Public beta · the BotShield app is live on the web.  →
Console
Console
Products
Verified AccountsTrusted AgentsBotShield ActionsBotShield Gates
For your users
BotShield IDAgents Ask™
For developers
Console
Customers
Couchtour
Company
AboutInvestorsContactNewsroom
BotShield Actions

BotShield Actions are executed with a passkey.

A gate lets someone through — it never does the thing. An Action is the thing: a cart, a payout, a plan change, executed in place. Your customers already hold a BotShield Passkey; it came with their BotShield ID.

Explore the consoleSee it at Couch Tour  →
FIDO Alliance memberFIDO Alliance member · every product stands on a passkey
Couch Tour — a presale open for Rising Wave: Sign up with Passkey, one code each
Watch with passkey

A person opens the seat. Humans come first.

Friday night’s stream, one ticket. The ticket is held by a Verified Account, and the seat opens with that account’s passkey, in place on the show’s own page. Because opening it takes a passkey, a forwarded link opens nothing.

A person

Opens it with a passkey.

  1. 01They tap Watch with Passkey on the show’s page. Nothing shuttles to another app.
  2. 02The passkey answers on their own phone, and the stream opens for that ticket.
  3. 03One session per ticket. A link sent to someone else opens nothing.
An agent · coming soon

Will be able to buy the ticket.

  1. 01Humans come first. Opening a seat takes a passkey, and only a person holds one.
  2. 02The mechanism is Agents Ask: the agent asks, the person says yes in the BotShield app, and a signed record comes back.
  3. 03Whether an agent may buy at all is the seller’s call, never ours.
Couch Tour — a ticket to a stream, keyed to a BotShield ID: Watch with Passkey

Couch Tour · a ticket to a stream. The passkey opens it; the page says what the ticket is keyed to.

Opening a seat is a human move: it costs a passkey, and an agent does not have one.

What a login cannot do

Three facts a session cannot supply.

01

At the act, not the door.

A valid session says a login happened, not who is there now — shared on purpose, scripted by its owner, handed to an agent. All three are the session doing its job.

02

It travels.

The proof is signed and checkable by someone who was never in the room. A login is only ever worth something to the site that issued it.

03

It counts once.

One pass per ID, and the ID is anchored to a platform root — which is the closest thing to fairness anyone can enforce at a presale, a drop or a vote.

BotShield Actions FAQ

Can a passkey prove a real person is there?
It proves the one thing a login cannot: that at this moment, on this device, the person who holds the credential confirmed this act. The check that unlocks the phone — a face, a finger, a code only they know — happens on the phone and never leaves it. What travels is a signed assertion.
What is the difference between a BotShield Gate and a BotShield Action?
Where they are going. A gate exists because someone is being handed off — a presale, a drop, a vote — so it has a clock and lets them through, then stops. An Action is the thing itself, done in place on your own page: a cart, a payout, a plan change. Both take a passkey; only what happens after the tap differs.
What is the difference between a sign-in passkey and a BotShield passkey?
A sign-in passkey proves the account at the door and belongs to the site that issued it. A BotShield passkey comes with the person’s BotShield ID and answers at the act, for any company that asks — and the proof is signed and checkable by someone who was never in the room.
Can a passkey be forwarded, shared or phished?
Nothing is sent, so there is nothing to forward. The passkey lives on the person’s device, is bound to the origin it was made for, and signs a challenge your server issued for this act — a copy of the page cannot collect it, and a code read aloud does not exist.
Can an AI agent complete an action, or only a person?
Today, a person. A cart takes a passkey, and only a person holds one. An agent buying outright is coming, on one mechanism: it asks through Agents Ask, the person says yes in the BotShield app, and a signed record comes back. Whether an agent may buy at all is the seller’s call, never ours.
What happens if someone loses their phone?
A BotShield ID stands on two roots — Apple and Google — so a lost phone is an inconvenience, not a lockout. Getting the account back stays with the root they already hold. Nothing about the person was ever stored with us to recover.

Put it behind one act.

No ID upload, no code to type, nothing to forward.

Talk to a person  →Explore the console