Back to forter
Card snapshot
www.forter.com
·
2026-08-18 10:34:13 UTC
·
919d506cac9511a11c5de39ef68d2780559ccd36885c5aa454ba198606a1f9bf
This is a frozen copy of the agent's agent-card.json as we observed it at the timestamp above. We capture a new snapshot every time the card's content hash changes. Useful for: forensic drift analysis, verifying downstream callers see the right version, reproducing routing decisions made historically.
{
"name": "forter",
"title": "Forter",
"tagline": "Identity Intelligence for Digital Commerce",
"description": "Forter helps brands grow their businesses with fraud and payments decisions, built on the world's most intelligent identity network. 33-operation REST surface (OpenAPI 3.0.0 at https://www.forter.com/openapi.json, info.version 10.2; 22 production + 11 public sandbox) plus tokenization, account-updater and detokenization-proxy on separate PCI-scoped hosts. Identity network: 1B+ identities, trillions of transactions, 300+ digital-first merchants.",
"url": "https://www.forter.com",
"version": "1.0",
"openapi": "https://www.forter.com/openapi.json",
"availability": {
"status": "demo-only",
"purpose": "Demonstration of Forter's agent-skill surface. NOT production decisioning. Skill responses are demo responses and must not drive real merchant actions.",
"officialAccountRequired": "Real integration requires an official Forter account + signed MSA. Skills advertised here may not be available against your specific Forter account.",
"responsesAreDemo": "Demo responses only - no SLA, not reflective of real Forter risk decisions.",
"productionContact": "https://www.forter.com/contact-us/"
},
"publisher": "Forter",
"contact": "sales@forter.com",
"phone": "+1-800-537-0601",
"capabilities": [
"tacp-handshake",
"order",
"agentic-orders",
"order-results",
"order-update",
"order-status",
"login",
"signup",
"authentication-result",
"profile-access",
"account-status",
"seller-item-listing",
"session-protection",
"evidence",
"evidence-file",
"claim",
"compensation",
"merchant-creation",
"3ds-recommendation-enrollment",
"3ds-execution-enrollment",
"privacy-request",
"account-updater",
"tokenization",
"detokenization-proxy",
"contact-sales"
],
"defaultInputModes": [
"text/json",
"application/json"
],
"defaultOutputModes": [
"text/json",
"application/json"
],
"skills": [
{
"id": "tacp-handshake",
"name": "Trusted Agentic Commerce Protocol handshake",
"description": "Sign a JWS+JWE envelope per TACP so a merchant can verify the agent's identity and decrypt scoped user data. Open MIT-licensed spec.",
"tags": [
"agentic-commerce",
"jws",
"jwe",
"agent-auth"
],
"documentation": "https://github.com/forter/trusted-agentic-commerce-protocol"
},
{
"id": "order",
"name": "Order / checkout decision",
"operationId": "V3Order",
"description": "Single endpoint covers both pre-auth (authorizationStep=PRE_AUTHORIZATION) and post-auth review (authorizationStep=POST_AUTHORIZATION). Returns forterDecision plus reason codes, trackingId, and paymentRecommendations.",
"tags": [
"order",
"checkout",
"fraud"
],
"documentation": "https://docs.forter.com/reference/order-v3",
"endpoint": "POST https://api.forter-secure.com/v3/orders/{id}",
"productPage": "https://docs.forter.com/checkout-and-payments"
},
{
"id": "agentic-orders",
"name": "Agent-originated order",
"operationId": "V3Order",
"description": "Variant of /order for orders placed by an AI agent on a user's behalf. orderType=AI_AGENT plus agenticCommercePlatform identifiers and per-platform signal objects.",
"tags": [
"agentic-commerce",
"ai-agent",
"openai",
"google",
"microsoft",
"perplexity",
"amazon",
"meta"
],
"documentation": "https://docs.forter.com/agentic-orders",
"endpoint": "POST https://api.forter-secure.com/v3/orders/{id} (orderType=AI_AGENT)",
"productPage": "https://docs.forter.com/agentic-commerce"
},
{
"id": "order-results",
"name": "3DS / order result reporting",
"operationId": "V3OrderResults",
"description": "Report 3DS challenge result back to Forter using the managed-order token from /order.",
"tags": [
"3ds",
"order-result"
],
"documentation": "https://docs.forter.com/reference/3ds-result",
"endpoint": "POST https://api.forter-secure.com/v3/orders/{id}/results"
},
{
"id": "order-update",
"name": "Order update",
"operationId": "ValidationUpdate",
"description": "Post-purchase order update - refund, return, ship event, late-discovered fraud signal.",
"tags": [
"post-purchase",
"lifecycle"
],
"documentation": "https://docs.forter.com/reference/order-update",
"endpoint": "POST https://api.forter-secure.com/v2/order-update/{id}",
"productPage": "https://docs.forter.com/post-purchase-updates"
},
{
"id": "order-status",
"name": "Order status",
"operationId": "Status",
"description": "Generic order status / settlement reporting.",
"tags": [
"status",
"settlement"
],
"documentation": "https://docs.forter.com/reference/order-status",
"endpoint": "POST https://api.forter-secure.com/v2/status/{id}"
},
{
"id": "login",
"name": "Login decision",
"operationId": "AccountLogin",
"description": "Real-time login fraud decision. Defends against ATO, credential stuffing, MFA bypass.",
"tags": [
"account-takeover",
"login"
],
"documentation": "https://docs.forter.com/reference/login",
"endpoint": "POST https://api.forter-secure.com/v2/accounts/login/{id}",
"productPage": "https://docs.forter.com/login-protection"
},
{
"id": "signup",
"name": "Sign-up decision",
"operationId": "AccountSignup",
"description": "Account-creation fraud decision. Defends against synthetic identities, promo abuse.",
"tags": [
"signup-fraud",
"promo-abuse"
],
"documentation": "https://docs.forter.com/reference/signup",
"endpoint": "POST https://api.forter-secure.com/v2/accounts/signup/{id}",
"productPage": "https://docs.forter.com/sign-up-protection"
},
{
"id": "authentication-result",
"name": "Authentication result reporting",
"operationId": "AccountAuthenticationAttemptResult",
"description": "Report MFA / step-up outcome back to Forter using the correlationId from /login.",
"tags": [
"mfa",
"step-up"
],
"documentation": "https://docs.forter.com/reference/authentication-result",
"endpoint": "POST https://api.forter-secure.com/v2/accounts/authentication-result/{id}"
},
{
"id": "profile-access",
"name": "Profile-access decision",
"operationId": "AccountAccessRequest",
"description": "Risk decision on sensitive profile-access events (payment-method change, password reset, address update, account-settings view).",
"tags": [
"session",
"account-protection"
],
"documentation": "https://docs.forter.com/reference/profile-access",
"endpoint": "POST https://api.forter-secure.com/v2/accounts/profile-access/{id}",
"productPage": "https://docs.forter.com/session-protection"
},
{
"id": "account-status",
"name": "Account status reporting",
"operationId": "AccountStatusUpdate",
"description": "Merchant-side account status update (banned, fraud-flagged, restored).",
"tags": [
"account-status"
],
"documentation": "https://docs.forter.com/reference/account-status",
"endpoint": "POST https://api.forter-secure.com/v2/accounts/status/{id}"
},
{
"id": "seller-item-listing",
"name": "Seller item listing",
"operationId": "AccountItemListing",
"description": "Marketplace seller listing - fraud / policy-abuse decision on new seller listings.",
"tags": [
"marketplace",
"seller"
],
"documentation": "https://docs.forter.com/reference/seller-item-listing",
"endpoint": "POST https://api.forter-secure.com/v2/accounts/item-listing/{id}"
},
{
"id": "session-protection",
"name": "Session protection",
"description": "Mid-session attack defense (session hijack, cookie theft, anomalous in-session behavior). Integrated via SDK + server-side signals.",
"tags": [
"session"
],
"documentation": "https://docs.forter.com/session-protection"
},
{
"id": "evidence",
"name": "Dispute evidence (datapoints)",
"operationId": "DisputeEvidenceDatapointsRequest",
"description": "Submit structured representment datapoints for a chargeback. Scheme-specific packets across major schemes and PSPs.",
"tags": [
"chargeback",
"representment",
"evidence"
],
"documentation": "https://docs.forter.com/reference/evidence",
"endpoint": "POST https://api.forter-secure.com/v3/disputes/evidence/datapoints",
"productPage": "https://docs.forter.com/chargeback-recovery"
},
{
"id": "evidence-file",
"name": "Dispute evidence (file)",
"operationId": "DisputeEvidenceFileRequest",
"description": "Attach a file to a representment packet - invoice, shipping confirmation, signed receipt, T&C screenshot.",
"tags": [
"chargeback",
"file-upload"
],
"documentation": "https://docs.forter.com/reference/evidence",
"endpoint": "POST https://api.forter-secure.com/v3/disputes/evidence/file",
"productPage": "https://docs.forter.com/upload-static-evidence"
},
{
"id": "claim",
"name": "Dispute claim",
"operationId": "Claim",
"description": "Specialized dispute-claim submission. Canonical schema in /openapi.json (operationId=Claim).",
"tags": [
"dispute",
"claim"
],
"documentation": "https://www.forter.com/openapi.json#/paths/~1v2~1claims/post",
"endpoint": "POST https://api.forter-secure.com/v2/claims"
},
{
"id": "compensation",
"name": "Unified compensation request",
"operationId": "UnifiedCompensationRequest",
"description": "Refund / credit / compensation request against a previously-decisioned order.",
"tags": [
"compensation",
"refund"
],
"documentation": "https://docs.forter.com/reference/compensation",
"endpoint": "POST https://api.forter-secure.com/v2/unified-compensation-request/{id}"
},
{
"id": "merchant-creation",
"name": "Merchant onboarding (Element for PSPs)",
"operationId": "MerchantCreation",
"description": "PSP-mediated onboarding - create a downstream merchant under a parent PSP's Forter account.",
"tags": [
"merchant-onboarding",
"psp"
],
"documentation": "https://docs.forter.com/reference/merchants",
"endpoint": "POST https://api.forter-secure.com/merchants",
"productPage": "https://docs.forter.com/element-for-psps"
},
{
"id": "3ds-recommendation-enrollment",
"name": "3DS recommendation enrollment",
"operationId": "ThreeDsRecommendationOnboarding",
"description": "Async enrollment of a merchant into Forter's 3DS recommendation service. POST + poll status.",
"tags": [
"3ds",
"enrollment"
],
"documentation": "https://docs.forter.com/reference/3ds-recommendation-enrollment",
"endpoint": "POST https://api.forter-secure.com/merchants/{id}/3ds-recommendation",
"productPage": "https://docs.forter.com/3ds-recommendation"
},
{
"id": "3ds-execution-enrollment",
"name": "3DS execution enrollment",
"operationId": "ThreeDsExecutionOnboarding",
"description": "Async enrollment of a merchant into Forter's 3DS execution service (Hosted Fields / mobile SDKs).",
"tags": [
"3ds",
"enrollment"
],
"documentation": "https://docs.forter.com/reference/3ds-execution-enrollment",
"endpoint": "POST https://api.forter-secure.com/merchants/{id}/3ds-execution",
"productPage": "https://docs.forter.com/3ds-execution"
},
{
"id": "privacy-request",
"name": "GDPR / CCPA privacy request",
"operationId": "PrivacyRequest",
"description": "Three-op flow: POST /privacy/requests, GET /privacy/requests/{id}/status, GET /privacy/requests/{id}/data.",
"tags": [
"gdpr",
"ccpa",
"data-privacy"
],
"documentation": "https://docs.forter.com/reference/privacy-request",
"endpoint": "POST https://api.forter-secure.com/privacy/requests"
},
{
"id": "account-updater",
"name": "Account updater",
"description": "Refresh expired or reissued card credentials. card/update + token/update + token/enroll on a separate PCI-scoped host.",
"tags": [
"card-updater",
"mit-flows"
],
"documentation": "https://docs.forter.com/reference/account-updater",
"endpoint": "POST https://pci-tokenization-sandbox.checkouttools.com/v1/account-updater/{card|token}/{update|enroll}",
"productPage": "https://docs.forter.com/account-updater-api"
},
{
"id": "tokenization",
"name": "Tokenization",
"description": "Network-token mint via Forter's PCI-scoped tokenization service.",
"tags": [
"tokenization",
"pci"
],
"documentation": "https://docs.forter.com/reference/tokenization",
"endpoint": "POST https://pci-tokenization-sandbox.checkouttools.com/v1/...",
"productPage": "https://docs.forter.com/tokenization-api"
},
{
"id": "detokenization-proxy",
"name": "Detokenization proxy",
"description": "Forward HTTP proxy resolving Forter network tokens back to PAN at the request edge.",
"tags": [
"detokenization",
"proxy",
"pci"
],
"documentation": "https://docs.forter.com/detokenization-proxy",
"endpoint": "https://pci-proxy-sandbox.checkouttools.com"
},
{
"id": "contact-sales",
"name": "Contact Forter sales",
"description": "Submit a sales-lead request via Forter's homepage HubSpot form. Exposed both as a WebMCP tool at https://mcp.forter.com/mcp and as a schema.org RegisterAction on the homepage JSON-LD. Required fields: firstname, lastname, email (business), phone, jobtitle, country, how_did_you_hear_about_us_. Submitting constitutes opt-in to sales contact per the Forter privacy policy - agent MUST confirm with the user first.",
"tags": [
"contact",
"sales",
"lead-gen",
"webmcp",
"hubspot"
],
"documentation": "https://www.forter.com/contact-us/",
"endpoint": "POST https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/2776164/b81b0db5-1916-4e6d-8d6d-80cbf520f325",
"hubspotPortalId": "2776164",
"hubspotFormId": "b81b0db5-1916-4e6d-8d6d-80cbf520f325",
"privacyPolicy": "https://www.forter.com/privacy-policy/"
}
]
}