Customers, vendors and strangers now send software agents to read your prices, fill your forms and ask for account help. In two weeks, you see who is reaching you and get the rules in writing, with a named person to approve exceptions.
Free, 20 minutes, no pitch.
Picture a customer's assistant comparing hotels for a late arrival with a free change of plans. The hotel with the beautiful homepage still loses if the cancellation terms are buried. That is an illustration, not a statistic. Shopify now lets merchants publish return windows and shipping destinations for agents to read. Most companies have no such page. We write yours once, in plain words, and check that it matches what your team says on the phone.
Six public facts, each linked to the company that published it.
On October 20, 2026 Visa, BILL and Billtrust announced a live invoice-payment pilot. The BILL payment agent is registered, uses tokenized credentials instead of shared supplier-portal logins, and the receiving system recognizes it and grants access. A buyer approves the bill first.
On October 28, 2026 Shopify released a knowledge base where merchants review and publish the facts agents get about their store, such as return windows and shipping destinations. Agents only get facts the merchant has published.
Shopify, "Exponential: Shopify's Fall '26 Edition" (opens in a new tab)
TechCrunch reported on October 21, 2026 that while Amazon blocks AI agents, Walmart announced an Agent Gateway and Agent Profiles, with per-agent approval or a customer-set spending limit. Each is a policy choice somebody made on purpose.
Two weeks, three deliverables and one named owner. $2,500, credited to the build.
Thirty days of your traffic read for agent and crawler activity: which agents already reach your site and where they stop (a bot challenge, a login, checkout). Your zone for each action: partnership, aspiring actor or no-go. The edge rules written out. You get a two-page map plus the rule set.
Every fact an agent needs to pick you and do business with you: pricing or the quote path, availability, returns, cancellation, shipping and service area, lead times, hours, who to contact, and what the agent may not do. We compare it with what is findable today. You review and approve every line. You get the approved facts and the gap list.
How your site asks an agent to identify itself without asking for anyone's personal data. Which payment paths you accept (scoped tokens, signed mandates, trusted-agent invoice payment) and which you refuse. What gets logged. You get a one-page policy you sign, plus the baseline for a monthly number.
The three zones come from Nate B Jones, who laid them out in his video “The Future Of The Internet Isn’t Open For Your Agent” (opens in a new tab) (AI News & Strategy Daily). Most companies never chose one. The review makes the choice on purpose, for each thing an agent might do.
You provide an accepted route for the work, with an agreement, a credential and a contact. A supported checkout or a registered invoice agent are examples.
An agent works through your public site the way a person would. It may finish, or stall on a changed page, an account check or a step that needs a human. You decide what it may read and how often.
You refuse the agent or the action: undisclosed access, no agreement, or anything touching customer identity or credentials.
This is the model we use to run our own operations (see Shoofly GITL): scoped access, a named approver, and a record of every decision. The review applies it to the agents that come to you.
Two steps, in order. You can stop after the review and keep what you were given. Every build includes ongoing management, for an additional fee.
Two weeks. Credited to the build.
Credited forward into the build.
We build and publish it, once you approve it. You own it. Ongoing management is required, for an additional fee.
The Review is credited. You own everything we build.
The build sets up the monitoring. Every build then moves onto ongoing management, for an additional fee: we review the traffic every month and report agent-sourced inquiries, bookings or orders, and how often an agent got your policy right.
Six-month minimum from go-live, then month to month. If you stop, everything keeps running on your systems and you keep it all, with no exit fee.
We do not want to just AI something to AI something. We want you to know exactly what it does, what it costs, and what it moves. This is about measurable business change, not chatbots.
Jonathan Hessing CEO, ShooflyAI A two-week review of how AI agents reach your business and what they are allowed to do once they arrive. It produces three things: an Agent Access Map, an Agent Facts Sheet and an Identification and Payment Policy. You approve every rule and every fact.
No. This is about the agents other people already send at you: customers' assistants, shopping and research agents, vendor tools. We help you decide what they may do, in writing, with a person who approves exceptions.
Owner-led companies with $5M to $75M in revenue whose customers, or their assistants, buy, book, quote or pay through a website or portal: stores, hotels and venues, distributors with customer portals, and service businesses with scheduling or intake.
Not in the review. You get the map, the facts sheet and the policy. Building and publishing them is the build project, and nothing goes live until you approve it.
The review is two weeks and $2,500, credited to the build. The build is one fixed-price project from $17,500, scoped on the fit call, and you own everything we build. Ongoing management after the build, including the monthly traffic review, is required and is an additional fee. The hand-over includes the rules written down.
A monthly traffic review, a one-page report and a call, a watch on Cloudflare, Stripe, Shopify and Google changes with approved updates made for you, updates to the facts agents read, an approver desk that answers within one business day, and same-day incident response in business hours. It does not include 24/7 coverage, fraud or breach investigation, legal advice, new sites or flows, content or SEO, or tool fees. There is a six-month minimum from go-live, then it runs month to month. If you stop, everything keeps running on your systems and you keep it all, with no exit fee.
Then the written verdict says so, and you keep the map, the facts sheet and the policy. We would rather tell you that than invent work.
Two weeks, $2,500, credited to the build. You will know who is at your door and what they can do.
Free, 20 minutes, no pitch.
