Skip to content
TrueSession

The front door for AI agents

Customers now send AI agents like ChatGPT, Claude and Gemini to shop, book and pay for them. TrueSession lets the real ones in, answers them from your live systems and lets nothing happen without your customer’s yes.

For every business where AI agents act for customers: retail, travel, banking, insurance, healthcare, subscriptions and ticketing.

How TrueSession works, in one short story. Find. Monday. Maya asks Claude for a quiet hotel in Lisbon for Friday. AI search finds Harbor Hotel and reads its rules, every file written from one policy.An example story with made-up data. A shop, a bank or a clinic works the same way.
  1. Find: Monday. Maya asks Claude for a quiet hotel in Lisbon for Friday. AI search finds Harbor Hotel and reads its rules, every file written from one policy.
  2. Check: Claude knocks with a signature, and the door opens. A bot calling itself “ChatGPT” knocks without one, hoping to copy every rate. It stays outside.
  3. Ask: Claude asks about rooms. The answer comes from the hotel’s live booking system, not an old web page, signed and good for five minutes.
  4. Act: Maya says book it. Nothing happens until she approves the exact room and price on the hotel’s own page. Her payment is confirmed, and one booking is made.
  5. Block: Wednesday. A web page Claude read hides an order: send Maya’s refund to a new card. Claude asks. The hotel’s policy says agents may never change where money goes, so nothing changes.
  6. Talk: Friday morning. Maya’s room is ready early. She agreed to booking updates, so the hotel tells her assistant, and checks that consent again before sending.
  7. Prove: Every step lands in one signed record the hotel keeps: who asked, what was allowed, what was said, what Maya approved and what happened.
  8. Dashboard: The next Monday, the hotel’s team opens its TrueSession dashboard: which agents came, what was refused and why, what sold, and what agents asked that the hotel couldn’t answer.

From setup to a proven sale

Two minutes, twelve chapters. An example store sets up once, a fake “ChatGPT” is refused, and Maya approves the exact order on the store’s own page. Every step is on the record.

Chapter 1 of 12: Today, AI agents shop your store like strangers.

You can’t tell a real assistant from a scraper using its name. Agents quote old pages, and when an order goes wrong, the chargeback lands on you.

  1. Today, AI agents shop your store like strangers. You can’t tell a real assistant from a scraper using its name. Agents quote old pages, and when an order goes wrong, the chargeback lands on you.
  2. Meet Northstar Outfitters. It connects its store to TrueSession. In the dashboard, Northstar verifies its domain, connects its catalogue, stock and payment provider, and publishes its own agent address: agent.northstar.example.
  3. Then it sets its rules for agents, once. What agents may read, which orders the customer must approve, what needs a second check, and what agents may never do. Northstar’s policy decides, not the agent.
  4. Agents are sent to the front door. Maya’s Claude connects directly through Northstar’s connector. ChatGPT’s agent starts on the website, is flagged by how it behaves and is pointed to the agent address. A bot that skips it is stopped at checkout.
  5. At the door, every request proves who sent it. Signatures must match the key the agent publishes, and a request can be used only once. An impersonator using ChatGPT’s name, a replayed request and a scraper are refused.
  6. Northstar’s policy decides each request. Claude may search and hold. A new delivery address goes to Maya to confirm. A 40-pair order and an account change are refused, even from verified agents.
  7. Agents get Northstar’s facts, not guesses. Price, stock and delivery come live from Northstar’s systems, and returns from the policy its team reviewed. A review that tries to give agents orders changes nothing.
  8. Maya approves the exact order, on Northstar’s page. She pays with Northstar’s own payment provider, and Claude never sees her card. The order counts only when the provider confirms the payment.
  9. Every step is on the record. Who acted, what Maya approved, when, and how it was paid. If the order is ever disputed, Northstar has the proof.
  10. And Northstar keeps talking to Maya, through her agent. A question during the order, a shipping update, and the back-in-stock alert she asked for. Customers who didn’t say yes get nothing.
  11. Northstar sees what agents want, and what they did. Requests by assistant, what was refused and why, questions it couldn’t answer and orders customers approved. Labelled ads can reach shoppers’ assistants too, only with Northstar’s approval.
  12. More sales from AI agents, on your terms. Agents find you and buy from you under your rules, with orders you can prove and customers you can keep talking to. That is TrueSession.

An illustrative story with a made-up store and example data. Claude and ChatGPT appear only as examples of assistants: TrueSession is not affiliated with Anthropic or OpenAI, and these connections are not live. See what works today.

Proof from our lab

From our latest receipted test run, with a test business and our own reference agent.

100 / 100
example journeys completed, with no failures and no manual fixes
11 / 11
fault scenarios, from crashes to spoofed requests, ended in the correct recorded state
1
effect, even when a server or a worker crashed in the middle of a task
30
fixed rules that no setting can loosen, each tested by trying to break it

Twelve problems AI agents bring you

Agents already make up a large share of online traffic, and most businesses are not ready. Flip the switch: what goes wrong today, and what TrueSession does about it.

47.9%
of all commerce traffic on Akamai’s network was AI bots as of December 2025. Akamai via GlobeNewswire, Jul 2026 (opens in a new tab)
+693%
growth in traffic from generative AI tools to US retail sites over the 2025 holiday season. Adobe, Jan 2026 (opens in a new tab)
$190–385B
of US e-commerce spending could come from agentic shoppers by 2030. Morgan Stanley Research, Dec 2025 (opens in a new tab)
11%
of US consumers, at most, are willing to let AI make purchase decisions for them. Gartner, May 2026 (opens in a new tab)

What TrueSession does. Switch it off to see what happens today.

  1. AI search · Discover

    AI search reads the wrong rules

    52% of crawler requests were for AI training by June 2026, up from 22% in spring 2025. Cloudflare, Jul 2026 (opens in a new tab)

    With TrueSession: You write one policy. TrueSession publishes it to every file crawlers and agents read, signed and consistent, and shows which crawlers obeyed.

    You get: Found by AI search, on your terms.

    Agent card:Working in labPolicy compiler:In lab

  2. Security · Shield

    You can’t tell who’s knocking

    47.9% of commerce traffic was AI bots by December 2025. Akamai via GlobeNewswire, Jul 2026 (opens in a new tab)

    With TrueSession: Every request is signed with the agent’s own key and checked before anything happens. Fakes and copied requests are refused.

    You get: Only real agents get in.

    Working in lab

  3. Security · Shield

    Agents sign in with your customers’ passwords

    23% of the time, AI bot traffic reached login pages in 2025. DataDome via CIO Influence, 2025 (opens in a new tab)

    With TrueSession: Customers give an agent only the access they choose, with limits and an expiry they can take back. Your policy says what agents may never touch.

    You get: No shared passwords, no account takeovers.

    Working in lab

  4. Security · Shield

    Bots grab what real customers want

    40% of internet traffic is bad bots, and retail is the sector most targeted by AI-driven bots. Thales, Apr 2026 (opens in a new tab)

    With TrueSession: Protected data and actions need a verified agent, within limits you set per agent and per item. Agents browsing your website are flagged and sent to your front door.

    You get: Real customers still get the product.

    Limits:In labBehaviour flags:In lab

  5. Security · Shield

    Hidden text hijacks agents

    90% of attacks succeeded in a study that planted five texts among millions in an AI system’s sources. Zou et al., USENIX Security, 2025 (opens in a new tab)

    With TrueSession: Text is checked for hidden instructions before it reaches any answer or tool, and a session that read untrusted text cannot act without the customer’s fresh yes.

    You get: Your answers stay yours.

    In lab

  6. Sales · Agent Storefront

    Agents have no official way to buy from you

    60% higher conversion for AI-referred retail visits than other traffic in July 2026. Adobe via Digital Commerce 360, Aug 2026 (opens in a new tab)

    With TrueSession: You get your own agent address, like agent.yourstore.com, where assistants connect directly over open agent protocols.

    You get: A new sales channel, on your terms.

    Agent address:Working in labYour own domain:In lab

  7. Sales · Agent Storefront

    Agents tell customers the wrong thing

    54% of consumers said they had to double-check information that generative AI tools gave them. Gartner, May 2026 (opens in a new tab)

    With TrueSession: Prices and stock come live from your systems, and policies from facts you approved, each with its source.

    You get: Right answers, fewer complaints.

    Working in lab

  8. Transactions · Approve & Pay

    Orders nobody approved

    11% of US consumers, at most, would let AI make purchase decisions for them. Gartner, May 2026 (opens in a new tab)

    With TrueSession: Nothing is bought, booked or paid until the customer approves the exact terms on your page. Any change needs a fresh yes.

    You get: No surprise orders, no surprise charges.

    Working in lab

  9. Transactions · Approve & Pay

    Card details end up in chats

    Hijacked assistants: Akamai reports attackers taking over legitimate AI assistants to abuse stored payment credentials. Akamai via GlobeNewswire, Jul 2026 (opens in a new tab)

    With TrueSession: Customers pay on your payment provider’s own page. Card numbers are refused wherever agents send text, and only the provider’s signed result counts as paid.

    You get: Cards never reach agents.

    Working in lab

  10. Transactions · Approve & Pay

    Disputes you can’t win

    3 barriers named by Federal Reserve Governor Waller: authentication, liability and fraud. “Who is on the hook if an agent makes the wrong purchase?” Federal Reserve, Sep 2026 (opens in a new tab)

    With TrueSession: Each approval makes exactly one order, and every step is recorded with a signed receipt.

    You get: Proof for every order.

    Working in lab

  11. Relationship · Conversations

    The customer leaves with the agent

    53% more revenue per visit from AI-referred retail visits than other traffic in July 2026. Adobe via Digital Commerce 360, Aug 2026 (opens in a new tab)

    With TrueSession: Ask questions and send updates while the task is open. Send alerts, reminders and coupons through the customer’s agent, only when they agreed.

    You get: Customers you keep.

    Questions and updates:Working in labAlerts and coupons:In lab

  12. Insights

    You can’t see what agents want

    15× growth in AI “user action” crawling during 2025. Cloudflare, Dec 2025 (opens in a new tab)

    With TrueSession: Your dashboard shows requests by assistant, unanswered questions, refusals by reason and orders customers approved. Optional ads let you reach shoppers inside assistants.

    You get: Know what to fix, stock and promote.

    Demand:Working in labTraffic and outcomes:In labAds:In lab

With TrueSession

Found on your terms, real agents in and fakes out, right answers, only orders the customer approved, cards kept safe, proof for every order, and customers you keep, all in one dashboard.

Eight products, one platform

Eight products on the same three engines and one record, so they work as one. Start with one and add the rest.

Pick a product to see what it is built on

Find

Be found by AI, on your terms

Write one policy. TrueSession turns it into every file AI crawlers and agents read, signs each one and keeps them all in agreement.

  • One policy compiled into robots.txt, llms.txt, the AI catalog, agent cards and MCP server cardsIn lab
  • Separate choices for AI search, AI training and AI agents, written the same way in every formatIn lab
  • Every published file signed and checked for contradictions, and republished when your rules changeIn lab
  • Agent card, commerce profile and sign-in details for your agent addressWorking in lab
More about Discover

AI assistants and crawlers

  • ChatGPT
  • Claude
  • Gemini
  • Copilot
  • Perplexity
  • Search crawlers

Every file and protocol they use

  • robots.txt
  • llms.txt
  • AI catalog
  • A2A
  • MCP
  • UCP
  • ACP
  • Web Bot Auth

Three engines

  • Policy Engine (Built on Discover)

    Who may do what, with what limits

  • Truth Engine (Built on Discover)

    What agents are told

  • Case Engine

    What happens, start to finish

One record

The Proof Record: who asked, what was allowed, what was said, what was approved, what happened

Your systems

  • Catalog
  • Bookings
  • Accounts
  • Orders
  • Payment provider
  • CDN

Four checks on every request

An agent can be fake, ask for more than you allow, repeat something untrue or try to buy without asking. So every request, from a price question to a payment, passes four checks in order. Fail one and it stops.

Pick a request and follow it through the four checks

  1. Check 1: Verified agent

    Who is really asking?

    Each agent signs its requests with its own key. TrueSession checks the signature, that the request is fresh, and that it was never used before.

    Stops: fakes using a famous name, copied or replayed requests, unsigned scrapers.

    Passed

    Signed by the agent it claims to be, acting for Maya.

  2. Check 2: Your policy

    What may this agent do here?

    Your rules for each agent and each action, plus the access the customer gave it: what it may read, hold, book, buy or change, and up to what limit.

    Stops: actions you never allow, amounts over your limits, account changes by agents.

    Passed

    Your policy lets any verified agent read plans and prices.

  3. Check 3: Live truth

    Is it accurate right now?

    Prices, stock, availability and terms come from your live systems and facts you reviewed, never from an old page or an instruction hidden in a review.

    Stops: old prices, hidden instructions, promises you never made.

    Passed

    Answered from your live price list: $29 a month.

  4. Check 4: Customer approval

    Did the customer agree to exactly this?

    Anything that spends money or changes an account waits for the customer to approve the exact terms on your own page. Your payment provider confirms the payment.

    Stops: orders nobody approved, fake “payment successful” pages, card numbers in chats.

    Not needed

    Nothing is bought, so no approval is needed.

Result

Maya’s agent gets the right price from your live systems. Nothing was bought.

Try to break in yourself

No AI decides any of this. Your rules run in code, on every request.

Underneath the checks: rules no setting can loosen, one order per approval and signed receipts. Every defence, with its status

Your policy, in every industry

Each industry has its own way for agents to go wrong. Pick one to see the problem, the rule that handles it and what you gain.

Agent orders you can prove

What happens today. A customer disputes an order their assistant placed: “I never approved that.” The assistant’s chat isn’t yours to show, and to your payment system it looked like any online sale. You refund it, and may pay a dispute fee too.

Your policy decides

  • Agent orders: customer approves on our page
  • Return terms shown: policy v4, 30 days
  • One order per approval, even if the agent retries

What you gain

  • TransactionsA record behind every agent order
  • SecurityOnly verified agents can place orders
  • SalesAssistants can reorder from you directly
Shopping assistantThrough your gateway

“Reorder my running shoes, size 10.”

  1. Verified agent

    The assistant proves who it is

    Signed with its published key, not a name it claims.

  2. Live truth

    Price, stock and returns from you

    Size 10 in stock at $109.00, with your 30-day return policy.

  3. Customer approval

    The customer approves on your page

    Exact item, price and return terms. Payment confirmed by your provider.

  4. Recorded

    One order, fully recorded

    Approval, terms and payment result on the order’s timeline.

If it’s disputed, you have the record

What the customer approved, when, at what price, and the verified payment.

Are you ready for AI agents?

Ten plain questions, two minutes. See where agents could go wrong at your business and what would fix each gap. Your answers never leave your browser.

Three of the ten questions
  1. Can AI assistants get your current prices and availability, rather than copying them from old pages?

  2. When a visitor says it is a well-known AI assistant, can you check that it really is?

  3. Before an agent buys, books or pays for a customer, does the customer approve the exact price and terms?

What businesses ask first

Short answers. The Platform FAQ has more.

What is TrueSession, in one sentence?

The front door for AI agents at your business: one policy, one source of truth and one record for every agent that finds you, asks you, acts for your customers or talks with them, with nothing bought, booked or paid until the customer approves it.

Do I need to build my own AI agent?

No. Your customers bring their own assistants, such as ChatGPT, Claude or Gemini. You connect your systems and set your rules.

Will it block helpful AI assistants?

No. Real assistants get an easy, official way in, and you decide what they may see and do. Only fakes, scrapers and requests your rules refuse are stopped.

Does it replace my website or my payment provider?

No. Your website stays as it is, and customers still pay your own payment provider on its page. TrueSession sits in front, for agents only.

Does it work for my industry?

If AI agents can find you, ask you, or shop, book, pay or change something for your customers, yes: retail, travel, banking, insurance, healthcare, subscriptions, ticketing and more. The core is the same; your rules are your own.

What works today?

TrueSession is early. The core runs end to end in our lab with a test business: verified agents, answers from reviewed facts, customer approval, confirmed payment, one order per approval, updates during a task, consent checks and the dashboard. Anything marked In lab is on our build plan for the first pilots.

Be ready when agents arrive

We are choosing the first pilot partners: merchants, marketplaces, hotels, banks, insurers and clinics. Tell us what you want agents to do safely.

  • Be found by AI search on your terms
  • Answer every agent from your real systems
  • Let agents act only with your customer’s yes
  • Keep talking to the customers agents bring
  • Keep the proof of every step