AI agents are already shopping your store. Give them rules. Keep the proof.
Sill verifies every AI agent, enforces your store rules at checkout, and keeps a tamper-evident record of every visit, cart, and purchase.
Set a dollar threshold. Above it, your team reviews and approves before the agent's order goes through.
High-value agent requests escalate to a named reviewer on your team. Approve or reject; either way the decision is written into a signed audit record with the reviewer's stamp. Simulated below.
WESTPORT JEWELRY POLICY · CAP $10,000 · HUMAN REVIEW ABOVE $1,000
Every mandate becomes a signed, timestamped record.
Every mandate leaves a signed, tamper-evident record — what was authorized, how it was resolved, and what settled — verifiable by anyone with standard open crypto. No Sill software required.
How Sill governs every agent interaction: identity, intent, proof
IDENTITY
Every request to the merchant carries a signed agent card naming who the visitor is, who deployed them, and what their public key proves. Unsigned traffic gets handled by your existing fraud rules. Signed traffic enters a different flow.
INTENT
Before money moves, the agent presents a signed mandate: the SKU, the cap, the merchant, the expiry, the signature. Sill evaluates it against your policy. A mandate that fails any rule never reaches Stripe to authorize the charge. Sill evaluates and signs; it never custodies funds.
PROOF
You get exportable proof of exactly what an agent was allowed to buy — action, merchant, SKU, amount cap, currency — and that no one changed it after the fact. Every evaluated mandate writes an append-only, signed record; where settlement follows, a matching signed record binds the outcome back to the authorizing decision. Any third party can verify the crypto with our published key.
What Sill enforces, before money moves.
Each mandate is evaluated against six categories of policy. The categories are public; your site's specific rules and thresholds live behind authentication.
Defaults ship safe. Customization is opt-in. The DSL is documented, versioned, and testable.
Signature validity, agent card freshness, organizational provenance, key rotation. Unverified agents are denied at the threshold.
Per-agent, per-merchant, per-time-window limits. Burst windows. Anomalous concurrency. Tunable per skill.
Amount caps, SKU allowlists, currency restrictions, geographic and shipping rules, bundle constraints.
Sequence analysis, velocity changes, suspicious ordering patterns, anomaly detection across an agent's request history on your site.
Merchant-defined policy expressions in a constrained DSL. Versioned, testable, deployable from the dashboard or via API.
Every decision is logged, signed, and retained. Exportable as a server-rendered HTML audit bundle.
Test your active policy against documented attacks.
Sill's policy is a 29-rule engine mapped to MITRE ATLAS, the OWASP LLM Top 10, and the OWASP Top 10 for Agentic Applications. Each rule is a named, versioned guardrail — and every evaluation is recorded in a signed, Merkle-chained audit record.
You see exactly which scenarios your policy catches and which slip through — before they become an incident.
One script tag, between the agent and your stack.
Sill runs at the edge, in front of your existing commerce stack. Agents arrive with signed HTTP requests; Sill identifies them, evaluates each request against your policy, and forwards approved actions to your existing processor — it never custodies funds.
Signed surfaces an arriving agent can read — and anyone can verify.
When a site is verified, Sill publishes machine-readable endpoints at the edge so agents can discover its identity, skills, and catalog. Each is signed with an ed25519 envelope, and the signing key is public — so anyone can verify a signature without trusting Sill.
GET edge.sill.so/v1/agent-card/{site_key}.jsonA signed, A2A-compatible card per verified site. Advertised skills are filtered to what the site actually exposes — no overclaim.
POST edge.sill.so/v1/mcp/{site_key}A live MCP endpoint exposing the site’s backed skills as tools. tools/call invocations are recorded to the audit log.
GET edge.sill.so/v1/catalog/{site_key}.jsonA signed ai-catalog.json. Each trust manifest carries a detached ed25519 JWS over its JCS-canonical payload, attesting identity and provenance; host identity is did:web.
GET edge.sill.so/.well-known/jwks.jsonThe signing key, published openly. Anyone can verify the card and catalog signatures with standard JWS + JCS tooling — no Sill code required.
Sill maintains public, control-by-control mappings between its guardrails and the security frameworks below.
Sill's guardrail engine maps to the LLM Top 10's highest-impact risks — prompt injection, excessive agency, and unbounded consumption.
Mandate identity, intent verification, and scope controls map to the agentic risks that matter — goal hijack, tool misuse, identity abuse, and rogue agents.
Mandate validation maps to MITRE ATLAS evasion, exfiltration, and impact tactics, including agentic supply-chain and command-and-control techniques.
Audit envelope and mandate exports support the Measure and Manage functions for AI system accountability.
These are implementation mappings, not certifications or attestations. Merchants remain responsible for their own regulatory compliance and any accredited audit their regulators require.
Pricing — agent commerce governance, priced like software
A mandate is a signed agent request to perform a sensitive action — a checkout, refund, order lookup, or shipment update. Each mandate is evaluated against your policy and produces one audit record. When paid tiers launch, billing is per mandate evaluated, not per agent visit.
Sill touches payment authorization, agent identity, and audit records — the parts of your stack where unclear answers matter.
What can I do with the free Discovery plan?
Identify agent traffic in your logs, publish a signed skill manifest so well-behaved agents discover your store, and see which actions agents would request. No payment authorization, no transactional authority — useful immediately for visibility.
How long does it take to install?
Under five minutes. Enter your domain, verify ownership, and add a one-line script tag from your dashboard. Your signed agent card and AI catalog go live immediately.
Can agents complete checkout automatically without my approval?
Only if you allow it. Each merchant defines what agents can do unattended (typically small repeat purchases) and what requires human review (high-value, refunds, account changes). The default policy ships conservative.
Does Sill process payments?
No. Sill evaluates and signs mandates; payment authorization stays with your existing processor (Stripe). We never touch funds.
Does this replace Stripe, Shopify, or WooCommerce?
No. Sill sits in front of your existing commerce stack. Approved actions are forwarded to your checkout, refund, or order systems unchanged. You keep the same processor, the same platform, and the same data ownership.
Do I need to support new agent protocols (A2A, AP2, MCP) yourself?
No. Sill normalizes inbound agent requests and presents them to your backend in a single format. As new protocols stabilize, we add support; your integration stays the same.
Can I block unknown or unverified agents?
Yes. The default policy declines mandates from unsigned or unverified agents. You can allowlist specific agent identities, require minimum verification levels, and rate-limit by principal.
Does Sill expose my private rules?
No. The rule categories are public so visitors and auditors understand what Sill enforces. The specific thresholds, allowlists, and policy logic for your site live behind authentication and are never returned in error responses or visible to agents.
Will this work with Shopify, WooCommerce, or a custom store?
The embed script installs on any site with one line of HTML. The Stripe transactional rail is live in a controlled single-account validation; broader onboarding is founder-gated pending compliance review. Shopify and WooCommerce connectors are live in test mode; live-mode settlement is not yet enabled.
Different question? Email [email protected] and we'll answer it directly.
Start seeing which AI agents are visiting your store. Free, takes minutes.
Every registered store gets published to AI agent discovery services with a signed identity that any third party can verify. Works with Shopify, WooCommerce, or any platform.