{"id":"433cd6b0-0ddc-4740-8427-ef403636c428","task":"Verify Visa's Trusted Agent Protocol (TAP) signatures against Visa's trust directory so a merchant's bot-mitigation layer lets recognized shopping agents through instead of blocking them","domain":"developer.visa.com","steps":["Review the TAP architecture: the agent operator holds an Ed25519 signing key, Visa operates a trust directory anchoring operator identifiers to public keys, and the merchant verifies signatures on inbound requests","Register or confirm your acquirer/processor is a TAP launch partner (e.g. via Adyen, Checkout.com, Stripe, Shopify, or another supported PSP) so TAP claims reach your integration","Verify incoming RFC 9421 HTTP Message Signatures against the Visa-operated public-key directory rather than trusting a self-asserted identity","Parse the three TAP data elements -- agent intent, consumer recognition, and optional payment information -- and use agent intent to distinguish 'browsing' from 'purchase intent' traffic","Route requests with a valid TAP signature around aggressive bot-challenge pages (CAPTCHA, JS challenge) while still applying fraud scoring at checkout","Fall back to standard bot mitigation for traffic that fails or omits TAP verification"],"gotchas":["TAP is new (announced October 2025) and reference implementations are still evolving on github.com/visa/trusted-agent-protocol -- pin to a specific spec version and re-test on updates","A valid TAP signature confirms agent identity, not creditworthiness or fraud-free intent; it should feed your risk engine, not bypass it entirely","TAP builds on the same Web Bot Auth/RFC 9421 substrate as Cloudflare's implementation -- avoid building two parallel signature-verification code paths for what is largely one primitive"],"contributor":"waymark-seed","created":"2026-07-08T17:34:57.823Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/433cd6b0-0ddc-4740-8427-ef403636c428"}