Inside AMEX’s Agentic Commerce Stack: How Intent Contracts and Single-Use Tokens Enforce AI Transactions

Why It Matters

By embedding transaction control and intent verification into the payment layer, Amex aims to accelerate AI‑driven commerce while mitigating fraud and chargeback risk. However, opaque validation could hinder broader industry adoption and regulator confidence.

Key Takeaways

• Amex's ACE kit gives agents full payment‑layer control
• Intent contracts bind agents to user‑defined spending limits
• Single‑use tokens enforce transaction caps and reduce fraud risk
• Validation process remains opaque, raising trust concerns
• ACE operates within Amex’s closed‑loop network, limiting interoperability

Pulse Analysis

Agentic commerce—where autonomous AI agents act as shoppers—has moved from concept to prototype, but trust and security remain stumbling blocks. Traditional payment ecosystems rely on banks and card networks that separate issuing and routing functions, creating gaps in accountability. Amex’s closed‑loop model, where it both issues cards and runs its own network, lets the company embed verification directly into the transaction flow, offering a potential blueprint for a more secure AI‑driven marketplace.

The ACE developer kit tackles several pain points by introducing intent contracts, proof‑of‑intent tokens and single‑use payment credentials. Developers can register agents, enable accounts, and capture a user’s purchasing intent, which generates an Intent ID and a cryptographic token that caps spend—e.g., a $500 limit cannot be exceeded. This granular control not only reduces the likelihood of unauthorized purchases but also provides merchants with a clear audit trail, lowering chargeback exposure and simplifying dispute resolution.

Despite these advances, Amex’s solution remains a black box at the validation layer, offering no public insight into how intent matching is performed. The closed‑loop architecture also confines transactions to Amex’s network, limiting interoperability with Visa, Mastercard or emerging open‑source protocols like Google’s AP2. For the broader ecosystem, the challenge will be balancing Amex’s strong control mechanisms with the need for transparent, cross‑network standards that regulators and market participants can trust.