Skip to content
AgentCarts.ai

You need an API key to call any AgentCarts endpoint

Public discovery files (/.well-known/agent-commerce.json) are open. Everything else — product, policy, and checkout endpoints — requires a key passed as an Authorization: Bearer ac_sk_… header. Founding-cohort developers get sandbox keys at signup.

Request an API key

Overview

AgentCarts is the agent-commerce layer for ecommerce stores. It exposes a small, deterministic surface — products, policies, checkout intents, and a discovery manifest — that AI agents can use to find, compare, and recommend your products. Today AgentCarts targets Shopify; the protocol is designed to extend to WooCommerce, headless storefronts, and custom platforms.

Quickstart

  1. 1.Request an API key — you'll receive a sandbox key (ac_sk_test_…) within one business day.
  2. 2.Install the AgentCarts Shopify app or self-host the agent layer in your stack.
  3. 3.Verify your store domain. AgentCarts writes endpoints under your domain so agents can trust them.
  4. 4.Confirm your discovery manifest is live at /.well-known/agent-commerce.json.
  5. 5.Start receiving agent traffic. Track it in your AgentCarts dashboard.
curl
GET https://yourstore.com/.well-known/agent-commerce.json

Authentication

Every authenticated request to an AgentCarts endpoint MUST include a bearer token in the Authorization header. Keys are scoped per merchant and per environment (sandbox vs. live).

Required header

Authorization: Bearer ac_sk_test_a4f2c79e…

Sandbox keys begin with ac_sk_test_; live keys begin with ac_sk_live_.

What requires a key

  • GET /agent/products
  • GET /agent/policies
  • POST /agent/checkout-intent
  • /.well-known/agent-commerce.json (public)
curl /agent/products
GET https://yourstore.com/agent/products
Authorization: Bearer ac_sk_test_a4f2c79e_DO_NOT_SHARE
Accept: application/json

Treat your key like a password

  • • Never commit keys to source control or expose them in client-side bundles.
  • • Use sandbox keys in dev / CI; only the production server should hold live keys.
  • • Rotate immediately from the dashboard if a key is leaked.
  • • Requests without a valid key receive 401 Unauthorized; rate-limited requests receive 429 Too Many Requests.

Endpoints

GET/agent/productsKey requiredList the structured product catalog.
GET/agent/policiesKey requiredReturn the merchant policy graph.
POST/agent/checkout-intentKey requiredCreate a signed checkout intent for handoff.
GET/.well-known/agent-commerce.jsonPublicDiscovery manifest for the merchant.

Example responses

GET /agent/products
{
  "merchant": "Example Store",
  "schema_version": "agent-commerce/1.0",
  "products": [
    {
      "id": "prod_8421",
      "name": "Standing Desk Pro",
      "price": { "amount": 299, "currency": "USD" },
      "availability": "in_stock",
      "constraints": ["under_50lbs", "wood_top"],
      "scores": { "durability": 8.7, "assembly": 6.2 },
      "agent_summary": "Best budget standing desk under $300",
      "policies": { "returns": "30d", "warranty": "5y" }
    }
  ]
}
GET /agent/policies
{
  "merchant": "Example Store",
  "shipping": { "regions": ["US","CA"], "free_over": 75 },
  "returns": { "window_days": 30, "restocking_fee": 0 },
  "warranty": { "default": "5y" },
  "trust": { "verified": true, "chargeback_rate": 0.004 }
}
POST /agent/checkout-intent
{
  "agent_id": "agt_anthropic_001",
  "user_consent": "handoff_required",
  "items": [{ "product_id": "prod_8421", "qty": 1 }],
  "ship_to": { "country": "US", "postal_code": "94110" }
}

Shopify integration flow

  1. 1. Install the AgentCarts Shopify app via OAuth.
  2. 2. Approve the minimum required scopes.
  3. 3. AgentCarts syncs your catalog, inventory, and policies.
  4. 4. AgentCarts enriches products with agent metadata (constraints, scores, agent_summary).
  5. 5. AgentCarts publishes the discovery manifest and endpoints under your store domain.
  6. 6. Your dashboard begins reporting AI referrals.

Agent discovery manifest

Every AgentCarts-enabled merchant publishes a manifest at /.well-known/agent-commerce.json. This is the entry point any compliant agent uses to discover the merchant's capabilities.

/.well-known/agent-commerce.json
{
  "merchant": "Example Store",
  "agent_cart_enabled": true,
  "products_endpoint": "https://example.com/api/agent/products",
  "policies_endpoint": "https://example.com/api/agent/policies",
  "checkout_intent_endpoint": "https://example.com/api/agent/checkout-intent",
  "permissions": {
    "agent_checkout": "handoff_required",
    "auto_purchase": false
  }
}

Best practices for agent-readable commerce

  • • Keep agent_summary sentence-length and factual.
  • • Use constraints to express physical limits (weight, voltage, region) so agents can filter.
  • • Score products on stable, comparable axes — durability, assembly, comfort.
  • • Make policies machine-readable. Free-text returns pages are not enough.
  • • Verify your domain. Agents weigh trust attestations heavily.

Ready to enable your store?

Join early access for the AgentCarts Shopify app.

Join early access