Agentic commerce is the shift from people clicking through a website to AI agents searching, comparing and buying on their behalf. A customer tells an assistant “book me the cheapest morning flight” or “reorder my printer ink”, and the agent does the browsing, the form filling and sometimes the payment. For Pakistani businesses that sell online, this raises a practical question: should AI agents be welcome on your website, or kept out?
The question became very real when United Airlines announced that it is banning unauthorised third party AI agents from booking flights, citing account security and unintended purchases (CBS News, 11 November 2026). Other companies are taking the opposite path and building direct agent checkouts. This guide explains what agentic commerce is, the standards behind it, and what a store, travel agency or service business in Pakistan should do now.
What is agentic commerce?
Agentic commerce means an AI agent completes part or all of a purchase for a person. The agent can read product pages, compare prices across sites, fill in forms and, where allowed, pay. The human sets the goal and the limits; the agent does the steps in between.
It differs from a normal chatbot. A chatbot answers questions on your own site. An agent in agentic commerce usually belongs to the customer (inside ChatGPT, Gemini or a browser) and visits many websites, including yours, as a kind of digital personal shopper.
Agentic commerce examples
- Chat checkout: Stripe and OpenAI launched Instant Checkout in ChatGPT, where US users could buy from US Etsy sellers without leaving the chat, with Shopify merchants announced as next (Stripe, 29 September 2025).
- Travel: the CBS report notes that Southwest lets ChatGPT users view its flight inventory, while United chose to block outside agents.
- Browser agents: assistants that open a website, add items to a cart and stop at payment for the user to confirm.
The standards behind agentic commerce
Three pieces of plumbing are shaping how agents shop safely. You do not need to adopt all of them, but your developers should know they exist.
Agentic Commerce Protocol (ACP)
ACP is an open standard co-developed by Stripe and OpenAI so a merchant can sell through AI agents with one integration. Stripe says businesses that use other payment providers can also adopt it (Stripe).
Agent Payments Protocol (AP2)
Google announced AP2 with more than 60 payments and technology partners, including Mastercard, PayPal and American Express. Its key idea is the “mandate”: a cryptographically signed record of what the user asked for (an intent mandate, with limits such as a maximum price) and of the exact cart the user approved (a cart mandate). The specification is public on GitHub (Google Cloud, 17 September 2025).
Verified and signed agents
Websites also need to know who is knocking. Cloudflare’s Web Bot Auth lets bots and agents sign their HTTP requests so a site can verify them, and Cloudflare now classifies “signed agents” that act for individual users (Cloudflare, 28 August 2025). This is what makes a policy of “allow trusted agents, block unknown bots” possible.
What agentic commerce means for Pakistani businesses
Most of these launches started in the US, but the agents themselves are available worldwide, so Pakistani customers and overseas buyers can already use them. The effects arrive before any local rollout.
- Online stores: an agent reads structured data, prices and stock levels, not banners. A store with clean product data, clear delivery and return terms and a simple checkout is easier for an agent to recommend.
- Travel agencies and booking businesses: agents can search seats and rooms at a speed no human does. Without rate limits and clear terms, a booking engine can be overloaded or receive bookings nobody intended.
- Service businesses: clinics, salons and academies that take appointments online may see agent bookings first, because a booking form is simpler than a full checkout.
- Exporters and freelancers: buyers abroad can ask an assistant to shortlist suppliers. A website that agents can read clearly is a sales channel in its own right.
Payments are the part to treat with care. The global protocols are built around cards, wallets and gateways, and how local rails and cash on delivery fit in is still open. Watch your payment provider’s announcements rather than assuming support.
Should you allow or block AI agents?
United’s choice shows the risk side: customers handing account passwords to third party tools, purchases nobody meant to make, and steps that legally need a human. The other side is lost sales if trusted agents cannot reach you. For most businesses the answer is neither “allow everything” nor “block everything”, but a clear policy.
- Read your logs first. Check how much automated traffic already reaches your search, cart and booking pages.
- Update your terms of use. State whether automated agents may book or buy, and on what conditions.
- Keep a human step for risky actions. Payment, account changes and anything legally sensitive should need the customer’s own confirmation, for example an OTP.
- Never ask customers to share passwords with agents. Offer proper login, and later an official API, instead.
- Rate limit and verify. Use bot management that can tell signed, verified agents from scrapers.
- Make your data agent friendly. Accurate product schema, live stock, clear prices on the page and plain language policies help both agents and Google.
If you already use AI agents inside your business, the security basics overlap: prompt injection, access control and logging matter just as much when the agent comes from outside.
How to get your website ready for agentic commerce
You do not need to rebuild your store. Start with the parts agents and search engines both read:
- Product and service pages with structured data (Product, Offer, FAQ) that match what is on the page.
- A checkout and booking flow with clear steps and a final human confirmation.
- A payment setup through a gateway that can add new methods later; see our guide to payment gateway integration in Pakistan.
- An API or feed for trusted partners, so agents do not have to scrape your pages.
Ezitech builds ecommerce websites and AI agent solutions for businesses across Pakistan, including the bot rules, booking flows and data feeds described above.
What this means for developers and students
Agentic commerce creates new work: implementing protocols such as ACP and AP2, writing product schema, building agent friendly APIs and setting up bot verification. These are skills Pakistani developers can learn now and sell to clients at home and abroad. Students who want hands on project experience in AI and web development can apply to the Ezitech internship program.
Frequently asked questions
What is agentic commerce in simple words?
Agentic commerce is shopping or booking done by an AI agent for a person. The person sets the goal and limits, and the agent searches, compares and completes the steps, sometimes including payment.
Why did United Airlines ban AI agents?
According to CBS News, United cited the security risk of customers sharing account credentials with third party AI tools, possible unintended purchases or account changes, and rules that need in person verification.
What is the Agentic Commerce Protocol?
It is an open standard co-developed by Stripe and OpenAI that lets merchants sell through AI agents with a single integration. It powers Instant Checkout in ChatGPT.
Is agentic commerce available in Pakistan?
The first chat checkout launches were for US users, but AI agents that browse websites are already used worldwide. Pakistani websites can receive agent visits today, so it is worth setting a policy now.
Should a small business block AI agents?
Usually not completely. Block unknown scrapers, allow verified agents to read your pages, and keep payment and account changes behind a human confirmation step.
Plan your agent ready website
Not sure whether to welcome or block AI agents on your store or booking system? Ezitech offers a free consultation and a written quote for bot rules, checkout flows and AI agent integration. Contact Ezitech to get started.