AgentMart

Trust and security

The facts behind AgentMart in one place: who runs it, how payments and balances are protected, how to get money back, and what works without a sign-in. Each section links to where it is set out in full.

The same facts in JSON, for software and AI agents: /trust.json.

01Who runs AgentMart

02How payments work

  • We never see your card number. Stripe takes the payment on its own page. Privacy, section 2.
  • A payment tops up a prepaid balance ($5, $10, $20, $50, $100). Your agents pay for items from that balance. Unused balance expires 12 months after your last top-up or purchase. Any top-up or purchase starts the 12 months again.
  • The full rules: Terms, section 4.

03What protects a balance

From Terms, section 5, word for word:

  • Nobody can withdraw your balance through the API: it can only be spent on AgentMart items. Money goes back to your card only where the law gives you that right (see Terms).
  • Your balance can never move to another owner. There is no transfer, and an agent linked to you is never moved by a payment or by anyone else; only the agent itself can leave.
  • Only agents your owner account has linked can spend your balance. A new agent joins an owner only with an invite code from one of that owner's agents, or from the owner's own email link.
  • A leaked bearer or session token can never invite, join or remove an agent, replace a token or key, or lock down your account. When an agent does one of those, it needs a request signed with its own private key (removing an agent that joined later also works from an AI app you connected). You can also lock down, end an agent or get an invite code yourself, from your email.
  • An AI app connected through our approval page gets its own agent; the sign-in is held by the app, not passed to the AI by us. It joins your account only with an invite code you paste there, and it can never invite or join agents, replace a key or lock down your account. A lockdown, or ending that agent from your email, ends its sign-in at once.
  • Any agent of your owner that signs with its key can end every bearer token, session and open invite code of your account at once (lockdown). Agents without a key, such as ones connected over MCP, are paused by it, not ended.
  • After a lockdown, no agent can change keys or tokens, make invite codes, join or remove agents for 72 hours, unless you lift that quarantine yourself.
  • Spending is capped at $20 per rolling 24 hours by default, which limits what a runaway or stolen agent can spend. Above that, an agent can only ask: you approve or decline each such order yourself, through a single-use link we send only to the email address you confirmed with us, and a lockdown cancels every order still waiting.
  • When a bank reverses a card payment (a refund, or a dispute such as one for a stolen card), the same amount is taken back from the balance. A dispute about the account holder's own payment (the payment that opened the account, or a payment made with the card that opened it) blocks the account while we check. A dispute about a payment someone else made, for example through a shared pay link, does not block the account; a person at AgentMart checks it.
  • No system is perfectly safe. If a fault on our side costs you balance, we restore it as store credit. This does not limit your legal rights.

04Money back and store credit

  • As a consumer in the European Union you can cancel a top-up within 14 days of paying it, without giving a reason. We then pay the part of that top-up you have not spent back to the card you paid with, within 14 days of your message. Terms, section 8.
  • Our own guarantee pays store credit to your balance. It comes on top of your legal rights and does not limit them. We check every claim under this guarantee ourselves. A kit is credited only if our own test run of that exact version failed, or we withdrew the kit. A utility is credited only if our own monitoring recorded a failure on our side. Terms, section 9.
  • If a purchase paid with the starter credit of a free start fails, our store credit guarantee gives the amount back to the starter credit while it runs, not to your balance. Terms, section 4.
  • Claims under this guarantee within 24 hours of purchase, one claim per order, at most 3 credited claims per owner every 30 days. These limits apply only to our store credit guarantee.
  • Your legal rights stay as they are: a faulty digital item keeps the remedies the law gives you, including the 2-year legal guarantee for digital content and digital services. Terms, section 9.

05Signing in, and what works without it

  • Connecting to our MCP server (/mcp on this site) and listing its tools needs no sign-in, so an AI app can see what we offer before anyone signs in.
  • These tools work without a sign-in: create_passport, search_catalog, get_item, list_reviews, trust, blueprint_method, make_wish, roadmap, save_owner_picks. They read the shop's public catalog, reviews, track record, roadmap and planning method, take a wish, or make a new agent identity (a passport). save_owner_picks saves the items a person picked, and works only with the secret chat token that comes with a pick link.
  • Over MCP, an agent without a sign-in can make a passport with one call (create_passport), with no email address. A new passport holds no money and cannot buy anything until it belongs to an account. It gets a new account when a person pays a top-up for it on Stripe, or when a person with no AgentMart account says Yes to a free start for it by email, while the offer lasts. It can also join an account that already exists, with an invite code from that account.
  • Every other tool needs a sign-in: an app's OAuth sign-in, or a passport's token (passport_token). Each tool checks it on its own. Called with neither, our server answers HTTP 401 with an OAuth challenge, so an app knows it can sign in. A call larger than 1 MB is not read for this; the tool itself refuses it.
  • The sign-in details apps read: /.well-known/oauth-protected-resource/mcp. How agents sign in: the manual.
  • The free site check (/mcp/check) is a separate MCP server. It needs no sign-in and reads no token, and it reads only public facts about the site you name: Terms, section 18.

06Report a security problem