Hardcore Reviews
Hardcore Reviews

AI Agents Are About to Spend Their Own Money: MPP vs x402 vs ACP vs AP2 vs TAP, the Five-Protocol Payment Showdown

A five-way AI agent payment protocol showdown: MPP (Stripe+Tempo: pre-authorized sessions, streaming micropayments, SPT scoped tokens) / x402 (Coinbase: HTTP 402 revived, USDC, chain-agnostic; x402-foundation at 6,518 stars) / ACP (Stripe+OpenAI: card rails, human-in-the-loop) / AP2 (Google: the APA authorization layer, execution-agnostic) / TAP (Visa: Agent Identity Certificates on card rails). Layer first, compare second: execution / authorization / commerce flow / identity-clearing can stack. Two tables, per-protocol sweet spots, a scenario decision table, and three disciplines. Representative comparison, not hands-on; crypto mentions are not investment advice.

Published August 18, 20269 min read
<!-- ai-agent-payment-protocols-comparison-review | review | AI Agents Are About to Spend Their Own Money: MPP vs x402 vs ACP vs AP2 vs TAP, the Five-Protocol Payment Showdown -->

Your AI agent is mid-task and needs a paid API - it has no credit card, can't fill in a billing form, and can't "subscribe then cancel". Your options: a prepaid key (fragile) or stopping to ask a human (which defeats autonomy). This is the last mile of agent autonomy: before agents can earn, they must learn to spend. Over the past year, five protocols rushed into that gap almost simultaneously: Stripe's MPP, Coinbase's x402, Stripe+OpenAI's ACP, Google's AP2, and Visa's TAP. This review puts them on one table.

Scope note: this is a representative comparison based on official docs and public technical analyses (HyperTrends, Techstrong, Crossmint, AWS; as of 2026-08), not a hands-on integration benchmark. All five are evolving fast - official docs rule. Crypto-asset mentions are not investment advice.

1. The Master Table: Five Protocols, Five Philosophies

ProtocolBackerRailOne-line philosophy
MPPStripe + Tempo (launched 2026-03-18)Tempo L1 stablecoin-native + fiat (cards/BNPL via SPT tokens)Pre-authorized sessions + streaming micropayments, built into a settlement-network runtime
x402Coinbase (stewarded by the x402 Foundation)Stablecoins (USDC), chain-agnostic (Base/Polygon/Solana…)Payments should be as native as HTTP status codes: 402 = pay first, then served
ACPStripe + OpenAITraditional card rails (Stripe Checkout)Bring the checkout experience to agent commerce, with humans in the loop
AP2GoogleRail-agnostic (authorization-layer protocol)Authorization first: define what an agent may spend before it spends
TAPVisaThe Visa networkIssue agents identity certificates; extend the card network's trust model to agents

Note they don't all compete at the same layer: x402/MPP are payment-execution protocols (how money moves), AP2 is an authorization protocol (how much is allowed, to whom), ACP is a commerce-flow protocol (discover -> checkout -> fulfill), TAP is identity + clearing. Real systems will stack them - e.g., AP2 sets policy while MPP or x402 executes.

2. One by One: Where Each Wins

x402: the most hacker-friendly, fastest to land. It revives the HTTP 402 status code that has sat unused for nearly 30 years: request -> server answers 402 + a payment spec (amount, wallet, chain) -> the agent's wallet signs a stablecoin payment -> resubmit with payment proof -> 200 + data. Zero accounts, zero API keys, zero subscriptions - true $0.001 micropayments work. The official repo is x402-foundation/x402 (6,518 stars, TypeScript; API snapshot 2026-08-17), and Coinbase launched the Agent.market directory in April 2026. Costs: stablecoin compliance hurdles (risk-averse enterprise teams will balk), L2 settlement in seconds rather than milliseconds, and an early ecosystem. On-chain analytics firm Range has reported over 75 million transactions and about $25 million of volume settled over x402 in a 30-day window (social-media-sourced figure, unaudited - treat as indicative).

MPP: the most "bank-grade", closest to real payments UX. Co-published by Stripe and Tempo (the payments L1 co-built by Stripe and Paradigm). Two designs worth remembering: the sessions primitive - an agent pre-authorizes a spending cap and streams micropayments within the session, without a per-interaction on-chain transaction; and SPTs (Shared Payment Tokens) - you never hand an agent a raw card number; SPTs are programmable, time-limited, context-bound authorizations. For Stripe merchants, agent payments land in the same Dashboard as human ones - tax, fraud, refunds all reused. Stripe is simultaneously backing MPP, ACP, and x402 support - its usual multi-rail playbook.

ACP: the most enterprise-friendly, the least "autonomous". Three roles: buyer agent, seller agent, Stripe Checkout. Flow: discover capabilities -> get a checkout URL -> pay (route to human approval above a threshold) -> webhook confirms -> fulfill. It rides the world's most familiar card rails and supports subscriptions, invoicing, multi-party payments; but the checkout redirect breaks the pure machine-to-machine loop, and card fees make $0.001 micropayments uneconomical. Best for high-value B2B.

AP2: the most governance-friendly, but it doesn't execute. The core is the APA (Agent Payment Authorization) policy document: per-transaction/per-day/per-vendor limits, approved vendor categories, above-threshold approval flows, audit-trail requirements. It answers "what is the agent allowed to do" and deliberately not "how the money moves" - execution needs a separate rail. Suits procurement automation, regulated industries, multi-agent governance.

TAP: the incumbent's play. A business registers its agent with Visa and receives an Agent Identity Certificate - a cryptographic credential identifying the agent, its owner, and its authorized spending parameters. Merchants validate via Visa's network; settlement runs on standard Visa rails. Tens of millions of merchants can accept agent money overnight - provided you accept living entirely inside card-network rules.

3. How to Choose: A Decision Table

Your scenarioPickWhy
Selling APIs per-call, dev-to-dev services, micropayment-heavyx402True pay-per-call, no account friction, one npm wrapper around fetch
Already on Stripe for SaaS/API billingMPPDashboard/tax/fraud reused; sessions skip per-payment settlement
B2B high-value, human approval, subscriptions/invoicingACPCard rails + human-in-the-loop; easiest compliance story
Enterprise multi-agent procurement, heavy auditAP2 (+ any execution rail)The most complete authorization layer; govern first, then spend
Widest merchant reach, accept card-network rulesTAPVisa's validation and clearing reused as-is

Three cross-cutting disciplines: micropayments favor stablecoin rails, large tickets favor fiat rails; governance lives in the authorization layer - don't expect execution protocols to manage risk for you; every protocol here is young - keep a replaceable abstraction so you never weld yourself to one.

4. For the Undecided: What to Actually Do Now

HyperTrends cites a Deloitte survey in which 57% of executives expect agentic payments to mainstream within three years, with market projections of $3-5 trillion by 2030 (institutional projections - consume with salt). For developers, the pragmatic move today isn't betting on a protocol; it's: (1) reshaping your API/service into a meterable, per-call billable form (the common prerequisite of every protocol), and (2) landing a limits-plus-audit layer on your own agents (the AP2 pattern) - the concrete steps are in our AI Agent Payments Integration SOP. When the standards converge, you'll already be at the table.

FAQ

Q1: Are these five protocols competitors? Will only one survive? A1: Mostly they coexist in layers: x402/MPP execute payments, AP2 authorizes, ACP runs the commerce flow, TAP handles identity and clearing. Real systems combine them (AP2 policy + MPP execution). The genuine head-to-head is execution-layer x402 vs MPP - and Stripe itself supports both.

Q2: I want nothing to do with crypto - is there a pure fiat path? A2: Yes. ACP runs on traditional card rails; MPP's fiat path supports cards and BNPL via SPT tokens; TAP runs straight on Visa's network. x402 is the most stablecoin-native of the five - compliance-conservative teams should skip it for now.

Q3: What is an SPT and why does it matter? A3: A Shared Payment Token - a programmable, time-limited, context-bound payment authorization in MPP. It solves the most basic security problem: you cannot hand an AI agent a raw credit-card number. The agent receives a scoped temporary credential, not your actual payment secret.

Q4: Is integrating now too early - am I about to pick a loser? A4: Betting the business on a single protocol is early. Building the prerequisites isn't: a metered, per-call billable API and an agent-side limits/approval/audit layer are needed no matter which protocol wins. Do those two first; adopt the protocol layer after convergence.

Q5: Any specifics for teams operating under Chinese regulation? A5: All five protocols currently center on USD rails and global merchants, and stablecoin/cross-border payment activity is regulated in China. The realistic path for China-based teams is to experiment inside internal sandboxes or overseas business lines, and to build the protocol-agnostic controls (spending limits + audit) first. Background in our Stripe-OpenRouter hotspot piece.


References

  • HyperTrends (2026-04-02): "Agentic Payments: The Complete Protocol Comparison (x402 vs ACP vs AP2 vs TAP)"
  • Techstrong.ai: deep dive on Stripe's MPP (sessions primitive, SPT tokens, Tempo mainnet, architectural contrast with x402)
  • Crossmint Learn: MPP/ACP/AP2/x402 side-by-side; The Defiant: Tempo mainnet live with MPP (2026-03-18)
  • Tempo official blog: "Tempo Mainnet is live"; AWS Industries: x402 and agentic commerce in financial services
  • GitHub: x402-foundation/x402 (6,518 stars, API snapshot 2026-08-17); npm: x402-fetch (Coinbase, Apache-2.0)
  • eco.com / Solana official x402 docs: Agent.market (April 2026), chain-agnostic design
  • Range (on X): ~75M transactions / ~$25M volume over x402 in a 30-day window (social-media-sourced, unaudited)
  • Related: Stripe-OpenRouter Hotspot, AI Agent Payments Integration SOP

A representative comparison (not a hands-on benchmark); protocol details per official docs. Crypto-asset mentions are not investment advice.

This article is AI-assisted and human-edited. Last updated: 2026-08-18

FAQ

Are these five protocols competitors? Will only one survive?
Mostly they coexist in layers: x402/MPP execute payments, AP2 authorizes, ACP runs the commerce flow, TAP handles identity and clearing. Real systems combine them (AP2 policy + MPP execution). The genuine head-to-head is execution-layer x402 vs MPP - and Stripe itself supports both.
I want nothing to do with crypto - is there a pure fiat path?
Yes. ACP runs on traditional card rails; MPP's fiat path supports cards and BNPL via SPT tokens; TAP runs straight on Visa's network. x402 is the most stablecoin-native of the five - compliance-conservative teams should skip it for now.
What is an SPT and why does it matter?
A Shared Payment Token - a programmable, time-limited, context-bound payment authorization in MPP. It solves the most basic security problem: you cannot hand an AI agent a raw credit-card number. The agent receives a scoped temporary credential, not your actual payment secret.
Is integrating now too early - am I about to pick a loser?
Betting the business on a single protocol is early. Building the prerequisites isn't: a metered, per-call billable API and an agent-side limits/approval/audit layer are needed no matter which protocol wins. Do those two first; adopt the protocol layer after convergence.
Any specifics for teams operating under Chinese regulation?
All five protocols currently center on USD rails and global merchants, and stablecoin/cross-border payment activity is regulated in China. The realistic path for China-based teams is to experiment inside internal sandboxes or overseas business lines, and to build the protocol-agnostic controls (spending limits + audit) first. Background in our [Stripe-OpenRouter hotspot piece](/en/stripe-openrouter-acquisition-hotspot).

Related

Hardcore Reviews

KV Cache Gap of 39x: Four Open-Weight Agent Flagships Compared

Four open-weight flagships compared: MiniMax M3.1 Flash (428B/23B active), DeepSeek V4.1 Flash 1017, GLM-5.3, and Kimi K3 - all four appear in MiniMax's official model-card comparison table, so calibers align naturally, with two caveats stated upfront: the whole table was run by MiniMax alone (the card admits it), and each benchmark used a different harness (Terminal-Bench 4.0 on Codex 0.149.1, DeepSWE on mini-SWE-agent at 512K, CyberGym on Claude Code); every M3.1 Flash score is vendor-reported with no third-party replication. The only third-party ruler is the AA Intelligence Index: DeepSeek 1017 at 45, M3.1 Flash 42, M3 at 29 (GLM-5.3's 59 is a different index in a different month, directional only). The real efficiency gap sits in KV cache: DeepSeek 1017 officially uses 890 bytes per token against M3.1 Flash's 34,560 (vLLM engineering figure) - a roughly 39x memory difference for self-hosted long context. There is no official M3-to-M3.1 benchmark table, only three claims (near-3x speed, 200+ tok/s, 70 percent lower agentic cost with no published method), a price cut (0.30/1.20 to 0.15/0.60 dollars), and vLLM engineering data (weights 451.5 to 250.1GB, KV 61,440 to 34,560 bytes per token). Price panorama: M3.1 Flash at 0.15/0.60 dollars with 0.015 cache; DeepSeek matches off-peak but charges 0.003 cache and doubles at peak; GLM-5.3 at 8/28 yuan with 2 cache; K3.1 Pro at 2/10 dollars (media-cited screenshot). The Kimi trap: K3's 12.6 on TB4.0 versus K3.1 Pro's self-reported 65.7 shipped early October 24 differ in version and harness, and K3.1 Pro weights only land before November 4. Contradictions listed without adjudication: Automation-Bench 62.2 versus 62.8, 428B versus 220B HF metadata, checkpoint sizes 250.1/233/220GB.

Oct 24, 20268 min read
Hardcore Reviews

Open Weight, But How Open? Five Model Licenses Compared

Five open-weight models crowded into the same mid-October 2026 window, all saying 'open source' - and the substance spans three tiers. Tier A, genuinely open: Reflection Beam under Apache 2.0 with zero riders and ungated downloads; DeepSeek V4.1 Flash 1017 under MIT with zero riders; NVIDIA Nemotron 3.5 Bolt 74B-A9B under OpenMDW-1.1 and the only one of the five to publish weights, training data, and recipes together. Tier B, open weights with riders: Meta Muse Spark Open carries an attribution duty that extends to distilled products (models trained on its outputs must also display Built with Muse Spark Open), a 20-million-dollar annual-revenue threshold for MaaS resale, and gated HF downloads - legally not open source. Tier C, promise unfulfilled: Mistral Large 4 had no weights as of October 23, a license with no name, and an AA classification of proprietary. On the shared ruler of AA Intelligence Index v4.3.2: GLM-5.3 at 45, Kimi K3 at 44, DeepSeek 39.5 about even with Muse at 39, Mistral 38, and Beam 30 (Beam has no public API; its score comes from self-hosted inference). Self-reported DeepSWE and Terminal-Bench numbers use different harnesses and versions and cannot be compared directly. Hardware accessibility spans two orders of magnitude, from Bolt's single 24GB card to Muse's 700GB+ NVFP4 and Beam's 294GB checkpoint (about 400GB of memory to start). The piece includes an eight-dimension license table, a watering-down spectrum (attribution > revenue threshold > gated download > late weights > unnamed license > closed data), and per-use-case protocol advice; single-model deep dives for Muse and Beam live in their own articles.

Oct 23, 20268 min read
Hardcore Reviews

FLUX 3 Max: Four Official Speed Numbers, Who's Inflating 22x?

fal Research and Black Forest Labs launched FLUX 3 Max on October 19, 2026. It is not a new foundation model but a post-trained, reinforcement-learned and inference-optimized version of BFL's FLUX 3, with fal handling post-training and systems work while BFL supplies the base. The official speed and Elo table (Elo from the preliminary Artificial Analysis AA-Video-I2V v1.1 board; generation time averaged over a 10-second 16:9 video at 720p/768p) reads: FLUX 3 Max at 1,139 Elo and 12.45 seconds, Gemini Omni Flash 1.1 at 1,134 and 47.37 seconds, MiniMax H3 at 768p with 1,141 and 83.26 seconds, FLUX 3 at 1,089 and 126.44 seconds, Wan 3.0 at 1,127 and 180.16 seconds, and Seedance 2.5 at 1,139 and 277.80 seconds, across 4,868 votes - with MiniMax H3 listed first on the board and fal's own first-place claim resting on overlapping confidence intervals. The real story is that fal publishes four different speed numbers: 12.45 seconds on its landing page, 10.95 in the news release, about 11 on the API model page, and 12 on BFL's site; the multipliers come in both 22x and 25x, and the speedup over the original FLUX 3 is quoted as both 10x and 11.5x, while fal's own pricing table lists 0.085 dollars per second next to the model page's 0.0425. More important, the 277.80 seconds for Seedance 2.5 comes purely from fal - ByteDance has never published a generation-time benchmark for that model, and fal does not say which resolution tier produced it, so the same-quality premise is not closed; independent testing found only about 10x. Mechanically FLUX 3 Max exposes a reasoning_level parameter that includes prompt expansion while Seedance 2.5 has no counterpart, fal's timing excludes prompt expansion, decoding and upload, and the two differ on reference-material limits, keyframe mechanics, and editing or continuation endpoints. Pricing: 0.0425 dollars per second promotional and 0.17 list at 720p, 0.0725 and 0.29 at 1080p, with 75 percent off running from October 15 to November 7.

Oct 22, 202610 min read