{
 "id": "visa-tap",
 "name": "Visa Trusted Agent Protocol (TAP)",
 "org": "Industry",
 "kind": "specification",
 "tier": "core",
 "status": "Specification and sample code published by Visa under Visa Product Terms of October 10, 2025; the product page, read in a browser on 2026-10-14, still says \"This product is in the process of development and deployment.\"",
 "status_as_of": "2026-10-14",
 "relevance": "The merchant specification says \"this protocol is applicable to the scenario when the Agent is initially unknown to the Merchant.\" It defines three signatures: an agent recognition signature based on HTTP Message Signatures (RFC 9421) and aligned with web-bot-auth, a signed consumer or device identity and a signed payment container. The product page is headed \"Enhancing Visa Intelligent Commerce to improve merchant visibility.\", so the protocol is presented as the merchant-facing recognition part of a wider Visa programme (read in a browser on 2026-10-14); this version has no entry for Visa Intelligent Commerce. A merchant or its site protection provider verifies them; the sample repository calls the protocol \"a standardized, cryptographic method for an AI agent to prove its identity and associated authorization directly to merchants.\"\n",
 "boundary": "\"Merchants are not required to use this proposal and do not necessarily have to be registered with the Payment Schemes\".",
 "committed_next": [],
 "sources": [
  {
   "url": "https://developer.visa.com/capabilities/trusted-agent-protocol",
   "read": "2026-10-14",
   "class": "statement"
  },
  {
   "url": "https://developer.visa.com/capabilities/trusted-agent-protocol/trusted-agent-protocol-specifications",
   "archived": "https://web.archive.org/web/20261010184340/https://developer.visa.com/capabilities/trusted-agent-protocol/trusted-agent-protocol-specifications",
   "read": "2026-10-14",
   "class": "normative"
  },
  {
   "url": "https://developer.visa.com/capabilities/trusted-agent-protocol/product-terms",
   "read": "2026-10-14",
   "class": "normative"
  },
  {
   "url": "https://github.com/visa/trusted-agent-protocol",
   "read": "2026-10-03",
   "class": "normative"
  },
  {
   "url": "https://github.com/visa/trusted-agent-protocol/blob/main/README.md",
   "read": "2026-10-03",
   "class": "normative"
  }
 ],
 "overlaps": [
  "ietf-webbotauth",
  "mastercard-agent-pay",
  "verifiable-intent",
  "aaif-wg-agentic-commerce"
 ],
 "seams": [
  "S3"
 ],
 "verified": "2026-10-14",
 "evidence": {
  "read": "developer.visa.com (product page, merchant specifications, product terms), read in a browser on 2026-10-14 from saved copies; docs index and sample code repository (log, tree, README), 2026-10-03; terms grant a \"nontransferable, revocable, limited license\".",
  "not_read": "Code, Client Implementation Guide (not public), other Visa documents.",
  "not_found": "Standards-body submission: not found in Visa pages, repository 2026-10-03."
 },
 "matrix": {
  "governance": "Published by Visa under Visa Product Terms of October 10, 2025; the licence is \"conditioned upon You implementing the most current version of the Specification in its entirety\" (Product Terms, read in a browser on 2026-10-14)",
  "version_state": "Product page: \"This product is in the process of development and deployment.\" (read in a browser on 2026-10-14); version number or date on the specifications page: none visible in the saved text (2026-10-14); release: not found, 2026-10-03",
  "signs": "Three signatures: agent recognition (header, HTTP Message Signatures), signed consumer/device identity, signed payment container",
  "signer": "The agent, with a private key; the merchant or site protection provider verifies with the public key from a key store",
  "record": "no record format found in the merchant specification page (read in a browser on 2026-10-14): audit has no match, and receipt appears once, for data a merchant can use \"when providing receipt or order updates\" to the consumer; sample README: not found, 2026-10-03",
  "dispute": "not found in the merchant specification page (dispute, chargeback, liability: no match, read in a browser on 2026-10-14) and sample README, 2026-10-03",
  "source": "https://developer.visa.com/capabilities/trusted-agent-protocol/trusted-agent-protocol-specifications"
 },
 "url": "https://frmoretto.github.io/agentic-standards-map/entries/visa-tap.html",
 "source_url": "https://github.com/frmoretto/agentic-standards-map/blob/a1ae242918902e0768e0e6a79bd2bffc4ac5cfa3/entries/visa-tap.yaml",
 "licence": "https://creativecommons.org/licenses/by/4.0/"
}