What is this agent allowed to do?
AI agents pay for things by presenting signed payloads. Paste one, or just click a sample below, and get the answer in plain language.
New here? What these formats are and where you would meet them
Google's Agent Payments Protocol. A signed JSON mandate an agent carries to prove a user authorized a purchase. You'd receive one from an AP2-speaking agent at checkout.
The HTTP 402 payment flow used for machine-to-machine payments. This block is what a server returns and what the client signs back. You'd see it in network logs of an agent paying per call.
Agentic Commerce Protocol: the checkout session an AI assistant creates when buying from a merchant, with a shared payment token from the platform. Merchants see these on agentic orders.
Visa Intelligent Commerce: a tokenized payment credential issued to a registered AI agent, with network-side spend controls. Issuers and agent platforms handle these.
A commitment signed under a BLISK mandate: the institution's policy compiled into the signing key itself, plus a public attestation. Counterparties receive this with any commitment.
A widely used multisig treasury contract on Ethereum. Paste its 0x address and everything about its policy is on chain for anyone to read.
A smart account controlled by a BLISK-compiled key. On chain it looks like a single key; the policy is provable through the public registry without being exposed.
A bare public key or DID an agent identifies with. Alone it proves nothing; the question is whether a verifiable authorization exists for it anywhere.
The other outcome: a key with no verifiable authorization anywhere. This is what most agent keys look like today.