The card networks just picked the referee for agent checkout, and it looks like EMVCo

Rain, Visa, Mastercard, Fiserv, Circle and Remitly are founding members of a new group called the Agentic Payments Alliance, which starts with roughly two dozen companies and is recruiting more over the coming months ^[1][2]. Its stated job is to standardize the competing protocols and internal systems now being built for agentic commerce, starting with how agents get authorized ^[3] - and the comparison the members themselves reach for is EMV ^[4].

That word choice is the story. EMVCo pulled American Express, Discover, JCB, Mastercard, UnionPay and Visa into one body that has driven card security standards for years, according to Celent director Zil Bareisis ^[5]. The mechanism was never a debate club: it produced a specification, and everyone who wanted to accept a card implemented it. Notably, only two of those six EMVCo members appear on the APA founding list; American Express, Discover, JCB and UnionPay do not ^[6][7].

The early work is narrow and revealing: shared research and tests for AI agent identification and authorization, plus collective advocacy on the regulatory questions agentic commerce raises ^[8]. Governance is described as a working coalition run collectively by founding members rather than owned by one company, with members setting the charter together ^[9]. Rain CEO Farooq Malik said in a release that "no single company should get to decide how agents transact on someone's behalf" ^[10]. Mastercard's Sherri Haymond framed the risk as alignment rather than speed: "The risk in a moment like this is not that the industry moves too slowly - it's that innovation outpaces alignment" ^[11].

Read that alongside what the networks say when they are not being collegial. Visa CEO Ryan McInerney told an earnings call that "agentic commerce is a when, not an if" and that Visa is building "the products, the services, the protocols" ^[12]. PYMNTS reported earlier this month that Visa, Mastercard, American Express and Capital One are all developing the rails for agentic commerce ^[13]. Bareisis expects the forerunners' separate standards to converge, because divergent approaches lack interoperability, raise industry costs and undermine trust ^[14]. Convergence in payments has historically meant convergence onto whatever the networks certify.

The gap the APA is aiming at is real. Darwinium's bank research found 48% of respondents allow AI transactions by default and rely on after-the-fact monitoring, while 31% block them unless explicitly allowed ^[15][16] - leaving about a fifth doing neither cleanly ^[17]. Rain's own head of payments, Sophia Goldberg, told American Banker that agentic commerce is very early and everyone is asking when volume arrives ^[18]. The number being used to justify the urgency is McKinsey's projection of $3 trillion to $5 trillion in global agentic commerce by 2030 ^[19].

Two details worth holding onto. The convener is not a network: Rain's business is letting companies issue payment cards funded by users' stablecoin deposits ^[20], and it brings an Agent Control Layer and Scoped Cards, which it describes as limited, widely accepted agent credentials ^[21], plus an accelerator it will open to members ^[22]. And the founding roster is unusually crypto-heavy for a card-standards effort - by my count 10 of the 26 named founders are digital-asset infrastructure firms, including Solana, Avalanche, Monad and Uniswap Labs ^[23][7].

If you are building agent checkout, the practical read is that identity and authorization semantics are being drafted in a room you are probably not in, and the output will arrive as something to certify against.