Explore AffixIO

Plain answers to common questions about AI agent verification, agentic payments, delegated checkout, transaction intent proof and privacy preserving eligibility.

affixio-agent-guard is a free, zero dependency npm package that checks every LLM or MCP tool call against policy before it runs. Unknown tool, unsafe host, over-limit amount or leaked secret is denied before execution, with a local receipt. No API key, no network.

A practical AffixIO demo page showing how AI agent identity, payment intent, spending limits and merchant policy are checked before checkout.

AEO, GEO and ACO for AI shopping agents, agentic checkout and proof-ready commerce with AffixIO.

Learn how AffixIO helps teams manage AI agent checkout risk, transaction intent, permission scope and signed proof records.

Agentic demo: AffixIO proves tool access before Ollama answers. Only proof_id and decision reach the model, never the raw credential. Enter any name to run allowed vs denied.

Agentic Pay Kit for AI purchase workflows: check delegated authority and retain evidence before payment, including personal-superintelligence applications.

Agentic payments and AI checkout verification for AI shopping agents, Grok Bot style cloud agents, Muse AI style personal agents, AP2, MPP, x402, Visa TAP, Shared Payment Tokens, MCP tool payments and agentic commerce. Run a live AffixIO proof demo in test mode.

AffixIO verifies AI agent payments by checking agent identity, delegated consent, transaction intent and policy fit before checkout, with ML-DSA-65 attestation and Merkle audit evidence.

An agent that can shop is not a payment an organisation can stand behind. BoundProof is the permission boundary before money moves. The merchant keeps their payment provider.

AffixIO helps marketplaces verify AI agent spending limits, seller policy, buyer consent and transaction intent before marketplace actions proceed.

Plain English comparison of agentic payments, AI payments, AI checkout, machine payments and agentic commerce proof.

Agentic payments infrastructure for proving AI agents have permission before checkout, wallet use, x402 flows, AP2 style mandates and paid tool calls.

AffixIO helps ecommerce merchants verify AI agent checkout intent, spending scope and merchant rules before delegated purchases are accepted.

AI agent identity infrastructure for proving which autonomous system is acting, what it can do, and whether a policy allows it.

Learn where AI agent payment risk appears in agentic commerce and how AffixIO helps merchants verify intent, spending limits and delegated permission before checkout.

AI agent permissions for MCP tools, browser automation, paid APIs, account changes, checkout, exports and enterprise workflows.

AI agent safety for rogue agents, MCP tool calls, browser agents, agentic checkout, AI payments and autonomous workflows. AffixIO verifies consent, policy and intent before agents act.

Set and prove AI agent spending limits for autonomous purchasing, agentic checkout, paid APIs and MCP tool calls.

How to capture user consent for AI agent transactions: approval scope, spending limits, expiry, revocation and the evidence to retain. Includes a worked example.

AffixIO gives PSPs and payment infrastructure teams a verification layer for AI agent intent, delegated authority and payment policy checks.

How AI agent verification checks identity, delegated authority, user consent, wallet scope and policy before an autonomous agent can make a payment or take action.

AI commerce verification for shopping agents, merchant checkout, delegated consent, payment mandates and signed agent proof.

A merchant guide to AI shopping agent checkout, trusted agents, bot distinction, consent proof and agentic payment verification.

Understand AP2 payment mandates, agent consent and delegated checkout. AffixIO adds a signed allow, deny or review decision before an agent payment proceeds.

BoundProof Agent auto-provisions an isolated AffixIO area, agent_id and agent-only API key for software agents that need scoped proof access before opening AffixIO Hub.

Compare BoundProof with traditional logs for eligibility checks, agent decisions and audit evidence where teams need proof without long-term data sprawl.

BoundProof shows how AffixIO proves a holder has a valid test credential for a specific action and page, without sending a name, email, or credential contents. Live demo, no API key.

Where AffixIO fits when Grok Bot style cloud agents, browser agents and autonomous tools trigger paid actions.

Understand AI agent verification, delegated consent and action evidence. Learn why SI and ASI capability claims do not establish authority to act.

Issuers and wallets can verify whether an AI agent payment matches delegated user consent, amount limits, expiry and wallet session scope.

AffixIO Know Your Agent gives enterprise teams AI agent identity, runtime capability policy, and PII-free action proofs. Enrol once, authorise every tool call, audit later. No third-party agent API required.

How AffixIO complements Machine Payments Protocol, MPP, recurring agent payments and machine-to-machine payment proof.

A merchant readiness checklist for AI shopping agents, agentic payments, delegated checkout, spending limits and proof-backed permission checks.

Use this AffixIO guide to assess whether a checkout, API or commerce workflow is ready for AI agents and delegated actions.

Merchants can verify AI agent identity, consent fit and transaction intent during checkout before order creation or payment capture.

How Muse AI style personal agents, AI shopping agents and app-task agents need proof, consent and spending controls before checkout.

AffixIO explains where proof-before-action fits around Personal Agent Consent & Trust Protocol flows, A2A Agent Cards, OAuth consent, delegation tokens and signed receipts.

AffixIO explains where proof-before-action fits around Sierra and Meta Personal Agent Protocol sessions, OAuth access, MCP tools, OpenAPI routes and agentic commerce.

How AffixIO relates to Visa Trusted Agent Protocol, trusted agent checkout, bot distinction and agentic commerce proof.

How AffixIO complements x402 by verifying AI agent permission before HTTP 402 payment requests become spend.

Step-by-step worked example showing how a lender re-validates KYC eligibility on existing records without copying customer files into a central PII warehouse.

Plain-language guides on age assurance, right to work, post-quantum attestation, privacy-preserving eligibility, and offline proof queues from AffixIO.

A comparison of AffixIO local eligibility proof against traditional hosted identity verification bureaus: data flow, audit, outage behaviour, and when each fits.

A plain guide to UK age assurance law: the Digital Economy Act, age-appropriate design, and what businesses must do without sending ID documents to a third party.

Agentic Verification, written for the operator who has to answer allow or deny with an audit trail someone else can read.

The August 2026 Manchester Airports Group breach hit 8.7 million passengers. Aviation security held. WiFi and parking data did not. Where operators sit, how extortion groups reach commercial systems, and what to do now.

Peak trading turns checkout and seller verification into eligibility gates. AffixIO fits as a signed allow or deny beside the host that already holds the basket or listing, without copying buyer files into a bureau stack.

Traffic is easy to count and hard to qualify. Here is how AffixIO returns signed eligibility verdicts at the gate, so genuine sessions pass and nothing extra gets stored. Human-written UK English.

When connectivity drops, eligibility checks cannot freeze. Offline-proof queues hold signed provisional outcomes until the host reconciles with upstream policy.

What a stateless, post-quantum verification node actually does, why the SDKs stay thin, and how to wire one against a host you control. Written for engineering teams in UK English.

Marketplace Seller Verification, in the UK. Listing and seller verification with a signed eligibility outcome beside the host that holds the seller record.

ECDSA signatures are fine today but sit on NCSC migration timelines. ML-DSA-65 (FIPS 204) changes what verifiers must accept and how long attestations remain trustworthy.

AffixIO platform scale facts from August 2026: 115 compiled circuits, 1,547 Merkle audit leaves, 20,000 logged API events, ~11 MB data footprint, and why we publish incidents instead of synthetic uptime.

Eligibility checks fail privacy when the whole record travels to a vendor. Privacy-preserving design proves the question on the host that already holds the data.

How to migrate right to rent and right to work checks from manual document review to API-driven eligibility without storing copies of passports in a third-party vault.

AffixIO SDK integration test results from 28 August 2026: 101 offline proofs per second, 78 ms online round trip, 267-scenario batch with zero false positives, and what the one rate-limit failure means.

AI agents now browse, compare, and checkout without a human at every step. Here is where verification breaks down during peak trading, and how eligibility-shaped decisions keep commerce honest. Human-written UK English.

Compare AffixIO with traditional KYC approaches for AI agents, delegated checkout and machine customers.

Compare AffixIO with Persona for privacy, AI agents, permissions, verification and future-ready proof infrastructure.

Compare AffixIO with Stripe Identity for privacy, AI agents, permissions, verification and future-ready proof infrastructure.

Compare AffixIO with Traditional KYC for privacy, AI agents, permissions, verification and future-ready proof infrastructure.

Compare AffixIO with Veriff for privacy, AI agents, permissions, verification and future-ready proof infrastructure.

Compare AffixIO with World ID for privacy, AI agents, permissions, verification and future-ready proof infrastructure.

Compare agent verification and bot detection for AI agents, shopping agents, tool calls and agentic payments.

Move from AffixIO 1.x to AffixIO 2.0 beta with canonical package guidance, Node.js 20, legacy package names and capability gating explained.

Start with the AffixIO SDK 2.0.4, API authentication, OpenAPI reference and external data checks. Find proof, consent and checkout integration guides.

One map of every way into AffixIO: Node and Python clients, HTTP API, remote MCP, signed webhooks, SIEM export, Hub, agents, and edge packs. Use this for enterprise onboarding.

Developer examples for OpenAI agents, LangChain, CrewAI, Stripe payment approval, autonomous shopping agents, ticket purchasing, browser automation and financial assistants.

There is a browser and edge package, affixio-web, as source rather than a surprise npm WASM prover. Light is not zero knowledge. Keep API keys on a server you control.

Build on AffixIO: affixio and documented Node SDKs, REST with ML-DSA-65 attestation, and a remote MCP server so agents call the live contract instead of guessing paths.

A practical proof library for AffixIO buyers and developers, including sample decision records, webhook evidence, agent mandates and audit objects.

The affix-io Python package installs from source, not public PyPI. AffixClient for the API, AffixLight for local HMAC decisions, webhook signature checks, Merkle notes. Standard library first.

Canonical AffixIO 2.0 beta release page for affixio, Node.js 20, legacy package guidance, KYA, local-only mode and connected verification.

AffixIO 2.0.4 for Node.js: evidence workflows and action checks for applications and AI agents, with guidance on SI and personal superintelligence.

Implementation guide for affixio 2.0.4 on npm. Node.js 20 SDK: HMAC prove by default, optional UltraHonk, ML-DSA-65 attestation where enabled, data adapters, QR carriers, spend journal, CLI. Licence check only unless you opt in to remote sync.

One affixio package, two proof modes. Compare local UltraHonk zero-knowledge proofs and HMAC evidence, runtime requirements and verification boundaries.

Build and inspect a simple AffixIO-style request shape for agent checkout, paid API calls and permission checks before controlled actions.

AffixIO pushes proof.created, proof.verified, proof.spent, merkle.leaf_appended and key.revoked to your HTTPS receiver. HMAC-SHA256 over timestamp and body, five minute replay window, documented retries.

BoundProof Agent documentation for isolated agent areas, agent-only API keys, usage endpoints, single-use Hub codes and scoped AffixIO Hub access.

Use the AffixIO SDK to check SQL records, HTTP JSON APIs and file exports, then produce a yes or no proof. Includes lookup examples and error handling.

AffixIO reference for AI agents, superintelligence (SI), ASI and personal superintelligence: scoped permission, verification evidence and integration boundaries.

Integrate AffixIO with API middleware, MCP agents, LLM tool gates, webhooks, and offline workers. Direct API and SDK patterns for production.

MCP execution-time authorization for AI tools: enforce scoped permission before an action. SI and personal superintelligence do not replace access controls.

Pull AffixIO verification events as newline-delimited JSON: one object per line, typed events, ISO-8601 timestamps. Point your shipper at the spool. Keep a pull cursor on disk.

Agentic payments are payments initiated, prepared or completed by AI agents under a user or organisation policy. Learn how AffixIO applies this to agent permissions and privacy-preserving verification.

AI agent identity connects an autonomous software actor to an account, policy, scope and audit trail. Learn how AffixIO applies this to agent permissions and privacy-preserving verification.

Autonomous commerce is buying, selling, reserving, comparing and paying through AI agents. Learn how AffixIO applies this to agent permissions and privacy-preserving verification.

Delegated checkout explained for AI shopping agents, agentic commerce and permission-based payment workflows.

AffixIO glossary: ML-DSA-65, UltraHonk, Merkle audit, circuits, claim hashes, and SDK terms defined for developers and AI agents.

Machine identity proves which software, workload, device, key or service is making a request. Learn how AffixIO applies this to agent permissions and privacy-preserving verification.

A permission layer checks whether an actor is allowed to perform a specific action in a specific context. Learn how AffixIO applies this to agent permissions and privacy-preserving verification.

Proof infrastructure produces verifiable evidence that a claim or permission check passed. Learn how AffixIO applies this to agent permissions and privacy-preserving verification.

Transaction intent proof explained for AI agents, delegated payments, agentic checkout and verified action workflows.

A trust layer gives applications proof, policy and audit evidence before they accept an action. Learn how AffixIO applies this to agent permissions and privacy-preserving verification.

Zero knowledge verification proves a claim without revealing unnecessary underlying data. Learn how AffixIO applies this to agent permissions and privacy-preserving verification.

Website architecture, keyword map, developer documentation structure, GitHub structure, growth strategy and week-by-week backlog for AffixIO.

AffixIO Hub on www: API status, Merkle audit leaves, ML-DSA-65 attestation, BoundProof holder pass, and the path to named keys. Working console is hub.affix-io.com.

AffixIO SDK pricing in GBP, USD and EUR. Agentic Pay Kit, npm package access, x402-style checks, MCP tool gates, proof quotas and tiered overage are included in the existing plans.

Check your records or connected data sources, return a clear yes or no, and keep verifiable evidence. AffixIO for eligibility, access and agent permissions.

Age verification API for privacy-preserving 13+, 16+, 18+ and policy-based eligibility checks with signed outcomes.

AI agents get 150 free AffixIO SDK proofs; eligible new Hub account holders (humans) get 100. No card required. 30-day expiry.

How AffixIO verification works: local prove on your host, AffixIO verify and ML-DSA-65 attestation, Merkle audit, and offline queue flush.

KYC API infrastructure for signed eligibility outcomes, privacy-preserving checks, audit trails and agent-ready onboarding.

AffixIO platform capabilities: binary verify, circuit policy, ML-DSA-65 attestation, Merkle audit, and offline queue behaviour.

Privacy-preserving verification for age assurance, KYC, AI agent permissions, compliance gates and signed eligibility outcomes.

Verification for eligibility, access and AI agent permissions. Explore action checks and evidence for applications, including personal-superintelligence workflows.

A primary-source research map for AI agent authorization, source verification, audit evidence, policy controls, privacy-preserving proofs and agentic payment decisions.

Try recursive agent workflows and a real AffixIO API demo: sign a calculated result, verify its ML-DSA-65 attestation and detect an altered payload.

Explore a SkillGym-inspired workflow lab for AI agents: instantiate a task, compare a baseline with a guided skill, verify the outcome and create an AffixIO evidence record.

Reduce agentic checkout fraud risk by checking AI agent permission, spending limits and transaction intent before payment.

Enterprise AI governance: pre-inference policy gates, agent permission receipts, model registry entitlements, and signed allow or deny before prompts reach a model.

Add permission checks before AI agents trigger paid API calls, expensive compute, account changes or sensitive tool access.

AffixIO for UK banking: mortgage eligibility, motor finance gates, sanctions-aware KYC outcomes, and signed ML-DSA attestations without shipping core banking records to a hosted IDV vault.

UK telecom operators: automatic compensation eligibility, activation gates, outage proofs, and Ofcom-aligned service checks with signed customer outcomes.

Verify delegated payment consent for AI agents, software-led checkout and business workflows before a paid action completes.

Logistics and fleet operators: MOT, tax, ULEZ, insurance and drive or do not drive gates with exportable evidence blocks for dispatch desks.

Age assurance for UK gambling and gaming operators: 18+ eligibility, venue admission QR, and Online Safety Act aligned gates without building a parallel identity warehouse.

UK public sector eligibility: benefits routing, security clearance role gates, right to rent/work for councils, and ballot-style audit receipts with ML-DSA attestation.

Hospitality operators: check-in age gates, loyalty tier proofs, corporate rate eligibility, and group booking gates with signed AffixIO outcomes.

AffixIO industry solution pages cluster twenty-three public tools by vertical: banking, gambling age gating, recruitment, marketplaces, government, hospitality, travel, fleet, education, telecom, and enterprise AI governance.

Help marketplaces verify AI shopping agents, seller actions, buyer mandates and delegated checkout before orders or reservations are created.

Marketplace trust and safety: seller eligibility, high-value listing gates, travel seller checks, and signed outcomes without centralising buyer PII in a hosted bureau.

UK recruitment and hiring: right to work checks, clearance-style role gates, and signed pass or fail outcomes without uploading passport images to a third-party vault.

Control SaaS plan changes, usage increases and paid add-ons triggered by AI agents or delegated workflows.

Airlines and travel operators: passport validity, visa, insurance and vaccination gates with GOV.UK travel advice and signed boarding proofs.

Schools and universities: UCAS points, offer matching, academic eligibility, and privacy-preserving subject_ref proofs without building a student PII warehouse.

AffixIO use cases: age assurance, KYC gates, consent verification, agent permissions, offline retail, and policy eligibility without PII retention.

A-Level results day tools: UCAS tariff calculator, offer eligibility proofs, DfE subject statistics, universities near a postcode, and signed AffixIO edu-circuit results.

Explore AffixIO tools for identity, eligibility, AI agent permissions and signed decisions, with data sources and regional coverage explained in each demo.

Run a UK-style age verification gate for 13+, 16+ or 18+. Age Pass evaluates a date of birth for this request and returns a signed AffixIO eligibility result. Not a stored identity profile.

AGENT BREAKOUT: nine missions where you instruct a local agent and Open Policy Agent WASM returns allow, deny or step-up with a signed AffixIO receipt. No live customer systems.

Decide whether an AI request may hit a model: policy, safety, entitlement, and residency checks before inference. Allow or deny with the failing rule and a signed AffixIO proof.

Ticket Pass is an AffixIO anti-scalping gate: rotating door QR, one-scan consume, door OTP, and double-spend rejection with affixio style proofs.

Public feed of service-generated responses to authenticated AffixIO agent submissions, with proof references where available. Original submissions are not public.

Check UK broadband or phone activation and automatic compensation eligibility in the browser. Yes or no, remediation steps, and a locally signed support record. Not a provider claim form.

Validate any payment card number in real time. Luhn algorithm check, card type detection and length validation. Pure browser logic, no network call. Verdict signed by the live AffixIO API.

Hash AffixIO-style eligibility claims in the browser with Web Crypto SHA-256. Build an opaque subject_ref and claim digest without an API key.

Convert an amount between thirty currencies at the official European Central Bank reference rates, check it against a budget, and get a verdict signed by the live AffixIO API. No API key.

Doomsday Cinema: plug the affixio SDK into a multiplex running the Avengers: Doomsday tentpole and monitor crowd flow with signed yes/no proofs. HMAC by default, optional UltraHonk, ML-DSA-65 attestation where enabled.

AffixIO Edge Audit is the cornerstone demo: a local synthetic PII store, subject_ref only on the wire, and signed eligibility proofs. Names and NHS numbers never leave the host.

Validate any email address in real time. Syntax check, MX record lookup, disposable domain detection and role-address flagging. No API key. Verdict signed by the live AffixIO API.

Validate an IBAN with browser-based format, country-length and MOD-97 checksum checks. No sign-up. See test examples and what the result can and cannot prove.

Look up a UK registration for live MOT and vehicle tax, then add clean air context. Plate Pass shows why people still pay for car reports when GOV.UK history is free, and returns a signed AffixIO result.

Pick a country and find out whether today is a public holiday, plus the date of the next one. Calendar data from the free Nager.Date API, verdict signed by the live AffixIO API. No API key.

Find lodging on OpenStreetMap, read GOV.UK bank holidays, and run AffixIO check-in age, loyalty, corporate rate and group stay gates with signed proofs.

PQC Gauge shows why AffixIO production attestation uses ML-DSA-65 (NIST FIPS 204). Compare ECDSA and ML-DSA sizes, harvest-now decrypt-later pressure, no API key.

Finance Gate checks mortgage and motor finance style gates against live Bank of England Bank Rate and FX context, with AffixIO credit, income and LTV-style proofs.

Enter a UK registration, postcode and date. Drive Pass unifies MOT, vehicle tax, and clean air zone or ULEZ checks into one drive or do not drive outcome with an exportable evidence block.

Independent AffixIO demo, not a partner of Ohme or any brand named. Volvo, Polestar and Volkswagen Group employees explore a free 7kW Ohme home charger claim with zero-PII eligibility and one signed proof.

Ballot Pass is a one-time voting demo: terminal ballot boxes, AffixIO QR drag identity with zero PII, and ML-DSA-65 attestation. A spent ballot cannot be used again.

Check any password in real time. Entropy and pattern scoring plus a live check against the Have I Been Pwned breach database using k-anonymity, so the full password is never sent. No API key. Verdict signed by the live AffixIO API.

Verifiable AffixIO platform numbers: 115 compiled circuits, 1,547 Merkle audit leaves, SDK throughput benchmarks, API latency, and zero recorded incidents since the status log opened on 15 August 2026.

Shelf Pass explains why people still pay for Plex Pass when Jellyfin is free, with live open interest, then runs AffixIO household viewing eligibility checks.

A full screen live earthquake map. Watch every quake happen in real time with exact epicentre pulses, magnitude warnings and signed AffixIO proofs. No API key.

Right Pass helps landlords and employers make a tenancy or hiring decision from non-PII attributes, with remediation on fail and a signed AffixIO evidence block. Not a Home Office share-code service.

Test synthetic UK right to rent and right to work scenarios, compare the route with GOV.UK guidance, and receive a signed AffixIO eligibility proof. Not an official Home Office check.

Check a UK registration for live MOT and vehicle tax, confirm an insurance declaration against askMID guidance, and receive a signed AffixIO road-legal proof ID.

Pick a city anywhere on Earth and check today's peak UV against the WHO sun bands. Open data from Open-Meteo, verdict signed by the live AffixIO API with ML-DSA-65. No API key.

Pick a city on Earth and find out whether it is inside sensible calling hours right now. Uses the open IANA time zone database in your browser, verdict signed by the live AffixIO API. No API key.

Illustrative UK money-help maths for Universal Credit-style support, free school meals, Warm Home Discount and council tax reduction, with AffixIO entitlement flags. Not official advice.

Strait Pass: affixio forecourt eligibility, then live UK petrol and diesel prices by postcode and nearby EV chargers. A signed proof plus the open data people already search.

Map BPSS, CTC, SC and DV against role gates with live UKSV guidance from the GOV.UK Content API and AffixIO clearance proofs. Not an official UKSV application.

Read live GOV.UK foreign travel advice and UK ETA guidance, then run AffixIO passport, visa, insurance and vaccination gates. Boarding-style proofs without parking the passport file on AffixIO.

Check a UK postcode against published ULEZ and clean air zones, optionally add a registration for an estimated charge result, and receive a signed AffixIO proof.

Validate any VAT or tax identification number in real time. Country format check and checksum verification for over one hundred countries. Pure browser logic, no network call. Verdict signed by the live AffixIO API.

A merchant checklist for AI agent checkout: verify authority, bind the final basket, handle changed totals and retries, and keep evidence before payment.

Pre-register a yacht purchase deposit in the browser: OpenStreetMap marina, simulated Open Banking, AML and KYC checks, passport class, and local evidence digests. No API key.

Evidence-led account of how AffixIO supports CISA Secure by Design, Zero Trust, and quantum readiness, including ML-DSA-65 and local prove. Limits are stated.

How AffixIO maps to NCSC guidance: quantum-vulnerable attestations, PII-heavy eligibility checks, local prove, ML-DSA-65, and stated CAF limits. Implementation details and clear limits.

Publication by publication, where AffixIO aligns with NIST. ML-DSA-65 under FIPS 204 signs verification outcomes. FIPS 140-3 module validation is not claimed. Gaps are named.

The AffixIO Trust Centre explains security, privacy, data retention, cryptographic evidence, responsible disclosure and operational trust for buyers.

Security advisory AFFIXIO-2026-001: affixio 2.0.2 and earlier accept /verify attestations not bound to a circuit. Fixed in the API and affixio 2.0.3.

AffixIO is not hiring at the moment. Contact hello@affix-io.com for partnership or product access questions.

AffixIO compliance posture for verification flows that avoid retaining PII, with attestation and audit suitable for regulated teams.

Contact AffixIO at hello@affix-io.com or use the form for product, security, and partnership messages.

Privacy policy for Affix Plate Pass, the Chrome extension for UK MOT and tax checks with AffixIO proofs. What is processed, what is not stored, and how to contact AffixIO.

AffixIO security shoutouts for responsible vulnerability reports, disclosure acknowledgements and remediated security findings.

AffixIO security posture, vulnerability disclosure, and RFC 9116 security.txt location under /.well-known/security.txt.