ProveTheBuy docs

Verify orders placed by AI agents at your checkout, and keep evidence that still checks out when the dispute arrives.

Quickstart

Install @provethebuy/verify, verify an agent's signed request at checkout in shadow mode, and read the decision. Express middleware included.

CLI and traffic-check

Run npx @provethebuy/cli traffic-check on an nginx or Apache log to see how many ChatGPT, Claude and Perplexity agents hit your store and checkout.

Protocols

Exactly what ProveTheBuy checks for each agent-commerce standard: RFC 9421, Web Bot Auth, Visa Trusted Agent Protocol, Verifiable Intent, AP2 and Stripe shared payment tokens.

Policy

Every option in the ProveTheBuy YAML policy: shadow and enforce modes, fail open, mandate handling, limits and agent reputation.

Architecture

The parts of ProveTheBuy, how data moves between them, and what a hash-chained evidence record holds.

Flows

Diagrams of how ProveTheBuy is set up, what happens when an agent places an order, and how a chargeback is answered months later.

Threat model

The threats ProveTheBuy protects against, including replays, edited requests, key rotation and over-limit orders, and how each is handled.

Roadmap

What ships next in ProveTheBuy: Python and Go verifiers, a Stripe App, and full AP2 support.