Inside AMEX’s agentic commerce stack: How intent contracts and single-use tokens enforce AI transactions

Imagine you hire a personal assistant and hand them your credit card. You’d want some ground rules, right? “You can only spend up to $200, only at grocery stores, only this week.” American Express is essentially building that rulebook, but for AI assistants. Their system lets an AI agent shop and pay on your behalf, but with guardrails baked in. Before any money moves, there’s a kind of agreement — call it a permission slip — that spells out exactly what the AI is allowed to buy, how much it can spend, and when. Then instead of handing over your real card number, it gets a one-time-use token, like a disposable gift card that expires the moment it’s used.

The clever part is those single-use tokens. Think of it like a hotel key card versus handing someone your house key. The hotel key only works for your room, only during your stay. If someone intercepts it, the damage is limited. Same idea here — even if something goes wrong in a transaction, your actual account details stay protected. Amex is also plugging into a broader project with Google called Agent Pay Protocol, which is trying to make these AI shopping systems work across different companies and platforms, not just inside the Amex world. The honest caveat is that parts of this system are still a bit of a black box, meaning it can be hard to trace exactly why an AI made a specific purchase decision. That’s a real thing to watch.

So how does this actually help you or your small business? First, if you run any kind of recurring purchasing — office supplies, ad spend, software subscriptions — you could eventually set up an AI agent with a strict spending mandate and let it handle vendor comparison and checkout automatically, saving hours each month. Second, as a consumer, watch for credit cards and fintech apps that start offering “AI spending rules” features. Getting in early means you learn the controls before everyone else does, which protects you better. Third, small business owners who sell online should start paying attention to whether their checkout process is “agent-friendly” — meaning clean product data, clear pricing, no pop-up hoops. AI agents will increasingly be the ones doing the buying, and friction means lost sales.

The rules you set for your AI shopper matter just as much as picking the AI itself.