Personal Agent Protocol (Poppy) 1.0: What It Means for Online Stores
Poppy, the Personal Agent Protocol, has reached version 1.0 and is now on for every Shopify store and for Meta’s Muse agent. Here is what it is and how store owners and marketers should prepare.
Image: TeQBlogs
The Personal Agent Protocol, known as Poppy, has reached version 1.0. It is an open standard that sets out how a person’s AI agent identifies itself to a business, what it is allowed to do, and when it must ask its owner first. Sierra announced the release on 13 November 2026 and says Poppy is now switched on for every Shopify merchant and for everyone who uses Muse, Meta’s AI agent. For website owners and marketers, it is an early sign that AI agents are becoming a new kind of visitor to plan for.
Quick summary
- What it is: an open protocol for how personal AI agents connect with companies.
- Version 1.0: released on 13 November 2026; the draft was announced in October with eight design partners.
- Who backs it: Sierra and Meta lead it, with more than 100 design partners including Shopify, Stripe, Walmart, Salesforce, Wix, Intuit and Zoom.
- Shopify: every Shopify store now publishes a Poppy file automatically; merchants do not need to do anything.
- Meta: Muse looks for Poppy first on every site it visits.
- Any business can adopt it using the public specification and implementation kit.
What is the Personal Agent Protocol (Poppy)?
People are starting to ask AI agents to do things for them on other companies’ websites: check an order, change a booking, compare a price or make a payment. Today the agent usually has to click through pages built for humans, and the business has no reliable way to know whose agent it is or what it is permitted to do.
Poppy is meant to fix that. Sierra says it is largely built with existing standards such as MCP, OpenAPI and UCP, and that sign-in uses OAuth. The customer decides what their agent can and cannot do with each company and can change that access later.
Also read: Google November 2026 Core Update Is Rolling Out: What Site Owners Should Do
What is new in Poppy 1.0?
- Staged adoption: a company can start with the basics and add capabilities later.
- More guidance and feedback: companies can give agents instructions and collect feedback from them.
- Extensions: industry-specific features can be added without changing the core protocol.
- A commerce extension, co-written with Shopify, that links Poppy with UCP.
The split of work is simple. UCP handles the shopping itself, such as finding products, filling a cart and checking out. Poppy handles who the agent is and what it has permission to do. With the commerce extension, an agent can shop as a guest or sign in to the customer’s account, and it must ask the customer before certain actions.
Who is using Poppy?
| Company | How it uses Poppy |
|---|---|
| Shopify | Enabled for every merchant; each store automatically publishes a Poppy file |
| Meta (Muse) | On for all Muse users; Muse checks for Poppy first on each site |
| Mercury | Agents can view balances and transactions and start payments, which pass through the account’s approval policy |
| Turkish Airlines | Agents can look up fares, flight status and bookings and find upgrades, which the customer approves before paying |
| Synchrony | Exploring financing and rewards in agent-led shopping |
Sierra lists more than 100 design partners in total. The original group named in October was Meta, Genesys, Instinct, NiCE, Rocket, Shopify, Stripe and Walmart.
What Poppy means for online stores and marketers
For years, the job was to make a site easy for people and search engines. Agents add a third audience. Here is what to do, depending on your setup:
- If you run a Shopify store, Poppy is already on. Check that your product titles, prices, stock, shipping and return policies are accurate, because an agent will read them literally.
- If you use another platform or a custom site, read the specification and the company implementation kit on the protocol’s website. The kit includes a validator to test your setup.
- Decide what agents may do. Start small, for example order status and product questions, and add actions such as returns or payments later.
- Keep a human approval step for money. The live examples all route payments and upgrades through customer approval.
- Do not block good agents by accident. Review firewall and bot rules so that legitimate, identified agents are not treated as scrapers.
- Keep the basics strong. Clean structured data, fast pages and clear policies help search engines, AI answers and agents alike.
This sits alongside other changes we have covered, including how to claim your business in ChatGPT, the one-line robots.txt rule for AI training opt-out, and ChatGPT Wallet, which lets agents pay. For the fundamentals, see our digital marketing best practices checklist.
What should Indian businesses do?
Sierra’s announcement does not mention India-specific partners, and the live examples are in banking, airlines and retail abroad. But Shopify is widely used by Indian direct-to-consumer brands, so many Indian stores are now reachable by agents through Poppy without having chosen it. Treat this as a prompt to audit your catalogue data and policies, not as a reason to rebuild your site.
If you want help preparing a store or website for AI agents and AI search, Suprams’ SEO team can review it with you.
Frequently asked questions
What does Poppy stand for?
Poppy is the short name for the Personal Agent Protocol, an open standard for how personal AI agents interact with businesses.
Do Shopify merchants need to set up Poppy?
No. Sierra says Poppy is enabled for every merchant on Shopify and that every store now automatically publishes a Poppy file.
Is Poppy the same as MCP or UCP?
No. Poppy builds on existing standards such as MCP, OpenAPI and UCP. UCP covers the shopping steps, while Poppy covers the agent’s identity and permissions.
Can an AI agent spend my money through Poppy?
Only within what you allow. Customers control what their agent can do, and the commerce extension requires the agent to ask before certain actions.
The bottom line
Poppy 1.0 gives AI agents a standard, permission-based way to deal with businesses, and with Shopify and Meta switching it on by default it will reach real stores quickly. You do not need to rush, but you should make sure the information an agent would read about your business is accurate, and decide which actions you are comfortable letting agents take.
Sources
- Sierra: Releasing Personal Agent Protocol 1.0 (13 November 2026)
- Sierra blog: Introducing Personal Agent Protocol (6 October 2026)
About The Author
