Human-authorized agent commerce · evidence first
One controlled hosted-checkout run. One immutable payment intent. One private report built only after signed evidence matches exactly.
Inspect the verification protocolThe protocol
The lab separates browser facts, provider facts, and final settlement evidence so an agent cannot accidentally promote a redirect into proof of payment.
Product, minor-unit amount, currency, units, environment, expiry, and authorization are hashed before provider contact.
The human enters payment details only on Creem. Checkout URLs are accepted solely from an allowlisted HTTPS host.
Raw-body HMAC verification and explicit event names gate every payment-state transition.
Observed product, amount, and currency must match the frozen contract exactly before a report can pass.
Built for agents and humans
Agents create a run, hand an approval URL to a human, and poll a token-protected status endpoint. Humans retain control of authorization and payment.
Read developer documentation$ POST /api/v1/runs
< 201 nextAction: human_approval
$ open approvalUrl
< authorized by account owner
$ POST /api/v1/runs/{runId}/checkout
< checkoutUrl: https://*.creem.io/…
$ GET /api/v1/runs/{runId}
< status: report_ready
< evidence: exact_match