Announcing Dome Managed Agents.

Try it now

AI agents for e-commerce

Give your service reps agents that never give away the store. Three agents for customer tickets, promotions and fraud screening. The ones reps call act as that rep, and every credit, discount and hold stays inside the limit you set. Every call lands in one audit record.

Any tool, any model,any use case.

Our example demonstrates three agents for your storefront and customer service work, pulled from our template library. Our team can work with yours to build, govern, and operate your agents as you deliver on your IT strategy.

Resolve customer tickets

Reads the ticket and the order, drafts the reply, and issues store credit up to the rep's limit. Anything bigger stays with the rep.

Tools
GorgiasShopify
Model
Claude Sonnet 5or any approved provider
Runs
Sidebar, in Gorgias
Limits
Acts as the repCredit cappedCard data redacted

Tuned for your team

  • Your return window and goodwill policy
  • Credit limits set per team by service leads

Cap credits, discountsand customer data in one place.

Dome sits between the agents and your systems. Every call is checked against rules your team writes before it reaches Shopify, Stripe or a model.

Credit

agent support-copilot · acting as r.whitaker
shopify/issue_store_credit(customer: "C-77310", amount: 25.00)
  1. Agentsupport-copilot is registered and active
  2. Callerr.whitaker verified through Okta
  3. Toolissue_store_credit is granted on commerce-tools
  4. Rule$25 is under the $50 limit for tier-1 reps
DecisionAllowed

Show finance every creditand discount an agent gave.

One record for every call: the agent, the service rep it acted for, the system, and the decision. Enable investigations, increase confidence and reduce risk in agentic operations.
Audit · commerce-tools
Events 0Denied 0
0 audit events

Keep payment and customer datawhere the rules want it.

Support, promotions and fraud agents touch payments, customer records and prices. These are the rules that reach them.
Keep payment and customer data
RegulationWhat it asksWhat Dome gives you
PCI DSS v4.0.1
What it asks
Systems that store, process or transmit cardholder data are in scope. The PCI Security Standards Council's AI guidance treats AI systems the same way.
What Dome gives you
A guard strips card numbers and addresses from tickets before a model sees them. Payment actions stay behind rules: the fraud agent can hold an order but never cancel or refund it.
State privacy laws (CCPA/CPRA)
What it asks
Customer data can't be shared or sold without notice, and bulk exports are where it leaks.
What Dome gives you
Exporting a customer list through an agent is refused, and every read is recorded with the rep the agent acted for.
FTC Act, Section 5
What it asks
Promotions and pricing claims can't mislead customers. The FTC has said AI is no exception.
What Dome gives you
Discount depth is capped per category by rule, so an agent can't create a code merchandising never set.

Common questionsabout agents in retail.

What can AI agents do in e-commerce?
Resolving tickets, building promotions and screening orders for fraud are common first agents. On Dome each runs inside limits: credit and discount caps, read-only where it should be, and no cancellations.
Can an AI agent issue store credit?
Up to a limit you set. A rule checks the amount against the rep's team limit on every call, and anything over it is refused and recorded.
How do you stop an AI agent from giving away too big a discount?
Cap it per category. The promotions agent can create codes up to that depth, and deeper ones are refused before they reach Shopify.
Are AI agents in scope for PCI DSS?
If an agent can see cardholder data, the systems it runs through are in scope. The simpler path is to keep card data away from the agent: redact it at the gateway before any model call, and log every call. On Dome, a guard does the redaction and every call lands in the audit record.
What is agentic commerce?
It usually means AI agents shopping on a customer's behalf, through protocols like OpenAI and Stripe's Agentic Commerce Protocol. This page covers the other side: governing the agents your own team runs.

Spend 30 minuteswith our FDE team.

See the platform and how it fits your needs. Our FDE team can get your first agent under management and work with your platform team to deliver results for your AI program.

Key topics to discuss:

  • Review your AI plans, progress to date, and timeline for agentic projects in production.
  • Planning a specific agent, or agentic app, to bring under governance.
  • Learning more about our platform capabilities, from gateways to routing.
  • Defining agentic operations as repeatable golden pathways for Platform and AppDev teams.

Other retail solutionsand other industries.

Industry

Retail

Order lookups, replenishment and product copy. Refunds, orders and publishing stay with your people.

Retail

Merchandising & planning

Assortment plans, competitive pricing and vendor briefs. Buyers see only their own categories.

Retail

Store operations

Schedules, store walks and shrink review. Each manager's agent sees only that manager's store.

Retail

Supply chain & fulfillment

Fulfillment exceptions, load tendering and inbound audits. Carriers, sites and chargebacks stay inside your rules.

Other industries

All industries

AI agents for financial services

KYC reviews, client servicing and SAR narratives. Approvals, money movement and filings stay with your people.

  • Review onboarding documents

    Checks identity and entity documents against your CDD requirements, runs sanctions screening and writes the KYC summary. An analyst approves.

  • Answer client requests

    Reads the client's accounts and open cases and drafts the reply to a servicing request. It never moves money or changes an account.

  • Draft SAR narratives

    Pulls the alert history and transactions for a case and drafts the SAR narrative. An investigator edits it and files.

Answers to

GLBA Safeguards RuleBSA/AML and the FinCEN CDD RuleNYDFS Part 500Regulation E (EFTA)CFPB UDAAPInteragency third-party risk guidanceECOA and Regulation BFCRA+10 more

AI agents for gaming and sports betting

Player support, responsible gaming review and bonus setup. Self-exclusions and limits stay out of an agent's reach.

  • Answer player questions

    Looks up a player's account, bets and withdrawal status so a specialist can answer fast. It reads. Balances and limits stay with people.

  • Review responsible gaming signals

    Reviews players flagged for risky play and drafts case notes for the responsible gaming team. It never changes a limit.

  • Configure bonuses

    Sets up deposit matches and free bets from a campaign brief, up to the cap you set. Self-excluded players are never targeted.

Answers to

State gaming regulationsBank Secrecy Act (FinCEN casino rules)Age, identity and location checks

AI agents in healthcare

Prior authorizations, visit notes and eligibility checks. Agents read only the charts their clinician can read.

  • Assemble prior authorizations

    Pulls the notes, orders and imaging a payer asks for into one authorization packet. A clinician reviews it and submits.

  • Draft visit notes

    Drafts a visit note from the encounter and the chart, in the department's template. The clinician edits it and signs it.

  • Verify eligibility before the visit

    Checks coverage for the next day's appointments overnight. Anything that needs a call before the visit goes to the patient access channel.

Answers to

HIPAA minimum necessaryBusiness associate agreementsHIPAA Security Rule audit controlsCMS prior authorization rule (CMS-0057-F)

AI agents for insurance claims

Claim intake, file summaries and fraud screening. Agents read only the claims assigned to their adjuster.

  • Triage new claims

    Reads each first notice of loss, sets severity and line of business, and routes it to the right adjuster queue. It flags. It never settles.

  • Summarize claim files

    Summarizes medical records, police reports and correspondence in a claim file for the assigned adjuster. Only claims that adjuster handles.

  • Screen claims for fraud signals

    Checks each open claim against prior claims history and flags patterns for the special investigations unit. It never denies a claim.

Answers to

NAIC Model Bulletin on AI SystemsUnfair claims settlement practices lawsInsurance data security laws

AI agents for professional services firms

Proposals, staffing and engagement status. Each agent sees only the engagements its consultant works on.

  • Draft proposals

    Reads an RFP and drafts a response from the firm's reuse library. Client names in past work are stripped before the model sees them.

  • Match staff to engagements

    Matches skills and availability to a new engagement's roles and proposes a team. Resource managers make the assignments.

  • Report engagement status

    Reads the project plan and engagement files and drafts the weekly status report. It sees only engagements its consultant is on.

Answers to

Client confidentiality termsAICPA Confidential Client Information RuleSOC 2GDPR and state privacy laws

AI agents for software companies

Escalation triage, incident summaries and release notes. Agents read code and incidents. Shipping stays with engineers.

  • Triage engineering escalations

    Reads an escalated ticket and the code it points to, drafts a diagnosis and sets priority. Fixes stay with the engineer.

  • Summarize incidents

    Follows an incident's timeline and recent deploys, drafts status updates and a first postmortem. It never acknowledges, pages or resolves.

  • Draft release notes

    Reads the pull requests merged since the last release and drafts customer-facing notes. The release stays a draft until an engineer publishes it.

Answers to

SOC 2ISO/IEC 42001EU AI ActState privacy laws (CCPA/CPRA)

Governance at theagent‑action boundary.

However an agent was built and wherever it runs, the same three boundaries are available to control it: the code it ships as, the tools it calls, and the model it reasons through.

Agent Registry

Make every agent known and manageable. Credentials issued, capabilities declared, lifecycle owned.

MCP Gateway

Evaluate every call against policy with full context. Allow, deny, or escalate. Filter what comes back.

Model Broker

Constrain how the agent reasons. Selection by policy, routing across providers, evals against real traffic.