American Express has introduced the Agentic Commerce Experiences (ACE) Developer Kit, a technical framework intended to keep AI-agent purchases within limits that a cardholder authenticated and approved. ACE can encode conditions such as a maximum amount, preferred merchant, expiration date, item requirements and transaction count, then carry those conditions into payment with scoped, tokenized credentials.
That design may reduce out-of-scope transactions and give American Express more information for authorization and disputes. It is not proof that unauthorized purchases are impossible, and availability is still developing.
As an Amazon Associate I earn from qualifying purchases.
What ACE is—and what it is not
American Express announced ACE on April 14, 2026. It is a developer and payment-network framework, not a consumer app or a blanket guarantee against fraud. The aim is to authenticate what a cardholder intended an AI agent to buy, preserve those boundaries during payment, and provide transaction context for risk decisions and disputes.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →As Luke Gebb, American Express executive vice president and head of global innovation, said in the launch announcement: “The ACE Developer Kit enables this in AI-powered commerce.” The wording describes an enabling framework, not a claim that every agent or merchant is already integrated.
#1 Best Overall
How an approved purchase is supposed to work
- The user defines the intent. An intent can specify a maximum amount, merchant preference, expiry date, item-level conditions, a maximum number of transactions and other purchase criteria.
- The user confirms and authenticates. After the cardholder confirms the intent, selects a payment instrument and completes identity authentication, the intent is signed off.
- ACE issues intent evidence. American Express can issue an Intent ID and a Proof of Intent Token. The token represents the high-level constraints the user approved.
- A scoped payment credential is obtained. A verified agent can use the proof to obtain a payment credential limited to the approved intent rather than receiving unrestricted use of the underlying card.
- The credential expires or limits reuse. American Express says a token can expire on the date the user confirmed and can be single-use or multi-use, depending on the intent.
This sequence gives the issuer a record of what the user authorized before an agent attempts payment. If an agent tries to exceed the amount, buy outside the permitted conditions or use the credential after expiry, the transaction can be evaluated against that recorded scope. The framework is designed to constrain behavior; the available material does not establish perfect prevention in every scenario.
The five ACE service areas
| Service area | Purpose | Status on Oct. 13, 2026 |
|---|---|---|
| Agent Registration | Verify agents allowed to transact on the American Express network. | Under development |
| Account Enablement | Let card members register cards with verified agents and link accounts. | Specification available |
| Intent Intelligence | Capture confirmed purchase intent for authentication, authorization and disputes. | Specification available |
| Payment Credentials | Provide tokenized credentials that verified agents can use within an approved scope. | Specification available |
| Cart Context | Use available cart details in validation, authorization decisions and dispute investigation. | Under development |
American Express cautioned when ACE launched that some feature depictions were illustrative and subject to change. The status distinction matters: three specifications are currently available, while registration and cart-context work remains in development.
Why intent controls matter for cardholders
Traditional card credentials generally authorize a payment instrument; they do not inherently describe whether the user approved a particular brand, item, price ceiling or deadline. ACE’s intent record is meant to add that missing layer. A cardholder could, for example, approve one purchase from a preferred merchant up to a stated amount before a stated date, instead of handing an agent an open-ended instruction.
The practical consumer question is whether an AI agent can stay within the limits and conditions the user approved. ACE’s answer is architectural: authenticate the intent first, issue proof of that intent, and use a payment credential scoped to it. That should give American Express a stronger basis for authorization decisions and for investigating a disputed transaction, but it does not eliminate risks such as compromised accounts, incorrect agent behavior or implementation errors.
Agent Purchase Protection is a separate, future promise
American Express has also announced an intention to protect eligible card members from charges related to errors by registered AI agents when the card member authorized the agent and the agent transmitted authenticated purchase intent. The current description is future-oriented and subject to eligibility requirements and terms.
Rank #2
- RFID Blocking Protection: Designed to help protect RFID‑enabled cards from unauthorized scanning and reduce the risk of electronic data theft.
- Organized Multi‑Slot Storage: Includes 20 credit card slots (10 double sided pouches) and two more pages 7 small card cells for memory card like CF cards and TF cards, keeping cards well organized!
- Premium Materials: Holder is made of durable soft microfiber leather, heavy duty PVC and RFID blocking material cloth build inside the leather for reliable daily use.
- Magnetic Closure Design: Magnetic closure keeps cards securely inside the holder while allowing quick and easy access.
- Compact & Portable Size: 4.13"x3.23"x0.76" (10.5cmx8.2cmx1.95cm), suitable for carrying in a wallet, bag, or pocket.
It should therefore not be read as current, automatic coverage for every AI-assisted purchase. The technical controls in ACE and any later purchase-protection remedy are separate parts of the offering.
What merchants need to do now
American Express’s merchant playbook says merchants do not need to change their payment-acceptance systems at this stage. Agentic tokens follow the same format as card numbers, and authorizations are submitted through existing authorization flows.
Recommended Free Tools
- Continue using existing authorization processing unless American Express or a processor provides new instructions.
- Ask the payment processor how agent-originated transactions may be identified.
- Monitor implementation guidance because ACE specifications and partner availability can change as the network develops.
American Express says 62% of merchants expect AI agents shopping for customers to have a moderate or significant impact on their business in the next year. The October 6, 2026 announcement identifies American Express as the source but does not provide survey sample or methodology in the available statement, so the figure should be treated as an expectation measure rather than a forecast of transaction volume.
What is available—and what remains uncertain
- Available now in the status listing: Account Enablement, Intent Intelligence and Payment Credentials specifications.
- Still being developed: Agent Registration and Cart Context specifications.
- Not established by the announcement: universal agent support, universal merchant participation, a guarantee that every attempted unauthorized payment will be blocked, or current blanket purchase protection.
The framework’s effectiveness will depend on verified-agent participation, how merchants and processors pass transaction information, and how American Express applies intent data in real authorization and dispute cases. Its design provides controls and evidence; it is not a promise that all agentic-commerce failures disappear.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Why this matters as shopping becomes agent-mediated
AI agents can search, select and transact faster than a person, but that autonomy creates a control problem: a natural-language instruction may be broad, ambiguous or easy to misinterpret. ACE attempts to turn the user’s approval into machine-readable boundaries that persist through payment. In the technical article published October 13, 2026, authors Inderpreet (Indi) Hundal and Gianna Rotondo wrote: “Intent is critical to ensuring credibility and control throughout the emerging agentic commerce ecosystem.”
For cardholders, the important development is the move from simply sharing credentials with an agent toward granting a defined, authenticated permission. For merchants, the immediate burden is limited because existing authorization flows remain in use. For both groups, the open questions are implementation coverage, identification and remedies as the specifications mature.
Frequently Asked Questions
Does ACE guarantee that an AI agent cannot make an unauthorized purchase?
No. ACE is designed to constrain agents to authenticated, user-defined conditions and improve authorization and dispute information. The available material does not establish perfect prevention or universal availability.
Which ACE specifications are available as of October 13, 2026?
Account Enablement, Intent Intelligence and Payment Credentials are listed as available. Agent Registration and Cart Context remain under development.
Do merchants need to replace their payment systems?
American Express currently says no. Agentic tokens use the same format as card numbers and authorizations go through existing flows, although merchants should ask their processors how agent-originated transactions can be identified.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
