{
  "schema_version": "1",
  "generated_at": "2026-10-20T00:00:00Z",
  "tag": "ap2",
  "count": 4,
  "entries": [
    {
      "id": "arxiv-beyond-the-mandate-ap2-security",
      "title": "Beyond the Mandate: A Systematic Security Analysis of the Agent Payments Protocol (AP2)",
      "publisher": "arXiv",
      "authors": [
        "Avital Aviv",
        "Parth A. Gandh",
        "Ron Bitton",
        "Asaf Shabtai"
      ],
      "date_published": "2026-08-24",
      "url": "https://arxiv.org/abs/2608.23858",
      "type": "research-paper",
      "category": "payments",
      "summary": "Security analysis of Google's AP2. It finds that signed Checkout and Payment Mandates protect transaction data after signing, while agent interactions before authorization (A2A messages, MCP inputs) stay outside that protection.",
      "tags": [
        "ap2",
        "security",
        "research"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260923112346/https://arxiv.org/abs/2608.23858"
    },
    {
      "id": "arxiv-sok-security-llm-agents-agentic-commerce",
      "title": "SoK: Security of Autonomous LLM Agents in Agentic Commerce",
      "publisher": "arXiv",
      "authors": [
        "Qian'ang Mao",
        "Jiaxin Wang",
        "Ya Liu",
        "Li Zhu",
        "Cong Ma",
        "Jiaqi Yan"
      ],
      "date_published": "2026-04-15",
      "url": "https://arxiv.org/abs/2604.15367",
      "type": "research-paper",
      "category": "payments",
      "summary": "Systematization of knowledge on the security of autonomous LLM agents that negotiate, purchase and transact across on-chain and off-chain environments. It covers protocols such as ERC-8004 and AP2.",
      "tags": [
        "security",
        "ap2",
        "research",
        "identity"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20261006050702/https://arxiv.org/abs/2604.15367"
    },
    {
      "id": "arxiv-zero-trust-runtime-verification-ap2",
      "title": "Zero-Trust Runtime Verification for Agentic Payment Protocols: Mitigating Replay and Context-Binding Failures in AP2",
      "publisher": "arXiv",
      "authors": [
        "Qianlong Lan",
        "Anuj Kaul",
        "Shaun Jones",
        "Stephanie Westrum"
      ],
      "date_published": "2026-02-06",
      "url": "https://arxiv.org/abs/2602.06345",
      "type": "research-paper",
      "category": "payments",
      "summary": "eBay-authored paper on runtime behaviors (retries, concurrency, orchestration) that can cause replay and context-binding failures in mandate-based protocols such as AP2 and UCP. It proposes zero-trust runtime verification to mitigate them.",
      "tags": [
        "ap2",
        "security",
        "research"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260827173930/https://arxiv.org/abs/2602.06345"
    },
    {
      "id": "google-ap2-github",
      "title": "google-agentic-commerce/AP2",
      "publisher": "GitHub (Google Agentic Commerce)",
      "authors": [],
      "date_published": null,
      "url": "https://github.com/google-agentic-commerce/AP2",
      "type": "repo",
      "category": "payments",
      "summary": "Official repository of the Agent Payments Protocol (AP2), described as \"Building a Secure and Interoperable Future for AI-Driven Payments.\"",
      "tags": [
        "ap2",
        "identity",
        "security"
      ],
      "verified_at": "2026-10-20",
      "last_checked": "2026-10-20",
      "http_status": 200,
      "archive_url": "http://web.archive.org/web/20260913134535/https://github.com/google-agentic-commerce/AP2"
    }
  ]
}