World's first · Agentic commerce
The world's first independently-verifiable conformance log for AI-agent purchases.
AI agents now buy on people's behalf. The mandate, the agent's identity, and the checkout are solved. The purchase itself was not provable, until now. AxioRank enforces the user's signed mandate at the agent's tool-call boundary and seals every purchase into a witness-co-signed log that a merchant, an issuer, and the buyer can each verify offline, with no trust in any network.
The accountability gap
Every layer of agentic commerce found an owner, except the one that decides who pays when an agent buys the wrong thing.
Mandate
AP2 · Mastercard
Proof a user authorized the agent.
Identity
Visa Trusted Agent
Proof of who the agent is.
Checkout
OpenAI · Stripe
Rails to complete the purchase.
No one could prove the purchase stayed within what the user authorized.
The witnessed conformance log, defined
A Commerce Conformance Seal is a portable, signed proof that one purchase stayed inside the mandate. Three properties make it a first.
Enforced
Checked at the agent's tool-call boundary, before money moves, not reconstructed after.
Witnessed
Sealed into a Merkle log with independent witness co-signatures, so no party can rewrite history.
Offline-verifiable
Merchant, issuer, and buyer each check it against a pinned key. No trust in any network.
Try it: does this purchase conform?
Adjust the mandate and the agent's purchase. The verdict, and the seal, flip live.
The mandate
What the user authorized.
Currency USD · merchants shop.example.com, *.trusted.com
The agent's purchase
What the agent tried to buy.
In scope. The seal would verify.
Within every clause of the mandate.
commerce: {
amount: 120, currency: "USD", merchant: "shop.example.com",
inScope: true
}How it works
Enforce the mandate
The gateway evaluates each purchase tool call against the agent's active mandate: spend cap, currency, merchant and category allowlist, time window.
Seal every purchase
It mints a Commerce Conformance Seal bound to the exact mandate and the audit leaf, sealed into a witness-co-signed Merkle transparency log.
Verify offline
A merchant, an issuer, or the buyer verifies the seal against a pinned key with the open-source package, and re-runs the mandate to confirm the verdict is honest.
Verify a real seal
Paste a Commerce Conformance Seal, and optionally the mandate, to check it offline against AxioRank's published key. Nothing you paste is stored.
Paste the mandate to also confirm the seal references it and the verdict is honest. Nothing is stored.
Reputation that travels
Every governed purchase adds to an agent's track record. AxioRank mints a signed Agent Commerce Reputation credential, a portable snapshot of its in-scope history, that the agent presents at checkout. A merchant verifies it offline and trust-tiers the agent on a provable record, not a promise.
Open and verifiable
The verifier is open source with zero dependencies. Pin the key once, hold the mandate, and confirm any seal yourself.
npm i @axiorank/audit-verify
import { verifyCommerceSeal } from "@axiorank/audit-verify";
const r = verifyCommerceSeal(seal, jwks, { mandate });
// r.checks.mandateBinding -> bound to THIS mandate
// r.checks.inScopeHonest -> the verdict is not refutedThe published key lives at /api/v1/audit/public-key. The seal carries the mandate hash, not the mandate, so it reveals nothing about the user's scope to a party who was not already given it.
Questions
What is a Commerce Conformance Seal?
A portable, Ed25519-signed proof that one AI-agent purchase stayed within the user's signed spending mandate. It records the amount, currency, merchant, a cart hash, the mandate hash, and an in-scope verdict, sealed into a witness-co-signed transparency log and verifiable offline.
Why is this a world's first?
The card networks and AI labs built the front half of agentic commerce: the mandate, the agent's identity, and the checkout. No one made the purchase itself independently provable. AxioRank is the first to enforce the mandate at the tool-call boundary and emit a witness-co-signed conformance proof a merchant, an issuer, and the buyer can each verify offline, without trusting any single network.
How is this different from Google AP2 or Mastercard Verifiable Intent?
Those issue the mandate, a held credential that says a user authorized an agent. AxioRank consumes that mandate and adds the missing back half: it proves the resulting purchase actually stayed inside it, in a witnessed log that cannot equivocate. It is complementary, not competitive.
Do I have to trust AxioRank to believe a seal?
No. Pin AxioRank's public key once, then verify any seal with the open-source @axiorank/audit-verify package. Witness co-signing means no party, including AxioRank, can show two different histories. That is the whole point.
Which plans include it?
Every plan, including Free. Agent-commerce conformance is the agentic-commerce wedge, so it is ungated to maximize adoption.
What is the Agent Commerce Reputation passport?
A signed snapshot of an agent's governed-purchase track record (in-scope purchases, out-of-scope attempts, since when) that the agent presents at checkout, so a merchant can trust-tier it on a provable record rather than a promise.
Lead agentic commerce on proof, not promises.
Register a mandate, point it at your checkout tool, and every purchase carries a proof you can hand to a merchant or an issuer. Live now, on every plan.