Meta 与 Sierra 推出 Personal Agent Protocol 开放标准
英文标题：🔶 Personal Agent Protocol
Meta 与 Sierra 联合 Genesys、Instinct、Rocket、Shopify、Stripe 和 Walmart 等合作伙伴开发 Personal Agent Protocol（个人 Agent 协议），用于规范个人 AI Agent 与企业之间的交互。该开放标准旨在兼顾消费者授权、企业对 Agent 行为的可见性与控制权，以及 Agent 开发商的高效接入需求。协议以 OAuth 为基础，支持个人 Agent 通过企业网站、API 或企业自有 Agent 完成任务，并允许用户决定只读或写入权限。项目计划于本月晚些时候发布 v0.1 规范、举办设计研讨会，并推出参考实现。
4.5 MB
4.2 MB
5.4 MB
238.5 KB
483.6 KB
820.6 KB
452.1 KB
中文
个人 AI Agent 正在席卷世界。人们正使用它们完成从安排预约、预订航班到购买汽车保险等各种事务。AI 如此迅速地改变消费者行为，以及我们当中如此多人通过个人 Agent 获得那些令人惊叹的“等等，它刚刚真的做到了？”时刻，实在非同寻常。毫不意外，企业正在思考如何既能最好地尊重消费者的选择，又能保护他们的隐私与安全。
因此，今天我们很高兴宣布 Personal Agent Protocol——这是 Meta 和 Sierra 与 Genesys、Instinct、Rocket、Shopify、Stripe、Walmart 等行业合作伙伴共同开发的一项开放标准，用于定义个人 Agent 如何与企业互动。我们将其设计为可处理身份验证、赋予消费者自主权，并让企业能够了解个人 Agent 通过其网站、API 或企业 Agent 所执行的操作。任何人都可以实施这一开放标准。
需要解决的问题
如今，大多数个人 Agent 像人类一样使用网站和应用——加载页面并点击填写表单。当这种方式无法完成任务时，它们可能会拨打企业客服电话，或打开其网页聊天功能。这一过程可能耗时很长，Agent 也可能无法完成任务。但直接连接可以在数秒内安全地完成同样的任务。
要实现大规模采用，这种连接必须满足所有参与方的需求。每个人都希望获得安全性，但他们也有不同的需求：
- 消费者希望获得速度、可靠性和信任——任务应在首次尝试时就正确完成，并由他们可以信赖、会以其最佳利益行事的个人 Agent 执行。
- 品牌希望获得可见性和控制权——了解个人 Agent 何时代表客户行动，并自行决定其可执行的操作。
- 开发个人 Agent 的公司希望获得效率和接入能力——以直接、一致的方式与参与企业协作。
运作方式
我们正在构建的 Personal Agent Protocol 的核心原则是：消费者决定向其个人 Agent 授予哪些访问权限，而企业则设定这些 Agent 可以执行哪些操作的参数。它使企业能够以最适合其客户的方式与个人 Agent 协作：通过企业现有的网站和 API，或通过企业自有的 Agent。
Personal Agent Protocol 从网站开始，个人 Agent 可以在网站上发现企业提供的服务以及联系和接入方式。随后，个人 Agent 会代表其用户启动一个会话。它可以以访客身份开始，这可能已足以查询产品库存或咨询退货政策。当任务需要访问客户账户时，客户可以在企业页面上登录，或使用他们已为个人 Agent 设置的凭据。客户始终掌握控制权，决定 Agent 获得只读权限还是写入权限。
该会话建立在 OAuth 之上，OAuth 是一项成熟的访问授权标准。它可跨渠道延续，因此，登录前提出的问题与登录后进行的订单修改，均属于同一次访问。从这里开始，个人 Agent 可以通过企业认为最能提供优质客户体验的任一路径完成任务：
- 其网站：浏览企业的常规网页。
- 其 API：通过基于 MCP、OpenAPI 等标准构建的接口进行连接。
- 其 Agent：处理需要对话的任务，例如保修索赔。
企业决定提供哪些能力，个人 Agent 获得一致的连接方式，客户则能以更快的方式完成事务。
下一步计划
我们希望与使用该协议的企业和个人 Agent 开发者共同推进这一协议的发展，并且很高兴 Instinct 也将加入这一工作。我们欢迎所有合作伙伴，并计划在本月晚些时候发布 v0.1 规范、与感兴趣的各方举办设计研讨会，以及发布参考实现以帮助开发者快速上手。
更细粒度的权限设置可让客户和企业针对特定操作设定限制。推送通知可让企业在航班延误或订单发货的第一时间通知个人 Agent。支付扩展则可让个人 Agent 在不共享信用卡信息的情况下完成购买。
随着个人 Agent 承担越来越多的日常事务，企业需要清晰、安全的方式与它们协作，同时持续提供值得信赖的体验。Personal Agent Protocol 为此提供了基础——让企业和个人 Agent 能够为他们共同服务的客户完成任务。
English / 原文
Personal AI agents are taking the world by storm. People are using them to do everything from scheduling appointments to booking flights and shopping for car insurance. It’s extraordinary how fast AI is changing consumer behavior and how many of us are having those incredible “wait, it just did that” moments with our personal agents. Unsurprisingly companies are asking how they can best respect their consumers’ choices while also protecting their privacy and security.
So today we’re excited to announce Personal Agent Protocol — an open standard Meta and Sierra are developing along with industry partners at Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart that defines how personal agents interact with businesses. We’re designing it to handle authentication, empower consumers and give companies visibility into what personal agents do through their websites, APIs or company agents. It’s open for anyone to implement.
The problem to be solved
Today most personal agents use websites and apps the way people do — loading pages and clicking through forms. When that can’t get the job done, they may call the company’s support line or open its web chat. This can take a long time, and the agent might fail to complete the task. But a direct connection could get the same task done securely in seconds.
To be adopted at scale, that connection has to work for all parties. Everyone wants security, but they have different needs, too:
- Consumers want speed, dependability, and trust — for the job to be done right the first time, by a personal agent they can count on to act in their best interests.
- Brands want visibility and control — to know when a personal agent is acting for a customer and to decide for themselves what it can do.
- Companies building personal agents want efficiency and access — a direct, consistent way to work with participating companies.
How it works
The principle behind the Personal Agent Protocol we’re building is that consumers decide what access to give their personal agents, and companies set parameters for what those agents can do. It enables companies to work with personal agents in the way that is best for their customers: through their existing websites and APIs, or through an agent of their own.
Personal Agent Protocol starts on the website, where a personal agent can discover what the company offers and how to reach it. The personal agent then begins a session on its user’s behalf. It can start as a guest, which may be enough to check product availability or ask about a returns policy. When a task requires access to a customer’s account, they can sign in on the company’s page or use credentials they have already set up with their personal agent. The customer is always in control, deciding whether the agent has read-only or write access.
The session is built on OAuth, an established standard for authorizing access. It carries across channels, so a question asked before sign-in and an order change made afterward are part of the same visit. From there, the personal agent can get the job done using whichever routes the company believes will offer the best customer experience:
- Its website : navigating the company’s regular web pages.
- Its APIs : connecting through interfaces built on standards such as MCP and OpenAPI.
- Its agent : working through tasks that need conversation, such as a warranty claim.
The company decides what it makes available, the personal agent gets a consistent way to connect, and the customer gets a faster way to get things done.
What comes next
We want to develop this protocol with the companies and personal agent builders using it and are excited that Instinct will also be joining the effort. We welcome all partners and plan to publish the v0.1 specification later this month, host design workshops with interested parties, and publish a reference implementation to help developers get started.
More detailed permissions could let customers and companies set limits on specific actions. Push notifications could let a company tell a personal agent the moment a flight is delayed or an order ships. Payments extensions could let a personal agent complete a purchase without sharing credit card information.
As personal agents take on more of our everyday tasks, companies need clear, secure ways to work with them while continuing to deliver a trusted experience. Personal Agent Protocol gives them that foundation — so the company and the personal agent can get the job done for the customer they share.