Conduit Agentic Commerce MCP server

Register an agent (public key + optional payment rails seed + default destination). BEFORE calling: read ~/.conduit/credentials.json (or CONDUIT_CREDENTIALS_PATH) — if it exists, reuse that agent_id and do NOT register again. Hosts without filesystem (Claude app / remote MCP): do not invent a new profile — give the human `jq -r .agent_id ~/.conduit/credentials.json` and continue from their paste. AFTER success: immediately write that file with version, agent_id, public_key, and the private key you generated (chmod 0600); if you cannot write disk, give a mkdir/cat/chmod terminal command instead. Then set default_destination with postcode via update_agent_profile before search_supply. Returns agent_id + persist guide.

Two-step re-auth. Prefer loading agent_id + private_key from ~/.conduit/credentials.json (or CONDUIT_CREDENTIALS_PATH): call with agent_id only → sign nonce with private_key → call again with agent_id + nonce + signature. Hosts WITHOUT filesystem (Claude app / remote MCP): do NOT invent ES256/openssl — (1) ask human `jq -r .agent_id ~/.conduit/credentials.json`; (2) call with agent_id only; (3) forward response `terminal` verbatim; (4) paste their JSON into the second call. Never paste private_key into chat. Do not create_agent_profile if credentials already exist.

Patch handle, payment rails, default destination, business profile, or preferences. Same fields as create_agent_profile; only pass what changes.

List or enable agent payment methods with friendly labels.

Multi-provider discovery. Always pass agent_id for mandate-aware badges. Decision fields: badge + action (and recommended). Ignore autonomy if present. Carry search_id through get_supply_details / execute_order / submit_feedback. Read badgeCounts, hint, and partial.merchantErrors.

Full normalized product detail for one offer from the search cache. Pass agent_id to refresh badge/action for current mandate state. Catalog deliveryOptions are often empty — for shipping ETA/cost call get_delivery_estimate (non-committing checkout probe). Re-run search_supply if offer_not_in_cache; pass search_id for analytics correlation.

Non-committing checkout probe for authoritative shipping options (etaText, options[], shippingCost) to a destination. Prefer this over execute_order when comparing delivery/price — does not create a Conduit order. Requires agent_id (uses default_destination with postcode) or country. Shopify Global Catalog offers only in v0.

Complete an order only when offer badge is payable_now (autonomous, needs active AP2 mandate) or handoff (returns continue_url). Handoff responses include billBreakdown (shipping/tax/total) from the merchant checkout — useful after you have chosen an offer; for delivery comparison without creating an order, use get_delivery_estimate first. Do not call for coming_soon, discovery_only, or needs_mandate (request_payment_mandate first). Prefer search recommended / action. Use idempotency_key. handoffQuality full = auto-poll on track_order; degraded = recover via update_order_status.

Create a standing AP2 spend mandate; returns approval_url.

List, update, or revoke AP2 mandates. Update with wider caps returns approval_url (pending human re-approval); narrowing applies immediately.

Resolve refund/chargeback/report paths for an order.

Agent manual status correction or recovery. note required except cancelled. Attach tracking_id, carrier, external_checkout_id, handoff_endpoint to recover degraded handoffs when auto-poll did not wire checkout. Locks agent status when not PENDING; merchant poll will not demote locked status.

Report delivery/quality outcome; updates supplier + agent reputation.

Lifecycle timeline for an order — transitions only (coalesced merchant poll periods). Use track_order for current status and merchant_observed snapshot. When merchant_observed.conflicts_with_agent is true, read events then decide via update_order_status or get_dispute_path.

Honest deal-type-aware order status (never fabricates carrier scans). Triggers handoff poll when checkout ids are wired (~30s throttle). Returns merchant_observed, status_source, agent_status_locked, and recovery hints for degraded handoffs.