Every checkout asks for a card.Yours accepts an agent.
Checkout with Locus is a Stripe-style checkout SDK built for AI. One hosted session takes payment from a Locus login, an external wallet, or an agent calling the API — and settles USDC on Base straight into your own non-custodial wallet, wallet to wallet.
Checkout was built for thumbs.
Every step assumes eyes, thumbs, and a phone nearby. An agent with a job to finish fails at the CAPTCHA — and your best new customer bounces at the door.
The whole flow is API-shaped, so an agent closes it alone — and the buyer's own spending controls are enforced before the payment executes, not disputed after.
A session, a component, a webhook.
The whole surface is three moves. Everything else — receipts, per-surface stats, the sandbox — comes in the box.
Sessions are plain UUIDs that expire in 30 minutes by default (configurable). Pass a webhookUrl and deliveries are retried with backoff; webhook URLs are SSRF-checked and ownership-verified before a session is ever created — your endpoint answers a one-time locus.webhook.verify challenge by echoing it back. Treat the webhook as a wake-up call — confirm the session status with an authenticated GET before fulfilling.
Stripe-shaped. Agent-native.
The parts you'd expect from a payments company, rebuilt for a world where the payer might be software — and the money is yours the moment it moves.
Drop-in React SDK
One component, zero runtime dependencies. Render the hosted page embedded, as a popup, or by redirect. In embedded and popup modes, success and cancel come back as origin-checked events with the transaction hash attached.
Three payers, one session
The same session takes a Locus login, an external wallet, or an agent paying by API with its claw_ key. You don't build separate flows for human and machine customers — the hosted page carries all three.
Instances, not plumbing
Tag sessions with your own unique instanceId — "acme-product-page-shoes" — and the surface appears in your dashboard on first use. Conversion and payment-method stats split per surface, no setup step.
A sandbox that tells the truth
Sandbox keys (claw_sandbox_…) run every checkout API endpoint against fixtures kept in parity with live captures. Wire up your server and agent flows before a cent moves.
From session to settled in three steps.
Create a session
Your server calls POST /api/checkout/sessions with an amount and description. You get back a hosted checkoutUrl to embed, pop up, link — or hand straight to an agent.
The buyer pays — whoever they are
A human logs in or connects a wallet; an agent preflights the session and pays by API. Locus-wallet and agent payments clear the buyer's own spending controls before they execute.
USDC lands in your wallet
The payment is detected on-chain — typically 10–30 seconds — and the session flips to PAID. If you set a webhook URL it fires, and receipts go out when configured with a payer email. No payout schedule: the funds are already yours.
Questions, answered.
Straight into your own non-custodial Locus smart wallet on Base, as USDC. The payment router is stateless — it routes funds, it never holds them. There is no Locus balance to withdraw from and no T+2 payout: when the transaction confirms, the money is already in a wallet only you control.
With its Locus API key. The agent preflights the session (GET /api/checkout/agent/preflight/:sessionId) to confirm it can pay — balance, allowance, per-transaction budget — then calls POST /api/checkout/agent/pay/:sessionId. Its operator's spending controls are enforced before execution; an out-of-policy payment is rejected, not disputed later.
Same session, same hosted page. Humans pay by logging into Locus or by connecting an external wallet like MetaMask or Coinbase Wallet. You never create different sessions for different kinds of buyers.
Typically 10–30 seconds. Locus watches the chain, flips the session to PAID, and fires your checkout.session.paid webhook, retried with backoff if your endpoint is down.
Yes — sandbox keys (claw_sandbox_…) return realistic fixture responses for every checkout API call — session create, preflight, agent pay — kept in parity with live captures, with no money moving. The hosted page and webhook delivery need a live session; create one with a real key when you're ready.
Embed it in your page as an iframe or popup, and shape the receipt with your logo, line items, tax fields, and support email. Receipts can also go fully white-label, with Locus branding stripped.
Open a checkout agents can walk through.
Sign in for your API key, stats, and session history — your first session is one curl away.