AI agents are buying.
Disputes still land on you.
Visa's Trusted Agent Protocol and Mastercard's Verifiable Intent verify agents at checkout. ChargeGuard captures that cryptographic proof, verifies it, and turns it into winning dispute evidence when the cardholder says "I never authorized this."
One npm package or a Cloudflare Worker paste. No processor changes.
The proof exists for about a week
When an agent buys on your site, the request arrives signed. The signature, the agent identity, the verification result: all of it passes through your stack and then disappears. Headers rotate out of logs. Verification results get consumed and discarded.
The chargeback arrives up to 45 days later. The cardholder's bank asks for evidence. "An AI bought it" is a sympathetic story, and all you have left is an order record.
If you verified the agent at checkout, you already generated the strongest evidence that exists for this dispute. The only question is whether it still exists when you need it.
Four moves, fully automatic
Capture at checkout
Our SDK or Cloudflare Worker grabs the signed TAP request headers, agent identity, and Verifiable Intent consent artifacts before your middleware throws them away.
Verify at ingest
Signatures are checked against live keys using RFC 9421 HTTP message signatures (Ed25519 and RSA-PSS). You get the verdict now, not 45 days later when keys have rotated.
Classify every order
Each order is tagged: tap_verified with a stored receipt, agent_ua_only with nothing but a user-agent string, or human. Your dispute strategy follows the proof strength.
Bundle for the issuer
When a dispute hits, the matcher pulls the order, attaches the protocol receipts, and generates an issuer-ready PDF with the authorization claim up front and the signatures behind it.
Every order gets a proof grade
You cannot pick a dispute strategy without knowing what proof you hold. ChargeGuard tags every order automatically.
Verified agent order
Signed request, verified against a live key. Receipt stored. Fight these disputes with confidence; the proof is cryptographic.
Unverified agent order
Looked like an agent, no protocol proof. These concentrate losses. Know which orders are in this bucket before the dispute arrives.
Human order
Classic evidence path: IP, device, delivery confirmation, terms acceptance. Nothing changes for these.