# Research: Agentic Payments for Annie

**Date:** 2026-04-03 (v2, major update)
**Previous:** 2026-04-02 (v1)
**Status:** Research complete. Landscape has evolved significantly since v1. UPI Reserve Pay is the mechanism, but still CUG-only for consumer agents.
**Trigger:** Deep research update — 12 areas investigated with web search.

## Executive Summary

**The hard truth (updated April 2026):** There is STILL no public API that lets a personal AI agent like Annie initiate UPI payments from Rajesh's bank account. BUT the ecosystem has moved fast:

1. **UPI Reserve Pay (SBMD)** is THE mechanism — user blocks funds once, agent debits multiple times without PIN. Live in CUG with Claude, ChatGPT, Gemini.
2. **Mastercard Agent Pay** has completed live authenticated transactions in India (Axis Bank, RBL Bank, via Cashfree/Juspay/PayU/Razorpay).
3. **Razorpay Agent Studio** (March 2026) offers a no-code agent builder — but for MERCHANT operations, not consumer spending.
4. **Setu UPI Deeplinks MCP** is the most promising workaround — an actual MCP server that creates UPI payment links an AI agent can generate and send to users.
5. **Payment Link approach** remains the best practical path: Annie creates a payment link via Razorpay/Cashfree/Setu API, sends it to Rajesh via Telegram, he taps to pay.

**Bottom line for Annie:** The "payment link + human tap" pattern is production-ready TODAY. True autonomous agent payments are 6-12 months away from public availability.

---

## 1. MCP Payment Servers (Comprehensive Inventory)

### 1.1 Indian Payment Gateway MCP Servers (ALL Merchant-Facing)

| Gateway | MCP Server | Language | Key Ops | Deployment |
|---------|-----------|----------|---------|------------|
| **Razorpay** | [razorpay-mcp-server](https://github.com/razorpay/razorpay-mcp-server) | Go | 35+ tools: payment links, orders, QR, settlements, payouts, refunds | Remote (hosted) or local |
| **Juspay** | [juspay-mcp](https://github.com/juspay/juspay-mcp) | Python | UPI Collect, VPA verify, orders, refunds, cards, dashboard management | Local |
| **Cashfree** | [cashfree-mcp](https://github.com/cashfree/cashfree-mcp) | Node.js | 30+ modules: payment links, refunds, settlements, payouts, KYC | Remote (hosted) or local |
| **PayU** | [payu-mcp-server](https://github.com/payu-intrepos/payu-mcp-server) | — | Payment links, transactions, refunds, invoices | Local |
| **Setu** | [setu-mcps/upi-deeplinks](https://github.com/SetuHQ/setu-mcps) | Python | **5 tools: create-payment-link, check-payment-status, expire-payment, initiate-refund, mock-payment** | Local (pip install) |
| **Worldpay** | [worldpay-mcp](https://developer.worldpay.com/products/ai/acp) | — | Agentic Commerce Protocol: cart, delegate tokens, checkout | Remote |

**CRITICAL:** All of these are **merchant-side** tools. They let a merchant's AI manage incoming payments, NOT let a consumer's AI agent initiate payments from their bank account.

**EXCEPTION — Setu UPI Deeplinks MCP:** This is the most interesting for Annie. While it requires merchant credentials (Setu account), it creates UPI payment links that can be sent to ANYONE to pay. Annie could use this to generate "pay this merchant" links and send them to Rajesh via Telegram. The 5 tools are:
- `create-payment-link` — generates UPI deep link with amount (in paise), payee name, bill ID
- `check-payment-status` — polls payment completion
- `expire-payment` — cancels a pending link
- `initiate-refund` — FULL or PARTIAL refund
- `mock-payment` — sandbox testing

### 1.2 Global Payment MCP Servers (Reference)

| Provider | MCP Server | Relevance to India |
|----------|-----------|-------------------|
| **Stripe** | [stripe/ai](https://github.com/stripe/ai) (mcp.stripe.com) | 25 tools, v0.3.1. UPI support in India is beta/invitation-only. Not viable for Annie. |
| **Worldpay** | [Worldpay ACP](https://docs.worldpay.com/access/products/ai/acp) | Cards only, no UPI. OpenAI Instant Checkout partner. |

### 1.3 Stripe Machine Payments Protocol (MPP) — March 2026

Stripe launched MPP on March 18, 2026, co-authored with Tempo. It's an open standard for agent-to-agent payments:
- Session-based streaming payments
- Supports fiat (cards, BNPL) and stablecoins (USDC)
- Shared Payment Tokens (SPTs) for delegated agent spending
- **Not relevant for India/UPI today** — but architecturally interesting for future

Source: [Stripe MPP blog](https://stripe.com/blog/machine-payments-protocol)

---

## 2. NPCI + Anthropic Pilot (Updated)

### 2.1 Razorpay + NPCI + Anthropic — Claude Agentic Payments

- **Announced:** Feb 20, 2026 at India AI Impact Summit
- **Merchants:** Zomato, Swiggy, Zepto
- **Mechanism:** UPI Reserve Pay (SBMD) — user authorizes spending limit per merchant, agent transacts without PIN
- **Spending limit:** Up to ₹15,000 per merchant authorization (some sources say ₹10,000)
- **Banking partners:** Axis Bank, Airtel Payments Bank
- **Status:** CLOSED USER GROUP — cannot sign up as a general user
- **Early access:** Razorpay has a typeform but not publicly processable

Sources:
- [BusinessToday](https://www.businesstoday.in/technology/news/story/npci-anthropic-test-ai-driven-shopping-pilot-using-upi-payments-516761-2026-02-18)
- [Analytics India Mag](https://analyticsindiamag.com/ai-news/razorpay-npci-enable-in-chat-upi-payments-on-claude-for-zomato-swiggy-zepto)
- [Razorpay blog](https://razorpay.com/blog/agentic-payments-and-npci/)

### 2.2 Razorpay + NPCI + OpenAI — ChatGPT Agentic Payments

- **Announced:** October 2025 (earlier than Claude)
- **Merchants:** BigBasket as initial partner
- **Same UPI Reserve Pay infrastructure**
- **Banking partners:** Same (Axis, Airtel Payments Bank)
- **Status:** Nationwide pilot, broader rollout "in coming months" (no specific date)

Sources:
- [Business Standard](https://www.business-standard.com/companies/news/razorpay-npci-and-openai-launch-agentic-payments-on-chatgpt-125100900601_1.html)
- [Razorpay blog](https://razorpay.com/blog/razorpay-unveils-agentic-payments-on-chatgpt-with-npci-indias-first-ai-powered-conversational-payment-experience/)

### 2.3 Razorpay + Sarvam AI — Voice-First Commerce

- Voice commands in Indian languages to order food and pay
- "Proceed to Pay" button still requires manual tap in current implementation

### 2.4 Can Annie Join These Pilots?

**NO.** These are walled-garden integrations:
- Claude pilot = only works inside Claude's chat UI, via Razorpay's MCP connected to specific merchants
- ChatGPT pilot = only works inside ChatGPT, same architecture
- **No public API** for a third-party AI agent to use the same UPI Reserve Pay flow
- Would require: (a) Razorpay merchant account, (b) NPCI approval for UPI Reserve Pay, (c) integration with specific AI platform

---

## 3. Razorpay Agent Studio (NEW — March 2026)

Launched at Sprint 2026 (FTX'26), built on Anthropic's Claude Agent SDK:

**What it is:** A B2B agent marketplace + builder for payment operations
**Production-ready agents:**
- Abandoned Cart Conversion Agent
- Dispute Responder Agent
- Subscription Recovery Agent
- Cashflow Forecaster Agent

**No-code agent builder:** Describe task in plain English, select systems to access, deploy

**Agentic Experience Platform:**
- Agentic Onboarding (30-45 min → ~5 min)
- Agentic Dashboard (natural language queries)
- Agentic Integration (<10 min integration)

**Relevance to Annie:** ZERO. This is for merchants managing their payment operations, not for consumers spending money.

Sources:
- [Razorpay Agent Studio blog](https://razorpay.com/blog/agent-studio-ai-agents-by-razorpay/)
- [ANI News](https://aninews.in/news/business/razorpay-unveils-worlds-first-agent-studio-to-automate-payments-launches-agentic-experience-platform20260312114433/)

---

## 4. Juspay MCP (Detailed)

- **Repo:** [github.com/juspay/juspay-mcp](https://github.com/juspay/juspay-mcp)
- **Language:** Python
- **Two modules:**
  - `juspay_mcp` — core payment processing (orders, transactions, refunds, customers, cards, UPI)
  - `juspay_dashboard_mcp` — merchant dashboard (gateway management, reporting, user management, settings)
- **Juspay powers Google Pay India** — but the MCP is for merchants, not consumers
- **Hyperswitch** (open-source payment orchestrator, Rust) — Prism stateless connector library designed for AI agents, but still requires merchant credentials

Source: [Glama.ai](https://glama.ai/mcp/servers/@juspay/juspay-mcp)

---

## 5. Cashfree MCP (Detailed)

- **Repo:** [github.com/cashfree/cashfree-mcp](https://github.com/cashfree/cashfree-mcp)
- **Language:** Node.js (v18+)
- **30+ modules:** Payment links, refunds, settlements, name matching, payouts
- **Deployment:** Remote (Cashfree-hosted, HTTPS streamable HTTP) or local
- **Python SDK available:** `cashfree-pg` on PyPI
- **Payment Link API:** Create UPI payment links specifying allowed modes (`upi`, `cc`, `dc`, `nb`, etc.)
- **Webhook support:** Real-time notifications for payment events

**Relevance to Annie:** Could be used via the "payment link" approach — Annie creates a Cashfree payment link, sends to Rajesh, he taps to pay.

Sources:
- [Cashfree MCP docs](https://www.cashfree.com/docs/tools-ai/mcp-server)
- [Cashfree AI-native blog](https://www.cashfree.com/blog/ai-native-payments-mcp-server/)

---

## 6. PayU MCP (Detailed)

- **Repo:** [github.com/payu-intrepos/payu-mcp-server](https://github.com/payu-intrepos/payu-mcp-server)
- **Docs:** [docs.payu.in/docs/payu-mcp-server](https://docs.payu.in/docs/payu-mcp-server)
- **Key ops:** Payment links, transaction status, settlement status, refund status
- **PayU has RBI final license** (approved 2026) — fully compliant payment aggregator
- **PayU + CoRover partnership:** AI-led agentic payments across 100+ Indian languages/dialects, combining PayU payments with CoRover's BharatGPT conversational AI
- **Future:** AI-driven invoice creation, order management, faster onboarding

Source: [PayU MCP docs](https://docs.payu.in/docs/payu-mcp-server)

---

## 7. Consumer UPI Apps — Still NO Agent APIs

**PhonePe, Google Pay, Paytm: NONE expose APIs for third-party AI agents.**

- **PhonePe:** Merchant-facing Payment Gateway API only
- **Google Pay India:** Merchant integration API only; Google Pay API for India lets merchants accept UPI, not consumers spend
- **Paytm:** Merchant APIs only; wallet balance send requires Paytm app authentication

**Why this won't change soon:** UPI mandates that payment initiation requires user's UPI app involvement (PIN entry, biometric, or pre-authorized Reserve Pay). RBI's 2FA requirements (effective April 1, 2026) reinforce this.

---

## 8. Stripe in India — Limited

- Stripe India supports UPI in **beta/invitation program** (not generally available)
- UPI Payment Terms updated Feb 27, 2026 — some activity but unclear availability
- Stripe MCP server (25 tools, v0.3.1) works for cards/international payments
- **Not viable for Annie's Indian payment needs**
- **Architecturally relevant:** Stripe's MCP + MPP are the gold standard for agent payment integration

Sources:
- [Stripe UPI](https://stripe.com/payment-method/upi)
- [Stripe MCP docs](https://docs.stripe.com/mcp)

---

## 9. Payment Link Approach — THE PRACTICAL PATH

This is what Annie should use TODAY. Multiple providers support programmatic payment link creation:

### 9.1 Provider Comparison

| Provider | API | Python SDK | UPI Links | Webhook | Cost | MCP Server |
|----------|-----|------------|-----------|---------|------|------------|
| **Razorpay** | REST, `/v1/payment_links` | `razorpay` (pip) | Yes | Yes | 2% per txn | Yes (35+ tools) |
| **Cashfree** | REST, `/payment-links` | `cashfree-pg` (pip) | Yes (can specify `upi` as allowed mode) | Yes | ~1.9% per txn | Yes (30+ modules) |
| **PayU** | REST, Create Payment Link | Yes | Yes | Yes | ~2% per txn | Yes |
| **Setu** | REST, `/payment-links` | `setu_mcp_upi_deeplinks` (pip) | **Yes (native UPI deeplinks)** | Yes (POST callback) | Contact sales | **Yes (5 tools, purpose-built)** |

### 9.2 Setu UPI Deeplinks — Best Fit for Annie

**Why Setu is best:**
- Purpose-built for UPI payment link generation (not a full payment gateway)
- Official MCP server with 5 clean tools
- Python SDK + MCP server both available
- Creates links that open any UPI app (GPay, PhonePe, Paytm, BHIM)
- Webhook callback confirms payment
- Sandbox for testing

**Setup requirements:**
- Setu merchant account (sign up at setu.co)
- Environment variables: `UPI_DEEPLINKS_SCHEME_ID`, `UPI_DEEPLINKS_SECRET`, `UPI_DEEPLINKS_PRODUCT_INSTANCE_ID`
- `pip install setu_mcp_upi_deeplinks`

**Annie's flow:**
```
Annie decides to order dinner from Swiggy
→ Annie builds cart via Swiggy MCP (existing)
→ Annie creates Setu payment link: amount=₹847, note="Swiggy dinner order"
→ Annie sends Telegram message: "Dinner order ready: ₹847. [Pay Now](shortURL)"
→ Rajesh taps link → opens GPay → enters PIN → pays
→ Setu webhook fires → Annie confirms payment → order proceeds
```

### 9.3 Razorpay Payment Link — Alternative

**Razorpay advantage:** Already has MCP server, more tools, well-known
**Razorpay disadvantage:** 2% fee, requires merchant account (freelancer/individual OK)
- Can send links via SMS, email, WhatsApp
- Webhook events for payment lifecycle
- Payment links can have expiry, partial payments, reminders

Source: [Razorpay Payment Links API](https://razorpay.com/docs/api/payments/payment-links/)

### 9.4 "Become a Merchant" Setup

To use any payment link API, Annie needs a merchant account:
- **Razorpay:** Individual/freelancer accounts supported. Sign up, get API keys, 2% fee.
- **Cashfree:** Business account needed. KYC required.
- **Setu:** Contact sales for account setup.
- **PayU:** Has RBI final license. Business account.

**Recommendation:** Razorpay individual account is easiest to get. Setu is cleanest for UPI-only.

---

## 10. UPI Deep Links — Direct Generation

An AI agent can generate UPI deep links WITHOUT any payment provider:

### 10.1 NPCI UPI Linking Specification (v1.7)

```
upi://pay?pa=merchant@upi&pn=MerchantName&am=847.00&tn=Dinner+order&cu=INR&tr=ORDER123
```

**Parameters:**
| Param | Name | Required | Description |
|-------|------|----------|-------------|
| `pa` | Payee Address | Yes | Merchant VPA (e.g., `swiggy@upi`) |
| `pn` | Payee Name | Yes | Display name |
| `am` | Amount | No | Amount (if omitted, user enters) |
| `tn` | Transaction Note | No | Short description |
| `cu` | Currency | No | Always `INR` |
| `tr` | Transaction Reference | No | Order ID |
| `mam` | Minimum Amount | No | If set, amount field not editable |
| `url` | Success URL | No | Callback URL |

**App-specific prefixes:**
- Generic (any app): `upi://pay?...`
- Google Pay: `gpay://upi/pay?...`
- PhonePe: `phonepe://pay?...`

**Limitation:** No webhook/callback — Annie can't confirm payment happened. Need to poll order status on merchant side instead.

### 10.2 When to Use Direct Deep Links vs Payment Links

| Scenario | Use Direct Deep Link | Use Payment Link API |
|----------|---------------------|---------------------|
| Pay known merchant (Swiggy, Zomato) | Yes — if order tracking handles confirmation | Overkill |
| Pay arbitrary vendor | No — no confirmation | Yes — webhook confirms |
| Recurring payment | No | Use UPI AutoPay instead |
| Need payment proof | No | Yes |

**For Annie:** Direct deep links work for food delivery (order status confirms payment). Payment links work for everything else.

---

## 11. UPI AutoPay Mandates — Recurring Payments

### 11.1 How It Works

UPI AutoPay (UPI 2.0) allows one-time mandate authorization for recurring debits:
1. Customer authorizes e-mandate via UPI app (one-time PIN entry)
2. Merchant sends pre-debit notification before each charge
3. Debit happens automatically — no further authentication needed
4. Customer can revoke mandate at any time via UPI app

### 11.2 Limits and Rules (Updated Aug 2025)

- **Max per transaction:** ₹15,000
- **Mandate execution:** Only during designated non-peak time slots (NPCI rule, Aug 2025)
- **Retry limit:** Max 4 attempts (1 original + 3 retries) per mandate execution
- **Supported accounts:** Savings, current, overdraft, RuPay Credit Card, pre-approved credit line

### 11.3 Programmatic Setup via Razorpay

Razorpay Subscriptions API supports UPI AutoPay:
- Create subscription with `upi` payment method
- ₹1 authentication transaction registers the mandate
- Automatic pre-debit notifications (RBI-compliant)
- Smart retry on failure (Intelligent Revenue-Protect)

### 11.4 What Annie Could Automate

- **Electricity bills** — set up AutoPay mandate once, Annie tracks due dates
- **Internet/broadband** — same
- **OTT subscriptions** — Netflix, Prime, Hotstar
- **Mutual fund SIPs** — already common via UPI AutoPay
- **Insurance premiums** — same

**Limitation for Annie:** Setting up the initial mandate requires user to authenticate in UPI app. Annie can remind Rajesh to set it up, but can't do it for him (ADB blocked on PIN screen).

---

## 12. RBI Regulatory Update (2025-2026)

### 12.1 Two-Factor Authentication (2FA) — Effective April 1, 2026

RBI issued "Authentication Mechanisms for Digital Payment Transactions Directions, 2025" on September 25, 2025:
- **Mandatory 2FA** for ALL domestic digital payment transactions
- At least one authentication factor must be "dynamically created" (unique per transaction)
- **Limited exemptions:** Small-value contactless, recurring e-mandate debits, certain prepaid/offline payments

### 12.2 Exemptions Relevant to Agent Payments

- **Recurring e-mandate debits** (UPI AutoPay) — EXEMPT from per-transaction 2FA
- **UPI Reserve Pay (SBMD)** — user authenticates once, multiple debits within limits — COMPLIANT (one strong auth + pre-authorized debits)
- **Small-value contactless** — not relevant for online agent payments

### 12.3 AI-Specific Governance

- **FREE-AI Framework:** RBI committee on Responsible and Ethical Enablement of AI — 7 "Sutras", recommendations include AI strategy board approval, model selection reasoning, consumer protections
- **IDPIC:** Indian Digital Payment Intelligence Corporation (incorporated Oct 2025) — AI/ML fraud detection for digital payments
- **MuleHunter.AI:** RBI's AI solution for mule account detection, live in 26 banks
- **No explicit AI agent payment regulation yet** — governance lags deployment

### 12.4 What This Means for Annie

- UPI Reserve Pay is the RBI-blessed path for agent payments (compliant 2FA)
- UPI AutoPay for recurring bills is fully legal
- Payment links with user tap-to-pay = fully compliant (user authenticates)
- **Fully autonomous agent payment (no user auth at all) = NOT POSSIBLE under current RBI rules**

Sources:
- [RBI Authentication Directions](https://rbidocs.rbi.org.in/rdocs/PressRelease/PDFs/PR1165D250AB0389BE4D3D9E006CECD26F928E.PDF)
- [Business Standard](https://www.business-standard.com/finance/news/rbi-two-factor-authentication-digital-payments-guidelines-2026-125092501154_1.html)
- [IBM Think](https://www.ibm.com/think/perspectives/strengthening-digital-payment-security-with-rbi-new-authentication-directions)

---

## 13. Global Protocols Update (New Section)

### 13.1 Google Universal Commerce Protocol (UCP) — Jan 2026

Google's answer to fragmented agentic commerce:
- Open-source standard for full commerce journey (discovery → purchase → fulfillment)
- Partners: Shopify, Etsy, Wayfair, Target, Walmart, Flipkart, Visa, Mastercard, Stripe, Adyen, AmEx
- Compatible with AP2 for payments
- **India expansion planned** but not yet active
- [ucp.dev](http://ucp.dev/) | [Google Developers](https://developers.google.com/merchant/ucp)

### 13.2 Google Agent Payments Protocol (AP2) — Updated

- Still at [ap2-protocol.org](https://ap2-protocol.org/) and [GitHub](https://github.com/google-agentic-commerce/AP2)
- v0.1 focuses on pull payments (cards)
- **UPI still on roadmap for v1.x but NOT in current spec** (confirmed: "no mention of UPI" in initial launch)
- 60+ partner organizations
- 2.9K+ GitHub stars

Source: [CXOToday](https://cxotoday.com/news-analysis/google-launches-new-protocol-to-power-ai-led-commerce-no-mention-of-upi/)

### 13.3 Visa Trusted Agent Protocol (TAP) — Updated

- **Asia Pacific pilots underway** (early 2026, as planned)
- Live authenticated transactions completed with 10+ partners
- Partners: Ant International, LG Uplus, Microsoft, Perplexity, Stripe, Tencent
- Cryptographic agent signatures, open low-code integration
- [Visa Developer](https://developer.visa.com/capabilities/trusted-agent-protocol)

Source: [Visa Press](https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.21961.html)

### 13.4 Mastercard Agent Pay — LIVE IN INDIA (New)

**This is the biggest update since v1.**

- **India's first live authenticated agentic commerce transaction** demonstrated at India AI Impact Summit
- **Cards:** Mastercards issued by **Axis Bank** and **RBL Bank**
- **Payment aggregators:** Cashfree, Juspay, PayU, Razorpay
- **Merchants:** Swiggy, Instamart, Vi, Tira
- **Security:** Mastercard Agentic Tokens (issued per agent) + Payment Passkeys (consumer consent)
- **Also live in:** Australia, New Zealand, Singapore, Malaysia, South Korea, Taiwan, Latin America

**Relevance to Annie:** This is card-based (not UPI). If Rajesh has a Mastercard (Axis Bank or RBL Bank), this COULD theoretically work. But it requires integration through the participating payment aggregators and specific merchant partnerships. No public API for a personal AI agent.

Source: [Mastercard India](https://www.mastercard.com/news/ap/en/newsroom/press-releases/en/2026/mastercard-completes-korea-s-first-live-agentic-transactions-unlocking-trusted-ai-powered-commerce/)

### 13.5 PayU + CoRover — India Multilingual Agentic Payments

- Strategic partnership announced 2026
- CoRover's BharatGPT = conversational AI in 100+ Indian languages/dialects
- Voice-based UPI payments
- Early use case: Afterlife (digital succession platform), Kanhaji.ai (devotional AI)
- **B2B play** — not consumer-facing for personal agents

Source: [SME Street](https://smestreet.in/technology/payu-partners-corover-to-enable-ai-agentic-payments-in-india-11209510)

---

## 14. UPI Reserve Pay — Technical Deep Dive

### 14.1 What Is SBMD (Single Block Multi Debit)?

NPCI renamed UPI SBMD to "UPI Reserve Pay" in October 2025. The mechanism:

1. **BLOCK:** User authorizes a spending limit (e.g., ₹5,000) for a specific merchant via UPI app (PIN entry)
2. **RESERVE:** Funds are blocked/reserved in user's bank account
3. **MULTI-DEBIT:** Merchant can make multiple debits against the blocked amount without further authentication
4. **EXPIRE:** Mandate expires when funds exhausted or time limit reached

### 14.2 Limits

- **Per mandate:** Up to ₹10,000 (some sources say ₹15,000 for specific pilots)
- **Duration:** Up to 90 days
- **Supported accounts:** Savings, current, overdraft, RuPay Credit Card, pre-approved credit line

### 14.3 How Agentic Payments Use It

```
User tells AI: "Order my usual groceries"
→ AI identifies items, creates cart on merchant platform
→ AI requests payment via Razorpay MCP → Razorpay creates UPI Reserve Pay mandate
→ User sees consent UI in UPI app: "Allow Claude to spend up to ₹5,000 at Swiggy for 30 days"
→ User authenticates ONCE (PIN/biometric)
→ AI can now make purchases within that limit without further auth
→ User can revoke at any time via UPI app
```

### 14.4 Technical Flow (from Razorpay integration)

1. AI agent calls Razorpay MCP `request_payment_auth` tool
2. Razorpay creates preauth record with unique `preauth_id` and `idempotency_key`
3. Razorpay calls PSP to create on-rail preauth object → returns authorization URL/intent
4. User authenticates in UPI app
5. Agent calls `execute_payment` for each purchase
6. Razorpay translates to PSP-specific debit calls
7. Webhook confirms each debit

### 14.5 Why Annie Can't Use This Today

- **No public API** for creating UPI Reserve Pay mandates from a third-party agent
- Only available through Razorpay's agentic payments integration (CUG)
- Requires NPCI approval for each AI platform
- Requires merchant partnership agreements

Source: [Razorpay UPI Reserve Pay](https://razorpay.com/blog/upi-reserve-pay)

---

## 15. Wallet-Based Approaches

### 15.1 Paytm Wallet

- Paytm business API = merchant-facing (accept payments)
- **No API to spend FROM Paytm wallet** as a third party
- Swift Claim API: credits to recipient's Amazon Pay wallet (corporate volumes only, ₹50MM+/year)
- **Not viable for Annie**

### 15.2 Amazon Pay

- Amazon Pay v2 API = merchant checkout only
- No API for AI agent to spend from user's Amazon wallet
- Gift Card API requires corporate volumes
- **Not viable for Annie**

### 15.3 No Programmable Consumer Wallets Exist in India

None of the major wallets (Paytm, PhonePe, Google Pay, Amazon Pay) expose a "send money" or "pay merchant" API for third-party applications. This is by design — RBI regulations require user authentication for every payment initiation.

---

## 16. Open-Source Frameworks Worth Watching

| Project | What | Relevance | Status |
|---------|------|-----------|--------|
| [Setu UPI Deeplinks MCP](https://github.com/SetuHQ/setu-mcps) | UPI payment link MCP server | **BEST for Annie** — create + track payment links | Live, pip installable |
| [Google AP2](https://github.com/google-agentic-commerce/AP2) | Open agent payment protocol | Reference impl, UPI on roadmap | v0.1, cards only |
| [Google UCP](http://ucp.dev/) | Universal Commerce Protocol | Full commerce journey standard | New (Jan 2026), India planned |
| [Stripe Agent Toolkit](https://github.com/stripe/ai) | Stripe MCP + SDK | Architecture reference | v0.3.1, production |
| [Stripe MPP](https://docs.stripe.com/payments/machine/mpp) | Machine Payments Protocol | Agent-to-agent payments standard | March 2026, no UPI |
| [Hyperswitch](https://github.com/juspay/hyperswitch) | Open-source payment switch (Rust) | UPI-native, Prism for AI agents | Production |
| [PayMCP](https://github.com/blustAI/paymcp) | Provider-agnostic payment MCP | Good pattern for wrapping providers | Community |

---

## 17. Practical Path for Annie (Updated)

### 17.1 What Works TODAY

```
Annie (Titan) — Telegram Bot Interface
│
├── ORDERING (automated, no payment needed):
│   ├── Swiggy MCP: search → menu → cart (WORKING)
│   ├── Zomato MCP: search → create_cart → checkout_cart (WORKING)
│   ├── Blue Tokai: direct API (WORKING)
│   └── TWF Flour: Shopify API (WORKING)
│
├── PAYMENT — Option A: UPI Deep Link (zero cost, no merchant account):
│   ├── Annie generates: upi://pay?pa=swiggy@upi&am=847&tn=Dinner
│   ├── Sends via Telegram inline button
│   ├── Rajesh taps → opens GPay/PhonePe → enters PIN → pays
│   └── Annie monitors order status on merchant platform for confirmation
│
├── PAYMENT — Option B: Payment Link API (webhook confirmation, needs account):
│   ├── Annie calls Setu/Razorpay/Cashfree API to create payment link
│   ├── Sends shortURL via Telegram
│   ├── Rajesh taps → UPI app opens → PIN → pays
│   └── Webhook confirms payment → Annie proceeds with order
│
├── PAYMENT — Option C: ADB on Pixel (existing, for Zomato reorder flow):
│   ├── Annie builds cart via Zomato MCP
│   ├── Rajesh opens Zomato app → "Reorder" button loads cart
│   ├── Rajesh taps to pay (any method: UPI, card, wallet)
│   └── Most seamless UX but requires Rajesh to be on phone
│
├── RECURRING BILLS (fully automated via UPI AutoPay):
│   ├── Electricity, internet, subscriptions
│   ├── Set up AutoPay mandate once per biller
│   └── Annie tracks due dates, confirms payment went through
│
└── FUTURE (when CUG opens):
    ├── Razorpay Agentic Payments → UPI Reserve Pay (no PIN per purchase)
    ├── Mastercard Agent Pay → tokenized card payments
    ├── AP2 + UPI (when Google adds UPI to protocol)
    └── True autonomous agent payments
```

### 17.2 Recommended Implementation Order

1. **Immediate (zero effort):** Generate UPI deep links and send via Telegram. No account needed. Works for food delivery where order status confirms payment.

2. **Short-term (1-2 hours):** Set up Setu account, install `setu_mcp_upi_deeplinks`. Annie gets webhook confirmation for all payments.

3. **Alternative short-term:** Use Razorpay individual account + MCP server for payment links. More expensive (2%) but more tools.

4. **Medium-term:** Set up UPI AutoPay mandates for recurring bills via Razorpay Subscriptions API.

5. **Watch:** Sign up for Razorpay agentic payments early access. When CUG opens, Annie gets true autonomous payments.

### 17.3 Architecture Decision

**For food delivery (Swiggy/Zomato/Zepto):** UPI deep link is sufficient. Annie already has the merchant VPA from the cart/checkout flow. Order status tracking confirms payment.

**For arbitrary payments:** Setu UPI Deeplinks MCP is the cleanest solution. 5 tools, webhook confirmation, Python SDK.

**Don't bother with:**
- Amazon Pay (wrong direction entirely)
- Building custom UPI integration (regulatory impossible)
- Stripe in India for UPI (beta, not available)
- Worldpay ACP (cards only, OpenAI-specific)
- Waiting for AP2 UPI support (no timeline)

---

## 18. What Changed Since v1 (April 2 → April 3)

| Area | v1 (April 2) | v2 (April 3) |
|------|-------------|-------------|
| Mastercard in India | "Not yet India-specific" | **LIVE** — authenticated transactions with Axis/RBL via Cashfree/Juspay/PayU/Razorpay |
| Setu UPI Deeplinks MCP | Not mentioned | **DISCOVERED** — purpose-built MCP for UPI payment links, pip installable |
| Razorpay Agent Studio | Not launched | **LAUNCHED** March 2026 — but merchant-facing only |
| Google UCP | Not announced | **ANNOUNCED** Jan 2026 — India expansion planned |
| Stripe MPP | Not launched | **LAUNCHED** March 2026 — agent-to-agent payment protocol |
| Visa TAP Asia Pacific | "Expected early 2026" | **UNDERWAY** — live transactions with 10+ partners |
| PayU + CoRover | Not announced | **ANNOUNCED** — 100+ Indian language voice payments |
| RBI 2FA | Mentioned | **NOW EFFECTIVE** (April 1, 2026) — exemptions clarified |
| UPI Reserve Pay details | High-level | **Deep dive** — SBMD mechanism, limits, 90-day duration |
| Payment link comparison | Not done | **4 providers compared** with API details |

---

## Sources

- [Razorpay Agentic Payments](https://razorpay.com/agentic-payments/)
- [Razorpay + NPCI blog](https://razorpay.com/blog/agentic-payments-and-npci/)
- [Razorpay Agent Studio](https://razorpay.com/blog/agent-studio-ai-agents-by-razorpay/)
- [Razorpay UPI Reserve Pay](https://razorpay.com/blog/upi-reserve-pay)
- [Razorpay MCP Server (GitHub)](https://github.com/razorpay/razorpay-mcp-server)
- [Razorpay Payment Links API](https://razorpay.com/docs/api/payments/payment-links/)
- [Razorpay Sprint 2026](https://razorpay.com/sprint/26)
- [Juspay MCP (GitHub)](https://github.com/juspay/juspay-mcp)
- [Cashfree MCP docs](https://www.cashfree.com/docs/tools-ai/mcp-server)
- [Cashfree MCP (GitHub)](https://github.com/cashfree/cashfree-mcp)
- [Cashfree UPI Payment Links](https://docs.cashfree.com/docs/create-upi-payment-link)
- [PayU MCP Server docs](https://docs.payu.in/docs/payu-mcp-server)
- [Setu UPI Deeplinks MCP (GitHub)](https://github.com/SetuHQ/setu-mcps)
- [Setu UPI Deeplinks docs](https://docs.setu.co/payments/upi-deeplinks/quickstart)
- [Stripe MCP docs](https://docs.stripe.com/mcp)
- [Stripe MPP blog](https://stripe.com/blog/machine-payments-protocol)
- [Stripe Agent Toolkit (GitHub)](https://github.com/stripe/ai)
- [Worldpay ACP](https://docs.worldpay.com/access/products/ai/acp)
- [Google AP2 (GitHub)](https://github.com/google-agentic-commerce/AP2)
- [Google UCP](https://developers.google.com/merchant/ucp)
- [Google UCP blog](https://developers.googleblog.com/under-the-hood-universal-commerce-protocol-ucp/)
- [Visa TAP](https://developer.visa.com/capabilities/trusted-agent-protocol)
- [Visa Intelligent Commerce](https://www.visa.com.sg/about-visa/newsroom/press-releases/visa-expands-visa-intelligent-commerce-across-asia-pacific-prepares-for-ai-commerce-pilot-by-early-2026.html)
- [Mastercard Agent Pay](https://www.mastercard.com/us/en/business/artificial-intelligence/mastercard-agent-pay.html)
- [Mastercard India live transactions](https://www.biometricupdate.com/202602/mastercard-brings-agentic-commerce-vision-to-india)
- [PayU + CoRover](https://smestreet.in/technology/payu-partners-corover-to-enable-ai-agentic-payments-in-india-11209510)
- [NPCI UPI Linking Specs](https://www.labnol.org/files/linking.pdf)
- [RBI Authentication Directions 2025](https://rbidocs.rbi.org.in/rdocs/PressRelease/PDFs/PR1165D250AB0389BE4D3D9E006CECD26F928E.PDF)
- [RBI digital payment rules 2026](https://www.business-standard.com/finance/news/rbi-two-factor-authentication-digital-payments-guidelines-2026-125092501154_1.html)
- [BusinessToday NPCI+Anthropic](https://www.businesstoday.in/technology/news/story/npci-anthropic-test-ai-driven-shopping-pilot-using-upi-payments-516761-2026-02-18)
- [TechCrunch India AI shopping pilot](https://techcrunch.com/2025/10/09/india-pilots-ai-chatbot-led-e-commerce-with-chatgpt-gemini-claude-in-the-mix/)
- [x402 vs Stripe MPP comparison](https://workos.com/blog/x402-vs-stripe-mpp-how-to-choose-payment-infrastructure-for-ai-agents-and-mcp-tools-in-2026)
- [NPCI UPI AutoPay](https://www.bhimupi.org.in/upiautopay)
- [Razorpay UPI AutoPay](https://razorpay.com/upi-autopay/)