No operator on file
An agent presents a session, not a company. Nothing in the request tells you which business runs it, or whether that business exists.
KnowYourAgent (KYA) resolves an AI agent to the business running it, validates the signed authorization its principal issued, and keeps the record that settles the argument later. Two API calls at your checkout edge, plus a side-channel for when something goes wrong.

An agent arrives at your checkout with a card and an order. Nothing in your stack can tell you who told it to buy, what they capped it at, or who answers for it when the order is wrong.
KYA answers all three. The operator registers under KYB and issues a signed trace carrying the principal hash and spend scope. The merchant resolves the agent and validates that trace at checkout. Both sides keep a record they can pull into a pre-dispute case. Banks did this for people and called it KYC. Agents need the same thing, minus the assumption that there is a person on the other end of the session.
Every agent ID resolves to a KYB-registered business, not an anonymous session.
/api/v1/verify returns accept, review, or decline. /api/v1/checkout/sessions fails out-of-scope orders with a named reason code.
Verification IDs, trace IDs, and checkout-session records stay retrievable months later, when someone finally asks.
None of them are fraud problems, which is why fraud tools miss them.
An agent presents a session, not a company. Nothing in the request tells you which business runs it, or whether that business exists.
An agent that burned three merchants last week arrives at the fourth looking brand new. There is no standard record of how it has behaved.
Every unrecognized agent order becomes a manual review. That works at ten orders a day and collapses at ten thousand.
A verification protocol for shopping agents. Each agent registers against a KYB-verified operator and carries a signed, revocable ID. Merchants resolve that ID at checkout and get a recommendation, the reasons behind it, and a record they can cite later.
Agents don't carry the signals fraud tools were built to read — no cookie history, no browser fingerprint, no velocity profile that looks human. KYA answers the two questions the fraud stack can't: which business runs this agent, and what did its principal authorize it to spend?
We onboard by hand while the platform is in its design-partner phase, so expect a real person on the other end.