Forge & Helm
Your next customer might not type, tap, or call. It might send an AI agent to do it. On October 6, Sierra and Meta announced the Personal Agent Protocol, a proposed open standard for how AI agents sign in to a business and act on a customer's behalf. Walmart, Shopify, and Stripe are among the partners. This is The Signal: one story a week, picked for what it changes for a Tampa Bay business.
No spec has shipped yet. Nothing changes on your website tomorrow. But the direction is clear, and the businesses that get ready early will be the easy ones for agents to work with.
What's happening
Here's the short version, based on Sierra's announcement and reporting from The Next Web.
Who's in. Sierra is developing the protocol with Meta. Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart are named partners. Sierra says anyone can implement it.
How it works. A customer's agent lands on your site and finds out what you offer. For simple questions, like whether an item is in stock or what your return policy says, it can stay a guest. For account tasks, the customer signs in and picks read-only or write access. You, the business, set the limits on what any agent can do. It runs on OAuth, the same "Sign in with..." plumbing most people already use every day.
Your choice of front door. A business can let agents use its normal web pages, connect through its APIs, or hand the conversation to its own AI agent. Sierra also says an agent that can't finish a task on your pages may call your support line or open your web chat.
What's not in it yet. Payments. The first version handles sign-in and permissions. A future extension would let an agent complete a purchase without sharing card details. Push alerts, like "your order shipped," are also on the later list.
When. A v0.1 specification is planned for later in October, followed by design workshops and a reference implementation for developers.
This isn't the only proposal. Visa has its Trusted Agent Protocol. Google has its Universal Commerce Protocol. OpenAI and Stripe released the Agentic Commerce Protocol in September 2025. Some companies, including Stripe and Shopify, are partners on more than one. OpenAI and Anthropic aren't on the Sierra and Meta list, according to Implicator's reporting.
Meta launched its personal agent, Muse, on September 8. Meta executive David Singleton said it had "millions" of U.S. users. That's Meta's own figure, not an independent count. On September 20, Amazon blocked Muse from its store, saying the agent didn't identify itself while browsing.
Source: Implicator, "Meta and Sierra Draft a Sign-In Standard for AI Agents," October 7, 2026
That Amazon fight is the real story behind the standard. Agents are already showing up at businesses. Right now there are no shared rules for how they introduce themselves or what they're allowed to touch. This protocol is one attempt to write those rules.
Why AI agents matter for a Tampa Bay business
Most owners I talk to think of AI as something they use. This flips it. AI agents are becoming something your customers use on you.
Picture a homeowner in Brandon whose AC dies on a Saturday in October. They don't search and scroll. They tell their agent, "Find an HVAC company that can come today, under $150 for the diagnostic, and book it." The agent checks three or four websites. It reads hours, service area, and pricing. It tries to book. The company whose information is clear and whose booking works gets the job. The one with hours inside a photo and a "call for pricing" page gets skipped. Nobody ever sees the miss.
Agents don't browse. They check. If your answers aren't there in plain text, you're not in the running.
A boutique in St. Petersburg faces the same thing on returns. A dental office faces it on appointment changes. The question isn't whether you like agents. It's whether you'll decide how they deal with your business, or let them figure it out on their own.
My years in financial systems taught me one rule about access: nobody gets the vault key. You give scoped permissions, you log what happens, and you can revoke it. That's the right instinct here. Guest access for questions. Read-only for order status. Write access only for actions you're comfortable letting software take, like booking an open slot. Never anything you can't undo.
The good news for small businesses is that you don't need to build anything custom yet. The spec isn't final, and your platforms will likely do the heavy lifting. If you sell on Shopify or take payments through Stripe, your vendor is already in the room. Your job right now is to be readable, reachable, and clear about your rules.
That's the work we do at Forge & Helm: make Tampa Bay businesses easy for customers to reach, whether that customer is a person or their agent. See how we approach AI software development in Tampa Bay.
3 Moves This Week
- Run the agent test. Open an AI assistant that can browse the web and ask it to find your business, list your hours, quote your price range, explain your return or cancellation policy, and book the next open slot. Write down every place it stalls or guesses wrong. That list is your to-do list. Fix the top three this week.
- Put your answers in plain text. Hours, service area, starting prices or ranges, policies, and how to book should live as real text on your site, not inside images, PDFs, or "call us" buttons. If an agent can't read it, it can't recommend you. While you're at it, make sure your phone line catches every call. Sierra says agents may fall back to calling, and a missed call is a missed job either way. A missed-call text-back, the first automation in our 5 AI automations for Florida service businesses, is the simplest fix.
- Write your agent rules on one page. Decide what an outside agent may do without a human: answer questions, check order status, book, reschedule, cancel, refund. Mark each one yes, no, or "with a confirmation text." Then email your booking, store, or payments vendor one question: "What's your plan for customer AI agents, and when?" Their answer tells you whether you wait or build.
We'll watch for the v0.1 spec later this month and report back on what it actually asks businesses to do. If your platform vendor answers that email with something useful, send it our way. We'll share what we learn.
The front door is changing. Make sure yours opens.
Book a strategy call
Want help running the agent test on your own site, or deciding which tasks an agent should be allowed to handle? Text us. We'll set up a 30-minute call and show you where you stand.
Book a consult with Forge & Helm