AI agents are already shopping your store. Know which ones to trust.

Merchants block AI agents because they look like bots, and lose the sale. AVA Pay™ verifies the cryptographic signatures real agents already carry: ChatGPT's signed traffic, Visa Trusted Agent Protocol, Google AP2, and AVA's own TAP-style profile. One verdict comes back, so good agents get in and you decide what their identity earns.

Install on the Shopify App Store See how verification works

One install. Four protocols. Your rules.

AVA Pay establishes who an agent represents, whether a buyer authorized the purchase, and what your store chooses to do about it.

Proof, not promises

Validated against the real ecosystem.

Validated against live traffic

Our verifier resolves OpenAI's published signing keys from chatgpt.com's live key directory and Visa's production JWKS, not test fixtures.

More than 500 tests across four protocols

Every verification path is exercised with real Ed25519, RSA-PSS, and SD-JWT cryptography, including forged, tampered, expired, and replayed requests.

Adopted by the IETF

Web Bot Auth is now an IETF working group document, draft-ietf-webbotauth-httpsig-protocol-00, adopted 2026-09-01.

SDK live on npm

npm install @ava-pay/agent, version 0.3.0 or later. 0.3.0 carries security fixes to the RFC 9421 and Web Bot Auth parsers, see the package changelog. Signers for all four protocols, MIT-licensed, open source.

Two ends, one handshake

Designed so both sides integrate in minutes.

01 For agents

Publish a key once. Verified everywhere.

Install one package and sign with whichever protocol your platform speaks: Web Bot Auth, Visa Trusted Agent Protocol, Google AP2, or AVA's own TAP-style profile. Keys resolve through a federated chain of the ecosystem's roots of trust: Visa's directories, Web Bot Auth key directories, and the AVA directory. If you already publish a Web Bot Auth key card, AVA Pay merchants verify you today, with no separate registration.

npm install @ava-pay/agent   # 0.3.0 or later

import { signWithWebBotAuth } from "@ava-pay/agent";

const request = signWithWebBotAuth({
  method: "GET",
  url: "https://shop.example.com/products/tool-1234",
  signatureAgent: "https://your-agent.example",
  privateKey,
});
// merchants verify it in single-digit milliseconds

Audience: Agent builders and issuers
Standards: IETF Web Bot Auth, Visa TAP (RFC 9421), Google AP2 v0.2 (SD-JWT delegation), Ed25519 / RSA-PSS

02 For merchants

One verdict. Your policy.

Add AVA Pay through the API, the open source WooCommerce plugin, or the Shopify app. Install it from the Shopify App Store or the WordPress.org plugin directory, or build against the API directly. Every agent request returns one protocol-agnostic verdict: who the agent is, plus the buyer-scoped mandate behind the purchase when the protocol carries one. Identity and spend authority are different things, and AVA Pay never confuses them: verified-identity traffic is admitted, but discounts and offers unlock only for mandate-backed requests unless you explicitly say otherwise. Replay-protected, fail-closed, rate-limited: the checks a trust layer should run on itself.

Verdict: Trusted, rejected, or could not check, each with a typed reason, in single-digit milliseconds
Audience: Merchants and commerce platforms

How a verified request flows

Follow a verification end to end.

The agent signs

The agent signs the request with its published key: a Web Bot Auth signature, a Visa TAP handshake, or an AP2 v0.2 delegation chain rooted in the buyer's own key.

AVA Pay verifies

AVA Pay resolves the key through the federated trust chain, verifies the signature, enforces freshness and single-use nonces, and validates any mandate against the cart: merchant scope, spend limit, constraint by constraint.

The merchant decides

You receive identity, protocol, and mandate. Then your policy runs. Admit verified agents, tier your discounts by trust level, or simply stop blocking the traffic that was trying to buy from you.

Honest by design

What a verdict means, and what it doesn't.

A verified identity proves which agent operator sent the request. A verified mandate proves a buyer authorized a purchase within limits they set. AVA Pay reports each precisely and never upgrades one into the other, because a trust layer that rounds up is not a trust layer. Where a spec is ambiguous, we document our interpretation in the open. Where a check can't be done yet, we say so instead of pretending.

AVA Pay

Built for the moment agents stop browsing and start buying.

Install on the Shopify App Store Talk to us