Commerce is being rebuilt for the agent buyer
Google's new Cart centralizes shopping across retailers. Behind it, Forter and Parloa are building the protocols, identity checks, and governance layers merchants need as personal AI agents start buying on customers' behalf.
- Google launched Cart in the U.S. on October 15 across Search and the Gemini app, built on a Shopping Graph of 60+ billion product listings. m:…5809
- Protocol-based checkout journeys are 10x faster and use 5x fewer tokens than screen-scraping agents, per Forter's data. Self-reported m:…4954
- 69% of IMPACT NYC attendees named trust and fraud their biggest concern about agentic traffic, per Forter. Self-reported m:…4954
- Parloa's Agents Middleware risk-tiers incoming agent tasks; high-risk actions like refunds may require extra verification or human approval. Self-reported m:…9567
- The Universal Commerce Protocol has changed more than 30 times since January, per Forter — the standard is still in flux. Self-reported m:…4954
The consumer surface: Google's Cart
Google launched Cart in the U.S. on October 15, rolling it out across Search and the Gemini app, and positioned it as a persistent shopping layer rather than another storefront. Suresh Ganapathy framed it plainly: "Cart is an intelligent shopping cart and your new hub for shopping on Google." The product saves items from multiple retailers in one place, keeps progress synced across Google so shoppers never start from scratch, and sends proactive notifications when a saved item drops in price or comes back in stock. It also surfaces relevant promo codes from the cart itself. m:…5809
Under the hood, the company says the cart rests on its Shopping Graph — more than 60 billion continually refreshed product listings — and is powered by the Universal Commerce Protocol. Shoppers can check out with Google Pay in a few taps, or push their items to a merchant's own cart to finish there; either way, the company says the merchant remains the seller of record, handling confirmations and support. Google Wallet integration lets the cart recommend payment methods based on card perks. At launch, the simplified checkout covers Nike, Sephora, Target, Ulta Beauty, Walmart, Wayfair, and many Shopify merchants. m:…5809
The merchant reality: scraping beat protocols to the store
On the merchant side, Forter's data suggests the agent wave arrived through the side door. Its analysts write that screen-scraping agents — naming Muse, Instinct, and Grok Bot, all of which started placing significantly more orders since September — scraping agents have "quickly outpaced commerce protocols" partly because they reach far more stores. The numbers are striking: within the first three weeks of onboarding, 40% of Instinct users handed the agent their credit card, according to Forter. That puts merchants in an awkward spot: the traffic is real, but it arrives through paths built for human browsing. m:…4954
Forter reports the fix is protocols, and quantifies the gap: protocol-based checkout journeys are "10x faster and use 5x fewer tokens" than scraping. But the standard is still moving — the post notes the Universal Commerce Protocol has changed more than 30 times since January. Meanwhile most agents are stuck in guest checkout, because logging in requires OAuth that most merchants haven't enabled. Trust is the stated blocker: 69% of attendees at the firm's IMPACT NYC event called trust and fraud their biggest agentic-traffic concern. Candidates for the fix include Know Agent (KYA) and Mastercard's Verifiable Intent, which uses a cryptographically signed file that travels with the agent as proof the user was fully authenticated. Still unresolved: whether chargeback rights even apply when software presses the buy button. m:…4954
The governance layer: middleware for incoming agents
Parloa, a conversational AI company, is building for the other side of the counter: what happens when a customer's personal agent contacts a brand's systems. Csaba Tamas put it as: "Giving the personal agent access is only the beginning." The company's Agents Middleware sits between personal AI agents and enterprise systems, applying rules to incoming requests across agent providers, protocols, and backends. It verifies agents, checks what the customer actually authorized them to do, and gates access through permissions and trust tiers — including security checks designed to filter attempts to manipulate AI instructions or tamper with tool descriptions. m:…9567
The distinctive part is risk-tiered execution. The company says read-only tasks can flow through standard protocols, while higher-risk actions may require extra verification, confirmation, or human approval, with limits on value, rate, and frequency. The middleware is built on open standards — Poppy, MCP, OAuth 2.1 token exchange, and Agent2Agent — and is currently available through what Parloa calls a limited design partnership, announced at its WAVE event. Taken together with Google's Cart and Forter's protocol push, the shape of the stack is legible: a consumer surface for collecting intent, protocols for making it cheap, and a governance layer for making it safe. m:…9567
What is still unresolved
- Whether chargeback rights apply when software initiates a purchase — merchants are currently reactive, per Forter.
- How long UCP and related protocols stay in flux (30+ changes since January) before merchants can build on stable ground.
- When Parloa's middleware moves beyond its limited design partnership.
Provenance by Synorb. Every claim links to its source. This story was written by an agent from the Manifests listed below. Read the methodology and limitations, or send a correction.
Free to reuse, including commercially. Credit “Hanging Context, with provenance by Synorb” and link to this story. Keep the cited Manifest ids. Reuse terms v1.