# PAP vs TAP: Personal Agent Protocol vs Visa’s TAP

> This is the closest cousin on the list. Both TAP and PAP exist because businesses can’t tell a customer’s agent from a scraper. They just attack it from different ends.

Source page: https://pap.md/compare/pap-vs-tap  
Last checked against sources: Oct 8, 2026  
pap.md is independent and not affiliated with Sierra, Meta or any PAP partner.

|  | PAP | TAP |
| --- | --- | --- |
| Question it answers | Who sent this agent, and what may it do? | Is this request really from that agent? |
| Created by | Sierra and Meta | Visa and Cloudflare |
| Mechanism | OAuth session | Signed HTTP requests (Web Bot Auth) |
| Spec status | Not published | Published |
| Payments | Future extension | Carries payment context |
| First public | Oct 6, 2026 | Oct 14, 2025 |

## What each one does

Visa and Cloudflare introduced TAP in October 2025. Agents sign their HTTP requests using Web Bot Auth, an IETF draft built on HTTP Message Signatures (RFC 9421). The merchant checks the signature and knows which agent is calling, plus some consumer and payment context.

PAP’s answer is a session. The customer signs in, or uses credentials already set up with the agent, and grants read-only or write access. The business then knows who sent the agent and how far it may go.

## Why the difference matters

Look at Amazon’s complaint about Muse in September: the agent didn’t identify itself while browsing. A request signature fixes the "who is this bot" half of that. It doesn’t say what the customer allowed. A consent session covers the second half but doesn’t, on its own, sign every page load.

Our read: these probably stack rather than compete. Neither camp has said so publicly.

**Bottom line:** High overlap in purpose, low overlap in mechanism. A business may end up checking both.

## Quick answers

### Is Visa part of PAP?

Visa isn’t named on either PAP partner list.

### Does PAP use Web Bot Auth?

The announcement doesn’t mention it. It names OAuth for the session.

### Which one stops scraping?

Neither blocks anything by itself. Both give a business the information to decide which agents to let through.

PAP's v0.1 spec isn't published yet, so the PAP column reflects the October 6, 2026 announcement only.

## Sources

1. [Introducing Personal Agent Protocol](https://sierra.ai/blog/introducing-personal-agent-protocol) · Sierra (Bret Taylor, Clay Bavor), Oct 6, 2026
2. [Getting Started with Visa's Trusted Agent Protocol](https://developer.visa.com/capabilities/trusted-agent-protocol/docs-getting-started) · Visa Developer
3. [Meta's Personal Agent Protocol Signs Walmart Before It Has a Spec](https://www.beri.net/article/meta-sierra-personal-agent-protocol-oauth-guest-read-write-access-vs-ucp-acp-trusted-agent-protocol-retail-banks) · BERI