Borneo turns "I want this" into a settled payment on Arbitrum. An AI agent finds products across an open merchant registry and pays in USDC via x402 through our verified BorneoCheckout contract. Locked quotes stop prompt injection from redirecting funds.
Borneo: the merchant side of agentic commerce, on Arbitrum
Sell to AI agents. Get paid onchain. Keep every dollar you're owed.
The problem
AI agents are becoming a new kind of customer, and merchants have no way to serve them.
Merchants are invisible to agents. Catalogs are built for human browsers or locked inside a few big chat apps. Agents scrape HTML, invent products that don't exist, or skip independent merchants entirely. A small brand has no open, machine-readable way to say "here's what I sell, here's how to pay me."
Agent payments are unsafe for the merchant. When an agent pays with a raw token transfer, nothing ties the payment to an order. A hostile listing can tell the agent to swap the payee, and a leaked or relayed signature can be redirected or replayed. The merchant loses the sale, and there's no onchain record proving what was paid for.
Getting paid is fragmented. Buyers hold many different tokens, while merchants want stable dollars. Card rails take days and charge high fees, and crypto payments usually push the swaps, bridging and gas onto the buyer. Most "AI shopping" demos stop before any money reaches the merchant.
The solution
Borneo gives every merchant a storefront that AI agents can read, and a checkout that guarantees the merchant gets paid.
Launch by chatting. A merchant agent onboards the seller conversationally: what they sell, prices, and where to receive funds. Borneo then publishes an agent-ready storefront with a catalog, an agent card, llms.txt and a standard x402 buy endpoint, listed in an open registry.
Reach every agent, not one app. Any agent that speaks HTTP can discover the store and buy, whether that's our salesperson agent, Claude with our open skill, or someone else's bot. There's no scraping and no walled garden.
Get paid in stablecoins, settled onchain. The store responds with HTTP 402, the buyer's agent signs a gasless authorization, and BorneoCheckout settles on Arbitrum. In one transaction the merchant receives the payout, the protocol fee is routed and the buyer earns XPoints, so buyers come back. Merchants receive Circle USDC or Paxos USDG.
Revenue that can't be redirected. Each buyer signature is bound by an order-specific nonce to that merchant, token and amount. A poisoned listing or a malicious relayer can't change the payee or the amount, can't replay the payment and can't front-run it. Each order settles exactly once, with an OrderSettled event as an auditable onchain receipt.
No conversion burden on the buyer. Borneo previews a Uniswap V3 route from whatever the buyer holds into the merchant's stablecoin and covers gas through a relayer. The merchant gets stable dollars and the buyer just says yes.
Security is part of the design rather than a filter. Following CaMeL (Capabilities for Machine Learning) from Google DeepMind and ETH Zurich, untrusted catalog text never reaches the payment step. Settlement only uses the locked quote: store, item, price and merchant wallet.