Agentic Commerce Is Here: What Merchants Need to Know Now

AI agents are already browsing and buying on behalf of your customers. Vouched Chief Innovation Officer Rosalyn Curato and KYA Principal Founding Engineer Dylan Hobbs lay out what this means for merchants and how to stay ahead with this on-demand webinar.

Key Takeaways

• The agentic commerce stack is live. OpenAI's Operator, Google's Universal Commerce Protocol, Visa TAP, and Mastercard Agent Pay are all in market today.

• Agents are your newest type of customer. 71% of consumers want AI integrated into their shopping experience. Shopify reported AI-attributed orders up 11x in Q3 2025.

• Current models are outdated. Traditional security models don't cover agentic risk. 1 in 6 data breaches now involve AI.
• Know Your Agent (KYA) is the emerging standard. KYA establishes a framework for verifying the identity, permissions, and accountability of software that acts autonomously.

Commerce changed overnight

The question isn't if agentic commerce will affect your business. The question is whether you're set up to protect against bad actors, capture legitimate revenue, and govern who gets access on what terms.

Model Context Protocol-Identity (MCP-I), an extension to the Model Context Protocol spec, provides clear standards for defining identity and delegation. With MCP-I, agents can prove who they represent and whether they have explicit permission to act.surfaced directly inside chat applications.

IBM's 2025 Cost of a Data Breach Report found that 1 in 6 breaches now involve attackers using AI, most often for phishing and deepfake impersonation. Supply chain compromise was the leading cause of AI security incidents.

"Blocked agents are blocked revenue. You want to make sure you're always optimizing for revenue—not just defense." — Rosalyn Carrado, Chief Innovation Officer, Vouched

The Framework: Detect, Enforce and Govern

1. Detect. Robust detection means going beyond header inspection to behavioral signals and identity attestations.
2. Enforce. Once you've identified an agent, apply your access policy. The goal is to act on your terms, not to block everything and leave revenue on the table.
3. Govern. Governance is about making your services work well for trusted agents and ensuring they have access to accurate, up-to-date information to complete transactions efficiently.
   

See it for yourself

This on-demand webinar includes a live demo of Vouched’s Agent Checkpoint tool, covering:

• How merchants can view agentic traffic in real time using a simple JavaScript pixel.

• Build and adjust access policies by the AI provider.
  
• Set delegation parameters, including spend caps and time limits
• Monitor outcomes across their full e-commerce customer journey.
  

Do it all without disrupting the experience for human shoppers.

Speakers

Rosalyn Curato - Chief Innovation Officer, Vouched
Former Wall Street strategist and two-time startup operator. Now leading AI innovation at Vouched, helping organizations build strategies that balance security with revenue growth.

Dylan Hobbs — KYA Principal Founding Engineer, Vouched
Specialist in agent identity and agentic security. Author of the MCPI protocol and the technical architect behind Vouched's agent detection and governance platform.