Conduit Agentic Commerce MCP server

Two-step re-auth. Call with agent_id only → ES256-sign nonce → call again with nonce+signature. Prefer keys from ~/.conduit ({handle}.credentials.json or legacy credentials.json; CONDUIT_CREDENTIALS_PATH pins one file). After success, merge name/role/description into that file; never overwrite private_key; keep session_token in memory. Do not agent_create if identity files already exist unless the human asked for a new agent.

Register an agent (ES256 P-256 public JWK JSON string + optional payment rails + destination). BEFORE: list ~/.conduit identity files — if any exist, reuse agent_id (do NOT register again unless the human asked for a new agent). AFTER: write persist.path (version, agent_id, public_key, private_key as JWKs; also handle, friendly_name, role_description, human_description; chmod 0600; write ~/.conduit/active). Then agent_update with default_destination+postcode before supply_search. Optional friendly_name / human_description / role_description / avatar only if the human stated them — never invent; omit avatar and the server assigns a random invader+gradient. Omit handle to auto-generate (e.g. parcel-watcher-12).

Email Hub users in this agent’s linked organization (never addresses outside the org). to=all or { user_id } / { role } / { email } matching agent_organization members. Optional actions (Hub URLs only), severity, idempotency_key. Channel is email.

Read the linked organization (name, slug, country, default address) and members (user_id, name, role, email) for an agent. Returns org_not_linked when organization_id is unset — do not invent join_org. Use members to target agent_notify.

Email outside addresses (suppliers, carriers). to is a string email, { email }, or { emails } (max 5). Not to=all and not a Hub user_id / role — those are agent_notify. Linked agents set Reply-To to an org member (default OWNER). No action buttons. Channel is email.

Report unexpected tool errors or confusing Conduit outcomes for AX review (agent_report_issue — not order_feedback). Pass message (required), optional kind=bug|confusing|wrong_data|blocked, plus agent_id, tool, error, detail, search_id, order_id, session_id, and/or context. Dedupes open reports with the same tool+error+correlation. Does not change reputation.

Patch handle, rails, default_destination (postcode required for ships-to), friendly_name, human_description, role_description, avatar (glyph+gradient or small image), business profile, or preferences. Set avatar only if the human chose it. Does not accept permissions — a human enables capabilities in Hub Agent settings.

Two-step re-auth. Prefer loading agent_id + private_key from ~/.conduit/credentials.json (or CONDUIT_CREDENTIALS_PATH): call with agent_id only → sign nonce with private_key → call again with agent_id + nonce + signature. Hosts WITHOUT filesystem (Claude app / remote MCP): do NOT invent ES256/openssl — (1) ask human `jq -r .agent_id ~/.conduit/credentials.json`; (2) call with agent_id only; (3) forward response `terminal` verbatim; (4) paste their JSON into the second call. Never paste private_key into chat. Do not create_agent_profile if credentials already exist.

Register an agent (public key + optional payment rails seed + default destination). BEFORE calling: read ~/.conduit/credentials.json (or CONDUIT_CREDENTIALS_PATH) — if it exists, reuse that agent_id and do NOT register again. Hosts without filesystem (Claude app / remote MCP): do not invent a new profile — give the human `jq -r .agent_id ~/.conduit/credentials.json` and continue from their paste. AFTER success: immediately write that file with version, agent_id, public_key, and the private key you generated (chmod 0600); if you cannot write disk, give a mkdir/cat/chmod terminal command instead. Then set default_destination with postcode via update_agent_profile before search_supply. Returns agent_id + persist guide.

Complete an order only when offer badge is payable_now (autonomous, needs active AP2 mandate) or handoff (returns continue_url). Handoff responses include billBreakdown (shipping/tax/total) from the merchant checkout — useful after you have chosen an offer; for delivery comparison without creating an order, use get_delivery_estimate first. Do not call for coming_soon, discovery_only, or needs_mandate (request_payment_mandate first). Prefer search recommended / action. Use idempotency_key. handoffQuality full = auto-poll on track_order; degraded = recover via update_order_status.

Non-committing checkout probe for authoritative shipping options (etaText, options[], shippingCost) to a destination. Prefer this over execute_order when comparing delivery/price — does not create a Conduit order. Requires agent_id (uses default_destination with postcode) or country. Shopify Global Catalog offers only in v0.

Resolve refund/chargeback/report paths for an order.

Lifecycle timeline for an order — transitions only (coalesced merchant poll periods). Use track_order for current status and merchant_observed snapshot. When merchant_observed.conflicts_with_agent is true, read events then decide via update_order_status or get_dispute_path.

Full normalized product detail for one offer from the search cache. Pass agent_id to refresh badge/action for current mandate state. Catalog deliveryOptions are often empty — for shipping ETA/cost call get_delivery_estimate (non-committing checkout probe). Re-run search_supply if offer_not_in_cache; pass search_id for analytics correlation.

List, update, or revoke AP2 mandates. Update with wider caps returns approval_url (pending human re-approval); narrowing applies immediately.

Refund/chargeback/report paths for an order. Requires owning agent_id.

Lifecycle timeline — transitions only. Pair with order_track. Requires owning agent_id.

Handoff or autonomous checkout. Handoff continue_url is a Conduit /handoff/{org_slug}/{order_id} link: open it as returned (records the open, then redirects to the merchant). Autonomous needs badge payable_now (covering mandate fits). No covering mandate, or a spent covering budget, still returns a handoff with continue_url (handoff_reason). Use idempotency_key. Prefer supply_delivery when only comparing delivery.

Attest delivery outcome (outcome=on_time|late|never_arrived|damaged|wrong_item). Requires owning agent_id. Can supersede a system-derived score once; a second agent attestation returns already_recorded. Poor outcomes next→order_dispute. Omit quality/carrier_rating if unknown.

List orders for an agent ({ orders }). Optional status or open_only filter.

Honest deal-type-aware status (never fabricates carrier scans). Requires owning agent_id.

Agent manual correction or degraded handoff recovery. note required except cancelled. Owning agent_id required.

AP2 spend mandates. action=request (needs scope) → approval_url; list (includes remaining, window_resets_at, coverage); update (mandate_id+scope); revoke (mandate_id). update NEVER approves. Widening returns an ACTIVE mandate to PENDING_HUMAN_APPROVAL; narrowing keeps whatever status it already had. monthly_cap is a rolling 30-day window from create. Same category set as a live mandate replaces it at approval and keeps this period's spend. No covering mandate at checkout is handoff, not an error.

List or enable agent payment methods (action=list|enable) with friendly labels. Defaults: cod + x402. invoice (B2B) is coming_soon. bank_card is handoff-only.

Create a standing AP2 spend mandate; returns approval_url.

Multi-provider discovery. Always pass agent_id for mandate-aware badges. Decision fields: badge + action (and recommended). Ignore autonomy if present. Carry search_id through get_supply_details / execute_order / submit_feedback. Read badgeCounts, hint, and partial.merchantErrors.

Report delivery/quality outcome; updates supplier + agent reputation.

Non-committing checkout probe for shipping ETA/cost. Uses agent default_destination, else linked org default address, or country override. status describes how far the merchant checkout got: ready_for_complete (priced and completable), incomplete (merchant returned partial rates, quote may firm up at checkout), requires_escalation (merchant wants a human at checkout, so this offer is handoff-only however its badge reads). needs_interaction=true means the same. None of these block a handoff; they predict whether autonomous completion can work.

Re-reads one offer from the search cache and refreshes its badge/action against current mandate state. For most catalog offers the payload equals the object supply_search already returned, so skip this if you still hold that offer and only need its fields. Carries no shipping data: use supply_delivery for ETA and cost. Re-run supply_search if offer_not_in_cache.

Multi-provider discovery (live REAL merchants by default). Returns a ranked page (default limit=30, max 100) with total/has_more/next_offset. Follow next.args (search_id+offset+limit) to page without re-fanout. Optional fetch_limit (max 300) deepens the upstream pull on new searches. Pass include_sandbox=true only to append DEMO/SANDBOX test merchants at the bottom (test_offer=true). Always pass agent_id for mandate-aware badges. Carry search_id through supply_details / order_execute / order_feedback.

Honest deal-type-aware order status (never fabricates carrier scans). Triggers handoff poll when checkout ids are wired (~30s throttle). Returns merchant_observed, status_source, agent_status_locked, and recovery hints for degraded handoffs.

Patch handle, payment rails, default destination, business profile, or preferences. Same fields as create_agent_profile; only pass what changes.

Agent manual status correction or recovery. note required except cancelled. Attach tracking_id, carrier, external_checkout_id, handoff_endpoint to recover degraded handoffs when auto-poll did not wire checkout. Locks agent status when not PENDING; merchant poll will not demote locked status.