Skip to content
Search
paperAugust 2026Unreviewed

Beyond the Mandate: A Systematic Security Analysis of the Agent Payments Protocol (AP2)

Avital Aviv, Parth A. Gandh, Ron Bitton, Asaf Shabtai

View resourcePDF

Abstract

The Agent Payments Protocol (AP2), introduced by Google, enables large language model (LLM)-driven shopping agents to authorize and execute payments on behalf of users. Its signed Checkout and Payment Mandates protect the integrity of transaction data after signing. Agent interactions and external inputs that shape a transaction before authorization remain outside that protection, including Agent-to-Agent Protocol (A2A) messages and Model Context Protocol (MCP) tool calls. Prior work identified

Categories

Access Control

Cite

@misc{aviv2026beyond,
  title = {{Beyond the Mandate: A Systematic Security Analysis of the Agent Payments Protocol (AP2)}},
  author = {Avital Aviv and Parth A. Gandh and Ron Bitton and Asaf Shabtai},
  year = {2026},
  month = aug,
  eprint = {2608.23858},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2608.23858}
}