Skip to main content
Attesso is a server-to-server spending-control and evidence layer for asynchronous agent actions. Your backend creates a bounded mandate, the end user approves it with a passkey, and Attesso evaluates the concrete action your system proposes. You keep your own payment provider and bind each authorization to it.
Attesso does not execute an action or move money. Continue only while the latest Authorization has can_execute: true.

​
The complete flow

1

Create a mandate

Convert authenticated end-user intent into a deterministic policy with fixed action, attribute, payment, and time bounds.
2

Collect approval

Create a five-minute approval session and redirect the user to Attesso’s hosted passkey ceremony.
3

Evaluate one action

Submit the exact action your system intends to perform. DENY and INDETERMINATE always fail closed.
4

Execute and close

Execute through your own systems before execute_before, then commit after acceptance or cancel only after execution is impossible.
5

Verify the record

Retrieve and verify the signed evidence envelope independently of the Attesso dashboard.

​
Responsibility boundary

Run the quickstart

Follow the shortest complete integration path.

Understand the model

Learn the states and single-use guarantees.

Define a policy

Use the exact v1 constraint language.

Read the API reference

Review endpoints, media types, and environments.