Amex Builds an Intent Layer to Stop AI Agent Overspending

Personal AI agents are starting to buy things on their own, and American Express wants a record of what they were actually told to buy. On October 13, the card network introduced its "Intent Intelligence Framework" - a developer-facing layer designed to capture and authenticate a customer's purchase intent before an agent completes a transaction.

Amex says the goal is to keep the customer's instructions attached to the payment across the whole lifecycle, not just at checkout. "These new transactions will have a consumer, a merchant, and an agent," said Hannah Bozian, Amex's VP of Agentic Partnerships and Strategy.

What the framework actually does

The flow starts with a Create Intent API that records the customer's purchase instructions alongside constraints such as the merchant name, a maximum budget, and product preferences. The customer then authenticates their identity and signs off on the intent the agent captured.

From there Amex issues an Intent ID plus a Proof of Intent Token carrying the customer's high-level constraints. That token is exchanged for a secure digital payment credential the agent uses at checkout, so the agent never handles the real card number. Amex says the same Intent ID can be reused later for fraud prevention and dispute resolution.

The framework extends Amex's Agentic Commerce Experiences (ACE) developer toolkit, which launched in April. Amex says it has not seen a rise in disputes from agentic commerce yet, and is shipping this ahead of scale rather than after a problem.

Why it matters

The interesting design choice is timing. Amex pulls intent verification earlier into the transaction flow than other implementations, which means a mismatch can be blocked before money moves. Bozian's example: a customer asks for size 9 white Nike sneakers and the agent submits an order for Adidas shoes. A pre-transaction check catches that; a post-hoc dispute does not.

Amex also expects agent autonomy to grow. Reordering paper towels has only price and size as real constraints, so a verification step in the loop matters exactly where the customer stops looking.

For builders, this is another signal that agentic payments are converging on the same primitives: scoped credentials, intent tokens, and an audit trail recording which agent was authorized to do what. If you are wiring agents into commerce APIs, expect intent capture and delegated credentials to become part of the integration surface rather than an afterthought.

Amex says it is already in talks with partners across the payments ecosystem to implement ACE, and is positioning the intent framework as an industry standard for AI-powered transactions. Bozian is scheduled to discuss it on the Industry Stage at TechCrunch Disrupt 2026.