{"audit":{"version":"1.4","generated_at":"2026-08-19T17:45:12.974007+00:00","generated_by":"Agenstry","report_url":"https://agenstry.com/agents/www.forter.com","methodology_url":"https://agenstry.com/methodology","verifier_jwks_url":"https://agenstry.com/.well-known/jwks.json","subject":{"domain":"www.forter.com","name":"forter","url":"https://www.forter.com/.well-known/agent-card.json"}},"identity":{"provider":{"organization":null,"url":null},"registry_verification":null,"signature":{"signed":false,"signature_valid":null}},"protocol":{"version":null,"supports_streaming":false,"supports_push_notifications":false},"operational":{"live_state":"auth_required","live_responds":false,"last_status_code":200,"last_elapsed_ms":536,"last_error":null},"track_record":{"first_seen":"2026-08-18T10:34:13.732641+00:00","last_checked":"2026-08-19T12:12:31.375801+00:00","last_seen_ok":"2026-08-19T12:12:31.375801+00:00","checks_total":3,"checks_ok":3,"uptime_pct":100.0,"archived":false,"archived_reason":null},"conformance":{"score":39,"grade":"F","summary":"F-grade: card is reachable but fails most operational signals.","criteria":[{"key":"valid_card","label":"Valid AgentCard","points":10,"max_points":10,"status":"pass","detail":"Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification)."},{"key":"live_responds","label":"Live JSON-RPC","points":15,"max_points":25,"status":"partial","detail":"Endpoint requires auth, real agent but not anonymously callable."},{"key":"protocol_version","label":"Protocol version","points":0,"max_points":10,"status":"fail","detail":"No protocolVersion in card."},{"key":"signature","label":"JWS signature","points":0,"max_points":10,"status":"info","detail":"Card is unsigned (most published agents are)."},{"key":"uptime","label":"Uptime track record","points":0,"max_points":15,"status":"info","detail":"Only 3 probes so far, need ≥5 for an uptime grade."},{"key":"skills","label":"Skill declaration","points":10,"max_points":10,"status":"pass","detail":"Declares 25 skills with structured metadata."},{"key":"verified_identity","label":"Verified Identity","points":0,"max_points":10,"status":"fail","detail":"No provider organisation declared. Anonymous agent."},{"key":"freshness","label":"Freshness + modern flags","points":4,"max_points":5,"status":"pass","detail":"seen in upstream source within 0d"},{"key":"security","label":"Security declaration","points":0,"max_points":5,"status":"info","detail":"Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated."}]},"card_read":{"findings":[{"field":"capabilities","problem":"Input should be a valid dictionary or instance of Capabilities","action":"dropped","detail":"this field was not indexed"}],"clean":false,"source_url":"https://www.forter.com/.well-known/agent-card.json"},"skills":[{"id":"tacp-handshake","name":"Trusted Agentic Commerce Protocol handshake","description":"Sign a JWS+JWE envelope per TACP so a merchant can verify the agent's identity and decrypt scoped user data. Open MIT-licensed spec.","tags":["agentic-commerce","jws","jwe","agent-auth"],"examples":[],"inputModes":[],"outputModes":[],"documentation":"https://github.com/forter/trusted-agentic-commerce-protocol"},{"id":"order","name":"Order / checkout decision","description":"Single endpoint covers both pre-auth (authorizationStep=PRE_AUTHORIZATION) and post-auth review (authorizationStep=POST_AUTHORIZATION). Returns forterDecision plus reason codes, trackingId, and paymentRecommendations.","tags":["order","checkout","fraud"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"V3Order","documentation":"https://docs.forter.com/reference/order-v3","endpoint":"POST https://api.forter-secure.com/v3/orders/{id}","productPage":"https://docs.forter.com/checkout-and-payments"},{"id":"agentic-orders","name":"Agent-originated order","description":"Variant of /order for orders placed by an AI agent on a user's behalf. orderType=AI_AGENT plus agenticCommercePlatform identifiers and per-platform signal objects.","tags":["agentic-commerce","ai-agent","openai","google","microsoft","perplexity","amazon","meta"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"V3Order","documentation":"https://docs.forter.com/agentic-orders","endpoint":"POST https://api.forter-secure.com/v3/orders/{id} (orderType=AI_AGENT)","productPage":"https://docs.forter.com/agentic-commerce"},{"id":"order-results","name":"3DS / order result reporting","description":"Report 3DS challenge result back to Forter using the managed-order token from /order.","tags":["3ds","order-result"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"V3OrderResults","documentation":"https://docs.forter.com/reference/3ds-result","endpoint":"POST https://api.forter-secure.com/v3/orders/{id}/results"},{"id":"order-update","name":"Order update","description":"Post-purchase order update - refund, return, ship event, late-discovered fraud signal.","tags":["post-purchase","lifecycle"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"ValidationUpdate","documentation":"https://docs.forter.com/reference/order-update","endpoint":"POST https://api.forter-secure.com/v2/order-update/{id}","productPage":"https://docs.forter.com/post-purchase-updates"},{"id":"order-status","name":"Order status","description":"Generic order status / settlement reporting.","tags":["status","settlement"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"Status","documentation":"https://docs.forter.com/reference/order-status","endpoint":"POST https://api.forter-secure.com/v2/status/{id}"},{"id":"login","name":"Login decision","description":"Real-time login fraud decision. Defends against ATO, credential stuffing, MFA bypass.","tags":["account-takeover","login"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"AccountLogin","documentation":"https://docs.forter.com/reference/login","endpoint":"POST https://api.forter-secure.com/v2/accounts/login/{id}","productPage":"https://docs.forter.com/login-protection"},{"id":"signup","name":"Sign-up decision","description":"Account-creation fraud decision. Defends against synthetic identities, promo abuse.","tags":["signup-fraud","promo-abuse"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"AccountSignup","documentation":"https://docs.forter.com/reference/signup","endpoint":"POST https://api.forter-secure.com/v2/accounts/signup/{id}","productPage":"https://docs.forter.com/sign-up-protection"},{"id":"authentication-result","name":"Authentication result reporting","description":"Report MFA / step-up outcome back to Forter using the correlationId from /login.","tags":["mfa","step-up"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"AccountAuthenticationAttemptResult","documentation":"https://docs.forter.com/reference/authentication-result","endpoint":"POST https://api.forter-secure.com/v2/accounts/authentication-result/{id}"},{"id":"profile-access","name":"Profile-access decision","description":"Risk decision on sensitive profile-access events (payment-method change, password reset, address update, account-settings view).","tags":["session","account-protection"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"AccountAccessRequest","documentation":"https://docs.forter.com/reference/profile-access","endpoint":"POST https://api.forter-secure.com/v2/accounts/profile-access/{id}","productPage":"https://docs.forter.com/session-protection"},{"id":"account-status","name":"Account status reporting","description":"Merchant-side account status update (banned, fraud-flagged, restored).","tags":["account-status"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"AccountStatusUpdate","documentation":"https://docs.forter.com/reference/account-status","endpoint":"POST https://api.forter-secure.com/v2/accounts/status/{id}"},{"id":"seller-item-listing","name":"Seller item listing","description":"Marketplace seller listing - fraud / policy-abuse decision on new seller listings.","tags":["marketplace","seller"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"AccountItemListing","documentation":"https://docs.forter.com/reference/seller-item-listing","endpoint":"POST https://api.forter-secure.com/v2/accounts/item-listing/{id}"},{"id":"session-protection","name":"Session protection","description":"Mid-session attack defense (session hijack, cookie theft, anomalous in-session behavior). Integrated via SDK + server-side signals.","tags":["session"],"examples":[],"inputModes":[],"outputModes":[],"documentation":"https://docs.forter.com/session-protection"},{"id":"evidence","name":"Dispute evidence (datapoints)","description":"Submit structured representment datapoints for a chargeback. Scheme-specific packets across major schemes and PSPs.","tags":["chargeback","representment","evidence"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"DisputeEvidenceDatapointsRequest","documentation":"https://docs.forter.com/reference/evidence","endpoint":"POST https://api.forter-secure.com/v3/disputes/evidence/datapoints","productPage":"https://docs.forter.com/chargeback-recovery"},{"id":"evidence-file","name":"Dispute evidence (file)","description":"Attach a file to a representment packet - invoice, shipping confirmation, signed receipt, T&C screenshot.","tags":["chargeback","file-upload"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"DisputeEvidenceFileRequest","documentation":"https://docs.forter.com/reference/evidence","endpoint":"POST https://api.forter-secure.com/v3/disputes/evidence/file","productPage":"https://docs.forter.com/upload-static-evidence"},{"id":"claim","name":"Dispute claim","description":"Specialized dispute-claim submission. Canonical schema in /openapi.json (operationId=Claim).","tags":["dispute","claim"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"Claim","documentation":"https://www.forter.com/openapi.json#/paths/~1v2~1claims/post","endpoint":"POST https://api.forter-secure.com/v2/claims"},{"id":"compensation","name":"Unified compensation request","description":"Refund / credit / compensation request against a previously-decisioned order.","tags":["compensation","refund"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"UnifiedCompensationRequest","documentation":"https://docs.forter.com/reference/compensation","endpoint":"POST https://api.forter-secure.com/v2/unified-compensation-request/{id}"},{"id":"merchant-creation","name":"Merchant onboarding (Element for PSPs)","description":"PSP-mediated onboarding - create a downstream merchant under a parent PSP's Forter account.","tags":["merchant-onboarding","psp"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"MerchantCreation","documentation":"https://docs.forter.com/reference/merchants","endpoint":"POST https://api.forter-secure.com/merchants","productPage":"https://docs.forter.com/element-for-psps"},{"id":"3ds-recommendation-enrollment","name":"3DS recommendation enrollment","description":"Async enrollment of a merchant into Forter's 3DS recommendation service. POST + poll status.","tags":["3ds","enrollment"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"ThreeDsRecommendationOnboarding","documentation":"https://docs.forter.com/reference/3ds-recommendation-enrollment","endpoint":"POST https://api.forter-secure.com/merchants/{id}/3ds-recommendation","productPage":"https://docs.forter.com/3ds-recommendation"},{"id":"3ds-execution-enrollment","name":"3DS execution enrollment","description":"Async enrollment of a merchant into Forter's 3DS execution service (Hosted Fields / mobile SDKs).","tags":["3ds","enrollment"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"ThreeDsExecutionOnboarding","documentation":"https://docs.forter.com/reference/3ds-execution-enrollment","endpoint":"POST https://api.forter-secure.com/merchants/{id}/3ds-execution","productPage":"https://docs.forter.com/3ds-execution"},{"id":"privacy-request","name":"GDPR / CCPA privacy request","description":"Three-op flow: POST /privacy/requests, GET /privacy/requests/{id}/status, GET /privacy/requests/{id}/data.","tags":["gdpr","ccpa","data-privacy"],"examples":[],"inputModes":[],"outputModes":[],"operationId":"PrivacyRequest","documentation":"https://docs.forter.com/reference/privacy-request","endpoint":"POST https://api.forter-secure.com/privacy/requests"},{"id":"account-updater","name":"Account updater","description":"Refresh expired or reissued card credentials. card/update + token/update + token/enroll on a separate PCI-scoped host.","tags":["card-updater","mit-flows"],"examples":[],"inputModes":[],"outputModes":[],"documentation":"https://docs.forter.com/reference/account-updater","endpoint":"POST https://pci-tokenization-sandbox.checkouttools.com/v1/account-updater/{card|token}/{update|enroll}","productPage":"https://docs.forter.com/account-updater-api"},{"id":"tokenization","name":"Tokenization","description":"Network-token mint via Forter's PCI-scoped tokenization service.","tags":["tokenization","pci"],"examples":[],"inputModes":[],"outputModes":[],"documentation":"https://docs.forter.com/reference/tokenization","endpoint":"POST https://pci-tokenization-sandbox.checkouttools.com/v1/...","productPage":"https://docs.forter.com/tokenization-api"},{"id":"detokenization-proxy","name":"Detokenization proxy","description":"Forward HTTP proxy resolving Forter network tokens back to PAN at the request edge.","tags":["detokenization","proxy","pci"],"examples":[],"inputModes":[],"outputModes":[],"documentation":"https://docs.forter.com/detokenization-proxy","endpoint":"https://pci-proxy-sandbox.checkouttools.com"},{"id":"contact-sales","name":"Contact Forter sales","description":"Submit a sales-lead request via Forter's homepage HubSpot form. Exposed both as a WebMCP tool at https://mcp.forter.com/mcp and as a schema.org RegisterAction on the homepage JSON-LD. Required fields: firstname, lastname, email (business), phone, jobtitle, country, how_did_you_hear_about_us_. Submitting constitutes opt-in to sales contact per the Forter privacy policy - agent MUST confirm with the user first.","tags":["contact","sales","lead-gen","webmcp","hubspot"],"examples":[],"inputModes":[],"outputModes":[],"documentation":"https://www.forter.com/contact-us/","endpoint":"POST https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/2776164/b81b0db5-1916-4e6d-8d6d-80cbf520f325","hubspotPortalId":"2776164","hubspotFormId":"b81b0db5-1916-4e6d-8d6d-80cbf520f325","privacyPolicy":"https://www.forter.com/privacy-policy/"}],"provenance":[{"source":"github_code","first_seen":"2026-08-18T10:34:13.732641+00:00"}],"recent_probes":[{"fetched_at":"2026-08-19T12:12:31.375801+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":536,"live_responds":false},{"fetched_at":"2026-08-18T21:05:16.128979+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":248,"live_responds":false},{"fetched_at":"2026-08-18T10:34:13.732641+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":254,"live_responds":false}],"catalog_attestation":null,"operator_revenue_evidence":{"evidence_class":"operator_submitted","authenticity":{"rung":"no_operator_evidence","rank":0,"why":"No verifiable operator evidence has been submitted for this agent.","thresholds":{"min_independent_payers":3,"min_verified_usd":25.0},"engine_table":"agent_authenticity","merge_rule":"max(existing_rank, rank)"},"metric_metadata":{"provenance":"operator_submitted_evidence","confidence":"attested","coverage":{"numerator":0},"as_of":"2026-08-19T17:45:12.978205+00:00","definition":"Revenue proofs submitted by the verified owner and re-checked by Agenstry against the settlement chain or the operator's own Stripe account. Only independently confirmed proofs are counted."},"counts":{"retained":0,"verified":0,"unverifiable":0},"verified":{"gross_usd":0.0,"transactions":0,"independent_payers":0},"detail_url":"https://agenstry.com/api/agents/www.forter.com/evidence","dispute_url":"https://agenstry.com/agents/www.forter.com/dispute"},"verification_history":[]}