Agents Ask.
Humans Decide.
Say “book me the trip.” The agents you linked do the work. The moment one would spend as you, it stops and asks your phone. Your passkey is the yes — signed, single-use — and the company’s code will not run without it.
You hold the last tap.
One agent books the flight, the ride and the room. Each charge still lands as its own request on your phone.
One agent. Three merchants.
Wayfarer’s agent books the whole trip — the flight on Meridian, the ride with Driver, the room at Harbor Hotel. It holds all three and asks you before it books any of them.
Everything a yes needs.
Which company, which agent, the amount, the card, when. Not sure? Leave it — unanswered, it expires and nothing is spent.
Your tap is the yes.
Check the flight and the ride. One passkey seals both — a signed, single-use yes for each company, never who you are.
Illustrative · mock merchants
They ask before they act as you.
Only the acts that count.
Spend, book, sign, send, post as you — the agent stops at that line and waits. Everything else just runs.
Your agent never holds the yes.
The yes is your passkey, on your own phone. A bot has nothing to give, and nothing to steal.
The yes is the proof.
Each company gets a signed, single-use yes for its one act — not a guess, not a score, and never your name.
Your agent can ask. It can never answer.
An approval inside a runtime is the runtime’s word for it. Here the act stops, a person answers on their own phone, and what reaches your code is a Proof of Resolution — signed, single-use, for that one act. Verify it against our public key, then execute. Your agent never holds the yes, so nothing can talk it into giving one.
Your agent proposes.
It sends the act to BotShield — what it is, what it costs, who it is for. Nothing executes.
A person answers.
One tap, with the passkey already on their phone. The tap is the answer, never the execution.
A Proof of Resolution comes back.
Signed, single-use, for that one act. Never a name, never a face.
Your code checks it.
Verify the signature against our public key, then run. That is the whole integration.
Confirmed
Single use · verified against the public key · not re‑playable.
Agents Ask FAQ
Do I have to approve everything my agent does?
What if I don’t answer?
Can my agent say yes for me?
What does the company on the other end get?
What does Agents Ask cost me?
Nothing moves without your yes.
The agents you linked do the work. The yes is yours — free, in the BotShield app.
BotShield runs in your browser.
Sign in with Apple or Google, add a passkey, and approve what your agents ask — the same account the phone app will use.
Open app.botshield.ai →