| DAILY NEWS FOR YOU AI / OPEN STANDARDS |
| |
| Meta and Sierra Publish Draft Standard for How AI Agents Work With Businesses |
| The Personal Agent Protocol, now published as the Poppy draft, gives personal AI agents a common way to authenticate, request permission and interact with companies through websites, APIs and business agents. |
| Meta and Sierra are moving their proposed personal-agent standard from an announcement into a working technical draft. |
| Sierra published Draft 0.1 of the Personal Agent Protocol on October 9 under the name Poppy, three days after the protocol was first announced with a smaller group of technology and commerce partners. |
| The goal is to give a user's AI agent a consistent way to identify itself to a company, obtain permission and perform approved tasks without pretending to be a human navigating a website. |
| HOW POPPY WORKS The user grants the personal agent access, while the business determines which actions are actually available. Sessions are built on OAuth and can begin with guest access before moving to authenticated read-only or write permissions when an account-level task requires them. | |
| A personal agent can first discover what a company offers through its website. Simple requests, such as checking availability or reading a return policy, may not require the customer to sign in at all. |
| When a task requires account access, the user can authorize the agent and decide whether it receives read-only or write permissions. The company retains control over the actions exposed through that connection. |
| Poppy is designed to work through several routes. An agent can navigate the company's normal website, connect through APIs built on standards such as OpenAPI or MCP, or communicate with the company's own AI agent when a task requires conversation. |
| The draft is built on technologies companies already use, including OAuth, JSON Web Tokens, HTTPS, OpenAPI and MCP. That approach is intended to reduce the need for every business to create a separate custom integration for every personal AI assistant. |
| THE PARTNER LIST EXPANDED Thirty-five additional companies have joined the protocol's design process, extending it well beyond Meta and Sierra. New participants include OpenAI, Visa, Mastercard, Bank of America, Wells Fargo, PayPal, Cloudflare, Okta, Target, United Airlines, Zendesk and 1Password. | |
| Their participation does not mean every company has implemented Poppy in a production product. Sierra describes them as design partners contributing technical and industry feedback while the specification is still being developed. |
| The draft also addresses actions with real business consequences. An optional operations extension allows a company to ask the personal agent for confirmation before completing actions such as changing a booking, exchanging an item or cancelling a subscription. |
| Each confirmed action can carry a single operation record across APIs, MCP tools, conversations and web pages, helping prevent the same instruction from being executed twice after a timeout or retry. |
| The protocol remains a draft rather than a settled industry standard. Its significance will depend on how many agent developers and businesses ultimately implement compatible versions once the design stabilizes. |
| THE SIGNAL The important development is not that one more AI agent has launched. It is that major technology, finance and commerce companies are beginning to define a shared authentication and permission layer for agents acting on behalf of users. | |
| 03 | CORE NOTES What has actually been published | |
| 01 Meta and Sierra announced the Personal Agent Protocol on October 6, and Sierra published its first draft, Poppy, on October 9. |
| 02 The protocol uses OAuth-based permissions and lets agents work through websites, OpenAPI or MCP interfaces, or a company's own agent. |
| 03 Thirty-five additional design partners have joined, but participation in the design process does not yet mean production adoption. |
| |
| SOURCES Sierra — Introducing Personal Agent Protocol
Sierra — Sharing the Poppy Draft
Personal Agent Protocol — Draft 0.1 Operations Extension
Tech Startups — Meta and Sierra Personal Agent Protocol |
