Forter ingests Skyfire’s Know Your Agent tokens so fraud systems can tell a trusted agent from a script

Fraud systems have a habit of punishing exactly the traffic you are trying to welcome. A legitimate agent shopping for a customer looks, to bot management, like a scalper: non-human, highly automated, no browser history. On 19 October 2026, Forter and Skyfire announced a deeper integration that feeds Know Your Agent (KYA) identity data into Forter’s fraud decisioning, so merchants can separate an authorized agent from malicious automation instead of blocking both.

What happened

Skyfire, which describes itself as the “Agent Trust Stack,” and Forter, a fraud and trust platform for commerce, said their partnership now has Forter’s Fraud Management for Agentic Commerce ingest Skyfire’s KYA protocol data to enrich decisions on agentic purchases.

The announced results and mechanics:

  • Agentic orders across Forter’s network have increased more than fourfold since August, per the announcement — Forter’s stated reason for needing the extra signal now.
  • Nothing changes at the checkout UI. The new agentic signals pass alongside existing risk data.
  • The pilot was Jomashop, the Brooklyn-based luxury watch and jewelry retailer. Jomashop reported that agentic checkout success rose to nearly 100% from a state where bot management tools blocked much of the traffic, without increasing chargebacks.
  • The stated goals are authorization rate and chargeback exposure — higher authorization rates for legitimate agents, less chargeback risk, and the removal of what the release calls the “structural penalty applied to agent transactions by default.”

“For agentic commerce platforms, the integration will remove the structural penalty applied to agent transactions by default,” the release states. Eran Vanounou, Chief Technology and Product Officer at Forter, is quoted: “Agentic commerce fails if retailers can’t tell the difference between an authorized buyer and a script trying to look like one. Leveraging Forter and Skyfire lets businesses confidently validate both the identity of the AI agent and the trustworthiness of the underlying consumer.” Craig DeWitt, Co-Founder and Head of Product at Skyfire, added that merchants gain “the ability to distinguish trusted, authorized agents from malicious bots.”

The release also names the two-sided problem plainly: bot management was built for “non-human browsing behaviour and high automation signals, which are exactly the characteristics of legitimate AI agents acting on behalf of real customers,” while fraudsters are now “masking as legitimate agents.”

Why it matters for KYA

This is the KYA argument meeting a budget line: a fraud vendor deciding that not knowing the agent costs money.

  • Detection and identity are converging, and merchants get both from one place. Mastercard’s agent-initiation scoring asks “is this an agent?”; Skyfire’s KYA tokens answer “which agent, and on whose authority?”. Forter is doing the second inside the fraud decision a merchant already runs. That is the practical shape KYA takes in commerce: an identity signal consumed by a risk engine, not a separate portal.
  • The commercial case is authorization rates, not compliance. The lever here is that blocked legitimate agents are lost revenue, and the pilot’s headline number is a success-rate number. That is a stronger adoption driver than fear — and a reminder that “verify the agent” wins when it makes good traffic convert, not only when it stops bad traffic.
  • A KYA token is only as good as the relying party that checks it. Forter’s decisioning is the relying party in this integration. The value depends on what the token attests (principal, agent, scope) and whether Forter’s model treats a valid token as proof of authorization or merely one input. The release frames it as enrichment — one more signal — which is the honest description of where agent identity sits today.

Sources

  • Skyfire and Forter, “Skyfire and Forter Enrich Trusted Agentic Commerce Decisions at Checkout”, press release, 19 October 2026 — businesswire.com; syndicated copy at morningstar.com.
  • Skyfire, Know Your Agent (KYA) protocol and KYAPay documentation — the identity and payment layer the integration consumes — skyfire.xyz.
  • Forter, Fraud Management for Agentic Commerce — the product the KYA data now feeds — forter.com.

Note: the fourfold growth in agentic orders, the near-100% Jomashop pilot result and the Jomashop quote are as stated by the two companies in their press release, not independently audited.


Know Your Agent (KYA) explains agent identity, verification and accountability. This is an explainer, not legal or compliance advice — see our Sources & methodology. New to KYA? Start with What is Know Your Agent? and the glossary.