Input schema (JSON)
{
"type": "object",
"required": [
"envelope",
"evidence"
],
"properties": {
"envelope": {
"type": "object",
"required": [
"protocol",
"mandate_id",
"agent_id",
"merchant_id",
"amount",
"idempotency_key"
],
"properties": {
"amount": {
"type": "object",
"oneOf": [
{
"required": [
"value",
"currency"
]
},
{
"required": [
"atomic_units",
"asset_decimals"
]
}
],
"properties": {
"value": {
"type": "number",
"exclusiveMinimum": 0
},
"currency": {
"type": "string",
"pattern": "^[A-Za-z]{3}$",
"description": "Three-letter ISO currency code."
},
"minor_units": {
"type": "integer",
"minimum": 1,
"description": "Optional exact integer amount in the currency's minor unit."
},
"atomic_units": {
"type": "string",
"pattern": "^(?:0|[1-9][0-9]{0,77})$",
"description": "Exact integer atomic-asset amount. This string is authoritative for X402."
},
"asset_decimals": {
"type": "integer",
"maximum": 30,
"minimum": 0
}
},
"additionalProperties": false
},
"limits": {
"type": "object",
"oneOf": [
{
"anyOf": [
{
"required": [
"max_amount_minor"
]
},
{
"required": [
"max_amount"
]
}
],
"required": [
"currencies",
"merchants"
]
},
{
"required": [
"max_atomic_units",
"asset_decimals",
"assets",
"networks",
"resources",
"merchants"
]
}
],
"properties": {
"assets": {
"type": "array",
"items": {
"type": "string",
"minLength": 1
},
"minItems": 1
},
"networks": {
"type": "array",
"items": {
"type": "string",
"minLength": 1
},
"minItems": 1
},
"merchants": {
"type": "array",
"items": {
"type": "string",
"minLength": 1
},
"minItems": 1
},
"resources": {
"type": "array",
"items": {
"type": "string",
"minLength": 1
},
"minItems": 1
},
"currencies": {
"type": "array",
"items": {
"type": "string",
"pattern": "^[A-Za-z]{3}$"
},
"minItems": 1
},
"max_amount": {
"type": "number",
"exclusiveMinimum": 0
},
"asset_decimals": {
"type": "integer",
"maximum": 30,
"minimum": 0
},
"max_amount_minor": {
"type": "integer",
"exclusiveMinimum": 0
},
"max_atomic_units": {
"type": "string",
"pattern": "^[1-9][0-9]{0,77}$"
}
},
"description": "Sandbox analysis policy. Live v2 ignores caller policy and loads the registered mandate."
},
"network": {
"type": "string",
"minLength": 1,
"description": "Exact network or chain identifier; required for atomic X402 payments."
},
"purpose": {
"type": "string",
"description": "Non-sensitive plain-language purchase purpose."
},
"agent_id": {
"type": "string",
"minLength": 1,
"description": "Stable identifier for the acting AI agent."
},
"asset_id": {
"type": "string",
"minLength": 1,
"description": "Exact token or asset identifier; required for atomic X402 payments."
},
"protocol": {
"enum": [
"AP2",
"TAP",
"UCP",
"X402",
"MPP",
"ACP",
"CUSTOM"
],
"type": "string",
"description": "Source protocol or CUSTOM for a normalized envelope."
},
"resource": {
"type": "string",
"minLength": 1,
"description": "Exact paid resource identifier; required for atomic X402 payments."
},
"created_at": {
"type": "string",
"format": "date-time"
},
"expires_at": {
"type": "string",
"format": "date-time"
},
"mandate_id": {
"type": "string",
"minLength": 1,
"description": "Stable identifier for the user-approved authority."
},
"intent_hash": {
"type": "string"
},
"merchant_id": {
"type": "string",
"minLength": 1,
"description": "Stable identifier for the final seller or payee."
},
"http_request": {
"type": "object",
"required": [
"profile",
"url",
"method",
"body_sha256",
"headers_sha256",
"redirect_policy"
],
"properties": {
"url": {
"type": "string",
"format": "uri"
},
"method": {
"enum": [
"GET",
"HEAD",
"POST",
"PUT",
"PATCH",
"DELETE"
],
"type": "string"
},
"profile": {
"const": "MANDATESHIELD_X402_V2_EXACT_EIP3009_V1"
},
"body_sha256": {
"type": "string",
"pattern": "^sha256:[a-f0-9]{64}$"
},
"headers_sha256": {
"type": "string",
"pattern": "^sha256:[a-f0-9]{64}$"
},
"redirect_policy": {
"const": "ERROR"
}
},
"description": "Optional signed HTTP action projection used by the narrow first-party x402 v2 exact/EIP-3009 Gate adapter.",
"additionalProperties": false
},
"user_consent": {
"type": "boolean"
},
"checkout_hash": {
"type": "string",
"minLength": 1,
"description": "Digest or stable identifier for the exact final checkout."
},
"payee_identity": {
"type": "object",
"oneOf": [
{
"properties": {
"binding": {
"type": "object",
"required": [
"network",
"pay_to"
],
"properties": {
"pay_to": {
"type": "string",
"maxLength": 500,
"minLength": 1
},
"network": {
"type": "string",
"maxLength": 240,
"minLength": 1
}
},
"additionalProperties": false
},
"provider": {
"const": "X402"
},
"verification": {
"type": "object",
"required": [
"method",
"verifier",
"evidence_ref"
],
"properties": {
"method": {
"const": "TRUSTED_MERCHANT_MAPPING"
},
"verifier": {
"type": "string",
"maxLength": 240,
"minLength": 1
},
"evidence_ref": {
"type": "string",
"maxLength": 2048,
"minLength": 1
}
},
"additionalProperties": false
}
}
},
{
"properties": {
"binding": {
"type": "object",
"required": [
"service_origin",
"method"
],
"properties": {
"method": {
"type": "string",
"pattern": "^[a-z]+$"
},
"service_origin": {
"type": "string",
"pattern": "^https://[^/?#]+$"
}
},
"additionalProperties": false
},
"provider": {
"const": "MPP"
},
"verification": {
"type": "object",
"required": [
"method",
"verifier",
"evidence_ref"
],
"properties": {
"method": {
"const": "TLS_SERVICE_ORIGIN"
},
"verifier": {
"type": "string",
"maxLength": 240,
"minLength": 1
},
"evidence_ref": {
"type": "string",
"maxLength": 2048,
"minLength": 1
}
},
"additionalProperties": false
}
}
},
{
"properties": {
"binding": {
"type": "object",
"required": [
"connected_account_id",
"merchant_account_id"
],
"properties": {
"merchant_account_id": {
"type": "string",
"pattern": "^acct_[A-Za-z0-9_]{8,240}$"
},
"connected_account_id": {
"type": "string",
"pattern": "^acct_[A-Za-z0-9_]{8,240}$"
}
},
"additionalProperties": false
},
"provider": {
"const": "STRIPE"
},
"verification": {
"type": "object",
"required": [
"method",
"verifier",
"evidence_ref"
],
"properties": {
"method": {
"const": "STRIPE_ACCOUNT_CONFIGURATION"
},
"verifier": {
"type": "string",
"maxLength": 240,
"minLength": 1
},
"evidence_ref": {
"type": "string",
"pattern": "^urn:stripe:connected-account:acct_[A-Za-z0-9_]{8,240}$"
}
},
"additionalProperties": false
}
}
},
{
"properties": {
"binding": {
"type": "object",
"required": [
"service_origin",
"provider_id"
],
"properties": {
"provider_id": {
"type": "string",
"maxLength": 240,
"minLength": 1
},
"service_origin": {
"type": "string",
"pattern": "^https://[^/?#]+$"
}
},
"additionalProperties": false
},
"provider": {
"const": "CUSTOM"
},
"verification": {
"type": "object",
"required": [
"method",
"verifier",
"evidence_ref"
],
"properties": {
"method": {
"const": "HTTPS_WELL_KNOWN"
},
"verifier": {
"type": "string",
"maxLength": 240,
"minLength": 1
},
"evidence_ref": {
"type": "string",
"format": "uri",
"pattern": "^https://[^/?#]+/\\.well-known/mandateshield-payee\\.json$"
}
},
"additionalProperties": false
}
}
}
],
"required": [
"profile",
"provider",
"merchant_id",
"binding",
"verification"
],
"properties": {
"binding": {
"type": "object"
},
"profile": {
"const": "MANDATESHIELD_PAYEE_IDENTITY_V1"
},
"provider": {
"enum": [
"X402",
"MPP",
"STRIPE",
"CUSTOM"
],
"type": "string"
},
"merchant_id": {
"type": "string",
"maxLength": 240,
"minLength": 1
},
"verification": {
"type": "object",
"required": [
"method",
"verifier",
"evidence_ref"
],
"properties": {
"method": {
"enum": [
"TRUSTED_MERCHANT_MAPPING",
"TLS_SERVICE_ORIGIN",
"STRIPE_ACCOUNT_CONFIGURATION",
"HTTPS_WELL_KNOWN"
],
"type": "string"
},
"verifier": {
"type": "string",
"maxLength": 240,
"minLength": 1
},
"evidence_ref": {
"type": "string",
"maxLength": 2048,
"minLength": 1
}
},
"additionalProperties": false
}
},
"description": "Versioned canonical payee identity bound into the signed purchase envelope. The model records exact provider identifiers and verification evidence; it does not independently validate an external registry, TLS session, provider account or domain-control document.",
"additionalProperties": false
},
"idempotency_key": {
"type": "string",
"pattern": "^[A-Za-z0-9._:~-]+$",
"maxLength": 256,
"minLength": 1,
"description": "Unique identifier for this intended payment attempt."
},
"credential_binding": {
"type": "string"
}
},
"additionalProperties": true
},
"evidence": {
"type": "object",
"required": [
"format",
"public_key"
],
"properties": {
"format": {
"enum": [
"jws",
"sd-jwt",
"http-message-signature"
],
"type": "string"
},
"compact": {
"type": "string"
},
"algorithm": {
"enum": [
"ES256",
"RS256",
"PS256"
],
"type": "string"
},
"signature": {
"type": "string"
},
"components": {
"type": "object"
},
"public_key": {
"type": "object"
},
"expected_nonce": {
"type": "string"
},
"signature_input": {
"type": "object"
},
"expected_audience": {
"type": "string"
},
"expected_authority": {
"type": "string"
}
},
"additionalProperties": false
}
},
"additionalProperties": false
}