Payment Gateway

Roles in Agentic Card Payments Explained (Part 4 of 5)

Published:
October 12, 2026
Author:
Sascha Huwyler
TL;DR

EMVCo's draft framework defines roles, not companies, and one firm can hold several. It covers the consumer, agent, wallet, payment credential provider, payment system, Intent Service Provider, merchant and acquirer. Each may use the approved intent differently, from checking a cart to resolving a dispute, while keeping its own risk decisions.

Agentic Payments Series, Part 4: Who Does What in an Agentic Card Payment

RoleWhat it does in the frameworkExamples
Consumer / cardholderDelegates a purchase to an agent and approves the intent, either right before payment or well in advanceAn individual
AgentActs on the consumer’s behalf to discover, check out and pay, and must stay within what the consumer approvedSoftware or AI systems
WalletAsks the consumer to approve the intent and holds credentials; referenced but not itself defined by the frameworkCloud, device or hybrid wallets
Payment credential providerIssues the consumer’s payment credential and may issue the credential that anchors trustIssuers, networks, token service providers, wallet providers
Payment systemProvides shared infrastructure and rules; may hold registered intent recordsCard networks
Intent Service ProviderRegisters, stores and provides access to intent over its lifecycle; does not create intent or authorise paymentsPayment systems, card issuers
Merchant and acquirerRun checkout and payment as today, and may use intent to check the cart matches what was approvedOnline merchants and their acquirers

Source: EMVCo, EMV® Agentic Payments – Framework for Specifications (v1.0 Draft)

How each participant might use the intent

The framework walks through how different parties may rely on the same approved intent at different moments:

  • The agent tracks the instruction and lets the consumer view, change or cancel it.
  • The wallet prompts the consumer to approve, which creates the intent.
  • The merchant can check that the checkout matches what was approved.
  • The payment system, token service provider or issuer can check that a request for payment credentials fits within the approved limits, and set controls for authorisation.
  • The 3-D Secure directory service can confirm the consumer already approved the payment, which may avoid asking the consumer to act again.
  • In a dispute, the consumer, issuer, merchant, acquirer and payment system can refer to the intent.

What changes for merchants

The framework states that the merchant's role does not fundamentally change. Merchants still handle product selection, shipping, tax and payment. What is new is extra context: merchants may choose to tell apart human and agent shoppers, and in autonomous purchases they can see what the consumer approved.

Where each party draws the line

The framework leaves decisions with each participant. It defines what the shared concepts mean, but issuers, networks and merchants each apply their own risk models and rules when acting on them. Liability, dispute procedures and scheme rules are outside its scope.