FirstAgent
Pioneering AI-to-Payments Protocol
We built a production conversational payments system before Google announced the AP2 (Agent-to-Payments) protocol. AI agents can make purchases on behalf of users with cryptographically-signed authorization mandates.
Built Before AP2 Was Announced
Google announced the Agent-to-Payments protocol in September 2025. We had a working system months earlier.
How Agent Payments Work
Users describe what they want in natural language. AI extracts rules. Cryptographic mandates authorize agent actions.
Describe Mission
User: "Find me AirPods under $200 this week"
AI Extracts Rules
Gemini parses: product, max price, timeline, quantity
Sign Mandate
Secure Enclave + Face ID creates cryptographic auth
Agent Executes
Agent monitors deals, proposes cart, completes purchase
Security Architecture
Cryptographic Mandates
Every agent action requires a cryptographically-signed mandate. Two types:
- Intent Mandate: Authorizes agent to search and propose carts within rules
- Cart Mandate: Authorizes specific purchase execution (auto or manual)
Secure Enclave Signing
Private keys never leave the iPhone's Secure Enclave hardware. Signatures require biometric authentication.
SigningService.sign(data: Data, with: SecKey) → ECDSA P-256 SignatureMandate Data Structure
struct IntentMandate {
let id: UUID
let missionId: UUID
let rules: MissionRules // maxPrice, dates, merchants
let mode: ExecutionMode // .ask or .auto
let signature: Data // ECDSA P-256
let publicKey: Data // Verification key
let createdAt: Date
let expiresAt: Date
var isRevoked: Bool
}Execution Modes
Ask Mode
Agent proposes carts for user approval. Each purchase requires explicit consent via Face ID. Safer for high-value or unfamiliar purchases.
Auto Mode
Agent executes purchases automatically within mandate rules. Great for routine purchases or time-sensitive deals that match strict criteria.
Technical Stack
- Swift 5.9
- SwiftUI
- Secure Enclave
- LocalAuthentication
- Gemini 1.5 Flash
- JSON Mode
- Rule Extraction
- Mission Summary
- Wise API
- International Transfers
- 50+ Countries
- Multi-currency
- ECDSA P-256
- Face ID / Touch ID
- Mandate System
- Audit Trail
Impact & Significance
First of Its Kind
Built production conversational payments before billion-dollar companies, proving agent-to-payments viability.
Bank-Grade Security
Cryptographic mandates and hardware-backed signing ensure only authorized transactions execute.
Real Transactions
Not a prototype. Real Wise API integration enabling actual international transfers across 50+ countries.
Building the future of AI payments?
We're experts in AI agents, fintech integration, and secure transaction systems. Let's build something groundbreaking.