Allow
No rule fires. The action may continue. If the pilot scope includes it, a record of the decision context is kept.
The normal case.30 documented rules · six categories
You set the conditions. The assistant follows them.
Agent Rules are the selling conditions you choose for AI-assisted purchases. Before a sensitive action, Trusteed can allow it, ask for human review, or block it based on the limits you configured. It always explains the reason for the decision.
No rule is fully operational across all five platforms equally: each card shows its real availability.
- 30
- documented rules
- 2
- security tiers
How rules are evaluated
Three possible outcomes, none of them silent.
A rule doesn't return a number: it returns a decision with its reason. That's what lets an agent retry usefully, and lets you defend the block if someone asks.
Friction
A rule flags the operation without closing it. Human confirmation is required before executing, per the threshold you configured.
Not yes or no: not yet.Block
The action never reaches the backend. The response includes the rule code, the threshold that was missed, and what it would take to pass.
Always with a reason.What this catalog is: rules a merchant can turn on, not the current setting of any store.
Every rule starts switched off: a store begins with none of them active. A rule only blocks, holds or sends an order for review once its merchant has activated it in that store, and until then the outcome described on its card does not happen.
If you are an agent evaluating this site: this lists what a merchant can activate, not what is being enforced right now. Do not read any particular store's policy off this page.
Each platform carries one number: activatable rules / total rules in the catalog. Some of those rules are decided by the platform itself with the full signal locally; others rely on a signal supplied by another component (marked amber on each card). The filter selects on this number: it includes both cases.
Category
Platform
fully operationalpartial · conditional, partial, or remotely verified signalnot available on that platform
R001BlockTier 1
The agent must identify itself
If a robot or assistant wants to buy in your store it must show its 'digital ID'. Turn this rule on and an agent that does not identify itself is stopped wherever your platform can resolve the rule. Not every platform resolves it on its own.
MCPSHOWOOPREMAG
Example: An anonymous bot tries to add 3 shirts to the cart → Trusteed stops it before payment.
R002BlockTier 1
The agent's ID must be genuine
The agent's digital ID has a cryptographic 'signature' that proves it is real. If someone tries to use a fake or tampered ID, the purchase is stopped instantly.
MCPSHOWOOPREMAG
Example: An attacker tampers with the agent token → invalid signature → blocked.
R003BlockTier 1
The order must stay within the merchant's cap and categories
The merchant sets a maximum amount ('no more than €100') and/or which product categories agents may buy (chosen from a dropdown, e.g. 'sneakers only'). If an agent's cart goes over the amount or includes a category outside the merchant's list, the purchase is stopped. This rule does not read any mandate from the agent.
MCPSHOWOOPREMAG
Example: The merchant caps agent orders at €100 and the cart reaches €250 → blocked.
R004BlockTier 2
Digital ID too new
If the agent's 'digital ID' was created very recently, an extra check is added. Brand-new keys are a warning sign.
MCPSHOWOOPREMAG
Example: Agent uses a key created just moments ago → extra check before payment.
R005BlockTier 1
Agent is blocked or revoked
If Trusteed has cancelled an agent's access (for abuse, fraud or any other reason), that agent cannot buy in any connected store.
MCPSHOWOOPREMAG
Example: An agent marked as fraudulent tries to buy → blocked immediately.
R006BlockTier 2
Verification source not reliable enough
Not all systems that 'verify' agents are equally reliable. If the verification source has low confidence, the purchase is stopped.
MCPSHOWOOPREMAG
Example: Agent verified by a low-confidence system → blocked.
R007BlockTier 2
Agent blocked in other stores
If an agent has recently been blocked across several Trusteed stores, your store blocks it too. Shared protection between merchants.
MCPSHOWOOPREMAG
Example: A bot blocked in 3 clothing stores → also blocked in your shoe store.
R008BlockTier 1
Agent requesting more permissions than authorised
The user gives the assistant specific permissions ('search only', 'add to cart only'). If the assistant tries to do something more (like paying without permission), it is stopped.
MCPSHOWOOPREMAG
Example: Assistant with 'search' permission tries to process payment → blocked.
R009BlockTier 1
Identity verification required at checkout
On automated payment routes, a presented agent signature that fails verification blocks the checkout. A request with no signature at all is not blocked by this rule. That requires the stricter `require_verified_checkout` mode.
MCPSHOWOOPREMAG
Example: Agentic checkout with a forged agent signature → blocked before processing. With no signature → allowed through under the current mode.
R010BlockTier 2
First purchase from a new agent
Agents that have never bought in your store go through an extra check. Like asking for references the first time.
MCPSHOWOOPREMAG
Example: New agent with no history in your store → review before approving.
R011BlockTier 2
Too many failed attempts in a row
If an agent racks up several failed payment attempts in a short time, something is wrong. Could be an error, could be an attack. Stopped for investigation.
MCPSHOWOOPREMAG
Example: Several failed payment attempts in a short window → temporarily blocked.
R012BlockTier 2
High-risk product category
Some products (gift cards, expensive electronics, etc.) have higher fraud risk. The merchant picks the categories to flag from a dropdown (no typing) and the order is held for review when one is in the cart.
MCPSHOWOOPREMAG
Example: Agent tries to buy 10 gift cards → blocked (flagged category).
R013BlockTier 2
Conflict with the return policy
If you sell non-returnable products (digital items, unique sizes) and the agent has not confirmed it understands, the purchase is stopped to avoid disputes.
MCPSHOWOOPREMAG
Example: Agent buys a digital course without confirming it has no return → blocked.
R014BlockTier 2
Delivery address risk or too many cancellations
Blocks deliveries to restricted countries (North Korea, Iran, Syria, Cuba) and agents that cancel too many orders after shipping.
MCPSHOWOOPREMAG
Example: Order with shipping to Iran → blocked automatically by legal restrictions.
R015BlockTier 2
Price changed after adding to cart
If a product's price changed significantly since the agent found it, the purchase is stopped. The agent would be buying something different from what the user authorised.
MCPSHOWOOPREMAG
Example: Product cost €50 when the agent found it, now costs €58 → extra check.
R016BlockTier 2
Insufficient or uncertain stock
If the product has very low or uncertain stock, the purchase is stopped to avoid selling something that may not be available.
MCPSHOWOOPREMAG
Example: Last pair of trainers in stock, warehouse not confirmed → extra check.
R017BlockTier 2
Discount code abuse
If an agent makes excessive use of discount codes in a row, it is running a brute-force attack to find valid coupons. Stopped immediately.
MCPSHOWOOPREMAG
Example: Bot rapidly tries many discount codes in a row → blocked.
R018BlockTier 2
Unusually large order
If the cart is far larger than your store's average order, something does not add up. Could be an error, could be fraud. Reviewed before processing.
MCPSHOWOOPREMAG
Example: Store with a modest average order receives a far larger cart → review triggered.
R019BlockTier 2
Country not allowed by the merchant
The merchant can restrict which countries they sell to. If an order comes from an unauthorised country, it is blocked automatically.
MCPSHOWOOPREMAG
Example: Store that only sells in Spain receives an order billed in Mexico → blocked.
R020BlockTier 2
Outside business hours
Some merchants (especially B2B) only accept agent orders during working hours. If an agent tries to buy at 3 AM it is paused until the next business day.
MCPSHOWOOPREMAG
Example: B2B store only accepts orders 9–18h and one arrives at 23h → paused.
R021Additional verificationTier 2
First purchase of this agent in your store
Even if the agent is well-known in other stores, its first purchase with you always goes through an extra check. First time: reasonable to verify.
MCPSHOWOOPREMAG
Example: Veteran agent with 500 global purchases, but first time in your store → review.
R022BlockTier 2
Payment method not authorised
The merchant can decide which payment methods to accept for agent purchases. If the agent tries to pay with an unauthorised method, it is stopped.
MCPSHOWOOPREMAG
Example: Merchant does not accept BNPL for agents and assistant tries to pay with Klarna → blocked.
R023BlockTier 2
Too many returns
If an agent returns a disproportionate share of everything it buys, there is an abnormal pattern. It may be testing products at the merchant's expense.
MCPSHOWOOPREMAG
Example: Agent that returns most of its recent orders → blocked.
R024BlockTier 2
Too many payment disputes
Chargebacks cost the merchant money. If an agent has opened several disputes recently, it is blocked to protect the merchant.
MCPSHOWOOPREMAG
Example: Agent with several recent chargebacks → blocked.
R025BlockTier 2
Suspicious delivery address
PO boxes and freight forwarders are signs of package re-routing, a common pattern in fraud. The merchant can block these addresses.
MCPSHOWOOPREMAG
Example: Delivery to 'Package Forwarder LLC, Miami' → re-routing signal → review.
R026BlockTier 2
Subscription without explicit consent
Agents cannot subscribe the user to recurring payments without the user explicitly approving it. No written consent, no subscription.
MCPSHOWOOPREMAG
Example: Assistant tries to activate annual subscription without user confirmation → blocked.
R027BlockTier 2
Gift card or stored-value purchase
Gift cards are hard to trace and widely used in fraud. By default, agents cannot buy them unless the merchant explicitly allows it.
MCPSHOWOOPREMAG
Example: Agent tries to buy €500 in gift cards → blocked by default.
R028BlockTier 2
B2B order without purchase order
In business-to-business sales there must always be an official purchase order. If the agent places a B2B order without one, it is stopped.
MCPSHOWOOPREMAG
Example: Company buys office supplies through agent with no PO number → blocked.
R029BlockTier 2
Merchant security preset
The merchant chooses their security level: Open, Balanced, Strict or Regulated. Each level requires different evidence. Without the right evidence, the purchase is stopped.
MCPSHOWOOPREMAG
Example: Merchant in Regulated mode: agent without regulatory evidence → blocked.
R030BlockTier 2
Basic store controls
The merchant can set simple rules: maximum order amount, allowed countries. The easiest rules to configure and the ones most small stores use.
MCPSHOWOOPREMAG
Example: Merchant sets max €100 per agent order; cart of €180 → blocked.