meta
Personal Agent Protocol is an OAuth session, but its v0.1 specification is not published
PAP uses one OAuth session across web, API, and company-agent routes, but its v0.1 specification and payment extensions are not published.
How Meta Muse and Stripe Link handle autonomous purchases
Muse gets a user-approved Link spend request, then uses a one-time card or Link Pay Token while the agent never sees the user's real card details.