LupaRiel · PAP

English · rail hub · identity / session · 1 entry · snapshot 2026-10-15 · reviewed 2026-10-15

PAP

Open identity and session standard for personal agents. It does not settle: it complements x402, AP2, ACP, and MPP before money moves.

What it is. Personal Agent Protocol (“Poppy”): customers decide what access to give their personal agents, and companies set parameters for what those agents can do. The draft defines discovery (/.well-known/poppy.json), a session on the customer's behalf (it can start as a guest), OAuth sign-in on the company's own page, and one session across the company's website, APIs (OpenAPI, MCP), and agent. Built on OAuth, JWTs, HTTPS, OpenAPI, and MCP. Source: research/pap.md (announced 2026-10-06; draft 0.1 published 2026-10-09; not part of the payment snapshot).

Who maintains it. Open standard developed by Sierra and Meta; Sierra's 2026-10-06 announcement puts it as: “an open standard Meta and Sierra are developing”. Announced 2026-10-06 with Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart (the 2026-10-09 post also lists NiCE); draft 0.1 published 2026-10-09 with 35 new design partners. Apache 2.0 license.

What it is not. Not a settle rail. Payment rails stay four: x402 · AP2 · ACP · MPP. PAP does not replace checkout or pay-per-request.

Note. Draft 0.1: it can change before a stable version, including in ways that aren't backward compatible. No reference implementation yet (Sierra says next month), and the spec's examples are fictional. Payments are out of draft 0.1 (listed under open topics); there are no live payments via PAP.

PAP does not settle. Payment rails stay x402 · AP2 · ACP · MPP. Compare rails: x402 vs AP2 vs ACP vs MPP · PAP. Full directory (Spanish): /pap/.

Official docs

• Spec · Personal Agent Protocol, Draft 0.1 (2026-10-09)
• Sierra · Sharing a draft of Personal Agent Protocol (2026-10-09)
• Sierra · Introducing Personal Agent Protocol (2026-10-06)

Methodology

• How LupaRiel verifies entries
• On rail hubs, the status is the one on that rail. On the home page and the Index, the most advanced among its rails.
• Machine-readable catalog · /rieles.json
• Spanish hub + full listing · /pap/

Protocol updates

• 2026-10-15. The spec's official repo is now public: personal-agent-protocol/personal-agent-protocol on GitHub (Apache-2.0, created 2026-10-14). It is the source of the site and docs, not an implementation. Feedback now goes through GitHub issues, and day one already brought several security ones (unspecified client assertion aud, Mediated Sign-In, DPoP for MCP, Security Considerations). The Path to 1.0 page replaces open topics: payments, push notifications, and attachments remain outside the draft. Still no reference implementation from Sierra. GitHub · personal-agent-protocol (official spec, Apache-2.0) · personalagentprotocol.org · Path to 1.0
• 2026-10-14. Datalayer's SDK reached v0.24.0 (four releases since v0.20.0, the latest on 2026-10-14 10:49 UTC, in Python and npm). Sign-in now names the company and what it says it needs, a company can declare its other domains, replies from a company's staff are flagged, and an MCP server's rate limits come with their Retry-After. Per its README, conversation SSE streaming, handoff and close, and the Operations client/server are still not implemented (conversations use long polling). It is not Sierra's reference implementation, and payments remain outside the draft. GitHub · personal-agent-protocol v0.24.0 (2026-10-14) · PyPI · personal-agent-protocol 0.24.0
• 2026-10-13. Datalayer's SDK reached v0.20.0 (nine releases since v0.11.0, between 2026-10-12 and 2026-10-13 10:32 UTC). It adds displays to confirm an operation and show its outcome (PapConfirm and PapOutcome), a client that resolves and pins each company's address, sessions ending when a scope narrows or a password is reset, and per-agent rate limits. Per its README, conversation SSE streaming, device or mediated sign-in, Account Token exchange, and the Operations client/server are still missing. It is not Sierra's reference implementation, and payments remain outside the draft. GitHub · personal-agent-protocol v0.20.0 (2026-10-13) · PyPI · personal-agent-protocol 0.20.0
• 2026-10-12. Datalayer's SDK moved to v0.11.0 (v0.10.0 and v0.11.0 shipped on 2026-10-12, 06:04 and 09:55 UTC). It now targets draft 0.1 (2026-10-09 revision) and ships Operations v1 extension models, plus conversations with long polling and cursor recovery. Per its README, conversation SSE streaming, device or mediated sign-in, Account Token exchange, and the Operations client/server are still missing. It is still not Sierra's reference implementation, and payments remain outside the draft. GitHub · personal-agent-protocol v0.11.0 (2026-10-12) · PyPI · personal-agent-protocol 0.11.0
• 2026-10-11. First community SDK: Datalayer published personal-agent-protocol in Python and TypeScript (repo from 2026-10-10, v0.5.0 on 2026-10-11), targeting draft 0.1. It covers discovery (/.well-known/poppy.json), signed-out sessions with DPoP, Direct Sign-In, and basic conversations; it doesn't yet have conversation streaming, device sign-in, or the operations flow. It is not Sierra's reference implementation, still announced for next month. GitHub · datalayer/personal-agent-protocol · PyPI · personal-agent-protocol (v0.5.0, 2026-10-11)
• 2026-10-09. Payments are out of draft 0.1: the open topics page lists payments (“including how that works with existing payment protocols”), push notifications, and attachments as not covered yet. PAP is an identity and access layer, not a payment one. The design partners include owners of the other rails: OpenAI (ACP), Stripe (ACP and MPP, since the announcement), Mastercard (co-donated Verifiable Intent alongside AP2 to FIDO), Visa, Adyen, Cloudflare (Monetization Gateway with x402), PayPal, and Plaid. The draft's first extension is operations v1: the personal agent confirms an action before the company performs it, approval covers the exact terms, the action has one record across channels, and a retry never performs it twice. personalagentprotocol.org · Path to 1.0 · Open topics (Draft 0.1) · personalagentprotocol.org · Extensions (Draft 0.1) · Sierra · Sharing a draft of Personal Agent Protocol (2026-10-09)
• 2026-10-09. Sierra published draft 0.1 of Personal Agent Protocol (“Poppy”) and announced 35 additional design partners that will participate in the design process: Adyen, Atomic, Bank of America, BBVA, Chime, Cigna, Cloudflare, Comcast, DIRECTV, ElevenLabs, FOX, Gap Inc., GEICO, Hertz, Insurify, Klaviyo, Liberty Mutual, Mastercard, Nordstrom, Notion, Okta, OneSignal, OpenAI, PayPal, Plaid, SiriusXM, Synchrony, Target, United Airlines, Venmo, Visa, Wells Fargo, Zapier, Zendesk, and 1Password. They take part in the design; this is not production adoption. Next month, per Sierra: design workshops and a reference implementation. Sierra · Sharing a draft of Personal Agent Protocol (2026-10-09) · personalagentprotocol.org · Spec, Draft 0.1 (updated 2026-10-09)
• 2026-10-06. Sierra's announcement: “an open standard Meta and Sierra are developing along with industry partners at Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart”. The 2026-10-09 post also lists NiCE among the companies in the announcement. Sierra · Introducing Personal Agent Protocol (2026-10-06) · Sierra · Sharing a draft of Personal Agent Protocol (2026-10-09)

Protocol updates with a cited source. They are not catalog rows and do not change the snapshot.

Sample entries

• Personal Agent Protocol · announced · 2026-10-15

Identity-rail entries are not payment-settle rows. LupaRiel does not invent rows, prices, networks, or statuses. The complete listing stays on the Spanish hub.