UP² — Commerce for Agents

INVOICE_CREATED → SETTLED <3s /// AGENT_PAY → paid_via: "balance" /// up2d → identity_verified · trust: HARDENED /// METERED_DEPOSIT → balance += $5.00 /// DAEMON_HMAC → signature OK · 12ms /// WHITELIST_CHECK → PASS /// INVOICE_CREATED → SETTLED <3s /// AGENT_PAY → paid_via: "balance" /// up2d → identity_verified · trust: HARDENED /// METERED_DEPOSIT → balance += $5.00 /// DAEMON_HMAC → signature OK · 12ms /// WHITELIST_CHECK → PASS

// THE PROTOCOL

TWO ACTORS.
ONE TRANSACTION.

Your server creates an invoice. Your agent pays it. The protocol handles everything in between.

Merchant creates an invoice

Your backend sends one API call — set the amount, payment mode, and content ID. An invoice is created server-side. The price and destination are locked. Nothing the agent sends can change them.

Agent provisions a wallet

The paying agent links a card via 3D Secure verification. Once confirmed, they receive a spending key with configurable daily limits, per-transaction caps, domain allowlists, and a pause switch.

Agent pays the invoice

One call with the invoice ID and spending key. The protocol checks wallet limits, enforces allowlists, verifies identity if required — then settles against the agent's balance or charges the card directly.

Merchant verifies the receipt

Check the transaction status server-side. Receipts are burn-on-verify — the first successful read marks it redeemed. A second attempt is blocked. Replay attacks simply don't work.

AGENT PROTOCOL // LIVE

# Merchant server — create invoice
POST /api/merchant/create-invoice

{
  "amount": 0.50,
  "payment_modes": "per_use",
  "content_id": "inference_v2"
}

← 200 invoice_id: "3e7c-a9f2"

# Agent — pay the invoice
POST /api/agent/pay-invoice

{
  "invoice_id": "3e7c-a9f2",
  "api_key": "••••••••"
}

← 200
{
  "status": "success",
  "paid_via": "balance",
  "deducted": 0.50,
  "remaining_balance": 4.50
}

// LIVE PROTOCOL FEED

EVERY CALL.
EVERY CENT.
REAL TIME.

Balance deductions, card charges, identity verifications — all logged to the ledger the moment they happen.

UP2_LEDGER // STREAMING

INVOICE inference_v2 → merchant_9C

$0.50 created00:00:01

IDENTITY up2d daemon → trust: hardened

✓ HMAC OK00:00:01

PAY invoice 3e7c → agent_wallet

−$0.50 balance00:00:02

ALLOWLIST domain check → payments.up2.cash

✓ PASS00:00:02

TOPUP metered deposit → agent_wallet

+$5.00 balance00:00:07

VERIFY receipt_3e7c → burn-on-read

redeemed00:00:09

█ awaiting next transaction

// THE INFRASTRUCTURE

THREE RAILS.
ONE PROTOCOL.

Agent Wallets

Every agent gets a spending wallet with configurable daily limits, per-transaction caps, domain allowlists, IP restrictions, and an instant pause switch. The agent spends. You stay in control.

Merchant Keys

Long-lived server-side keys for invoice creation. Your backend sets the price. The agent can only pay what you created — amount and destination are immutable from the moment the invoice is written.

Identity Layer

Optional cryptographic device identity, powered by up2d. Enable it on your wallet and only verified machines can make payments. Unverified callers are blocked at the door, automatically.

// DAEMON IDENTITY

YOUR AGENT HAS A FINGERPRINT NOW.

up2d is a lightweight background service you install on any machine running an autonomous agent. It establishes a cryptographic device identity — tied to the hardware itself — and signs every payment request before it leaves the machine.

The UP² protocol verifies that signature server-side. No hardware present, no signature. No signature, no payment. It's the difference between "some code called our API" and "this specific machine, on this specific network, made this payment."

One command to install. One command to start. Works on Linux, macOS, and Windows. Survives terminal close.

HARDENED — Linux + TPM 2.0

Keys live in hardware. The machine itself signs. Unextractable.

SECURE — macOS Keychain / Win DPAPI

OS-level key protection. Keys are user-bound to the machine.

STANDARD — Software keys

RSA keypair on disk. Device-bound, cryptographically verified.

up2d // DAEMON

   ██╗   ██╗██████╗ ██████╗ 
   ██║   ██║██╔══██╗╚════██╗
   ██║   ██║██████╔╝ █████╔╝
   ██║   ██║██╔═══╝ ██╔═══╝ 
   ╚██████╔╝██║     ███████╗
    ╚═════╝ ╚═╝     ╚══════╝
  ───────────────────────────────────
    Agent Daemon (up2d) v2.1.0
    Cross-Platform AI Identity System
    Trust: hardened (TPM 2.0)
  ───────────────────────────────────
          UP² © 2026

✅ Signed in as [email protected]

Your Identities (1):

[1] prod-agent-01 [hardened]
ident_3a9f2c1b...
IP: 10.0.1.5 Geo: US|Washington

Commands:
c - Create identity s - Start daemon
x - - Stop q - Quit

>

// BILLING MODES

PAY PER CALL.
OR TOP UP AND RUN.

Two modes built into every invoice. The merchant sets it. The agent adapts automatically.

PER USE

Charge Per Transaction

Each invoice is a discrete charge with a $0.50 minimum. The protocol checks the agent's balance first — if funded, it deducts atomically. If the balance runs dry, it charges the card directly.

Best for: inference endpoints, classification APIs, one-time data pulls, anything with a clear unit price.

METERED

Gas Tank Model

The agent pre-loads a deposit via card. That deposit lives as a balance for that merchant. Subsequent calls drain from the balance — minimizing individual card charges and cutting processing overhead for high-frequency agents.

Best for: compute leases, streaming APIs, long-running autonomous tasks.

COM
MERCE
FOR
AGENTS.

TWO ACTORS.
ONE TRANSACTION.

Merchant creates an invoice

Agent provisions a wallet

Agent pays the invoice

Merchant verifies the receipt

EVERY CALL.
EVERY CENT.
REAL TIME.

THREE RAILS.
ONE PROTOCOL.

YOUR AGENT HAS A FINGERPRINT NOW.

PAY PER CALL.
OR TOP UP AND RUN.

HOW EVERY PAYMENT RESOLVES.

COM MERCE FOR AGENTS.

TWO ACTORS.ONE TRANSACTION.

Merchant creates an invoice

Agent provisions a wallet

Agent pays the invoice

Merchant verifies the receipt

EVERY CALL.EVERY CENT.REAL TIME.

THREE RAILS.ONE PROTOCOL.

YOUR AGENT HAS A FINGERPRINT NOW.

PAY PER CALL.OR TOP UP AND RUN.

HOW EVERY PAYMENT RESOLVES.

COM
MERCE
FOR
AGENTS.

TWO ACTORS.
ONE TRANSACTION.

EVERY CALL.
EVERY CENT.
REAL TIME.

THREE RAILS.
ONE PROTOCOL.

PAY PER CALL.
OR TOP UP AND RUN.