Every API call.One verifiable
record.
Agents cross org boundaries. Logs don't.
PEAC returns a signed interaction record on every response. Both sides can verify it offline and export it for audits. Publish terms at /.well-known/peac.txt.
Verifies locally. No server needed.
- No portable record of what an agent accessed
- Disputes rely on server logs alone
- Terms and consent are implicit, not verifiable
- Every interaction produces a signature-verified record
- Disputes use portable, third-party verifiable evidence
- Terms, consent, and attribution are explicit and auditable
Start here
Three steps to verifiable interactions
Publish terms, enforce decisions, verify the record
Publish policy
Machine-readable terms
Deploy a policy at /.well-known/peac.txt defining access terms and payment requirements. Agents discover it automatically.
See templateEnforce at edge
Real-time decisions
Allow, deny, or request payment before serving responses. HTTP 402 status codes trigger programmatic settlement.
Add middlewareReturn receipt
Verified record
Sign and return a PEAC-Receipt. Verifies offline with your public key. Portable across any system.
Verify a receiptBuilt for AI agents
Open-source packages for policy enforcement, optional settlement flows, and receipt verification.
Gateway
AvailableEdge enforcement for AI agents
Enable HTTP 402 payment-required flows and issue PEAC receipts at the edge or origin.
Verify
AvailableCryptographic verification
Offline and hosted receipt verification with JWKS support and policy validation.
Trace
Coming SoonAudit trails and provenance
Comprehensive audit exports and evidence views derived from PEAC receipts.
Studio
Coming SoonPolicy dashboard
Policy management, receipt analytics, and governance views for PEAC deployments.
Verify the system
Designed for disputes and audits
Frequently Asked Questions
Originary builds tools and services for issuing and verifying PEAC interaction records. PEAC is the open standard; Originary is one production-grade implementation.
A PEAC receipt is a signed record of an automated request and the decision made under published terms. It is designed to be portable so third parties can verify it later.
No. Verification is designed to work offline using public keys and the published policy surface. Originary can optionally host verification infrastructure.
Automated requests usually leave logs that are not portable or independently verifiable. PEAC receipts make compliance, audits, and disputes evidence-based rather than screenshot-based.
Verify a sample receipt in the verifier, then follow the quickstart to issue receipts from a real endpoint.
Ready to build?
PEAC is Apache-2.0, self-hostable, and ships with everything you need to issue and verify receipts.