Source
Cheeky Pint — Stripe’s 2025 annual letter (February 24, 2026) ·
at 22:00 ▸
When this applies
when building any system where an automated intermediary needs to transact on a principal's behalf without holding or exposing the principal's sensitive credentials
The takeaway
When delegating transactional authority to an automated agent, use revocable, scoped tokens instead of sharing the underlying raw credential, to contain risk.
Why it works
A tokenized credential that can be passed to any processor (not just the issuing platform) lets an agent initiate a payment without ever holding or transmitting the raw credential, limiting the blast radius of compromise.
One level up
Design access/authority delegation around minimal, revocable scope rather than handing over root credentials.
Where it stops holding
This stops working when the receiving party cannot support token-based settlement and requires raw credential data, forcing a less secure fallback.
Detail
situation: AI agents need to make payments on behalf of users across many businesses and platforms, which otherwise would require either storing/exposing credit card credentials or building bespoke integrations per platform.
decision: Stripe introduced shared payment tokens, a portable credential businesses can forward to their own vaults or processors.
outcome: Agentic Commerce Suite and tokens are being adopted by major retail brands (Anthropologie, Urban Outfitters, Etsy, Coach, Kate Spade) and integrated into ChatGPT shopping and Microsoft Copilot.
lesson: Tokenized, scoped credentials are the right primitive for enabling automated agents to transact safely at scale.
In their words
We introduced shared payment tokens, a new payment primitive that lets agents initiate payments without exposing credentials.