Yes, an AI agent can pay for travel today, but only in narrow, supervised cases, and almost all of them run through Visa in Europe. The rules that apply are the card networks’ rules: Visa and Mastercard decide how an agent transaction is identified, authorized, and disputed, while OpenAI’s ACP and Google’s AP2 define how agents and merchants talk to each other. For most travelers in July 2026, the practical reality is that an agent can find the trip and fill the cart, and a human taps approve on the payment.
Last verified 21 July 2026.
Four systems dominate this conversation, and they are less competitive than the headlines suggest. ACP and AP2 are communication protocols between agents and merchants. Visa’s Trusted Agent Protocol (TAP) and Mastercard Agent Pay are network programs that verify and settle the payment itself. A single booking could touch several of them at once.
The four rails in one table
| Rail | Who runs it | Status, July 2026 | Travel relevance |
|---|---|---|---|
| ACP (Agentic Commerce Protocol) | OpenAI and Stripe, open spec | Spec published Sept 29, 2025. In-chat checkout wound down in March 2026 | None for booking. Travel checkout was never supported; travel moved to discovery plus apps |
| AP2 (Agent Payments Protocol) | Google, now the FIDO Alliance | v0.2 April 2026. Live in retail through Google Universal Cart (May 2026) | Not live. Hotels named as the next vertical |
| Visa TAP plus Payment Passkeys | Visa | In production in Europe since July 2, 2026 with 30+ issuers | Live. lastminute.com and eDreams ODIGEO take agent-initiated bookings |
| Mastercard Agent Pay (Agentic Tokens) | Mastercard | Live transactions in Hong Kong and Latin America (March 2026). US enablement began Sept 2025 | Indirect. The first Hong Kong transaction was an airport transfer; no flagship travel merchant yet |
What actually happened with ChatGPT checkout and travel
ACP is an open standard co-developed by OpenAI and Stripe, released September 29, 2025 alongside ChatGPT Instant Checkout. A merchant implements a product feed and a checkout API, then takes payment through a Stripe Shared Payment Token or a delegated payment spec. OpenAI charged a reported 4 percent fee on completed purchases, and listing required OpenAI approval. There was no self-serve onboarding, and travel was never a supported category.
Then the retreat. In early March 2026, OpenAI pulled back from in-chat checkout after weak conversion, and pivoted travel to discovery plus ChatGPT Apps (Skift, March 19, 2026). Expedia and Booking.com now run as apps inside ChatGPT and close the sale on their own systems. Reporting on the walkback indicated only a small group of merchants ever transacted through native checkout. One caution: “ACP is dead” is overstated. The spec is still published and openly licensed, and other platforms reference it. What ended is OpenAI pushing its own in-chat travel checkout.
Google’s rail: mandates first, hotels next
Google announced AP2 on September 16, 2025 with more than 60 partners. Its core idea is the most durable in the field: three cryptographically signed Mandates (intent, cart, payment), built as W3C Verifiable Credentials, that prove what the human actually authorized. Version 0.2 shipped in April 2026, and Google donated the protocol to the FIDO Alliance so no single company owns it.
AP2 reached real products at I/O 2026. Google Universal Cart (announced May 19, 2026) runs on the Universal Commerce Protocol plus AP2, live in the US with Canada and Australia announced, and works with retail merchants such as Nike, Sephora, Target, and Walmart through Merchant Center. Hotel booking was named as a next vertical in the same announcements. As of July 21, 2026 no travel purchase is live on this rail. Watch it, do not wait on it.
The rail that went live for travel
On July 2, 2026, Visa announced production agentic transactions across Europe. More than 30 issuing banks are participating, including Barclays, HSBC UK, BBVA, ING, Commerzbank, Klarna, and Revolut. Cardholder approval is handled with Visa Payment Passkeys, which also satisfy Europe’s strong customer authentication rules. TAP itself, introduced in October 2025 with partners including Cloudflare, Adyen, Shopify, Stripe, and Microsoft, is what lets a merchant tell a verified, accountable agent apart from an anonymous scraper.
Travel is in it from day one. lastminute.com is a live participating merchant. The next day, July 3, 2026, eDreams ODIGEO announced that its brands (eDreams, Opodo, GO Voyages, Travellink) support live agent-initiated bookings using TAP, Visa’s Agentic Directory (introduced June 10, 2026), and Payment Passkeys, within user-defined limits. This is currently the only public rail where a consumer’s agent can complete a travel purchase end to end.
Mastercard’s quiet advantage
Mastercard announced Agent Pay in April 2025, and Citi and US Bank cardholders got first access in September 2025, with enablement extending across US Mastercard cardholders since. It works through Agentic Tokens, an extension of the tokenization system that already powers Apple Pay and Google Pay. The token binds a payment credential to a registered agent with limits on merchant, amount, and session.
The fact that matters for merchants: no migration is required. The token rides existing rails, so an agent payment arrives looking like a normal tokenized card transaction with agent identifiers attached. Live transactions have completed in Latin America and the Caribbean (March 2026) and in Hong Kong (March 2026), where the first one was, fittingly, an agent booking an airport transfer. No flagship travel merchant has been named yet.
Who eats the fraud
This is the least discussed and most important part. Agent transactions today are classified as card-not-present, and there is no liability shift for them. If an agent books the wrong dates, or a fraudster’s agent uses a stolen credential, the chargeback lands on the merchant. Not on the network, not on the agent platform.
The timing is uncomfortable. Visa cut its excessive-dispute threshold from 2.2 percent to 1.5 percent on April 1, 2026 under the VAMP program, and an Outpayce study from Amadeus found travel disputes already growing at roughly 30 percent year over year, with 71 percent of travel companies reporting rising chargebacks. So travel merchants are being asked to welcome agent traffic while their dispute headroom shrinks.
TAP, Payment Passkeys, and Agentic Tokens genuinely help. They give merchants cryptographic evidence of which agent transacted and what the human authorized, which separates verified agents from hostile bots and strengthens dispute defenses. But a clean liability shift, the equivalent of what 3-D Secure gives merchants on authenticated human transactions, has not been standardized for agent payments. Whether passkey-authenticated agent transactions will earn one is unverified as of July 21, 2026; neither network has published such a rule. Treat any claim that “verified agent means protected merchant” as premature.
If you are a traveler
Can you let an agent pay for your trip? In Europe, yes, if your bank is among the participating issuers and the merchant participates, and you set the limits. Everywhere else, the honest answer is that you approve the final payment yourself, and that is fine. It is also what almost everyone wants: Accenture’s 2026 research found only 7 percent of travelers would let an agent decide and pay fully autonomously, while 29 percent would let it pick the booking if a human approves payment. Skift put it bluntly in March 2026: brands are building for a consumer that does not yet exist.
The safety design is better than most people assume. In every serious system, the agent never holds your card number. It carries a scoped credential (a network token or a single-use virtual card) locked to one merchant and one amount. Your practical rules: use flows where you approve the final charge, cap what the agent can spend, and check the all-in price before you approve, because drip pricing misleads agents just as it misleads people.
If you are a merchant or agent builder
- Do not build for ACP travel checkout. Publish clean product and fare data for discovery, and meet ChatGPT users through apps that convert on your own site.
- Watch the Google side. When hotels go live on Universal Cart and AP2, distribution will move fast, and AP2 Mandates are likely to become the shared proof-of-intent layer everywhere.
- If you sell into Europe, TAP is no longer theoretical. Evaluate joining; verifying agents beats blocking them, since verified traffic is also your dispute evidence.
- Budget for the liability gap. Agent orders are card-not-present under a tighter VAMP regime, so track dispute rates on agent traffic separately from day one.
- On the issuing side, Stripe’s Shared Payment Token is scoped to one merchant and cart total, and Cross River and Stripe announced single-use virtual cards for AI agents in early July 2026. Scoped credentials are becoming table stakes.
- Keep sizing honest. Juniper Research forecasts about $8 billion in agentic commerce spend in 2026, reaching $1.5 trillion by 2030 (April 2026). Real, early, compounding.
One editorial note, since price transparency is Levelfare’s whole reason to exist: whether a human or an agent clicks pay, the price shown should be the price charged, because the fare is the fare. Agents will simply make that standard harder to fake. The rails are arriving in the right order, verification first, autonomy second, and travel, for once, is at the front of the line.