American Express has introduced a framework to prevent AI agents from making unauthorized purchases. Read the subtext: the mainstream financial system is now building the rules for the case it did not previously have to consider — an agent, acting on your behalf, spending your money.
If a tier-1 card network is defining what 'unauthorized' means for an agent, that is a signal that agentic commerce is expected to be large enough to deserve its own control layer. The rules Amex writes are likely to become the de-facto reference for what every agent framework has to honor.
The long-term effect is that 'agent can pay' becomes a product category with standard controls, not a risky experiment. Once the guardrails are standardized, the barrier to an agent legitimately transacting drops dramatically — and the scale that follows is the part you will still feel in months.