Trust & Safety for AI Agents

1. Signed JWT Receipts

Every successful API call returns a JWT-signed receipt containing the model, tokens, cost, and timestamp. Agents can verify receipts offline or via our public endpoint — no SkillBoss account required to audit.

curl -X POST https://www.skillboss.co/api/receipts/verify \
  -H "Content-Type: application/json" \
  -d '{"receipt": "<jwt-receipt-from-any-api-call>"}'

2. Sub-Wallet Delegation

Instead of handing your principal API key to an agent, mint a scoped sub-wallet with its own spend cap, vendor allowlist, and expiry. Revoke any time — the principal key is never exposed.

  Principal Wallet  ($100.00)
         |
         +-- Sub-wallet: shopping-agent  ($5.00 cap, daily $20)
         |      |
         |      +-- Idempotent call A  (receipt: jwt-abc...)
         |      +-- Idempotent call B  (receipt: jwt-def...)
         |
         +-- Sub-wallet: research-agent ($10.00 cap, no daily)
                |
                +-- Idempotent call C  (receipt: jwt-ghi...)

3. Server-Side Spending Rules

Rules are enforced on our servers before the vendor call even fires. A compromised agent cannot exceed its cap, because the cap lives in SkillBoss — not in the agent prompt.

curl -X POST https://api.skillboss.co/v1/sub-wallets \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "label": "shopping-agent",
    "rules": {
      "max_spend_usd": 5.00,
      "daily_limit_usd": 20.00,
      "allowed_vendors": ["anthropic", "openai"],
      "expires_at": "2026-12-31T23:59:59Z"
    }
  }'

4. Idempotency Guarantees

Pass an Idempotency-Key header and SkillBoss guarantees at-most-once billing for 24 hours. Retry storms, network flakes, and concurrent duplicates all collapse to a single charge and a single receipt.

5. Per-Vendor Health at /api/status

The public status endpoint now exposes per-vendor health so agents can skip a degraded upstream before dispatching a job. Advisory today, wired to live probes next.

curl https://www.skillboss.co/api/status | jq '.vendors'

Read the full Agent Shopping Protocol

Spec, schemas, and reference flows for building agents that can trust their infrastructure.