Last checked against sources:

How the Personal Agent Protocol works

A Poppy visit starts on the company's website. The agent can stay a guest or the customer signs in through OAuth and picks read-only or write. Then the company decides how the agent finishes the job: its website, its APIs or its own agent.

Draft 0.1 · October 9, 2026. The specification is public under Apache 2.0 and may change before a stable release. Read it →

One visit

Three parties share the visit: the customer, their personal agent, and the company. The session is built on OAuth.

One Personal Agent Protocol visit Four steps based on draft 0.1, published October 9, 2026. 1 Discover: the agent fetches /.well-known/poppy.json to find sign-in methods and routes. 2 Guest: no sign-in needed to check stock or ask about returns. 3 Sign in with OAuth, only if the task needs the account, on the company page or with credentials already set up with the agent. 4 The customer chooses read-only or write access. All four are one OAuth session that carries across channels. One Poppy visit Discovery, sign-in and one session across company interfaces. 1 Discover AGENT Starts on the company’s website and finds what’s offered and how to connect. 2 Guest AGENT No sign-in needed to check stock or ask about a returns policy. 3 Sign in CUSTOMER Only if the task needs the account. OAuth, on the company’s page or with credentials already set up with the agent. 4 Pick access CUSTOMER The customer decides how far the agent can go: Read-only Write One OAuth session, across channels A question asked before sign-in and an order change made after it count as the same visit. Source: Poppy draft 0.1, Oct 9, 2026. Diagram: poppy.md (independent).
One visit, four steps, one OAuth session. PNG

1. Discover

The agent fetches /.well-known/poppy.json. The document lists the company's sign-in methods and whichever web, API, and company-agent routes it offers.

2. Start a session

The agent begins a session for the user. It can start as a guest. That can be enough to check product availability or ask about a returns policy.

When the task needs the customer's account, the customer signs in on the company's page or uses credentials already set up with the personal agent.

3. Choose access

The customer stays in control and decides whether the agent has:

  • Read-only access
  • Write access

The draft defines broad poppy:read and poppy:write scopes. Companies choose which operations each scope permits and may define narrower scopes of their own.

4. Keep one visit

The OAuth session carries across channels. A question asked before sign-in and an order change made afterward are part of the same visit.

Three routes

After the session exists, the agent uses whichever route the company believes will offer the best customer experience. The company decides what it makes available.

The company picks the route A personal agent with read-only or write access reaches the company. The company decides what agents may do and offers one of three routes named in the announcement: its regular website, its APIs on MCP or OpenAPI, or its own agent for tasks that need a conversation, like a warranty claim. The company picks the route Three routes named in the announcement. The company offers the one it thinks serves the customer best. Personal agent Acts for the customer, with the access they granted. Read-only or write Company Sets what agents may do and which routes exist. Website The company’s regular web pages. APIs The two standards the announcement names: MCP OpenAPI The company’s own agent For tasks that need a conversation, like a warranty claim. Not in the first version: payments, push notifications and finer permissions are listed as possible later steps. Source: Poppy draft 0.1, Oct 9, 2026. Diagram: poppy.md (independent).
Website, APIs or the company’s own agent. The company decides which it offers. PNG

Website

The agent navigates the company's regular web pages.

APIs

The agent connects through interfaces built on standards such as MCP andOpenAPI. Those are the two standards the announcement names.

Company agent

The agent works through the company's own agent when the task needs conversation. The announcement's example is a warranty claim.

What each party gets

PartyDecidesGets
CustomerWhat access the agent receivesA faster way to finish the task
CompanyParameters and which routes existVisibility into an agent acting for a customer
Agent builderHow the agent uses the offered routesOne consistent way to connect

Planned, not in the first cut

Sierra and Meta described these as possible next steps, alongside the v0.1 spec, design workshops, and a reference implementation:

  • More detailed permissions — customers and companies set limits on specific actions
  • Push notifications — a company tells the agent when a flight is delayed or an order ships
  • Payment extensions — the agent completes a purchase without sharing credit card information

Next

Glossary →

Terms used on this site, kept to what the announcement actually says.

Partners →

Who's named, by whom, and what they said.

Sources

  1. Sharing a draft of Personal Agent Protocol · Sierra (Bret Taylor, Clay Bavor), Oct 9, 2026 · primary source
  2. Personal Agent Protocol overview (Draft 0.1) · Personal Agent Protocol, Oct 9, 2026 · primary source
  3. Personal Agent Protocol specification (Draft 0.1) · Personal Agent Protocol, Oct 9, 2026 · primary source

poppy.md is independent and not affiliated with Sierra, Meta or any Poppy partner. Facts here come from the sources listed on each page.