Key Points
- Sierra released version 1.0 of Poppy, its Personal Agent Protocol, on November 13, 2026.
- More than 100 companies have signed on, including Meta, Shopify, Walmart, Stripe and Turkish Airlines.
- Personal agents can now shop, check balances and search bookings under OAuth-scoped user permission.
The latest:
Personal AI agents can now transact directly with live commercial systems under a published standard, after Sierra shipped version 1.0 of its Personal Agent Protocol, Poppy, on November 13, 2026. Brett Taylor and Clay Bavor said the specification is live at personalagentprotocol.org. Partner numbers have passed 100 companies, up from the eight original design partners announced a month earlier.
Details:
- What it is: Poppy defines how personal agents connect to businesses through business agents, websites and APIs. Sierra said it rests mostly on existing standards — MCP, OpenAPI and UCP — rather than a new stack. Authentication runs on OAuth, so the user controls what their agent may do and can change those permissions.
- The design: Companies can adopt Poppy in stages, starting with basics and adding capabilities later. Extensions let individual sectors build on the core protocol without altering it, and Shopify co-authored the commerce extension. The implementation package ships with a validator tool for checking a configuration.
- Meta: One of the eight original design partners, Meta has Poppy enabled for every user of Muse, its AI agent. According to Sierra, Muse automatically checks for Poppy support first on every site it visits, making the protocol the default path before any fallback behavior.
- Shopify: Poppy is live for every merchant on Shopify, which operates in more than 175 countries, with each store publishing a Poppy file automatically and no extra merchant setup. Poppy handles agent identification and authorization; UCP handles product discovery, carts and checkout.
- The commerce flow: The commerce extension lets an agent shop as a guest or sign into the customer’s account, and it prompts the customer before certain actions. It connects to UCP Ask, keeping a confirmation step between the agent’s recommendation and a completed purchase.
- Mercury: Customers can ask their agent to check balances, review transactions, categorize spending and manage budgets and receipts. Payments and transfers still pass through the account’s existing approvals policy. Mercury is not a bank; its banking services run through partner banks insured by the FDIC.
- Synchrony: The lender is exploring helping customers find products while factoring in affordability, financing options and promotions. Synchrony’s network spans more than 500,000 merchant locations, one of the largest retail footprints attached to the protocol at launch.
- Turkish Airlines: Agents can check fares, flight status, layovers and search existing bookings. Miles&Smiles members can ask an agent to find business-class upgrades, with the customer approving before payment. Sierra listed the carrier among the companies going live alongside Mercury and Synchrony.
- The new partners: Sixty new design partners joined, pushing the total past 100. They include Affirm, Delta Air Lines, Salesforce, Twilio, Wayfair and Zoom, alongside the original eight: Meta, Genesys, Instinct, NiCE, Rocket, Shopify, Stripe and Walmart.
- The build: Version 1.0 reflects five weeks of testing drafts against real websites, APIs and agents. Sierra added phased adoption, refined its use of standards, expanded how companies instruct agents and collect feedback, and introduced extensions. The announcement said Poppy “gives them that foundation.”
Background:
Poppy’s design partners were announced a month before the 1.0 release, with eight named companies. The protocol leans on MCP, OpenAPI and UCP, existing specifications for connecting models and services, rather than proposing a replacement layer for them.
Between the lines:
The permission architecture is where the commercial risk sits. Sierra’s own description puts a human confirmation in front of money moving: Shopify’s extension asks before certain actions, Mercury routes payments through existing approvals, and Turkish Airlines requires customer sign-off before an upgrade is paid for. Read together, the launch distributes read-and-search capability widely while keeping spending authority gated at every partner described.
What’s next
Watch whether the 60 newly signed design partners — including Delta Air Lines, Salesforce and Affirm — move from signed to live, and how many of Shopify’s merchants across 175-plus countries see agent-initiated checkouts.