Verification for automated requests

Verify agent interactions.Instantly.

APIs and sites lack a portable, third-party verifiable way to show what an agent accessed and under which terms.

Originary issues signature-verified records you can verify offline and export for audits.

Verify Receipt
Copied to clipboard
Before
  • No portable record of what an agent accessed
  • Disputes rely on server logs alone
  • Terms and consent are implicit, not verifiable
After
  • Every interaction produces a signature-verified record
  • Disputes use portable, third-party verifiable evidence
  • Terms, consent, and attribution are explicit and auditable
How it works

Three steps to verifiable interactions

Publish terms, enforce decisions, prove what happened

01

Publish policy

Machine-readable terms

Deploy a policy at /.well-known/peac.txt defining access terms and payment requirements. Agents discover it automatically.

Click to see code
02

Enforce at edge

Real-time decisions

Allow, deny, or request payment before serving responses. HTTP 402 status codes trigger programmatic settlement.

Click to see code
03

Return receipt

Verified record

Sign and return a PEAC-Receipt. Verifies offline with your public key. Portable across any system.

Click to see code
PEAC-Receipt
// Signature-verified record
PEAC-Receipt: eyJhbGciOiJFZDI1NTE5...

// Decoded payload
{
  "v": "0.10.0",
  "iss": "api.example.com",
  "sub": "agent:example-client",
  "iat": 1703894400,
  "action": "api.query",
  "status": "success"
}

Frequently Asked Questions

Open protocolSelf-hostableApache-2.0

Ready to build?

Deploy the reference stack or use hosted Originary for production SLAs. Open source and self-hostable.