TACK GATEWAYInitializing Cryptographic Engine...
TACK GATEWAYEnter 4-digit security code to access Tack Gateway developer console.
TACK GATEWAY DEVELOPER CONSOLEInteractive topological blueprint of Tack Gateway. Explore the merchant integration journey, agent protocol contract, system boundaries, and inside vs. outside architectural separation.
| DIMENSION | ❌ BEFORE TACK (LEGACY E-COMMERCE) | 🟢 AFTER TACK (AUTONOMOUS GATEWAY) |
|---|---|---|
| PCI SCOPE i PCI Compliance Scope SAQ-A SAQ-D full audit vs zero-PAN browser-direct TokenEx vault isolation. Click for full state specifications ➔ | SAQ-D Full Audit ($50k+/yr): Raw PAN in memory triggers exhaustive audits. | Zero-PAN SAQ-A ($0 Scope): Browser-direct iframe eliminates merchant card liability. |
| ACQUIRER RAILS i Acquirer Rail Reuse TGAPI Avoid processor migration; proxy directly to existing acquirers. Click for full state specifications ➔ | Vendor Lock-in: Forced processor migration or complex multi-acquirer re-contracting. | 100% Acquirer Reuse: Forwarding via TokenEx TGAPI proxy to existing merchant processors. |
| PRICE TAMPERING i PI2PI Defense RFC 8785 Deterministic parameter binding stops post-auth cart tampering. Click for full state specifications ➔ | PI2PI Vulnerable: AI agents can manipulate cart prices post-authorization. | RFC 8785 Hash Locked: Deterministic JCS canonicalization halts altered payloads. |
/.well-known/ai-payments.json on merchant domain for supported rails.
Invoice_Hash across SKU, price, and merchant ID.
DO_NOT_CREATE_TOKEN gate, and proxy dispatch.execute_autonomous_purchase().DO_NOT_CREATE_TOKEN vault barrier aborting invalid requests.CustomData1–4 on the vault token.Real-time map of all gateway components, network rails, and active sandbox connectors.
Formulates intent, validates L2 mandate budget constraints, and signs sovereign mandate.
Exposes discovery manifest (/.well-known/ai-payments.json) and normalized product catalog (/products.json).
Computes RFC 8785 JCS canonical SHA-256 Invoice_Hash binding amount, SKU, currency, and merchant ID.
Validates session nonce, verifies parameter binding, and dispatches to payment adapters (<10ms SLA).
Verifies Visa TAP (RFC 9421 Ed25519) and Mastercard AP4M (ES256 SD-JWT) authorization tokens.
Gates tokenization on verified intent & PPCB lock (DO_NOT_CREATE_TOKEN); injects CustomData1–4 into TokenEx vault.
Broadcasts Unified Tri-Party Audit Report with CustomData1–4 metadata and proxies downstream authorization via Transparent Gateway (TGAPI).
Direct execution pipeline across Buyer Agent (:5050), Merchant Storefront (:4000), and Gateway Core (:3000).
Synchronized receipts, TokenEx metadata binding (CustomData1–4), and cryptographic Merkle proofs broadcast simultaneously.
// Tri-party audit broadcast will render here...
Reconciliation between Tack Gateway internal cryptographic records and upstream rail sandbox IDs.
To cross-reference this transaction outside Tack Gateway, open the respective payment provider or sandbox console and look up the external network transaction ID or authorization code.
Interactive in-browser contract test matrix. Surfaces 98 auto-discovered scenario runners mapping to 152 automated Jest assertions across all 26 gateway module test suites.
The AI agent checks what the merchant sells, supported payment methods, and security rules.
{}
No. Cart amounts, line items, and merchant IDs are cryptographically locked using RFC 8785 SHA-256 before signing. If an agent tampers with even $0.01, authorization fails immediately with INVOICE_HASH_MISMATCH.
Invoice_Hash over canonicalized item IDs, quantities, prices, currency, and merchant ID. The user's credential signs this deterministic hash. Tack Gateway recomputes the SHA-256 hash in <10ms. If any parameter was modified post-signature, authorization fails instantly.
Never. All payment credentials are captured browser-direct in an isolated TokenEx vault iframe or network token cryptogram (MDES/VDP). Plaintext PAN/CVV never touches LLM prompt context, merchant servers, or gateway routing logs.
Expose a static JSON manifest describing your product verticals, checkout currency, and supported agent payment rails.
Connect standard tool calls (search_catalog, add_to_cart) to your existing catalog and shopping cart API.
Forward agent authorization tokens to Tack Gateway for sub-10ms cryptographic validation and direct settlement into your bank.
Demonstrates client-side browser isolation per SAQ-A PCI compliance. Raw credit card numbers are captured directly inside the TokenEx iFrame container. Neither AI agent prompts nor Tack Gateway routing nodes ever ingest plain-text PAN/CVV data.
{}
{}
{}
{}
{}
{}
{}
Field description...