Visa
What Visa Intelligent Commerce Actually Checks
Visa Intelligent Commerce is Visa’s platform for agentic commerce. The short version, from how Visa and its developers have described it: an agent receives a tokenized credential instead of a card number, the cardholder sets spending limits and conditions, and Visa sees commerce signals it can use for controls and disputes. Everything else people project onto the name — taste, brand fit, moral judgment — is not in the platform.
The token is the credential
A Find & Buy Agent that “has the card” in any literal sense is already designed wrong. The primary account number is a bearer secret. Paste it into a prompt, a log, or a merchant the agent scraped, and the bearer secret has left the only place that knew how to rotate it.
Intelligent Commerce’s move is to provision a token for the agent. In June 2026 Visa described enhancements that put more of the story on the token itself: the type of transaction, where the token is being used, and who is making the payment. It also described a token assurance signal built from how that token was provisioned and how it has behaved since. Those are network observations. They do not require the merchant to trust the agent’s autobiography.
For a Find & Buy product, the practical rule is blunt. The find engine may see offers, links, and photos. The buy engine may request a token when, and only when, a mandate exists. The token’s job is to be worthless outside that mandate. A stolen token that can only clear one merchant, under a ceiling, before a clock runs out, is a different loss from a stolen card number.
The mandate is the instruction the network can read
Visa’s documented example is domestic and specific: find and purchase these supplies, and keep the total under $100. Starting that instruction is what lets Visa Acceptance Platform test whether the agent is still acting for the customer. The fields described with a mandate are not poetry. They are an identifier, a description, an effective-until time, and a decline threshold as an amount and a currency.
| Field | What it constrains | What it does not know |
|---|---|---|
| Description | The instruction in words a person can audit | Whether the words were wise |
| Decline threshold | The most that may clear | Whether a cheaper offer existed |
| Effective until | When the permission dies | Whether the delivery will be on time |
| Identifier | Which instruction this charge claims to serve | Whether a second, quieter instruction contradicted it |
This is why “healthy catering under $1,200” is a dangerous mandate if those are the only words compiled. The network can decline $1,201. It cannot decline shellfish unless shellfish was a constraint in the description the principal signed, and the merchant’s offer can be compared to that constraint. Intelligent Commerce checks congruence with the instruction it was given. It does not repair a vague instruction.
Signals are for controls and disputes, not for taste
Sharing commerce signals with Visa is how a later dispute has something other than a chat log. The useful record is dull: which mandate identifier was presented, which token, which amount, which merchant, which time. If the cleared amount sits under the decline threshold and inside the clock, the network has done the job it claimed. If the person is unhappy because the shirt is the wrong color, that is a return policy, not an authorization failure.
Find & Buy Agents should store the same dull record on their side, in words. The person who tapped approve should be able to see the description, the ceiling, and the expiry without learning what a token is. The network’s copy and the person’s copy ought to match. When they do, “the agent went rogue” becomes a testable sentence instead of a mood.
What is left to the agent platform
- Choosing the shortlist. Visa does not shop.
- Refusing to ask for a token until the person has approved a specific offer, if that is the product promise. Ask-first is a product rule on top of the network rule.
- Keeping fleet or household budgets that are tighter than the card limit. A network ceiling of $100 does not know that this week’s groceries were already $80.
- Deciding that this purchase is a card purchase at all. A metered API may belong on x402. Intelligent Commerce is the card-rail answer, not the only answer.
The platform earns trust by being narrower than the model’s imagination. Visa checks the token, the clock, and the ceiling. The Find & Buy Agent checks that a human still wants the thing. Both checks have to pass.
Published by FindBuyAgent.com. Canonical URL findbuyagent.com/blog/visa-intelligent-commerce.