You need an API key to call any AgentCarts endpoint
Public discovery files (/.well-known/agent-commerce.json) are open. Everything else — product, policy, and checkout endpoints — requires a key passed as an Authorization: Bearer ac_sk_… header. Founding-cohort developers get sandbox keys at signup.
Overview
AgentCarts is the agent-commerce layer for ecommerce stores. It exposes a small, deterministic surface — products, policies, checkout intents, and a discovery manifest — that AI agents can use to find, compare, and recommend your products. Today AgentCarts targets Shopify; the protocol is designed to extend to WooCommerce, headless storefronts, and custom platforms.
Quickstart
- 1.Request an API key — you'll receive a sandbox key (
ac_sk_test_…) within one business day. - 2.Install the AgentCarts Shopify app or self-host the agent layer in your stack.
- 3.Verify your store domain. AgentCarts writes endpoints under your domain so agents can trust them.
- 4.Confirm your discovery manifest is live at
/.well-known/agent-commerce.json. - 5.Start receiving agent traffic. Track it in your AgentCarts dashboard.
GET https://yourstore.com/.well-known/agent-commerce.jsonAuthentication
Every authenticated request to an AgentCarts endpoint MUST include a bearer token in the Authorization header. Keys are scoped per merchant and per environment (sandbox vs. live).
Required header
Authorization: Bearer ac_sk_test_a4f2c79e…
Sandbox keys begin with ac_sk_test_; live keys begin with ac_sk_live_.
What requires a key
GET /agent/productsGET /agent/policiesPOST /agent/checkout-intent- ○
/.well-known/agent-commerce.json(public)
GET https://yourstore.com/agent/products
Authorization: Bearer ac_sk_test_a4f2c79e_DO_NOT_SHARE
Accept: application/jsonTreat your key like a password
- • Never commit keys to source control or expose them in client-side bundles.
- • Use sandbox keys in dev / CI; only the production server should hold live keys.
- • Rotate immediately from the dashboard if a key is leaked.
- • Requests without a valid key receive
401 Unauthorized; rate-limited requests receive429 Too Many Requests.
Endpoints
/agent/productsKey requiredList the structured product catalog./agent/policiesKey requiredReturn the merchant policy graph./agent/checkout-intentKey requiredCreate a signed checkout intent for handoff./.well-known/agent-commerce.jsonPublicDiscovery manifest for the merchant.Example responses
{
"merchant": "Example Store",
"schema_version": "agent-commerce/1.0",
"products": [
{
"id": "prod_8421",
"name": "Standing Desk Pro",
"price": { "amount": 299, "currency": "USD" },
"availability": "in_stock",
"constraints": ["under_50lbs", "wood_top"],
"scores": { "durability": 8.7, "assembly": 6.2 },
"agent_summary": "Best budget standing desk under $300",
"policies": { "returns": "30d", "warranty": "5y" }
}
]
}{
"merchant": "Example Store",
"shipping": { "regions": ["US","CA"], "free_over": 75 },
"returns": { "window_days": 30, "restocking_fee": 0 },
"warranty": { "default": "5y" },
"trust": { "verified": true, "chargeback_rate": 0.004 }
}{
"agent_id": "agt_anthropic_001",
"user_consent": "handoff_required",
"items": [{ "product_id": "prod_8421", "qty": 1 }],
"ship_to": { "country": "US", "postal_code": "94110" }
}Shopify integration flow
- 1. Install the AgentCarts Shopify app via OAuth.
- 2. Approve the minimum required scopes.
- 3. AgentCarts syncs your catalog, inventory, and policies.
- 4. AgentCarts enriches products with agent metadata (constraints, scores, agent_summary).
- 5. AgentCarts publishes the discovery manifest and endpoints under your store domain.
- 6. Your dashboard begins reporting AI referrals.
Agent discovery manifest
Every AgentCarts-enabled merchant publishes a manifest at /.well-known/agent-commerce.json. This is the entry point any compliant agent uses to discover the merchant's capabilities.
{
"merchant": "Example Store",
"agent_cart_enabled": true,
"products_endpoint": "https://example.com/api/agent/products",
"policies_endpoint": "https://example.com/api/agent/policies",
"checkout_intent_endpoint": "https://example.com/api/agent/checkout-intent",
"permissions": {
"agent_checkout": "handoff_required",
"auto_purchase": false
}
}Best practices for agent-readable commerce
- • Keep
agent_summarysentence-length and factual. - • Use
constraintsto express physical limits (weight, voltage, region) so agents can filter. - • Score products on stable, comparable axes — durability, assembly, comfort.
- • Make policies machine-readable. Free-text returns pages are not enough.
- • Verify your domain. Agents weigh trust attestations heavily.
Ready to enable your store?
Join early access for the AgentCarts Shopify app.