Amex published a framework, not a live service
On 13 October 2026 American Express published the Intent Intelligence Framework, which describes how a card network could check an AI agent’s purchase against the instructions its customer actually gave before any money moves. Amex says it is “available through the Amex Agentic Commerce Experiences (ACE) Developer Kit,” and that Amex is “actively developing ACE Kit integrations.” That is a published specification in integration, not a service in force. No live deployment was found, and Amex does not claim one.
The mechanics, as Amex describes them: a Create Intent API captures the shopping instruction and its constraints; the customer authenticates and signs off on what was captured; that produces an Intent ID and a Proof of Intent Token, which the agent exchanges for a digital payment credential it presents at checkout instead of the card number. If the agent goes outside the signed intent, Amex says the transaction can be blocked. Its example: a customer asks for white Nike trainers in size 9 and the agent attempts to buy Adidas.
Intent here means the customer’s stated instructions and limits: which merchant, a maximum amount, an expiry date, how many purchases are allowed, and conditions such as buying insurance only if the flight is booked. It is unrelated to marketing’s use of “intent data.” A digital payment credential is Amex’s tokenised checkout credential, distinct from EMVCo’s standards-track EMV Digital Payment Credential (DPC).
The contrast with the enterprise agent we covered earlier matters. There, the guardrail was a budget cap the agent enforced inside a platform. Here the network verifies consumer intent before the payment is authorised, and the control lives in the credential.
The framework follows an April toolkit, and the idea predates it
In April 2026 Amex launched the ACE Developer Kit with five services: Agent Registration, Account Enablement, Intent Intelligence, Payment Credentials and Cart Context. “Intent Intelligence” was already one of those names. Amex’s ACE page says the Account Enablement, Intent Intelligence and Payment Credentials specifications have been available since 14 April 2026, while Agent Registration and Cart Context are “still under development.”
Signed mandates predate the framework. Google’s Agent Payments Protocol, announced in September 2025, uses Intent, Cart and Payment Mandates, and Amex is one of more than 60 organisations Google names as shaping it. EMVCo published a draft agentic payments framework on 1 September 2026 introducing Intent Services, a shared layer for managing consumer-authorised intent across a transaction. Visa’s Trusted Agent Protocol, Mastercard’s Agent Pay and the Stripe-OpenAI Agentic Commerce Protocol work the same ground from different angles. Amex’s differentiator, that its approach “pulls intent earlier into the transaction flow,” is a company claim about positioning.
Demonstrated, proposed, and unconfirmed
Demonstrated: the framework paper, the ACE service definitions, and three specifications available since April. Amex labels its own demo “Illustrative demo for conceptual purposes only,” with features “under development, subject to change.”
Proposed: live use by issuers and agents; Agent Registration and Cart Context; intent management and spend controls in the Amex app; and Amex Agent Purchase Protection, which the ACE page still states in the future tense: “In the future, if a Card Member authorizes a registered AI agent to make a purchase…” The April 2026 release used the same future tense, and added only that “Terms and conditions will apply.” No eligibility terms, exclusions or claims process are published.
Whether the Create Intent API is open to any developer or gated is unsettled. The April release said the kit “will provide select developers with access to integrated services.” The developer portal product page returned no readable content when checked, so its public status remains unconfirmed.
Who holds the intent record, and who carries the risk
The framework assigns roles without fixing custody. An agent may store the intent so a user can view, modify or cancel it; a vault provider may hold it and manage its lifecycle for the issuer; a digital wallet may keep the record for servicing; the issuer or network may retain it to issue credentials, validate later requests and support customer service. Amex says collection, storage and sharing “may vary depending on the agentic commerce integration model.”
The only stated privacy discipline is payload minimisation: “Any personal details irrelevant to the purchase should be removed,” with a flight bought for a relative’s birthday shared as “Flight on July 12th.” No retention period and no liability allocation between agent, vault, wallet, merchant and issuer are published.
Amex is direct that issuers remain responsible for cardholder disputes, and argues authenticated intent helps them assess and mitigate dispute risk. The framework also names the reverse risk: “there is increased risk of fraudulent claims as users may attempt to dispute agentic transactions that they did authorize.” Who decides whether a mismatched purchase was agent error or customer regret?
Vendor claims and the independent counterweight
Amex’s supporting numbers are its own. Trendex, an Amex survey of US consumers, found 66% likely to use agents to research the best price and 61% to take recommendations within 12 months. TechCrunch reports that Amex has not yet seen an increase in disputes from agentic commerce, against an unquantified baseline. Amex’s hope that the framework becomes “an industry standard,” and its statement that it “mitigates some risk before the risk occurs,” are vendor positions with no independent test behind them.
The independent counterweight suggests consumers want to delegate less. PYMNTS Intelligence, working with Visa Acceptance Solutions on the “Global Digital Shopping Index: The Agentic Commerce Deep Dive,” found 56% of consumers would let an agent search and compare products, while 35% would grant it saved payment credentials. For a proposed $300 purchase, 52% would want to select the payment method themselves and 25% would accept an AI recommendation while keeping approval; 96% of surveyed acquirers ranked agent governance as important. The report appeared around July 2026 and was reported on 7 October 2026, and it is a Visa-sponsored collaboration, so treat it as industry-funded research rather than a neutral benchmark. No independent dataset on agentic dispute or chargeback rates was found.
What to check before you hand an agent a credential
- Is the agent registered? Agent Registration is still under development, and the promised list of registered agents is “coming soon.”
- How specific is the intent you sign? Amex separates broad intent, such as “build me a website, but don’t spend more than $100,” from specified intent, and warns that broad intent requires the agent to interpret goods and constraints correctly.
- What the intent bounds: maximum amount, expiry date, maximum number of transactions and credentials, merchant preference and item-level conditions. These fields scope what the credential can do.
- Who holds the intent record, whether you can view, modify or cancel it, and where personal details were minimised. App-based management of spend controls and active intents is coming, not available.
- Whether protection applies today. Agent Purchase Protection is written in the future tense with “Terms and conditions will apply,” and no eligibility terms are published.