Agentic payments for marketplaces: How a smart fridge can shop safely

Summary

GreenMart’s smart-fridge scenario addresses how an agent can turn a detected grocery need into an authorized order without receiving unrestricted access to household card or wallet credentials. GreenMart uses Stripe Agentic Commerce Suite to expose its catalog and checkout through a hosted Agentic Commerce Protocol (ACP) endpoint, while retaining responsibility for inventory, pricing, fulfillment, and order operations. A fridge agent discovers products and creates a checkout, and a companion app evaluates the final checkout against deterministic household rules covering items, totals, delivery, substitutions, and budgets. After approval, Link can provide bounded payment authority, while direct Shared Payment Tokens (SPTs) support lower-level Stripe integrations; virtual cards are described for eligible non-Stripe merchants. The design emphasizes auditable policy decisions, explicit escalation or denial, idempotent retries, webhook reconciliation, and stopping when changes exceed the household’s authority.

Takeaways

1. 1

   Household policy evaluates the final checkout, including merchant, items, quantities, total, currency, fulfillment, delivery details, substitutions, and budget already spent; its result is approved, requires approval, or denied.

2. 2

   Link can abstract Shared Payment Token mechanics for the agent, while direct SPT integrations remain available when the agent, wallet, or marketplace needs explicit token control. The agent receives bounded authority rather than a card number.

3. 3

   If a substitution raises an order beyond policy, the agent must find another option, remove the item, choose a different delivery window, request approval, or cancel; it should not silently accept the change.