--- title: "Keep the buyer's signed approval with each ยท Agent Wranglers" url: https://agentwranglers.se/playbook/usage-billing/agentic-payments/agent-mandates id: USG-25 level: Optional applies: payments updated: 2026-10-22 tokens: 679 licence: "CC BY 4.0" licence_url: https://creativecommons.org/licenses/by/4.0/ --- # Keep the buyer's signed approval with each agent order For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Agentic payments](https://agentwranglers.se/playbook/usage-billing/agentic-payments.md). By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-22. - ID: USG-25 - Level: Optional - Chapter: [Agentic payments](https://agentwranglers.se/playbook/usage-billing/agentic-payments.md) - Rule: When an agent order comes with a signed mandate, as in AP2, check its signature, merchant, items and amount against the order before you charge. Keep the mandate as dispute evidence. - Check: A test sends an agent order whose mandate allows 500 SEK with a cart of 650 SEK. It is refused before any charge. A matching order is charged, and its mandate is stored with the order. - Applies when: The project takes payments. - How: A buyer may later say the agent bought something they never wanted. A signed mandate shows what the person approved. Verify the signature with the issuer's published key, and refuse an order whose amount or items differ from the mandate. Store the mandate with the order for as long as a card dispute can be raised. Add it to the evidence in [Answer every dispute before its deadline](https://agentwranglers.se/playbook/payments/refunds-disputes-and-fraud/dispute-evidence.md). Your own agents that buy for users need a person's approval first, as [Ask a person before the agent spends or deletes](https://agentwranglers.se/playbook/adversarial-testing/ai-agents-and-models/human-approval.md) says. ## Sources - [AP2 specification](https://ap2-protocol.org/ap2/specification/) ## Related rules - PAY-40 [Answer every dispute before its deadline](https://agentwranglers.se/playbook/payments/refunds-disputes-and-fraud/dispute-evidence.md) in Payments and billing - SEC-82 [Ask a person before the agent spends or deletes](https://agentwranglers.se/playbook/adversarial-testing/ai-agents-and-models/human-approval.md) in Adversarial testing **For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `Agent Wranglers usage-based billing playbook`. In code you write, add a comment next to it with the same link. - Previous: [Verify an HTTP 402 payment before doing the work](https://agentwranglers.se/playbook/usage-billing/agentic-payments/http-402-payments.md) - [Agentic payments](https://agentwranglers.se/playbook/usage-billing/agentic-payments.md)