The Embedded Finance and Agentic Payments Glossary for UK Product Leaders
If you lead product or commerce at a UK brand, you will have sat in a meeting where someone said "mandate", "intent" or "tokenisation" and half the room nodded without being sure. The vocabulary of embedded finance and agentic payments is arriving faster than any single, trusted UK reference for it. That slows decisions, because teams that cannot agree what a term means cannot agree what they are buying.
This glossary defines 30 terms in plain English, grouped by theme. Each entry is written to stand alone, so you can read one without the rest. Where a term has a regulatory meaning, we outline it and point you to the regulator's own current wording, rather than paraphrase it as settled. Nothing here is legal advice; take advice for your own circumstances.
A note on evidence. Definitions are general explanations. Where we cite a market development, it comes from Innovify's October 2026 market-intelligence digests and is attributed to the original reporter. Search figures are keyword-tool estimates. For context, the same digests show that "agentic commerce meaning" is the easiest definition query in its cluster (difficulty score 19), and that UK buyers search "agentic payments" (about 210 a month) far more than "agent payments" (about 10), so we use the former throughout.
Foundations
These terms describe how a brand that is not a bank ends up offering financial services. Our Embedded Finance & Digital Wallets page covers the delivery side.
Embedded finance
Embedded finance is the offering of financial services, such as payments, accounts, lending or insurance, inside a non-financial company's own product or journey. The customer does not go to a bank; the service appears where they already are. The brand usually relies on a regulated provider behind the scenes.
Banking as a service (BaaS)
Banking as a service is an arrangement where a regulated provider makes its capabilities, such as accounts, cards or payments, available to other companies through APIs. The brand builds the customer experience; the provider holds the regulated activity. Keyword data shows it is a low-difficulty search term (difficulty score 23), so expect buyers to ask what it means.
Regulated partner model
The regulated partner model is the structure in which a brand launches a financial product on the permissions of a regulated firm rather than its own. Which activities the brand may itself carry on, and which stay with the partner, depends on the facts. Check the FCA's current wording and take advice.
Open banking
Open banking lets customers permit regulated third parties to access their bank account data or start payments from their account, using secure APIs. It underpins many account-to-account payment and data products in the UK. In the Industry digest, JPMorgan Chase was reported by Finextra, citing CNBC, to be blocking outside AI agents from direct access to customer accounts and backing open-banking routes instead (15 October 2026).
Open finance
Open finance extends the open banking idea beyond payment accounts to other data, such as savings, pensions, investments or insurance. Its scope and timing in the UK depend on policy and regulation that continue to develop, so check current regulator and government material. Keyword data shows it is also a low-competition search term.
Payment orchestration
Payment orchestration is a layer that routes a merchant's payments across several providers or methods through one integration. Teams use it to add methods, manage failures and avoid depending on a single provider. It is a technical and commercial term, not a regulated one.
Money and accounts
E-money
E-money is electronic value stored and issued in return for funds, which the holder can use to make payments. In the UK it has a specific regulatory meaning. Check the FCA's current wording before describing any balance in your product as e-money, and take advice.
Electronic money institution (EMI)
An electronic money institution is a firm authorised to issue e-money. Brands often work with one rather than becoming one. As an EU example, FinTech Futures reported on 15 October 2026 that Qivalis, a bank-backed euro stablecoin issuer, received a Dutch EMI authorisation under MiCA; that is an EU authorisation, not a UK one.
Stablecoin
A stablecoin is a digital asset designed to hold a steady value against a reference such as a currency. It is a growing payments rail. Mastercard launched its Global Money Platform offering fiat and stablecoin accounts through a single API, and Visa Direct stablecoin funding moved from pilot to commercial deployment, both reported on 15 October 2026 and both vendor-reported. Check current UK regulatory wording before designing a product around one.
Variable recurring payments (VRP)
Variable recurring payments let a customer authorise a payment arrangement, within agreed limits, so that later payments inside those limits happen without approving each one. They are built on open banking infrastructure. Scheme rules and availability change, so check the current wording from the relevant scheme and regulator.
Wallets and cards
Digital wallet
A digital wallet is an app or service that stores payment credentials, or a balance, so a customer can pay without re-entering details. An embedded wallet is one that sits inside a brand's own app. Wallet type matters: a wallet holding someone else's card is different from one holding a balance, and the second may carry regulatory implications.
Tokenisation
Tokenisation replaces a sensitive value, usually a card number, with a substitute token that is useless if stolen. Wallets and card schemes use it so real card details are not exposed at checkout. The Industry digest notes that scheme tokens and other agent-authorisation approaches currently coexist without a single standard (signal F09).
Contactless (NFC), Secure Element and HCE
NFC is the short-range technology behind tap-to-pay. A Secure Element is dedicated hardware that holds payment credentials; host card emulation (HCE) holds them in software. On 20 October 2026 the UK CMA proposed opening iPhone contactless access to Apple Pay rivals through both routes, as reported by Finextra. It is a proposal, not a final decision.
Agents, commerce and payments
These terms cover how AI agents shop and pay on a person's or organisation's behalf.
Agentic commerce
Agentic commerce is shopping or buying in which an AI agent acts for the customer, searching, choosing and sometimes paying. The question it raises is not whether agents can buy but who authorised them and who is liable if something goes wrong. Keyword data shows UK demand across the cluster is up about 3.3 times year on year.
Agentic payments
Agentic payments are payments initiated by an AI agent on behalf of a person or organisation, within limits that principal has set. It is the payments layer of agentic commerce. This is the phrase UK buyers actually search.
Agent-initiated payment
An agent-initiated payment is a single payment that an AI agent starts rather than a person. The difficult parts are proving the agent had authority and recording it. The Industry digest reports that Visa, BILL and Billtrust ran a live pilot of agents paying business invoices through Visa Intelligent Commerce, with "first" being Visa's own claim (reported 20 October 2026).
Machine-to-machine payment
A machine-to-machine payment is one in which software pays for a service, such as data or compute, from another system with no person at the checkout. Mastercard opened Early Access to Agent Pay for Machines, with buyer- and seller-side APIs in a sandbox (reported 20 October 2026). The digest also records machine-to-machine payments developing on stablecoin rails.
Authority, identity and trust
The Industry digest (signal F32) describes who authorises, and who is liable for, an agent's transaction as the dominant agentic-commerce theme for a third consecutive run. These terms are where that debate lives.
Mandate
A mandate is a recorded permission for a payment or series of payments. In agentic payments, it means the permission a person or organisation gives an agent, usually with limits on amount, merchant or time. The word also has a separate, established meaning in direct debit, so check which scheme's wording applies.
Intent
Intent is the record of what a customer wanted to buy, captured at the point they asked. In agentic commerce it links an agent's purchase back to a genuine instruction. American Express published an "Intent Intelligence" framework on 14 October 2026 linking authenticated purchase intent to agent transactions, according to The Paypers.
Delegated authority
Delegated authority is the power a person gives an agent to act for them, with defined limits. It is the central design question in agent payments: what may the agent do, for how long, and how is that proven afterwards? The Industry digest records a vendor ecosystem forming around it.
Know your agent (KYA)
Know your agent is the practice of establishing which agent is acting, who it acts for and what it is allowed to do, by analogy with know your customer. UK search interest is small, about 40 to 50 searches a month, and no single standard has emerged (Industry digest, signal F09).
Liability
Liability is who bears the loss when a transaction goes wrong. For agent payments the question is still being debated (Industry digest, signal F32), and the answer depends on contracts, scheme rules and regulation. Treat any claim of a settled position with caution, and take advice.
Protocols and network frameworks
Standards are multiplying. The Industry digest (signal F33) finds that no approach is displacing the others, which suggests caution about committing early to one scheme.
Agent payment protocol
An agent payment protocol is a shared set of rules letting agents, merchants and payment providers exchange the information needed to buy and pay. Different networks and platforms are sponsoring different protocols. Read each protocol's own documentation before relying on a summary.
Universal Commerce Protocol (UCP)
Universal Commerce Protocol is the protocol Google uses for checkout in its Universal Cart, which Google launched in the US with Google Pay on 15 October 2026, according to Google's blog. It is one of several competing approaches.
Card-network agent frameworks
Card networks have each launched their own agent approach. The Industry digest lists Visa Intelligent Commerce, Mastercard Agent Pay (including Agent Pay for Machines) and the American Express Intent Intelligence framework. Treat them as separate offerings, not one standard.
x402
x402 is a protocol used for machine-to-machine payments on stablecoin and onchain rails, according to the Industry digest (signal F10). It sits in parallel with card-network approaches. We do not describe its technical detail here; read the protocol's own documentation.
UK regulation at outline level
These are outlines, not legal conclusions. Always check the regulator's current wording.
FCA authorisation and permissions
The Financial Conduct Authority regulates many financial activities in the UK, and a firm generally needs authorisation or a relevant permission to carry on a regulated one. Whether your plan involves a regulated activity depends on the facts. Check the FCA's own material and take advice.
Regulatory perimeter
The regulatory perimeter is the boundary between activities that need regulatory authorisation and those that do not. The Industry digest (signal F35) notes that financial products distributed through third-party AI assistants raise perimeter questions. Where your product sits is a matter for advice.
Consumer Duty and senior-manager accountability
The Consumer Duty and senior-manager accountability are existing FCA frameworks. On 19 October 2026 the FCA, in a speech on finance in the age of AI, was reported to be applying existing frameworks like these to AI rather than creating new rules for agents, and said AI providers should add disclaimers to AI financial advice. Read the speech itself for the exact wording.
PSD2
PSD2 is the payments directive that introduced rules on open banking and strong customer authentication. The UK implemented these rules in its own regulations, so UK wording and EU wording can differ. Check the FCA's current material. For EU context only, the European Payments Council approved "Scarlet" on 19 October 2026, a framework for accepting EU Digital Identity Wallets in payments.
Where Innovify fits
Innovify is a technology partner with deep expertise in banking, financial services, fintech and insurance. We help mid to large businesses build AI-native products, modernise their technology stack and launch fintech products, and we build for regulated clients. We design compliance in from day one, and we are an implementation partner across multiple fintech platforms.
If a term in this glossary is about to turn into a roadmap item, our Embedded Finance & Digital Wallets and Agentic Commerce & Payments pages describe how we approach each. If you want to talk it through, get in touch.
FAQ
What is an embedded finance glossary used for?
An embedded finance glossary gives product and commerce leaders a shared vocabulary for terms such as BaaS, e-money and tokenisation. It helps teams agree what they are buying and what a regulator or partner expects. Where a term has a regulatory meaning, check the regulator's current wording.
What is the difference between agentic commerce and agentic payments?
Agentic commerce is the wider activity of an AI agent shopping or buying for a customer, while agentic payments are the payments such an agent initiates. Agentic payments are the payments layer of agentic commerce. The hard questions in both are authority, identity and liability.
What does a mandate mean in agentic payments?
In agentic payments, a mandate is the recorded permission a person or organisation gives an agent to pay, usually with limits on amount, merchant or time. The word also has an established meaning in direct debit, so check which scheme's wording applies before using it in a contract or product description.
Is e-money the same as a stablecoin?
No. E-money is electronic value issued in return for funds, and in the UK it has a specific regulatory meaning. A stablecoin is a digital asset designed to hold a steady value against a reference such as a currency. How either is regulated depends on the facts, so check the FCA's current wording and take advice.
Do I need to pick an agent payment protocol now?
Probably not yet. The Industry digest finds that agent-commerce standards keep multiplying with no convergence, so committing early to one scheme risks rework. This is our interpretation of that finding, not a rule. Design so that the protocol can change, and review as the market settles.
Conclusion
The vocabulary of embedded finance and agentic payments is still settling, and several of its terms carry regulatory weight. The safest habit is to define each term in plain English for your team, note where a regulator's or scheme's own wording governs, and revisit the list as standards develop. Treat this glossary as a starting point, and take advice for your own circumstances.
