Agentic checkout just went live in the UK: what Hey Savi, PayPal and Debenhams mean for your store

On 2 June 2026, at Money20/20 in Amsterdam, PayPal and a London fashion-tech startup called Hey Savi announced what they describe as the UK's first agentic commerce platform with native in-app checkout, with Debenhams Group signed up as the first retailer [1]. Strip away the conference language and here is what it actually means: a shopper can now stand inside an AI app, ask for something, and buy it without ever touching the retailer's website. The agent finds the product, builds the basket, and pays. The store never gets the visit.

If you sell online, that last sentence is the whole story. For twenty years the job has been to get people to your site and convert them once they arrive. Agentic commerce quietly removes the site from the middle of the transaction. This piece is a sourced look at what just launched, how agentic checkout really works, whether the "UK first" claim holds up, and the specific things you should be watching and asking your own tech team before this becomes normal. Almost every factual claim links to a numbered source at the end.

What actually launched

Three names, three different roles, and it helps to keep them straight.

Hey Savi is the consumer app. It is a UK, female-founded fashion-tech startup that runs an AI-powered, brand-agnostic fashion search engine for womenswear: you search by photo, screenshot or text, and it ranks results by relevance across thousands of brands rather than by who paid for placement [2]. It raised a £2.2 million pre-seed in 2024, billed at the time as one of the largest all-female-founded pre-seed rounds in UK tech [3]. It is not a payments company. It is the shopping surface.

PayPal is the plumbing. The checkout inside Hey Savi runs on PayPal Agentic Commerce Services, a suite PayPal first announced back in October 2025 [4]. That suite has two halves worth knowing by name. "Store Sync" makes a merchant's product data, pricing, images, descriptions, reviews and stock, discoverable inside AI channels. "Agent Ready" lets existing PayPal merchants accept payments initiated by an agent, with fraud detection, buyer protection and dispute resolution carried over [4]. The Hey Savi launch is the first consumer showcase of that infrastructure in the UK, not a brand-new payment rail [1].

Debenhams Group is the first retailer through the door. One accuracy note here, because it matters: the Debenhams Group named in the release is the company formerly called Boohoo Group plc, which rebranded its trading identity to Debenhams in 2025 after buying the Debenhams brand out of administration. The legal entity is still Boohoo Group plc, since a shareholder vote fell short of the threshold needed to change the registered name [5]. So when you read "Debenhams" here, picture the online group that also owns PrettyLittleThing, Karen Millen and Boohoo, not the old high-street department store [5][6]. Its catalogue is the first to be made shoppable inside Hey Savi through PayPal [1].

How agentic checkout actually works

The word "agentic" is doing a lot of work in the marketing, so here is the mechanical version, because the mechanics are where your risks live.

There are three steps, and they map onto three different bits of technology.

First, discovery. The agent needs to read your catalogue. It does this by pulling a structured product feed or calling a set of tools you expose, increasingly over the Model Context Protocol, the open standard that lets an AI query an external system for things like search products, get product, get inventory and create cart [7]. Crucially, this is opt-in and pull-based. If your catalogue is not exposed as a clean feed or a tool endpoint, the agent cannot see you, and you are simply absent from the shelf [8].

Second, the basket. The agent assembles the cart on the shopper's behalf. Under Google's payment protocol this gets formalised as a signed "cart mandate", a tamper-evident record of the exact items and price the shopper agreed to [9]. The point of that signature is to answer a question that did not exist before: who actually authorised this, and to what exactly.

Third, payment, and this is the part that is genuinely new. The agent never sees a raw card number. Instead it is handed a tokenised credential that is scoped, in Stripe's version, to a specific merchant and a specific basket total [10]. Mastercard's equivalent binds the token to a specific agent, a specific merchant, and a specific consent policy, so it cannot be reused elsewhere [11]. Once the scope expires or is revoked, the token is dead [12]. In plain terms: the shopper delegates a narrow, time-limited, single-use permission to spend, rather than handing the agent their wallet.

One thing that has not changed, and you should hold onto it, is who the merchant of record is. Across every protocol live today, the order still lands in your backend, you accept or decline it, you charge, you remit the tax, and you handle fulfilment and returns [10][12]. The agent owns the conversation. You still own the obligation.

The bigger picture: this is a standards race, and nobody has won

It would be easy to read the Hey Savi launch as a one-off. It is not. It is one visible surface on top of a much larger fight over the rails that agentic payments will run on, and that fight is unresolved. Here is the field as it stands.

Two things fall out of that table. The first is that the payment side is converging on the same primitives, a tokenised credential scoped to agent plus merchant plus consent, with a signed record of intent, even though the implementations do not talk to each other out of the box [9][10][11]. The second is that there is no winner yet, which is precisely why Visa built a deliberately protocol-agnostic on ramp [15]. You are being asked to prepare for a standard that has not been settled.

Is it really a "UK first"? Sort of

Worth being honest about the headline, because your customers and your board will ask. The companies say this is the UK's first agentic commerce platform with in-app checkout, and the qualifier "with in-app checkout" is carrying the claim [1]. As a homegrown UK consumer app that pairs brand-agnostic AI discovery with native agent-driven checkout, it has a reasonable case.

As an absolute first, it is overstated. UK shoppers could already buy through US-origin agentic experiences: OpenAI's Instant Checkout in ChatGPT launched in late 2025, Klarna shipped an AI shopping app inside ChatGPT in May 2026, and Perplexity and Google have their own versions in the wild [10][13][16]. The accurate read is that this is the first time a British retail group has put its catalogue inside a British AI shopping app with the checkout built in. That is a real milestone. It is not the year zero of agentic commerce.

What early adopters should be watching

This is the part I would print out. The technology works. The open questions are commercial and legal, and most of them currently point at you.

Fraud and liability is the big one, and it is unresolved in the UK. The British Retail Consortium has been blunt that merchants continue to bear the financial risk of fraudulent transactions even when they have limited visibility into how the transaction was initiated [17]. A Payments Association survey found only 41 per cent of UK retail merchants were very confident they understood who is liable when an agent buys, and answers fragmented wildly on who pays for a disputed £2,000 agent purchase [18]. Until the protocols' audit trails are tested in a real dispute, the default lands on the merchant.

Chargebacks will get more interesting, not less. Friendly fraud is already the bulk of disputes, and adding a layer of agent abstraction gives customers a new and entirely plausible line: the agent ordered the wrong thing. If an agent misreads intent, the merchant is the one likely to eat the return and the chargeback [12].

Your catalogue is either discoverable or invisible. Because discovery is opt-in and feed-driven, the practical question is whether your product data is clean enough for a machine to trust. The targets being cited are things like the vast majority of SKUs carrying a brand and GTIN, near-total price parity between your feed and your product pages, and structured data on almost every product page [8]. If your feed and your site disagree on price, an agent will either skip you or sell at the wrong number.

Watch the fees. Today agentic transactions mostly flow through the commercial terms you already have with your payment provider [12]. But the platforms are openly hinting at future demand-based revenue sharing, and the referral economics for these channels are not yet disclosed [12]. The take rate is the thing to read carefully when the contracts arrive.

You lose the storefront. This is strategic, not technical. In an agent-mediated sale you keep the product data and the fulfilment, but you lose the merchandising, the upsell, the brand experience and the chance to be more than a row in a comparison. That is the real long-term trade, and it is worth a board conversation, not just an engineering one.

The questions to put to your own tech team

If you want to be ready rather than surprised, these are the concrete questions worth asking internally. None of them require you to commit to a protocol today. All of them make you ready for whichever one wins.

• Is our product data available as a clean structured feed and as structured data on the page itself, reconciled so the feed and the product page never disagree on price or stock [8]?
• Could we expose a Model Context Protocol endpoint, or a product feed, that lets an agent search our catalogue, check inventory and build a cart [7]?
• Can our backend receive an agent-initiated order, accept or decline it, charge a delegated token, calculate tax and confirm fulfilment [10]?
• Can we consume and validate scoped payment tokens, and treat agent identity, scope and consent as new trust signals at checkout [12]?
• Can we tell agent traffic apart from human traffic, log it, rate-limit it, and capture the consent and intent trail we would need to defend a dispute [19]?
• Which protocol or protocols do we back, and can a payment provider or a vendor-agnostic on ramp shield us from betting on the wrong one [15]?

The regulation is behind, and that is your problem too

Do not assume the rules have caught up, because they have not. The Financial Conduct Authority signalled in its March 2026 payments report that it may need to rewrite UK payments rules for autonomous agents [20]. The deeper tension is legal: existing UK payment rules assume a human cardholder responding to a real-time challenge, and an AI acting on delegated instructions does not fit that model cleanly [17]. PSD3, the next iteration of the European framework, still largely assumes a human at the keyboard, and is not expected to land before 2027 [17]. Existing consumer protection and data law applies regardless, and the Information Commissioner's Office has already flagged that agentic systems risk being handed access to more personal data than they need, against principles like data minimisation and purpose limitation [21][19].

That gap, between live technology and lagging rules, is exactly the space early adopters are stepping into. It is navigable. It is not nothing.

What to do now

You do not need to rush a protocol decision this quarter. What you do need is to be discoverable and defensible. Get your product feed clean and in agreement with your site. Make sure someone owns the question of how an agent would find, basket and buy your products. Read your payment provider's agentic roadmap so you understand the fees and the liability before you opt in, not after. And treat the loss of the storefront as a strategic question for the people who own the brand, not a technical footnote for the people who own the database.

The Hey Savi launch is small. The thing it signals is not. The shop window is moving inside someone else's app, and the retailers who get read cleanly by machines will be the ones on the shelf when it does.

Sources

1. PayPal newsroom, Hey Savi and PayPal launch UK's first agentic commerce platform with in-app checkout, 2 June 2026 - https://newsroom.paypal-corp.com/2026-06-02-Hey-Savi-and-PayPal-Launch-UKs-First-Agentic-Commerce-Platform-with-In-App-Checkout-Debenhams-Group-Joins-as-First-Retail-Adopter
2. Hey Savi - https://heysavi.com
3. PR Newswire, Hey Savi raises £2.2m pre-seed - https://www.prnewswire.com/news-releases/female-founded-uk-fashion-tech-start-up-hey-savi-raises-2-2m-pre-seed-investment-302194174.html
4. PayPal newsroom, PayPal launches Agentic Commerce Services, 28 October 2025 - https://newsroom.paypal-corp.com/2025-10-28-PayPal-Launches-Agentic-Commerce-Services-to-Power-AI-Driven-Shopping
5. WWD, Boohoo changes name to Debenhams Group - https://wwd.com/business-news/retail/ceo-boohoo-changes-name-debenhams-group-unveils-platform-model-1237040900/
6. Business of Fashion, Boohoo rebrands as Debenhams - https://www.businessoffashion.com/news/retail/boohoo-rebrands-as-debenhams-as-youth-labels-struggle/
7. Salt, the Agentic Commerce Protocol and structured data - https://salt.agency/blog/agentic-commerce-protocol/
8. OpenAI, commerce for developers (product feeds) - https://developers.openai.com/commerce
9. Google Cloud, announcing the Agent Payments Protocol (AP2) - https://cloud.google.com/blog/products/ai-machine-learning/announcing-agents-to-payments-ap2-protocol
10. Stripe newsroom, Stripe and OpenAI Instant Checkout and the Agentic Commerce Protocol - https://stripe.com/newsroom/news/stripe-openai-instant-checkout
11. BusinessWire, Mastercard unveils Agent Pay - https://www.businesswire.com/news/home/20250429047449/en/Mastercard-Unveils-Agent-Pay-Pioneering-Agentic-Payments-Technology-to-Power-Commerce-in-the-Age-of-AI
12. Checkout.com, agentic commerce questions answered - https://www.checkout.com/blog/agentic-commerce-questions-answered
13. CNBC, OpenAI revamps shopping in ChatGPT after Instant Checkout - https://www.cnbc.com/2026/03/24/openai-revamps-shopping-experience-in-chatgpt-after-instant-checkout.html
14. Search Engine Land, Google expands the Universal Commerce Protocol - https://searchengineland.com/google-expands-universal-commerce-protocol-and-launches-new-agentic-shopping-tools-478113
15. Visa investor newsroom, Visa opens the door to AI-driven shopping - https://investor.visa.com/news/news-details/2026/Visa-Opens-the-Door-to-AI-Driven-Shopping-for-Businesses-Worldwide/default.aspx
16. Digital Commerce 360, Klarna launches AI shopping app in ChatGPT - https://www.digitalcommerce360.com/2026/05/20/klarna-ai-shopping-search-app-openai-chatgpt/
17. British Retail Consortium, PSD3, agentic commerce and the new frontier of payment risk - https://brc.org.uk/news-and-events/news/associate-insight/2026/psd3-agentic-commerce-and-the-new-frontier-of-payment-risk/
18. The Payments Association, agentic commerce in UK retail, an unresolved liability question - https://thepaymentsassociation.org/article/agentic-commerce-in-uk-retail-an-unresolved-liability-question/
19. gov.uk, agentic AI and consumers - https://www.gov.uk/government/publications/agentic-ai-and-consumers/agentic-ai-and-consumers
20. Fintech and Digital Assets, FCA outlines priorities in annual payments report - https://www.fintechanddigitalassets.com/2026/03/fca-outlines-priorities-in-annual-report-on-payments-sector/
21. Information Commissioner's Office, early views on agentic AI - https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/01/ai-ll-get-that/