Personal Agent Protocol Poppy ships 1.0: every Shopify store now publishes a Poppy file, and Meta's Muse looks for it first
Synopsis
Personal Agent Protocol, or Poppy, has moved from draft to version 1.0, defining how personal agents connect with companies through business agents, websites and APIs while reusing existing standards such as MCP, OpenAPI and UCP, with OAuth letting customers control what an agent may do. Shopify has enabled Poppy for every merchant on its platform, with each store automatically publishing a Poppy file and needing no extra implementation, and Meta's agent Muse now looks for Poppy first on every site it visits. Design partners have grown from the initial group to more than 100, with Mercury, Synchrony and Turkish Airlines already live in specific scenarios.
Interpretation
Personal agents now have a written protocol for dealing with companies: Poppy 1.0 specifies how a personal agent connects to a company that implements it and gets clear access to everything that company offers. The protocol had existed only as a draft announced with initial design partners including Meta, Genesys, Shopify, Stripe and Walmart, without a finalized version. Version 1.0 reflects what design partners learned over five weeks testing the drafts against real websites, APIs and agents, and adjusts staged adoption, use of existing standards and feedback collection accordingly.
The protocol does not invent a separate access path; it organizes existing MCP, OpenAPI and UCP and hands permission control to the user through OAuth authentication. MCP is an interface convention for connecting models to tools, OpenAPI describes HTTP interfaces, and UCP handles the shopping flow; Poppy covers the moment an agent arrives at a site, identifies itself and finds out what it is allowed to do. Shopify co-authored the commerce extension linking the two protocols, letting an agent shop as a guest or sign in with the customer's account and ask the customer before taking certain actions.
Perspective
The report covers the Poppy 1.0 release: the protocol definition, Shopify enabling it for every merchant, Muse looking for Poppy first, live scenarios at Mercury, Synchrony and Turkish Airlines, and a design-partner list of more than 100. It addresses companies implementing the protocol and users of personal agents; the material provides no quantitative performance, adoption or security-audit results.
The material describes Synchrony's work as exploring how a personal agent could weigh affordability and relevant offers during shopping, and says that could create new approaches over time; Turkish Airlines is still working toward letting members complete a purchase inside the conversation. Actual interoperability and security boundaries of the protocol are not given in the material.