How TrueSession works
You set it up once. After that, every AI agent that finds your business, asks it a question, acts for a customer or waits to hear back meets the same three things: your policy, your real facts and a record you keep.
Where agents meet you, you decide
AI agents find a business, ask it questions, act for a customer and expect to hear back. Today each of those moments is handled by a different tool, or by nobody. With TrueSession, your one policy, your facts and your record are there every time.
Agents and AI search find you, and read your rules
About ten different files tell crawlers and agents what they may do. TrueSession writes all of them from your one policy, signs them and keeps them consistent, so AI search can quote you and training bots stay out if you say so.
A shop, a hotel, a bank or a clinic publishes its rules the same way.
Discover
- Agent card and sign-in details:Working in lab
- Policy compiler:In lab
Agents ask, and get your real answer
Prices, stock, hours and policies come from your live systems and the facts you reviewed, never from an old page. Each answer says where it came from and how long it is good for, and can be signed so anyone can check it later.
Room rates, account fees, policy exclusions or appointment slots, answered the same way.
Agent Storefront
- Answers from reviewed facts:Working in lab
- Signed fact cards:In lab
Agents act, but only with your customer’s yes
Your systems become governed tools. Reading is allowed; buying, booking or paying opens an approval on your own page with the exact terms, your payment provider confirms the money, and exactly one order follows.
A booking, a transfer, a claim or a cancellation needs the same exact yes.
Connect and Approve & Pay
- Exact approval and one order:Working in lab
- Tools from your API file:In lab
You can talk back
Ask a question mid-task, send updates, and follow up only as the customer agreed. Each message goes the best way the customer’s assistant can receive it, and consent is checked again at the moment of sending.
A gate change, a claim decision or a moved appointment reaches the customer the same way.
Conversations
- Questions, updates and consent:Working in lab
- Delivery to every assistant:In lab
And every step is on the record
Who asked, what your policy allowed, what the agent was told, what the customer approved and what happened: five separate proofs, linked in one signed record that you keep.
A chargeback, a complaint or an audit is answered with the same record.
The Proof Record
- Signed receipts:Working in lab
- Proof Record and public verifier:In lab
robots.txtPublished from policy version 12
User-agent: OAI-SearchBot
User-agent: Claude-SearchBot
Allow: /
User-agent: GPTBot
User-agent: CCBot
Disallow: /
Content-Signal: search=yes, ai-input=yes, ai-train=no
# AI agents: please use https://agent.northstar.exampleAlso written from the same policy
- llms.txt
- ai-catalog.json
- A2A agent card
- MCP server card
- UCP profile
Signed, and consistent across every file
Claude, for MayaIs the Ridgeline GTX in stock in size 10, and what does it cost?
- In stock
- 4 pairs in size 10
- Price
- $149.00
- Returns
- 30 days, free
From your inventory system, read at 14:02
Good until 14:07
Signed by northstar.example
start_orderAction: buy Needs the customer’s approval
Maya, approve this order?
- Ridgeline GTX, size 10
- $149.00
- Shipping
- $6.00
- Total
- $155.00
Approve with passkey
Approved. One order placed. Payment confirmed by your provider.
Northstar Outfitters, to Maya’s assistant
Your Ridgeline GTX has shipped and arrives Thursday.
Best way to reach Maya’s assistant
- ChatGPT, subscribed to order updatesSent
- Agent-to-agent pushNot set up
- Inbox the agent checksFallback
- Email or textOnly with consent
Consent: order updates, until delivery
Proof Record for order 4471
- Who asked
- Claude, signature verified
- What was allowed
- Policy 12, rule “orders up to $1,000”
- What it was told
- 3 signed facts
- What Maya approved
- $155.00, exact terms
- What happened
- 1 order, payment confirmed
Signed and logged at 14:06:12
Set up once, then it runs
Three parts: what you do once, what happens every time an agent arrives, and what you see afterwards.
Step 1: Set up your front door
Once, in your dashboard. Connect the systems agents should use, write your rules, and open your official front door for agents. Your website and checkout stay as they are.
1. Connect what agents need
Link the systems agents should use, so they get real answers instead of guessing from your website. Connect only what you want.
Test systems:Working in labYour real systems:In lab
- Catalog, plans and pricesYour product or pricing APIConnected
- Stock and availabilityYour inventory or booking systemConnected
- Orders and bookingsYour order or booking systemConnected
- PaymentsYour payment providerConnected
- Policies and termsRead from your website, approved by youConnected
2. Write your rules
Decide what agents may do with your business: what they can see, what they can do on their own, what needs the customer, and what is never allowed.
In lab
Your agent policy
- See products, plans and pricesAnyone
- Hold an item or a time slotAllow, 15 min
- Order, book or payCustomer approves
- Pay someone newRefuse
- Change account detailsNever by agents
3. Open your front door
TrueSession publishes your agent address for AI assistants. You add one script tag to your website, and for full protection a module on your server or CDN.
Address and server module:Working in labScript and CDN:In lab
Your agent address
agent.yourbusiness.com
Where assistants connect directly.
One script on your websiteExample
<script src="https://truesession.co/agent.js" data-site="yourbusiness" async></script>Spots agents browsing your site and shows them the way.
Server or CDN module
Guards protected pages and checkout, even from bots that ignore the script.
Step 2: Every agent request comes through one door
Every time an agent shows up. Whether an assistant connects directly or wanders onto your website, every request, from a price check to a payment, comes through your front door and its four checks.
ChatGPT agentClaudeGeminiOther assistants
Connect straight to your agent address, agent.yourbusiness.com, over the open agent protocols (A2A, UCP and MCP). Working in lab
Arrive at your front door
Agents browsing your website
Your website script spots them and shows them the way to your front door. People see your website exactly as before. In lab
Sent to your front door
Bots that ignore the script
Your server or CDN module checks every request for protected pages, accounts and checkout before it reaches you. In lab
Stopped before your systems
Your front door runs four checks on every request: who is asking, what your policy allows, what is true right now, and whether the customer approved. Try the four checks
Only then does a request reach your systems
- Catalog, plans and prices
- Availability and bookings
- Accounts
- Orders and payments
Step 3: Run it from your dashboard
Every day. See which agents came and what they wanted, answer their questions, follow up with customers who agreed, and keep the proof of every order.
Eight products, one dashboard
Everything TrueSession does lives in one dashboard. Click through the eight products to see what each one does, and what already works in our lab.
See each product in detailTrueSession/ Your dashboardYour home screen
Your agent channel at a glance
Requests, refusals and approved orders this week, and one switch to pause every agent at once.
Working in lab
- Agent requests
- 18,240
- Verified
- 71%
- Refused
- 2,113
- Approved orders
- 64
Agent service is onPause all agents
Four words to know
- AI agent
- An assistant like ChatGPT, Claude or Gemini that shops, books or pays for a person.
- Agent address
- Your official front door for agents, like agent.yourbusiness.com. Your website stays as it is.
- Your policy
- Your rules for what agents may see and do. You set them in your dashboard.
- Customer approval
- The customer’s own yes, on your page, before any order or payment. Always on.
One policy, every file AI reads
About ten files tell AI crawlers and agents what they may do, from robots.txt to agent cards, and on most sites they disagree. Change a rule below and watch every file follow.
Your policy
Northstar Outfitters, an example store
Always on, for every business
- Card details and codes never reach agents
- New payees and account changes: never by agents
- Payment counts only when your provider confirms it
Files agents read
Policy 12
# robots.txt for northstar.example# Written by TrueSession from policy 12. Change the policy, not this file.# AI searchUser-agent: OAI-SearchBotUser-agent: Claude-SearchBotUser-agent: PerplexityBotAllow: /# AI trainingUser-agent: GPTBotUser-agent: ClaudeBotUser-agent: Google-ExtendedUser-agent: CCBotDisallow: /User-agent: *Allow: /Disallow: /checkout/Disallow: /account/Content-Signal: search=yes, ai-input=yes, ai-train=noSitemap: https://northstar.example/sitemap.xml# AI agents: please use https://agent.northstar.example# Agent catalog: https://northstar.example/.well-known/ai-catalog.json# Northstar Outfitters> Outdoor footwear and gear, shipped across the US. Prices, stock and orders come from our live systems through our agent address, not from cached pages.Written by TrueSession from policy 12 and the facts we reviewed.## For AI agents- [Agent address](https://agent.northstar.example): ask about products, prices and stock, and start orders up to $1,000 that the customer approves on northstar.example- [Agent catalog](https://northstar.example/.well-known/ai-catalog.json): our agent card and tools## Store facts- [Prices and stock](https://agent.northstar.example/ask): live from our systems, for verified agents- [Returns](https://northstar.example/returns): 30 days, free- [Shipping](https://northstar.example/shipping): 2 to 5 business days{ "publisher": { "name": "Northstar Outfitters", "id": "did:web:northstar.example" }, "entries": [ { "mediaType": "application/a2a-agent-card+json", "url": "https://agent.northstar.example/.well-known/agent-card.json" }, { "mediaType": "application/mcp-server-card+json", "url": "https://agent.northstar.example/.well-known/mcp/server-card.json" } ], "trust": { "policyVersion": 12, "signedBy": "did:web:northstar.example", "signature": "detached JWS, published with each version" }}{ "name": "Northstar Outfitters", "description": "The official agent of northstar.example.", "url": "https://agent.northstar.example/a2a", "version": "12", "capabilities": { "streaming": true, "pushNotifications": true }, "skills": [ { "id": "ask", "name": "Product questions", "description": "Store policies for any agent; prices and stock for verified agents." }, { "id": "order", "name": "Start an order", "description": "Orders up to $1,000. The customer approves every order on northstar.example. Nothing is bought before that." }, { "id": "updates", "name": "Order updates", "description": "Order updates for the task the customer started." } ]}[ { "name": "search_products", "description": "Find products by name, size and use.", "annotations": { "readOnlyHint": true } }, { "name": "get_price_and_stock", "description": "Live price and stock for one product. Verified agents only.", "annotations": { "readOnlyHint": true } }, { "name": "start_order", "description": "Opens an approval page for the customer, for orders up to $1,000. Nothing is bought until they approve.", "annotations": { "readOnlyHint": false, "destructiveHint": false, "idempotentHint": true } }, { "name": "check_order_status", "description": "Status of an order this customer approved.", "annotations": { "readOnlyHint": true } }]SHA-256 of all five files: computed in your browser
Shortened examples. Before publishing, TrueSession checks each file against its official format and signs it.
From a free report to every sale
You can start in minutes and add your systems when you are ready. Each step is useful on its own, and none of them touches your human checkout.
First ten minutes
See how agents see you
The free Agent Readiness Report checks your domain: files that contradict each other, missing agent routes, prices AI quotes wrong and text that could hijack an agent. It ends with a draft policy.
In lab
Day one
Publish your rules and facts
Prove you own the domain, review the facts we found and choose your rules. TrueSession publishes signed, consistent files and opens your agent address.
In lab
Week one
Connect your systems
Upload your API description or connect your platform. Confirm what each operation may do, try it on the test bench, then go live.
In lab
Every day
Agents come through your front door
Real agents are verified, fakes refused, answers come from live systems, and nothing is bought, booked or paid without the customer’s exact yes.
Working in lab
Every week
See what to fix
Insights shows what agents asked that you could not answer and where journeys stopped. Fix it once, and every agent gets the new answer.
Working in lab
See it with your own business
We are choosing the first pilot partners. Tell us what you want AI agents to do safely, and we will show you what that looks like.