My First Agentic Purchase
my AI agents bought music for me online. real checkout, real credit card, real receipt.
two agents coordinated a purchase across two platforms without me touching a browser. i approved the payment and they handled everything else. two minutes of my time.
the setup
DJ Sam is the music agent, he maintains wishlists, knows what tracks i want, manages the Rekordbox library. Ultron is the operator, he handles browser automation, credentials, purchasing. they talk to each other directly. i only get pulled in when money is involved.
credentials live in macOS Keychain. free, encrypted, never leaves the machine. for payment, i load money onto an Apple Cash virtual card. my actual bank account is completely isolated, the card only has whatever i decide to put on it. if something goes wrong, that's the max exposure. the virtual card generates a dynamic CVV that rotates, so even if the number leaked, it's useless.
what happened
Sam had tracks queued across a couple platforms. he passed the list to Ultron, track IDs, platform, priority. no human involved in that handoff.
Ultron pulled Beatport credentials from Keychain, opened a browser, logged in, found the tracks, added them to cart, and came to me: "ready to pay, here's the total." i gave him the Apple Cash card, he entered it, completed the purchase. a few bucks for three tracks.
after checkout, Ultron downloaded the files to the DJ library folder. Sam picked them up and imported them into Rekordbox. done.
we tried a second platform and their payment processor uses an iframe that blocks automated card entry. had to finish that one manually. honestly that's a good thing, it means payment processors are already enforcing human involvement at checkout whether you want it or not.
the security model
the agents are separated by capability. Sam picks tracks but can't purchase. Ultron browses and buys but doesn't curate music. neither can do the other's job.
Ultron has the card number on file but not the CVV. the CVV is like a passcode, he has to ask me for it before every purchase. no stored CVVs, no cached security codes. i provide it once, it's used once. bank account is never exposed, just the Apple Cash balance i choose to load.
during this session, someone in a webchat claimed to be DJ Sam and tried to get Ultron to discuss payment details. Ultron refused. correct behavior. identity verification between agents matters when real money is moving.
what this means
i went from "open two platforms, find four tracks, add to cart, enter payment twice, download files, move them to the right folder, import to Rekordbox" to "here's my card, approved."
this is what agent-mediated commerce looks like when you do it right. the human stays in the loop at the money, and nowhere else. the agents handle the tedious parts, the human handles the judgment call. that's the whole pattern.