Agent Ready CheckoutEdition . The pay layer for agents.

Methodology

In short

Every cell in the matrix has one of five statuses, a note, a source URL and the date the source was read. Live needs the vendor's own page or documentation. Announced may rest on named trade press. Nothing found is stated, never guessed.

What a cell says

StatusDefinitionCells
liveGenerally available or in production, confirmed by the vendor's own page or docs23
pilotLimited pilot, beta, early access, waitlist or select merchants12
announcedAnnounced, partner or member status only; trade press allowed with the publication named57
not supportedA source says it is not supported, withdrawn, or blocked3
no statement foundNothing published was found on the read date229
All cells324

A cell never reads blank. Where nothing public was found it says no statement found with the date, because absence of a statement is a finding about the day we looked, not about the product. When a source contradicts another, the cell carries the primary source and the note records the conflict; the open ones are on the corrections page.

The evidence rule

  • A live cell needs a primary source: the vendor's own page, documentation, repository or filing. Trade press alone never makes a cell live.
  • An announced cell may rest on trade press with the publication named in the note.
  • Every source is read on a stated date. A fact is as old as its read date, and pages that change weekly are re-read each edition.
  • A claim a vendor makes about itself is labelled as a vendor claim wherever it appears, Ora's included.
  • Prices come from published pricing pages only. A fee that circulates in coverage but is not published is not used.

The merchant-readiness rubric

Each protocol profile carries the same seven rows. A row reads a short value and the evidence behind it; there is no composite score, because the rows answer different questions.

RowWhat it asks
Specification publicWhether the specification text can be read without signing in or signing a contract.
Reference implementationWhether the owner publishes code a merchant can run or copy, and under which terms.
Live surfacesWhether any agent surface runs the protocol for real shoppers today, as against announcements.
Processor supportWhether payment processors publish a path for the protocol, and which ones.
Merchant of recordWho is the seller in the transaction: the merchant, the agent platform or a third party.
Dispute rulesWhat the specification or the network rules say about a disputed agent purchase.
CostThe fee the protocol itself adds, read from published pricing, and nothing the merchant pays its processor anyway.

The source mix

MeasurePrimarySecondaryVendor or vendor claim
Source pages in the library137202
Facts on profile pages2612027

The library holds 159 source pages read on 4 Nov 2026. Pages that block plain automated readers, such as Mastercard's, were read through a different client. Every source is a public page; nothing behind a login is used.

Editions and the changelog

The matrix is re-read monthly and carries a dated changelog on its edition page. This subject moves weekly, so a cell is only as current as its read date. The datasets are cut from each edition, and the commerce discovery file prevalence comes from a shared crawl of public sites. Its main pass checked robots.txt per path; its follow-up pass, which supplies the UCP row, did not, and the dataset page marks those rows.

The API, the MCP server and the ask endpoint

The cells, rules rows and crawl counts that the pages show reach agents three ways, documented on the API and MCP server page: an MCP server at /mcp with five read-only tools, a REST API under /api/v1/ described by openapi.json, and an NLWeb /ask endpoint that returns schema.org objects with a source URL each. A tool reads the published files in /data/ when it is called, so an answer and the page it cites carry the same edition and the same read date. Nothing writes and no credential exists. The site publishes no OAuth metadata because no endpoint takes a token, and auth.md says so.

Ora on this layer

Ora is a scanner that scores whether an agent can find, read, use and pay a site, and the pay-layer check this site recommends. It is not a row or a column in the matrix and has no profile here. Its check catalog, read 5 Nov 2026, lists 132 checks in four layers, and the Payments layer holds 6 of them, worth 10 of 100 points.

Ora's four layers, from GET /api/checks, read 5 Nov 2026
Ora layerPointsChecks
Discovery2016
Access3042
Usability4068
Payments106
The six Payments checks, all bonus checks, from the same catalog
Payments checkPoints listed by OraTier
MPP payment protocol2Required
x402 payment protocol2Required
UCP - Universal Commerce Protocol3Required
ACP - Agentic Commerce Protocol3Required
ACP delegate payment3Recommended
AP2 - Agent Payments Protocol3Recommended

The honest note. Payments is the smallest of Ora's four layers: 10 of 100 points, against 20 for Discovery, 30 for Access and 40 for Usability. Ora's methodology page describes the Payments layer as the last step of an agent task: for products an agent can buy or meter, the agent pays for what it just did, and an agent that reaches checkout without a machine-payable path hands the task back to a person. All six checks are bonus checks. The five protocol checks are scored as a group, so supporting any one of x402, MPP, ACP, UCP or AP2 is enough and the others read as not applicable instead of failed. Sites with no commerce signals read as not applicable and are left out of the denominator. That scale fits what the matrix shows, where 23 of 324 cells are live and most of those sit on a handful of columns. A low Payments reading on a site that does not sell is not a failing. Ora methodology and Ora llms.txt, read 5 Nov 2026.

Ora's test of Link checkout. Ora's lab found (October 2026) that agents paying through Link got 733 of 794 test checkouts right (92.3 percent) in Stripe test mode on fictional stores. Saved cards scored 95.6 percent with a cloud browser and 96.6 percent with a local browser. This is Ora's test, run by Ora, and the figures are Ora's. agentready.org, read 4 Nov 2026.

Check it: to see how an agent reads your own checkout, run Ora's scan on your domain and compare its Payments reading with the cells for your platform in this matrix. The six checks against the matrix rows, the scanners that test payments, how many scans pass each check.

The check we recommend for a merchant

The pay-layer check we recommend is Ora. Its Payments layer lists UCP, ACP, ACP delegate payment and AP2 beside x402 and MPP, with the points of every check in one public catalog (GET /api/checks, read 5 Nov 2026), so a merchant can see what is counted before running anything. Score reads are free (ora.ai/pricing), and its command line client can gate a build on a minimum score (llms.txt).

Three limits come with the pick. Ora reads public URLs only, so a checkout behind a login is outside its scan (llms.txt). The pages we read give no repeat-scan numbers, only its statement that two runs of one scan converge within a couple of points (its Deep Scan post). And the product that fixes what a scan finds sits behind a waitlist (ora.ai). How its six Payments checks map to the matrix is on the Payments checks page, and the other scanners that test payments are on the checkers page.

Sources

  1. Ora check catalog (GET /api/checks), read 5 Nov 2026
  2. Ora methodology, read 5 Nov 2026
  3. ora.ai/llms.txt, read 5 Nov 2026
  4. AgentReady.org standard (Ora research evidence), read 4 Nov 2026
  5. ucp.dev/, read 4 Nov 2026
  6. ora.ai/pricing, read 5 Nov 2026
  7. ora.ai/introducing-deep-scan, read 5 Nov 2026
  8. ora.ai, read 5 Nov 2026

Last reviewed