Live demo · Commons: a signup oO7P U XNB7V0 H0Y 7RV6/NL  →
Console
Console
Products
Verified AccountsTrusted AgentsBotShield ActionsBotShield Gates
For your users
BotShield IDAgents Ask™
For developers
ConsoleDocsDemos
Customers
Couchtour
Company
AboutInvestorsContactNewsroom
BotShield Actions

BotShield Actions are executed with a passkey.

A gate lets someone through — it never does the thing. An Action is the thing: a cart, a payout, a plan change, executed in place. Your customers already hold a BotShield Passkey; it came with their BotShield ID.

Explore the consoleSee it at Couch Tour  →
Couch Tour — the offer at a gate: members only, membership is free, one tap with your BotShield passkey; Join with passkey
Cart with passkey

A person carts it. Humans come first.

The poster, listed at $200. A member pays 3.5% processing, plus $1 buyer protection if they want it; without a membership, 10%. The rate follows the person, not the channel. And because a cart takes a passkey, a person can take it off the table before any agent reaches it.

A person

Carts it with a passkey.

  1. 01They tap Cart. It is held for them for 24 hours, and their passkey is the deposit.
  2. 02They buy at that price — 3.5% as a member, with $1 protection if they want it; 10% without.
  3. 03If the clock runs out it releases, and anyone can claim it.
An agent · coming soon

Will be able to buy it outright.

  1. 01Humans come first. A cart takes a passkey, and only a person holds one.
  2. 02The mechanism is Agents Ask: the agent asks, the person says yes in the BotShield app, and a signed record comes back.
  3. 03A member’s agent pays the member’s rate. The rate follows the person.
Couch Tour — a listing: the terms, the seller, and Cart, Buy or Offer a trade — a real person meant this

Couch Tour · a listing. The passkey holds it; the terms show what the seller gets and what the fee is.

A cart is a human move: it costs a passkey, and an agent does not have one. The seller decides everything after that — whether an agent may buy here at all is the seller’s call, and never ours.

What a login cannot do

Three facts a session cannot supply.

01

At the act, not the door.

A valid session says a login happened, not who is there now — shared on purpose, scripted by its owner, handed to an agent. All three are the session doing its job.

02

It travels.

The proof is signed and checkable by someone who was never in the room. A login is only ever worth something to the site that issued it.

03

It counts once.

One pass per ID, and the ID is anchored to a platform root — which is the closest thing to fairness anyone can enforce at a presale, a drop or a vote.

BotShield Actions FAQ

Can a passkey prove a real person is there?
It proves the one thing a login cannot: that at this moment, on this device, the person who holds the credential confirmed this act. The check that unlocks the phone — a face, a finger, a code only they know — happens on the phone and never leaves it. What travels is a signed assertion.
What is the difference between a BotShield Gate and a BotShield Action?
Where they are going. A gate exists because someone is being handed off — a presale, a drop, a vote — so it has a clock and lets them through, then stops. An Action is the thing itself, done in place on your own page: a cart, a payout, a plan change. Both take a passkey; only what happens after the tap differs.
What is the difference between a sign-in passkey and a BotShield passkey?
A sign-in passkey proves the account at the door and belongs to the site that issued it. A BotShield passkey comes with the person’s BotShield ID and answers at the act, for any company that asks — and the proof is signed and checkable by someone who was never in the room.
Can a passkey be forwarded, shared or phished?
Nothing is sent, so there is nothing to forward. The passkey lives on the person’s device, is bound to the origin it was made for, and signs a challenge your server issued for this act — a copy of the page cannot collect it, and a code read aloud does not exist.
Can an AI agent complete an action, or only a person?
Today, a person. A cart takes a passkey, and only a person holds one. An agent buying outright is coming, on one mechanism: it asks through Agents Ask, the person says yes in the BotShield app, and a signed record comes back. Whether an agent may buy at all is the seller’s call, never ours.
What happens if someone loses their phone?
A BotShield ID stands on two roots — Apple and Google — so a lost phone is an inconvenience, not a lockout. Getting the account back stays with the root they already hold. Nothing about the person was ever stored with us to recover.

Put it behind one act.

No ID upload, no code to type, nothing to forward.

Explore the consoleTalk to a person  →