# ACKRATE > Open-source agentic payments infrastructure: bounded mandates, TypeScript SDKs, Express verification, AP2 bridging, public Stellar testnet demonstrations, and a Mainnet Circle USDC wallet canary. ACKRATE separates adaptive agent planning from deterministic financial authority. A principal grants a scoped mandate; the contract and verification layers enforce merchant, asset, budget, expiry, sequence, and resource constraints. The live site demonstrates both permitted payments and contract-enforced rejection paths. ## Start here - [ACKRATE SDK documentation](https://reapp.live/): Install the published packages and understand the end-to-end consumer and merchant flow. - [Consumer product preview](https://reapp.live/consumer): Give an AI agent a task while retaining explicit control over its budget, approved services, deadline, and exceptions. - [Express payment flow](https://reapp.live/express): Pay-per-use API fulfillment with settlement and one-time redemption verification. - [Merchant assurance](https://reapp.live/merchants): Inspect Mainnet contract tests, deployment evidence, trust boundaries, and merchant verification controls. - [Contract Security Suite](https://reapp.live/security): Reproduce 31 Mainnet contract tests, inspect trust boundaries and dependency results, and follow every claim to source and chain evidence. - [Solutions and starter kits](https://reapp.live/solutions): Start from an empty folder, run a local consumer against hosted fulfillment, and inspect matching testnet evidence. - [AP2 mandate bridge](https://reapp.live/ap2): Canonical intent and transaction mandate checks, signatures, scope, expiry, and replay protection. - [CLI](https://reapp.live/cli): Initialize actors, create a mandate, pay, inspect evidence, and exercise rejection paths. - [Wallet canary](https://reapp.live/wallet): Connect Freighter on Stellar Mainnet, set a Circle USDC spending limit, buy a protected report, and inspect each transaction. ## Live demonstrations - [Research agent](https://reapp.live/research): An AI agent buys paid sources until the on-chain budget is exhausted. - [Video paywall](https://reapp.live/video): Three permitted pay-per-use unlocks followed by a rejected fourth payment. - [Composite mandates](https://reapp.live/composites): Multiple agents coordinate a group buy and atomic clearing result. - [Toolkit preview](https://reapp.live/toolkit): Guided access to the CLI runner and composite-payment demonstrations. ## Current candidate package set and source - [@ackrate/core 0.3.3](https://www.npmjs.com/package/@ackrate/core): Mandates, contract-enforced payments, and agent.fetch(). - [@ackrate/stellar 0.2.5](https://www.npmjs.com/package/@ackrate/stellar): Typed Stellar contract client, signers, verified Mainnet manifest support, and network configuration. - [@ackrate/ap2 0.3.2](https://www.npmjs.com/package/@ackrate/ap2): Version-pinned AP2 mandate bridge. - [@ackrate/express-middleware 0.2.4](https://www.npmjs.com/package/@ackrate/express-middleware): Express settlement and redemption verification. - [@ackrate/cli 0.1.10](https://www.npmjs.com/package/@ackrate/cli): Terminal workflows plus fail-closed testnet and Mainnet demonstrations. - [Protocol repository](https://github.com/ackrate/ackrate-protocol): Contracts, SDK packages, tests, and examples. - [Full implementation context](https://reapp.live/llms-full.txt): One plain-text technical brief for assistants working with the protocol. These are the current source-repository candidate versions. Check the npm registry before copying an installation command because publication can trail the repository candidate. ## Research companion - [ACKRATE NETWORK](https://ackrate.network/): Independent research and architecture field guide for agentic payments. - [Agentic payments field guide](https://ackrate.network/agentic-payments): Definitions, lifecycle, protocols, controls, and implementation model. The public research, video, composite, CLI, and starter demonstrations use Stellar testnet with ephemeral actors. The /wallet canary uses Stellar Mainnet, the manifest-pinned MandateRegistry, Circle USDC, and Freighter authorization. Never paste a recovery phrase or private key into the site. Verify package publication, contract identifiers, and network configuration against the visible page and source repository.