{
 "id": "pap",
 "name": "Personal Agent Protocol (PAP, \"Poppy\"), published by Sierra with Meta",
 "org": "Industry",
 "kind": "specification",
 "tier": "core",
 "status": "Draft 0.1 of the specification is published at personalagentprotocol.org (announced 2026-10-06, draft published 2026-10-09; the pages read on 2026-10-13 are marked \"Updated Oct 12, 2026\"), under the Apache License 2.0 with the names and the logo excluded; a further 35 design partners were named on 2026-10-09. Governance is worded two ways, not reconciled here. Sierra, 2026-10-06: \"an open standard Meta and Sierra are developing along with industry partners at Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart\". Decagon, 2026-10-06: \"join the Personal Agent Protocol working group announced by the team behind Meta's Muse to help shape an industry standard\". No standards body or governing organisation is named in the pages of the site read on 2026-10-13.",
 "status_as_of": "2026-10-13",
 "relevance": "Discovery is one well-known document: \"A Company MUST publish its poppy.json document at https://{domain}/.well-known/poppy.json over HTTPS\". The well-known URL \"MAY redirect\" to where the document is hosted, and \"Personal Agents MUST follow redirects, and every redirect MUST be to an HTTPS URL\"; the UCP specification says the opposite for its profile (see seam S1). poppy.json is not in the Internet Assigned Numbers Authority (IANA) well-known URI registry (not found in the registry XML, 2026-10-13). The agent is identified by a URL: \"A Personal Agent's client_id MUST be an HTTPS URL that returns its metadata document\", which carries a jwks_uri and a token_endpoint_auth_method of private_key_jwt; the Company can register, allow-list, block or revoke client ids. The operations extension, section 8 (\"What a confirmation proves\"), says what a confirmation does not show: \"It doesn't prove that the User saw the terms or approved them.\" The announcement of 2026-10-06 says the protocol \"defines how personal agents interact with businesses\": it \"starts on the website, where a personal agent can discover what the company offers and how to reach it\", the session \"is built on OAuth\", and the customer decides whether the agent has read-only or write access. Context, not part of the protocol: Retail Insight Network reported on 2026-09-23 that Shopify and Meta partnered so that Meta's assistant Muse can complete purchases across Shopify's merchants through Shop Pay.",
 "committed_next": [
  {
   "what": "Design workshops and a reference implementation \"over the next month\" (Sierra blog, 2026-10-09).",
   "when": "approx. 2026-11-09",
   "source": "https://sierra.ai/blog/poppy",
   "archived": "https://web.archive.org/web/20261012180408/https://sierra.ai/blog/poppy",
   "class": "statement"
  }
 ],
 "boundary": "The Path to 1.0 page lists as areas \"the draft doesn't cover yet\": payments (\"How a personal agent makes payments in a way that fits the protocol, including how that works with existing payment protocols.\"), push notifications and attachments (\"such as receipts, return labels, product images, or forms for the user to fill in\").",
 "sources": [
  {
   "url": "https://personalagentprotocol.org/docs/spec",
   "archived": "https://web.archive.org/web/20261011194420/https://personalagentprotocol.org/docs/spec",
   "read": "2026-10-13",
   "class": "normative"
  },
  {
   "url": "https://personalagentprotocol.org/docs/extensions/operations",
   "archived": "https://web.archive.org/web/20261010012107/https://personalagentprotocol.org/docs/extensions/operations",
   "read": "2026-10-13",
   "class": "normative"
  },
  {
   "url": "https://personalagentprotocol.org/docs/open-topics",
   "archived": "https://web.archive.org/web/20261011190257/https://personalagentprotocol.org/docs/open-topics",
   "read": "2026-10-13",
   "class": "statement"
  },
  {
   "url": "https://personalagentprotocol.org/license",
   "archived": "https://web.archive.org/web/20261015054356/https://personalagentprotocol.org/license",
   "read": "2026-10-13",
   "class": "normative"
  },
  {
   "url": "https://sierra.ai/blog/poppy",
   "archived": "https://web.archive.org/web/20261012180408/https://sierra.ai/blog/poppy",
   "read": "2026-10-13",
   "class": "statement"
  },
  {
   "url": "https://sierra.ai/blog/introducing-personal-agent-protocol",
   "archived": "https://web.archive.org/web/20261009224233/https://sierra.ai/blog/introducing-personal-agent-protocol",
   "read": "2026-10-08",
   "class": "statement"
  },
  {
   "url": "https://decagon.ai/blog/introducing-the-personal-agent-consent-trust-protocol-pact",
   "archived": "https://web.archive.org/web/20261006192608/https://decagon.ai/blog/introducing-the-personal-agent-consent-trust-protocol-pact",
   "read": "2026-10-13",
   "class": "third-party"
  },
  {
   "url": "https://www.iana.org/assignments/well-known-uris/well-known-uris.xml",
   "archived": "https://web.archive.org/web/20261014051947/https://www.iana.org/assignments/well-known-uris/well-known-uris.xml",
   "read": "2026-10-13",
   "class": "decision"
  },
  {
   "url": "https://www.implicator.ai/meta-sierra-personal-agent-protocol/",
   "archived": "https://web.archive.org/web/20261007090250/https://www.implicator.ai/meta-sierra-personal-agent-protocol/",
   "read": "2026-10-08",
   "class": "third-party"
  },
  {
   "url": "https://www.retail-insight-network.com/news/shopify-meta-deal-ai-agent-shopping/",
   "archived": "https://web.archive.org/web/20261015054442/https://www.retail-insight-network.com/news/shopify-meta-deal-ai-agent-shopping/",
   "read": "2026-10-08",
   "class": "third-party"
  }
 ],
 "overlaps": [
  "ucp",
  "mcp-core"
 ],
 "seams": [
  "S1",
  "S3",
  "S4"
 ],
 "verified": "2026-10-13",
 "evidence": {
  "read": "On 2026-10-13: the specification, the operations extension, the extensions page, the Path to 1.0 page, the home page and the licence page of personalagentprotocol.org (each marked \"Updated Oct 12, 2026\" where the page carries a date), the Sierra blog of 2026-10-09, the Decagon blog of 2026-10-06 and the IANA well-known URI registry XML. On 2026-10-08: the Sierra announcement of 2026-10-06 in full, one trade article on it and one on the Shopify and Meta agreement.",
  "not_read": "The sections of the specification beyond the discovery, agent identity and confirmation texts quoted, the PACT specification, any Meta publication on the protocol, the TechRepublic article on Meta's Muse (not retrievable on 2026-10-08).",
  "not_found": "Not found, 2026-10-13: poppy.json in the IANA well-known URI registry XML; a standards body, foundation or working group in the pages of the site read (home, specification, extensions, operations, Path to 1.0, licence); UCP, A2A and Web Bot Auth in the same pages."
 },
 "url": "https://frmoretto.github.io/agentic-standards-map/entries/pap.html",
 "source_url": "https://github.com/frmoretto/agentic-standards-map/blob/a1ae242918902e0768e0e6a79bd2bffc4ac5cfa3/entries/pap.yaml",
 "licence": "https://creativecommons.org/licenses/by/4.0/"
}