the 13 merchants we interviewed, only 2 had completed structured product data work to the level AI platforms expect. 6 had started and stalled. 5 had not begun.
AI agents are already recommending unreliable merchants. In production, today.
7 of the 9 AI platform and infrastructure interviewees independently raised merchant-side verification as a problem they did not yet have a real answer for.
Outside Stripe, the PSP side is structurally behind.
Stripe co-authored the Agentic Commerce Protocol with OpenAI. Every other major PSP and acquirer is playing catch-up. Of the 14 PSP and acquirer interviewees, 11 described their current posture as "connectors". Only 3 described themselves as setting the agenda on a protocol, rather than implementing one.
Every major player is verifying the agent. No one is verifying the merchant.
Across all four interviewee groups, 38 of 47 (81 percent) raised the merchant trust question without being prompted.
Is the agent who it says it is?
Cryptographic mandates, delegated payment tokens, agent-scoped credentials, bot vs agent discrimination at the edge.
Is the merchant actually safe to engage with?
Verified identity, accurate product claims, machine-readable refund terms, licensing, geographic restrictions, continuous behavioural monitoring.
What is needed, concretely, is a machine-readable merchant trust layer that an AI agent or a PSP can query before recommending, routing to or transacting with a merchant. The category is small today. Most of our interviewees expect it to consolidate through 2026 and 2027 and to become a required input to any agent-mediated transaction by 2028.
The Agentic Commerce Ecosystem
The companies building the payment and safety infrastructure that agentic commerce requires at scale.
Where the gaps are
Structural deficiencies ranked by urgency. G1 blocks everything else.
The payments ecosystem will be redesigned before 2029.
Bain forecasts US agentic e-commerce at 300 to 500 billion dollars by 2030. Morgan Stanley puts it at 190 to 385 billion. McKinsey's broader unlocked-value estimate is 3 to 5 trillion dollars globally.
- Ballerine field interviews, Feb to May 2026. Triangulated against Bain, Morgan Stanley, McKinsey, Forrester, Visa, Mastercard, Adobe, Liminal, F-Secure, Aurascape, Riskified and Digital Applied published research, plus FY2026 SEC filings.
- Digital Applied agent readiness assessment, Feb 2026, triangulated with Ballerine merchant interviews and portfolio observations.
- Visa H2 2025 to H1 2026 bot transaction telemetry; Darwinium 2026 AI threat report; Mastercard FY2026 DEF 14A risk disclosures.
- acpready.com directory, March 2026, cross-referenced with Forrester April 2026 PSP analysis and Ballerine PSP interviews.
- Visa B2AI Report 2026, n=2,000 US consumers.
- Ballerine interview synthesis across 47 sources. 38 of 47 (81%) raised merchant-side verification unprompted.
- Synthesis of Bain, Morgan Stanley, McKinsey, Forrester, Visa and Mastercard forecasts with Ballerine interview judgements.