Amex Wants AI Agents to Show Proof Before They Pay
American Express introduced an Intent Intelligence Framework on Oct. 13, 2026 to confirm what a customer wants before an AI agent pays for it. The goal is to prevent agents from making unauthorized purchases on a card member's behalf. TechCrunch
American Express hopes the framework becomes an industry standard for AI-powered transactions. Hannah Bozian, the company's VP of Agentic Partnerships and Strategy, is leading that standards effort from the partnerships side.
The process starts with a Create Intent API, a developer tool that records the customer's instructions and limits, such as merchant name, maximum budget, and product preferences. The customer then verifies identity and approves that record. That approval is the control point. Without an approved intent, there is no payment.
Approval creates two items: an Intent ID, a unique reference for that purchase plan, and a Proof of Intent Token, which carries the customer's main limits. That token is exchanged for a secure digital payment credential the AI agent uses at checkout instead of the real credit card number. Amex says the Intent ID and token can also support fraud prevention and dispute resolution.
Payment developers will recognize the design. The agent never sees the PAN, the long number on the card. It receives a credential tied to one approved purchase, and those limits travel with the transaction for later risk checks and chargeback decisions.
That credential fits into a wider system Amex has been building. The company says its agentic commerce system allows only verified AI agents to transact on the American Express network. Card members can set spend controls for those agent transactions. American Express
The protection for these purchases has a formal name: Agent Purchase ProtectionTM. It is intended to protect eligible Card Members and Merchants from charges tied to errors by registered AI agents. Business Wire
The framework follows earlier steps. American Express launched its Agentic Commerce Experiences, or ACE Developer Toolkit, in April to help with verification and control, including planned compatibility with Web Bot Authentication (Web Bot Auth), a method for proving that software acting online is a legitimate bot. American Express Developer The company also released a playbook to help businesses prepare for agentic commerce. American Express
Amex pointed to survey data on timing. In an Amex Trendex report, 66% of surveyed U.S. consumers said they are likely to use AI agents to research the best price for a product or service over the next 12 months, and 61% said they are likely to use AI agents for a product or service recommendation over the next 12 months. American Express said it had not yet seen an increase in disputes because of agentic commerce.
The broader context here is that agent checkout breaks an old assumption in online fraud tools. Those tools assumed the cardholder, or someone pretending to be the cardholder, was at the keyboard. With agents, an approved helper works from loose instructions written in everyday language, and the risk shifts from stolen card details to misunderstood instructions. A $200 limit read as $2,000 is not theft. It is a scoping failure.
In my view, Amex is trying to fix that scoping problem in the payment rules themselves, rather than sorting it out later in disputes. Two open questions will decide whether this kind of standard spreads. First, whether other issuers, processors, and agent platforms adopt the Intent ID and token format even as they compete. Second, whether those spending limits stay accurate as they pass between merchants, agent software, and checkout systems.
Over the longer term, I am optimistic, partly because payments has made shifts like this before. Tokenization, which replaces card numbers with stand-ins, 3-D Secure authentication, which adds an identity check during online payment, and OAuth-style delegated access, which lets one service act for a user within limits, all added friction at first and then became background infrastructure. If intent approval follows that path, customers will treat merchant limits and spending caps as normal settings, much as my own children learned to treat app permissions as routine.
For now, the practical change is narrow but concrete. Developers working with Amex get a defined API for recording intent, a customer approval step, and a tokenized credential for payment, plus a record that can help with fraud and disputes. That is more structure than agentic commerce had a year ago. Whether it becomes the common template depends on adoption outside the Amex network.
