# Payment readiness

Payment processing in agentic commerce follows a model where the AI platform facilitates the transaction but your PSP handles the actual authorization and capture. You remain the merchant of record for every transaction.

## PSP setup

Ensure your Payment Service Provider account is active and configured:

- Obtain the necessary API credentials (secret keys, merchant IDs).
- Configure webhook endpoints for order status updates (the integration component handles webhook URL configuration during setup).
- Verify that your PSP supports the payment authorization flow required by the AI platform.

## Payment authorization flow

The typical agentic payment flow works as follows:

1. **Payment selection:** the customer selects a payment method within the AI agent's interface.
2. **Token generation:** the AI platform generates a secure, single-use payment token and passes it to your integration.
3. **Authorization:** the integration component authorizes the payment through your PSP's API using the token. The token is limited to the specific transaction amount and your merchant account.
4. **Order creation:** after successful authorization, the integration creates an [Order](/api/projects/orders.md) from the [Cart](/api/projects/carts.md) in your commercetools Project.
5. **Payment capture:** your backend system captures the payment during fulfillment using your existing capture process. Update the Payment object in your commercetools Project with a [Charge Transaction](/api/projects/payments.md#transactiontype) to keep your commercetools Project as the complete source of truth.

The actual implementation details, such as the specific token format, PSP integration steps, and error handling, depend on the AI platform and PSP you are using. Consult the documentation for your specific integration.

## Payment security

Agentic payment workflows typically include the following security characteristics:

- Payment tokens are single-use and cannot be reused.
- Tokens are constrained to the approved transaction amount.
- Tokens have short expiration times.
- You retain full control over captures, refunds, and chargebacks with your PSP.

The AI platform and integration components facilitate passing the token but do not process funds. You remain the merchant of record and maintain the same control and responsibilities as with any other Order.

## Key takeaways

- Ensure your PSP account is active with valid API credentials before setting up an agentic commerce integration.
- The payment flow uses secure, single-use tokens: the AI platform generates the token, your integration authorizes through the PSP, and you capture during fulfillment.
- You remain the merchant of record for all transactions; the AI platform does not process funds.
- Payment tokens are single-use, amount-constrained, and short-lived for security.
- Specific implementation details depend on your AI platform and PSP combination.

## Test your knowledge

On the next page, you will find a readiness checklist and automated validation script to verify your Project configuration.

## Related pages

- [Area overview page with navigation](/learning-prepare-for-agentic-commerce.md)
- [Previous page: Checkout readiness](/learning-prepare-for-agentic-commerce/prepare-for-agentic-commerce/checkout-readiness.md)
- [Next page: Production readiness](/learning-prepare-for-agentic-commerce/prepare-for-agentic-commerce/production-readiness.md)