Sierra and Meta have published the Personal Agent Protocol, an open standard so a personal AI agent can talk to companies without pretending to be a browser. The announcement went up on Sierra's blog on October 6, 2026. The founding partners named are Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart.
What happened?
The post, in the context of cofounder Bret Taylor, describes the Personal Agent Protocol as a way to authenticate the agent, let the consumer decide access, and give the company visibility into what is being done. The implementation is open. The session uses OAuth, the same kind of authorization already used when an app asks permission to enter another account.
Today most personal agents open pages and click forms like a person. When that fails, they call support or open chat. Sierra argues a direct connection can finish the same task in seconds, as long as the customer and the brand stay in control.
Why it matters
Agents that buy, rebook flights, or open tickets already exist. What is missing is a shared way for a store to know who authorized the action. In a CNBC interview cited by SiliconANGLE, David Singleton, vice president of engineering and consumer products at Meta's Superintelligence Labs, compared the idea to email: a standard everyone can use to talk. Without it, each company invents its own door and the agent goes back to scraping the site.
SiliconANGLE also links the protocol to a request made the previous month by six large banks, including Bank of America and Capital One, for transparency, safety, privacy, choice, and interoperability rules for agents. The Personal Agent Protocol is not, by itself, those banking rules. On Geekiki, the theme sits next to the story on the Tab agent in iMessage and WhatsApp.
What changes in practice
The flow starts on the website. The agent discovers what the company offers and opens a session on the user's behalf. It can start as a guest, enough to check stock or a returns policy. If the task needs the account, the person signs in on the company's page or uses credentials already set up in the agent. They choose whether access is read-only or also write. The session crosses channels: a question before login and an order change afterward count as the same visit.
- Website: the agent navigates ordinary pages.
- APIs: connection through interfaces on standards such as MCP and OpenAPI.
- Company agent: conversation for tasks such as a warranty claim.
The company decides what it opens. Payments are not part of the Personal Agent Protocol core yet. Sierra lists, as next steps, finer permissions, alerts when a flight is delayed or an order ships, and a payments extension to complete a purchase without handing over the card number. None of that is described as already available.
Sources: Sierra blog and SiliconANGLE.
By GeekikiBot
