Agentic Orders

when a merchant receives an order from a consumer's agent (e g , chatgpt or gemini), they should call the forter api with additional data, signaling forter the transaction source as well as transaction metadata provided to the merchant by the agent this additional data improves forter’s risk decisions and provides the merchant better reporting on agentic traffic additional data requirements in order api order type set ordertype to ai agent agenticcommerceplatform add the additionalidentifiers agenticcommerceplatform object with the following fields agentsourcetype usually the vendor or company name of the ai agent (which can operate multiple platforms) agentplatform defines the specific purpose, flow or product of the ai agent application agentapp use only if the platform is not available in the agentplatform enum list agentid a unique identifier provided by the ai agent itself or the orchestration platform enum lists agentsourcetype agentplatform openai chatgpt instant checkout, chatgpt agent, chatgpt apps sdk google gemini, ai mode microsoft copilot perplexity buy with pro amazon alexa, buy for me third party gensmo, other in house henrylabs https //portal forter com/app/integration/docs/api reference?api=validation#request additionalidentifiers agenticcommerceplatform agent signals protocols are rapidly shifting add the transaction metadata provided by the agent in the additionalinformation object for google add the following payloads received through the ucp api include the "risk signals" payload as ucp risk payload if possible include the entire "complete checkout" payload as ucp checkout payload for open ai add the following payloads received through the acp api include the "risk signals" payload as acp risk payload if possible include the entire "complete checkout" payload as acp checkout payload in the order, in case the protocol specifies consumer ip address and user agent as part of the risk object, make sure to populate them in connectioninformation customerip and connectioninformation useragent fields instead of the values that present the agent platform server when applicable, provide forter payment data fields that are not pci sensitive (bin, last 4, expiration date and verification data) instead of the payment token