the count
Emit usage events from your code and hope none drop or double-fire.
A unique verified receipt ID produces one stored run row and one idempotent debit.
a2a cloud's native commercial primitive is authenticated Agent API per-call pricing. The control plane checks known buyer credit before execution, then signs and persists successful execution fields and stores compute, markup, fee, payout, and an idempotent debit beside the receipt. The separate self-reported ingestion endpoint remains post-hoc.
credit preflight · signed evidence · separate ledger · idempotent debit
Roll your own and you build two things: a meter that emits usage events, and a billing system that turns them into charges. Then you spend forever keeping them in sync. Events drop or double-fire. Aggregation windows disagree. The invoice says one thing, the usage dashboard another, and reconciliation becomes a monthly ritual. The leak isn't in either system — it's in the seam between them.
A unique receipt ID ties an independently verifiable execution record to separate control-plane economics. Per-call is native; recurring entitlements and outcome settlement remain external integrations.
The control plane verifies the signed execution receipt and rejects a duplicate receipt_id. A successfully ingested run therefore gets one durable receipt row and, when billable, one idempotent debit keyed to that identifier.
The Ed25519 signature covers execution fields, not money. After verifying the receipt, the control plane stores compute, markup, platform fee, seller payout, and buyer charge beside it as separate ledger fields.
At receipt ingestion, the current agent card supplies price_per_call_usd and declared resources. The control plane stores gross, compute, markup, platform fee, and seller payout on the receipt row for operational reporting.
Authenticated Agent API paid calls check known credit before execution and debit after success. The separate self-reported receipt path is post-hoc and can leave a negative collections balance; its debit and receipt row commit together, and duplicate receipt IDs cannot charge twice.
The product currently supports seller price_per_call_usd. Subscription access, recurring allotments, outcome fees, and hybrid plans require an external billing and entitlement layer; the per-call ledger can be an input to that layer.
Usage metering is normally a project: emit events, dedupe them, and reconcile billing. For native Agent API per-call pricing, a2a checks known credit before execution, persists signed evidence after success, records separate economics, and applies an idempotent debit and payout calculation.
Emit usage events from your code and hope none drop or double-fire.
A unique verified receipt ID produces one stored run row and one idempotent debit.
A metering system and a billing system that quietly drift out of sync.
Signed execution fields and unsigned ledger economics are linked without conflating them.
Reconcile platform cut and creator earnings in a spreadsheet after the fact.
Gross, compute, markup, fee, and payout are stored beside the verified receipt.
Treat authenticated Agent API billing and self-reported receipt ingestion as the same path.
Document Agent API credit preflight and post-hoc receipt ingestion as distinct paths.
A usage row in your database the customer has to take on trust.
A verifiable execution receipt linked to a separate charge ledger entry.
For an authenticated Agent API paid call, the control plane checks known credit before execution, signs and persists successful execution fields, stores one run row, calculates economics from the current agent card, and applies the buyer debit idempotently. Price and fee fields are adjacent ledger data, not part of the signed payload.
When a verified receipt is ingested, compute is derived from declared resources and the seller markup comes from price_per_call_usd. The control plane stores gross, compute, markup, platform fee, and seller payout alongside the receipt row. Those values support line-item reporting but are not Ed25519-signed receipt fields.
The current self-reported paid-run path is post-hoc: the call has already happened when the receipt is ingested. A matching user debit can take the balance negative as a collections state. Debit and receipt commit together, and duplicate receipt IDs are rejected so they cannot apply the same debit twice.
No. Native seller pricing currently supports price_per_call_usd. You can export or consume per-call ledger data inside an external subscription, entitlement, outcome-verification, or hybrid billing system, but a2a does not currently implement recurring plans, allotment burn-down, outcome charges, or hybrid settlement on the agent card.
A buyer can verify the default signed execution fields: identity/caller, skill, input hash and result preview, verified grant IDs, outcome/result preview, and timing. For authenticated Agent API paid calls, charge and fee fields live in a separate ledger row linked by receipt ID; direct gateway paths record zero platform economics.
All guides live in the guides index.
a2a cloud deploys any agent as a live service with managed Postgres, MCP, and an API. Authenticated Agent API paid calls check known credit before execution, then persist Ed25519-signed evidence plus separate per-call economics and idempotent debits after success. Public `/invoke` and standard MCP gateway receipts remain evidence-only with zero platform economics.