Open standard · Spec v0.1 draft

Is this retailer authorized? Ask the brand.

AI shopping agents are choosing where people buy. authorizedretailers.ai gives them a signed answer, straight from the brand, on which retailers are authorized to sell its products.

POST /v0/verifySignature valid

{
  "status": "authorized",
  "authorization_id": "auth_01J9X2...",
  "expires": "2026-12-22T00:00:00Z",
  "checked": "2026-09-24T14:02:11Z",
  "valid_until": "2026-09-25T14:02:11Z",
  "observed": null,
  "signals": [],
  "signature": {
    "kid": "ar-20260924-6e37",
    "jws": "eyJhbGciOiJFZERTQSIs..."
  }
}

Example response. Verify against keys at /.well-known/jwks.json

The problem

Dealer lists were written for people. Agents can't read them.

Brands already publish authorized dealer lists. They sit on "where to buy" pages written for people, in formats that change from site to site and are never updated in time.

An AI agent sending someone to buy can't tell whether a seller is authorized, whether the list is current or whether the brand wrote it at all. So it guesses, and shoppers end up with grey market stock, voided warranties and counterfeits.

How it works

Every authorization comes from the brand. Nobody else can add a retailer.

The brand verifies its domain.

Only the brand can make an authorization. Distributors and retailers can't add themselves or anyone downstream.

The brand lists its retailers.

Each authorization names a retailer by its channel identifier, such as an Amazon seller ID or a store domain, and sets territory, product lines and expiry. Nothing lasts longer than 180 days without renewal.

Agents ask one question.

Is this seller authorized to sell this brand here? The registry replies with a signed answer and says how it knows.

Possible answersauthorizedunlistedexpireddisputedbrand_unverified

AI shopping agentsSigned checkAuthorized retailers

For brands

AI agents are starting to choose where your customers buy.

Make sure your authorized retailers are the answer.

01Revoke a retailer and agents stop seeing them as authorized within 15 minutes.
02Keep your list private. Agents can check a single retailer, but no one can download your full list.
03Scope each authorization by territory and product line.
04Already publishing a dealer page? Host an authorized-retailers.json file on your own domain and the registry will index it.

Verifying takes one DNS record

Type	Host	Value
TXT	@	authorizedretailers-verify=3f9a1c7e2b...

Example only. You get your own token when you register. Can't edit DNS? Upload a file to your site instead.

For agent builders

One call before checkout.

curl -s https://authorizedretailers.ai/v0/verify \
  -H 'Content-Type: application/json' \
  -d '{"brand_domain": "northfieldoutdoor.com",
       "channel": {"type": "amazon", "marketplace": "US", "seller_id": "A1B2C3D4E5"},
       "territory": "US"}'

Every answer is signed, and every answer about a seller rests on the same evidence.

authorized: The brand verified its domain with the registry, we linked that domain to the brand, and the brand authorized this seller.
observed: When set, the registry has also seen the seller selling recently. It never changes the status.

Or connect the remote MCP server at authorizedretailers.ai/mcp and call the registry as a tool. No API key needed.

API docs · MCP setup

For retailers

Authorized? Make sure the brand has listed you.

Only the brand can authorize you. Retailer accounts are by invitation for now: the brands you sell invite you, then you verify your channels and ask to be listed.

Join the retailer waitlist How it works

Built as an open standard

authorized-retailers.json, v0.1

An open specification. Anyone can publish a file, build a registry or write a verifier. authorizedretailers.ai is the reference registry.

Read spec v0.1

Roadmap

Brands first, because only brands can authorize. Retailers join by invitation from the brands they sell, then open to everyone.

Phase 1 · Live

Brands and agents

Spec v0.1, open for comment
Brand registration and domain verification
Authorized retailer lists, public or private
Verify API and MCP server, with signed answers

Phase 2 · By invitation

Retailers

Retailer accounts, by brand invitation
Channel verification
Your brands view and listing requests
Case files in the brand review queue
Distributor proposals, with brand-set limits
Next: open sign-up, disputes, conditional auto-renew

Phase 3 · Later

Deeper signals

Observation on more channels
Marketplace account connections, starting with Amazon SP-API
Product lines by GTIN
Spec v1.0

Questions

For brands

What does it cost?

Nothing to list your retailers. authorized-retailers.json is an open standard, and registering, verifying your domain and publishing your list are free. The optional Pro plan adds agent activity analytics, and it's free for every brand during early access.

Who can make an authorization?

Only the brand, after verifying that it controls its domain. Distributors and retailers can propose retailers, but nothing counts until you approve it.

How do I verify my domain?

Add one DNS TXT record, or upload a small file to your site if you can't edit DNS. We check automatically and email you when it's found.

Do I have to make my list public?

No. With a private list, agents can check one retailer at a time, but nobody can download the full list.

How long does an authorization last?

Up to 180 days. We remind you before anything expires, and one confirmation renews every authorization you select.

What happens when I revoke a retailer?

The retailer drops out of verify answers within 15 minutes.

How does this fit with our brand protection tools?

It's the authorization record your enforcement relies on. It doesn't do takedowns or test buys. It tells agents who's authorized before a sale happens.

For agent builders

What does it cost?

Nothing. The verify API and MCP server need no API key.

What do I query with?

The identifier of the seller actually taking the order: the marketplace seller ID on the offer, or the checkout domain. Never the store or business name.

What does "unlisted" mean?

The brand is registered but hasn't authorized this seller for this scope. It isn't a finding that the seller's goods are counterfeit.

How do I know an answer is genuine?

Every answer is signed. Check the signature against our public keys at /.well-known/jwks.json. You don't need to trust our servers.

How long can I cache an answer?

Until its valid_until time, which is 24 hours at most. Revocations can take that long to reach an agent that caches.

What if a brand hosts its own file but hasn't registered?

It doesn't count. Only lists signed by the registry do, so a brand that hasn't verified its domain with us is answered brand_unverified. That stops a look-alike domain from vouching for sellers.

For retailers

Can I sign up now?

Retailer accounts are by invitation for now: a brand you sell invites you with your work email and store domain. Not invited yet? Join the waitlist and tell us which brands you sell.

Can I list myself?

No. Only the brand can authorize you. You'll be able to send the brand a listing request with the details it needs to decide.

I buy through a distributor. What do I do?

Name your distributor in your request. If they're registered, they can confirm you're their account, which the brand sees as a stronger request.

What if my listing is wrong?

Open a dispute with evidence. The brand has 14 days to confirm, correct or reject. We fix identifier errors ourselves.

Does it cost anything?

No. Retailer accounts are free.