Skip to main content
Glama

complete_checkout

Idempotent

Complete the purchase. Provide buyer.name and buyer.email from the conversation before opening approval; ask in chat if either is missing. The approval page only reviews these details. PREFER THE CART CARD: if there is an interactive card for this cart, let the buyer confirm and (when the store offers a choice) pick the payment method there — including retrying after a declined payment or switching method — instead of calling this tool yourself. Each call you make here opens a new card in the transcript instead of updating the one already open. Only call it yourself when there is no interactive card or the buyer explicitly asks you to complete it in chat. Idempotent — replay is keyed on checkout_session_id: any retry against a session that already has an order returns that same order (COMPLETED or PENDING_EXTERNAL_CONFIRMATION) without re-charging. The provided idempotency_key is recorded on the session for audit and short-circuits a repeated call with the same key.

If the response has status PENDING_EXTERNAL_CONFIRMATION, no purchase has completed yet: read order_placed and next_action — a person has to approve or pay at its url; next_action says whether calling again with the same checkout_session_id and idempotency_key can read the outcome. KYAPAY (payment_method=KYAPAY or a kyapay_token): charging with KYApay is not available. KYApay is identity verification here, not a payment rail, so the call is rejected with PAYMENT_METHOD_NOT_CONFIGURED before anything is charged or written; use another payment method. The Skyfire KYA token serves identity on the REST API, not payment in this tool. On demo-store the approval step records a confirmation but does not verify that a human gave it. PAYMENT MANDATE: this tool also requires one, issued by the platform, not written by you. Call preview_checkout for this cart, open the approval_url it returns, poll approval_status_url with your agent credential, and send the mandate you receive as the payment_mandate argument or an X-Payment-Mandate header. The approval is bound to your agent credential and the cart; it does not verify that a person was present. Checkout guide: read the MCP resource trusteed://guides/checkout. CREDENTIAL: this store needs one. Call the create_sandbox_key tool first (it is in this tool list and needs no credential), then pass the key you get back as the agent_key argument — or as an Authorization: Bearer header if your client can set headers. Do not ask a person to log in: there is no human login for this store.

Input Schema

NameRequiredDescriptionDefault
buyerNoOptional buyer contact information
agent_keyNoSandbox credential from `create_sandbox_key`. Use this when your client cannot set an `Authorization: Bearer` header.
cel_contextNoOptional. Send only evidence you can substantiate; it can only make a check stricter, never looser. Unknown keys or out-of-range values are rejected with INVALID_ARGUMENT. Keys: key_age_hours, requested_scopes, product_categories, price_delta_bps, discount_codes_tried, discount_bps, lowest_stock, return_policy_mismatch, is_subscription, autorenew_consent, is_b2b, purchase_order_hash, shipping_po_box, shipping_freight_forwarder, provider_confidence, stored_value_cents, cross_merchant_abuse, refund_ratio, dispute_count, completed_orders_24h, merchant_orders_1h, digital_good_types, agent_provider_id.
kyapay_tokenNoNot available for payment: charging with KYApay is switched off, because KYApay is identity verification here, not a payment rail. A call that passes this token is rejected with PAYMENT_METHOD_NOT_CONFIGURED before anything is charged or written. The Skyfire KYA token is used for identity on the REST API, not in this tool.
payment_methodNoPayment method to use. PAYPAL creates a PayPal order and presents approval URL. KYAPAY is not available for payment: KYApay is identity verification here, so a request with KYAPAY is rejected without charging anything. ACP (Stripe-native settlement) returns a 'not enabled' response unless this deployment enables native settlement; when enabled it charges the Stripe Shared Payment Token passed as shared_payment_token. X402 is available through the configured x402 protocol flow, not this checkout tool. MOCK moves no money: it completes the order without charging. Whether a store accepts it depends on the store's configuration (it is the default on demo-store). Defaults to MOCK if not specified.
payment_optionNoPayment method THE PERSON chose, when preview_checkout returned payment_options. Ask the person; never choose for them. Card numbers and wallet keys are never sent here: the person approves (and, with own_wallet, signs) on the approval page.
idempotency_keyYesREQUIRED as an argument in this tool: the `Idempotency-Key` header or `_meta` alone is not enough. 1-128 chars from [A-Za-z0-9._:/-]. Reuse the same value when retrying the same operation.
payment_mandateNoPayment mandate issued by the platform for this cart: the compact JWS you receive after the approval opened by `preview_checkout` is granted (its `exp` is Unix seconds and `aud` is this store's slug). Forward it as received; a mandate you write yourself is not accepted here. The approval is bound to your agent credential and does not verify that a person was present. Use this when your client cannot set an `X-Payment-Mandate` header.
checkout_session_idYesCheckout session ID from preview_checkout — the same value as create_cart's cart_id (must be a valid UUID)
save_payment_methodNoOnly with PayPal at a store that charges into its own PayPal account, for a signed-in buyer (not guest access), and only when the person asked for it: true asks PayPal to save this PayPal account during this purchase, so later purchases at this store can be charged without a new approval, within per-charge and daily limits. Never set it on your own initiative. In any other case it is ignored and the response says so in details; it never causes an error.
shared_payment_tokenNoStripe Shared Payment Token (spt_…) granted by the buyer's agent wallet for payment_method=ACP. Issued by Stripe, scoped to this merchant, amount and currency, and consumed when used: it can be charged once. Only honoured when this deployment enables native ACP settlement.
reconfirmed_state_hashNoSHA-256 of the authoritative merchant state, as returned in details.reconfirm_state_hash by a previous STATE_RECONFIRMATION_REQUIRED error. Required to proceed when the merchant state moved after the approved preview. Passing a stale hash is refused: it means the state moved again and must be reconfirmed anew.

Output Schema

NameRequiredDescriptionDefault
statusYes
detailsNo
currencyYes
order_idYes
idempotentYes
store_nameYes
test_fundsNo
money_movesNo
next_actionNo
payment_urlNo
total_centsYes
approval_urlNo
order_placedNo
funding_sourceNo
payment_methodNo
shipping_sourceNo
payment_capturedNo
external_order_idNo
checkout_session_idYes
shipping_authoritativeNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed2 schema fields changed
    • changedInput schema / properties / payment_mandate / anyOf
      Previous value: -[
      -  {
      -    "additionalProperties": true,
      -    "properties": {
      -      "aud": {
      -        "description": "This store's slug (the one in the URL you are calling) — not a domain.",
      -        "maxLength": 256,
      -        "minLength": 1,
      -        "type": "string"
      -      },
      -      "currency": {
      -        "description": "Three-letter currency code; must match the cart's currency.",
      -        "maxLength": 3,
      -        "minLength": 3,
      -        "type": "string"
      -      },
      -      "exp": {
      -        "description": "Expiry as an INTEGER of Unix seconds, in the future — not an ISO 8601 date string.",
      -        "exclusiveMinimum": 0,
      -        "type": "integer"
      -      },
      -      "mandate_id": {
      -        "description": "Your identifier for this mandate.",
      -        "maxLength": 128,
      -        "minLength": 1,
      -        "type": "string"
      -      },
      -      "max_amount_cents": {
      -        "description": "Spending limit the buyer gave you, as an integer in minor units (cents).",
      -        "exclusiveMinimum": 0,
      -        "type": "integer"
      -      },
      -      "sub": {
      -        "description": "The identity you authenticate as — it is compared against it. When the credential tool returns a `mandate_subject`, use that value.",
      -        "maxLength": 256,
      -        "minLength": 1,
      -        "type": "string"
      -      }
      -    },
      -    "required": [
      -      "mandate_id",
      -      "max_amount_cents",
      -      "currency",
      -      "exp",
      -      "sub",
      -      "aud"
      -    ],
      -    "type": "object"
      -  },
      -  {
      -    "type": "string"
      -  }
      -]New value: +[
      +  {
      +    "additionalProperties": {},
      +    "type": "object"
      +  },
      +  {
      +    "type": "string"
      +  }
      +]
    • changedInput schema / properties / payment_mandate / description
      Previous value: -"Payment mandate with `mandate_id`, `max_amount_cents` (integer, minor units), `currency` (3 letters, must match the cart's), `exp` (expiry as an INTEGER of Unix seconds — not an ISO 8601 date string), `sub` (the identity you authenticate as — it is compared against it) and `aud` (the store slug this mandate is for, e.g. the slug in the URL you are calling — not a domain). It is a spending cap you declare to limit yourself: it authorises nothing and does not prove the buyer's consent. Use this when your client cannot set an `X-Payment-Mandate` header."New value: +"Payment mandate issued by the platform for this cart: the compact JWS you receive after the approval opened by `preview_checkout` is granted (its `exp` is Unix seconds and `aud` is this store's slug). Forward it as received; a mandate you write yourself is not accepted here. The approval is bound to your agent credential and does not verify that a person was present. Use this when your client cannot set an `X-Payment-Mandate` header."
  2. Changed3 schema fields changed
    • changedInput schema / properties / cel_context / additionalProperties
      Previous value: -trueNew value: +{}
    • changedInput schema / properties / cel_context / description
      Previous value: -"Optional enforcement context for Trusteed native MCP flows (no Shopify/WooCommerce/PrestaShop/Magento plugin). Providing these fields enables full evaluation of rules R004, R006, R008, R012-R013, R015-R017, R026-R028. See each field's own description for what it means and whether the server verifies it. These values are not signed into the receipt — do not include values you cannot substantiate."New value: +"Optional. Send only evidence you can substantiate; it can only make a check stricter, never looser. Unknown keys or out-of-range values are rejected with INVALID_ARGUMENT. Keys: key_age_hours, requested_scopes, product_categories, price_delta_bps, discount_codes_tried, discount_bps, lowest_stock, return_policy_mismatch, is_subscription, autorenew_consent, is_b2b, purchase_order_hash, shipping_po_box, shipping_freight_forwarder, provider_confidence, stored_value_cents, cross_merchant_abuse, refund_ratio, dispute_count, completed_orders_24h, merchant_orders_1h, digital_good_types, agent_provider_id."
    • removedInput schema / properties / cel_context / properties
      Removed value: -{
      -  "agent_provider_id": {
      -    "description": "Your provider identifier (e.g. \"openai\", \"anthropic\"), lowercase — send only if it applies to you.",
      -    "maxLength": 64,
      -    "minLength": 1,
      -    "pattern": "^[a-z0-9_\\-]+$",
      -    "type": "string"
      -  },
      -  "autorenew_consent": {
      -    "description": "True if the buyer explicitly consented to auto-renewal for a subscription — send only if it applies to you.",
      -    "type": "boolean"
      -  },
      -  "completed_orders_24h": {
      -    "description": "Orders this agent has completed with this merchant in the last 24 hours. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser.",
      -    "maximum": 1000000,
      -    "minimum": 0,
      -    "type": "integer"
      -  },
      -  "cross_merchant_abuse": {
      -    "description": "True if you have flagged this same buyer/agent for abuse at another merchant. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser.",
      -    "type": "boolean"
      -  },
      -  "digital_good_types": {
      -    "description": "Digital-good categories present in this cart — send only if it applies to you.",
      -    "items": {
      -      "enum": [
      -        "gift_card",
      -        "license_key",
      -        "downloadable",
      -        "stored_value"
      -      ],
      -      "type": "string"
      -    },
      -    "maxItems": 10,
      -    "type": "array"
      -  },
      -  "discount_bps": {
      -    "description": "Discount applied to this cart, in basis points — send only if it applies to you.",
      -    "maximum": 10000,
      -    "minimum": 0,
      -    "type": "integer"
      -  },
      -  "discount_codes_tried": {
      -    "description": "Number of discount codes you attempted before this checkout — send only if it applies to you.",
      -    "maximum": 100,
      -    "minimum": 0,
      -    "type": "integer"
      -  },
      -  "dispute_count": {
      -    "description": "Number of payment disputes this agent has had with this merchant. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser.",
      -    "maximum": 1000000,
      -    "minimum": 0,
      -    "type": "integer"
      -  },
      -  "is_b2b": {
      -    "description": "True if you are buying on behalf of a business — send only if it applies to you.",
      -    "type": "boolean"
      -  },
      -  "is_subscription": {
      -    "description": "True if this checkout creates a recurring subscription. The server checks this itself; a value you send cannot hide what it detects.",
      -    "type": "boolean"
      -  },
      -  "key_age_hours": {
      -    "description": "Age in hours of the API key/credential you are using with this store. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser.",
      -    "maximum": 720,
      -    "minimum": 0,
      -    "type": "integer"
      -  },
      -  "lowest_stock": {
      -    "description": "Lowest remaining stock you observed across this cart's line items. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser.",
      -    "minimum": 0,
      -    "type": "integer"
      -  },
      -  "merchant_orders_1h": {
      -    "description": "Orders this merchant has received from any agent in the last hour. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser.",
      -    "maximum": 1000000,
      -    "minimum": 0,
      -    "type": "integer"
      -  },
      -  "price_delta_bps": {
      -    "description": "Difference, in basis points, between the price you discovered earlier and the cart's current price. The server may recompute this from the catalogue and replace your value.",
      -    "maximum": 10000,
      -    "minimum": -10000,
      -    "type": "integer"
      -  },
      -  "product_categories": {
      -    "description": "Product categories present in this cart, as you understand them — send only if it applies to you.",
      -    "items": {
      -      "maxLength": 64,
      -      "type": "string"
      -    },
      -    "maxItems": 50,
      -    "type": "array"
      -  },
      -  "provider_confidence": {
      -    "description": "Your confidence (0-1) in your own agent-provider identification — send only if it applies to you.",
      -    "maximum": 1,
      -    "minimum": 0,
      -    "type": "number"
      -  },
      -  "purchase_order_hash": {
      -    "description": "Hash of a purchase order backing a B2B purchase — send only if it applies to you.",
      -    "maxLength": 128,
      -    "type": "string"
      -  },
      -  "refund_ratio": {
      -    "description": "This agent's refund ratio with this merchant (0-1). Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser.",
      -    "maximum": 1,
      -    "minimum": 0,
      -    "type": "number"
      -  },
      -  "requested_scopes": {
      -    "description": "OAuth/permission scopes you requested when authenticating with this store — send only if it applies to you.",
      -    "items": {
      -      "maxLength": 64,
      -      "type": "string"
      -    },
      -    "maxItems": 20,
      -    "type": "array"
      -  },
      -  "return_policy_mismatch": {
      -    "description": "True if the return policy you were shown does not match what this store publishes elsewhere. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser.",
      -    "type": "boolean"
      -  },
      -  "shipping_freight_forwarder": {
      -    "description": "True if the shipping address is a freight-forwarder address — send only if it applies to you.",
      -    "type": "boolean"
      -  },
      -  "shipping_po_box": {
      -    "description": "True if the shipping address is a PO box. The server checks this itself; a value you send cannot hide what it detects.",
      -    "type": "boolean"
      -  },
      -  "stored_value_cents": {
      -    "description": "Stored-value amount (e.g. gift card) applied to this cart, in cents. The server checks this itself; a value you send cannot hide what it detects.",
      -    "maximum": 100000000,
      -    "minimum": 0,
      -    "type": "integer"
      -  }
      -}
  3. Changed3 schema fields changed
    • changedInput schema / properties / idempotency_key / description
      Previous value: -"Unique key to prevent duplicate charges on retry. Generate once per purchase attempt. Replay is enforced primarily on checkout_session_id (the existing order is returned). The first key seen for a session is recorded; reusing the same key short-circuits to the existing order."New value: +"REQUIRED as an argument in this tool: the `Idempotency-Key` header or `_meta` alone is not enough. 1-128 chars from [A-Za-z0-9._:/-]. Reuse the same value when retrying the same operation."
    • addedInput schema / properties / idempotency_key / maxLength
      Added value: +128
    • addedInput schema / properties / idempotency_key / pattern
      Added value: +"^[A-Za-z0-9._:/-]{1,128}$"
  4. Changed1 schema field changed
    • changedInput schema / properties / payment_mandate / anyOf
      Previous value: -[
      -  {
      -    "additionalProperties": {},
      -    "type": "object"
      -  },
      -  {
      -    "type": "string"
      -  }
      -]New value: +[
      +  {
      +    "additionalProperties": true,
      +    "properties": {
      +      "aud": {
      +        "description": "This store's slug (the one in the URL you are calling) — not a domain.",
      +        "maxLength": 256,
      +        "minLength": 1,
      +        "type": "string"
      +      },
      +      "currency": {
      +        "description": "Three-letter currency code; must match the cart's currency.",
      +        "maxLength": 3,
      +        "minLength": 3,
      +        "type": "string"
      +      },
      +      "exp": {
      +        "description": "Expiry as an INTEGER of Unix seconds, in the future — not an ISO 8601 date string.",
      +        "exclusiveMinimum": 0,
      +        "type": "integer"
      +      },
      +      "mandate_id": {
      +        "description": "Your identifier for this mandate.",
      +        "maxLength": 128,
      +        "minLength": 1,
      +        "type": "string"
      +      },
      +      "max_amount_cents": {
      +        "description": "Spending limit the buyer gave you, as an integer in minor units (cents).",
      +        "exclusiveMinimum": 0,
      +        "type": "integer"
      +      },
      +      "sub": {
      +        "description": "The identity you authenticate as — it is compared against it. When the credential tool returns a `mandate_subject`, use that value.",
      +        "maxLength": 256,
      +        "minLength": 1,
      +        "type": "string"
      +      }
      +    },
      +    "required": [
      +      "mandate_id",
      +      "max_amount_cents",
      +      "currency",
      +      "exp",
      +      "sub",
      +      "aud"
      +    ],
      +    "type": "object"
      +  },
      +  {
      +    "type": "string"
      +  }
      +]
  5. Changed2 schema fields changed
    • addedInput schema / properties / save_payment_method
      Added value: +{
      +  "description": "Only with PayPal at a store that charges into its own PayPal account, for a signed-in buyer (not guest access), and only when the person asked for it: true asks PayPal to save this PayPal account during this purchase, so later purchases at this store can be charged without a new approval, within per-charge and daily limits. Never set it on your own initiative. In any other case it is ignored and the response says so in details; it never causes an error.",
      +  "type": "boolean"
      +}
    • addedOutput schema / properties / details
      Added value: +{
      +  "additionalProperties": true,
      +  "properties": {
      +    "save_payment_method": {
      +      "additionalProperties": true,
      +      "properties": {
      +        "reason": {
      +          "type": "string"
      +        },
      +        "status": {
      +          "const": "ignored",
      +          "type": "string"
      +        }
      +      },
      +      "required": [
      +        "status",
      +        "reason"
      +      ],
      +      "type": "object"
      +    }
      +  },
      +  "type": "object"
      +}
  6. Changed1 schema field changed
    • changedInput schema / properties / payment_option / enum
      Previous value: -[
      -  "demo_card",
      -  "demo_wallet",
      -  "own_wallet",
      -  "merchant_card"
      -]New value: +[
      +  "demo_card",
      +  "demo_wallet",
      +  "own_wallet",
      +  "merchant_card",
      +  "paypal"
      +]
  7. Changed2 schema fields changed
    • changedInput schema / properties / kyapay_token / description
      Previous value: -"Skyfire pay or kya-pay JWT for autonomous payment via Skyfire (payment_method=KYAPAY). This argument is the only channel for the token; no request header carries it. Claims required: sub, jti, amount (USD), cur=USD, sps."New value: +"Not available for payment: charging with KYApay is switched off, because KYApay is identity verification here, not a payment rail. A call that passes this token is rejected with PAYMENT_METHOD_NOT_CONFIGURED before anything is charged or written. The Skyfire KYA token is used for identity on the REST API, not in this tool."
    • changedInput schema / properties / payment_method / description
      Previous value: -"Payment method to use. PAYPAL creates a PayPal order and presents approval URL. KYAPAY requires kyapay_token. ACP (Stripe-native settlement) returns a 'not enabled' response unless this deployment enables native settlement; when enabled it charges the Stripe Shared Payment Token passed as shared_payment_token. X402 is available through the configured x402 protocol flow, not this checkout tool. MOCK moves no money: it completes the order without charging. Whether a store accepts it depends on the store's configuration (it is the default on demo-store). Defaults to MOCK if not specified."New value: +"Payment method to use. PAYPAL creates a PayPal order and presents approval URL. KYAPAY is not available for payment: KYApay is identity verification here, so a request with KYAPAY is rejected without charging anything. ACP (Stripe-native settlement) returns a 'not enabled' response unless this deployment enables native settlement; when enabled it charges the Stripe Shared Payment Token passed as shared_payment_token. X402 is available through the configured x402 protocol flow, not this checkout tool. MOCK moves no money: it completes the order without charging. Whether a store accepts it depends on the store's configuration (it is the default on demo-store). Defaults to MOCK if not specified."
  8. Changed1 schema field changed
    • changedInput schema / properties / kyapay_token / description
      Previous value: -"Skyfire pay or kya-pay JWT for autonomous payment via Skyfire (payment_method=KYAPAY). Alternative to passing the token in the skyfire-pay-id request header — the header takes precedence if both are provided. Claims required: sub, jti, amount (USD), cur=USD, sps."New value: +"Skyfire pay or kya-pay JWT for autonomous payment via Skyfire (payment_method=KYAPAY). This argument is the only channel for the token; no request header carries it. Claims required: sub, jti, amount (USD), cur=USD, sps."
  9. Changed2 schema fields changed
    • changedInput schema / properties / buyer / properties / email / description
      Previous value: -"Buyer email address"New value: +"Buyer email address (e.g. ana@example.com). Prefilled in the store checkout."
    • changedInput schema / properties / buyer / properties / name / description
      Previous value: -"Buyer full name"New value: +"Buyer first name and surname(s) as one string, e.g. \"Ana García López\". Prefilled in the store checkout."
  10. Changed2 schema fields changed
    • changedInput schema / properties / payment_option / enum
      Previous value: -[
      -  "demo_card",
      -  "demo_wallet",
      -  "own_wallet"
      -]New value: +[
      +  "demo_card",
      +  "demo_wallet",
      +  "own_wallet",
      +  "merchant_card"
      +]
    • changedOutput schema / properties / payment_method / enum
      Previous value: -[
      -  "ACP",
      -  "KYAPAY",
      -  "PAYPAL",
      -  "MOCK",
      -  "X402"
      -]New value: +[
      +  "ACP",
      +  "KYAPAY",
      +  "PAYPAL",
      +  "MOCK",
      +  "X402",
      +  "MERCHANT_CARD"
      +]
  11. Changed2 schema fields changed
    • addedOutput schema / properties / funding_source
      Added value: +{
      +  "enum": [
      +    "platform_test_card",
      +    "platform_test_wallet",
      +    "buyer_wallet"
      +  ],
      +  "type": "string"
      +}
    • addedOutput schema / properties / test_funds
      Added value: +{
      +  "type": "boolean"
      +}
  12. Changed1 schema field changed
    • addedInput schema / properties / payment_option
      Added value: +{
      +  "description": "Payment method THE PERSON chose, when preview_checkout returned payment_options. Ask the person; never choose for them. Card numbers and wallet keys are never sent here: the person approves (and, with own_wallet, signs) on the approval page.",
      +  "enum": [
      +    "demo_card",
      +    "demo_wallet",
      +    "own_wallet"
      +  ],
      +  "type": "string"
      +}
  13. Changed4 schema fields changed
    • changedOutput schema / properties / next_action / properties / reuse_arguments / items / enum
      Previous value: -[
      -  "checkout_session_id",
      -  "idempotency_key"
      -]New value: +[
      +  "checkout_session_id",
      +  "checkout_id",
      +  "idempotency_key"
      +]
    • removedOutput schema / properties / next_action / properties / then_call / const
      Removed value: -"complete_checkout"
    • addedOutput schema / properties / next_action / properties / then_call / maxLength
      Added value: +64
    • addedOutput schema / properties / next_action / properties / then_call / minLength
      Added value: +1
  14. Changed5 schema fields changed
    • changedInput schema / properties / payment_method / description
      Previous value: -"Payment method to use. PAYPAL creates a PayPal order and presents approval URL. KYAPAY requires kyapay_token. ACP (Stripe-native settlement) returns a 'not enabled' response unless this deployment enables native settlement; when enabled it charges the Stripe Shared Payment Token passed as shared_payment_token. MOCK moves no money: it completes the order without charging. Whether a store accepts it depends on the store's configuration (it is the default on demo-store). Defaults to MOCK if not specified."New value: +"Payment method to use. PAYPAL creates a PayPal order and presents approval URL. KYAPAY requires kyapay_token. ACP (Stripe-native settlement) returns a 'not enabled' response unless this deployment enables native settlement; when enabled it charges the Stripe Shared Payment Token passed as shared_payment_token. X402 is available through the configured x402 protocol flow, not this checkout tool. MOCK moves no money: it completes the order without charging. Whether a store accepts it depends on the store's configuration (it is the default on demo-store). Defaults to MOCK if not specified."
    • changedInput schema / properties / payment_method / enum
      Previous value: -[
      -  "ACP",
      -  "KYAPAY",
      -  "PAYPAL",
      -  "MOCK"
      -]New value: +[
      +  "ACP",
      +  "KYAPAY",
      +  "PAYPAL",
      +  "MOCK",
      +  "X402"
      +]
    • addedOutput schema / properties / money_moves
      Added value: +{
      +  "type": "boolean"
      +}
    • addedOutput schema / properties / payment_captured
      Added value: +{
      +  "type": "boolean"
      +}
    • addedOutput schema / properties / payment_method
      Added value: +{
      +  "enum": [
      +    "ACP",
      +    "KYAPAY",
      +    "PAYPAL",
      +    "MOCK",
      +    "X402"
      +  ],
      +  "type": "string"
      +}
  15. Changed2 schema fields changed
    • changedInput schema / properties / payment_method / description
      Previous value: -"Payment method to use. PAYPAL creates a PayPal order and presents approval URL. KYAPAY requires kyapay_token. ACP (Stripe-native settlement) returns a 'not enabled' response unless this deployment enables native settlement. MOCK moves no money: it completes the order without charging. Whether a store accepts it depends on the store's configuration (it is the default on demo-store). Defaults to MOCK if not specified."New value: +"Payment method to use. PAYPAL creates a PayPal order and presents approval URL. KYAPAY requires kyapay_token. ACP (Stripe-native settlement) returns a 'not enabled' response unless this deployment enables native settlement; when enabled it charges the Stripe Shared Payment Token passed as shared_payment_token. MOCK moves no money: it completes the order without charging. Whether a store accepts it depends on the store's configuration (it is the default on demo-store). Defaults to MOCK if not specified."
    • addedInput schema / properties / shared_payment_token
      Added value: +{
      +  "description": "Stripe Shared Payment Token (spt_…) granted by the buyer's agent wallet for payment_method=ACP. Issued by Stripe, scoped to this merchant, amount and currency, and consumed when used: it can be charged once. Only honoured when this deployment enables native ACP settlement.",
      +  "pattern": "^spt_[A-Za-z0-9_]+$",
      +  "type": "string"
      +}
  16. Changed35 schema fields changed
    • changedInput schema / properties / cel_context / description
      Previous value: -"Optional enforcement context for Trusteed native MCP flows (no Shopify/WooCommerce/PrestaShop/Magento plugin). Providing these fields enables full evaluation of rules R004, R006, R008, R012-R013, R015-R017, R022, R026-R029. Fields are validated and signed — do not include values you cannot substantiate."New value: +"Optional enforcement context for Trusteed native MCP flows (no Shopify/WooCommerce/PrestaShop/Magento plugin). Providing these fields enables full evaluation of rules R004, R006, R008, R012-R013, R015-R017, R026-R028. See each field's own description for what it means and whether the server verifies it. These values are not signed into the receipt — do not include values you cannot substantiate."
    • addedInput schema / properties / cel_context / properties / agent_provider_id / description
      Added value: +"Your provider identifier (e.g. \"openai\", \"anthropic\"), lowercase — send only if it applies to you."
    • addedInput schema / properties / cel_context / properties / autorenew_consent / description
      Added value: +"True if the buyer explicitly consented to auto-renewal for a subscription — send only if it applies to you."
    • removedInput schema / properties / cel_context / properties / cart_total_cents
      Removed value: -{
      -  "maximum": 100000000,
      -  "minimum": 0,
      -  "type": "integer"
      -}
    • removedInput schema / properties / cel_context / properties / completed_orders
      Removed value: -{
      -  "maximum": 1000000,
      -  "minimum": 0,
      -  "type": "integer"
      -}
    • addedInput schema / properties / cel_context / properties / completed_orders_24h / description
      Added value: +"Orders this agent has completed with this merchant in the last 24 hours. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser."
    • addedInput schema / properties / cel_context / properties / cross_merchant_abuse / description
      Added value: +"True if you have flagged this same buyer/agent for abuse at another merchant. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser."
    • addedInput schema / properties / cel_context / properties / digital_good_types / description
      Added value: +"Digital-good categories present in this cart — send only if it applies to you."
    • addedInput schema / properties / cel_context / properties / discount_bps / description
      Added value: +"Discount applied to this cart, in basis points — send only if it applies to you."
    • addedInput schema / properties / cel_context / properties / discount_codes_tried / description
      Added value: +"Number of discount codes you attempted before this checkout — send only if it applies to you."
    • addedInput schema / properties / cel_context / properties / dispute_count / description
      Added value: +"Number of payment disputes this agent has had with this merchant. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser."
    • addedInput schema / properties / cel_context / properties / is_b2b / description
      Added value: +"True if you are buying on behalf of a business — send only if it applies to you."
    • addedInput schema / properties / cel_context / properties / is_subscription / description
      Added value: +"True if this checkout creates a recurring subscription. The server checks this itself; a value you send cannot hide what it detects."
    • removedInput schema / properties / cel_context / properties / item_count
      Removed value: -{
      -  "maximum": 10000,
      -  "minimum": 0,
      -  "type": "integer"
      -}
    • addedInput schema / properties / cel_context / properties / key_age_hours / description
      Added value: +"Age in hours of the API key/credential you are using with this store. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser."
    • addedInput schema / properties / cel_context / properties / lowest_stock / description
      Added value: +"Lowest remaining stock you observed across this cart's line items. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser."
    • removedInput schema / properties / cel_context / properties / merchant_avg_order_cents
      Removed value: -{
      -  "maximum": 100000000,
      -  "minimum": 0,
      -  "type": "integer"
      -}
    • addedInput schema / properties / cel_context / properties / merchant_orders_1h / description
      Added value: +"Orders this merchant has received from any agent in the last hour. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser."
    • removedInput schema / properties / cel_context / properties / payment_method
      Removed value: -{
      -  "maxLength": 64,
      -  "minLength": 1,
      -  "type": "string"
      -}
    • addedInput schema / properties / cel_context / properties / price_delta_bps / description
      Added value: +"Difference, in basis points, between the price you discovered earlier and the cart's current price. The server may recompute this from the catalogue and replace your value."
    • addedInput schema / properties / cel_context / properties / product_categories / description
      Added value: +"Product categories present in this cart, as you understand them — send only if it applies to you."
    • addedInput schema / properties / cel_context / properties / provider_confidence / description
      Added value: +"Your confidence (0-1) in your own agent-provider identification — send only if it applies to you."
    • addedInput schema / properties / cel_context / properties / purchase_order_hash / description
      Added value: +"Hash of a purchase order backing a B2B purchase — send only if it applies to you."
    • removedInput schema / properties / cel_context / properties / qty_per_sku_max
      Removed value: -{
      -  "maximum": 10000,
      -  "minimum": 0,
      -  "type": "integer"
      -}
    • addedInput schema / properties / cel_context / properties / refund_ratio / description
      Added value: +"This agent's refund ratio with this merchant (0-1). Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser."
    • removedInput schema / properties / cel_context / properties / regulated_evidence_present
      Removed value: -{
      -  "type": "boolean"
      -}
    • addedInput schema / properties / cel_context / properties / requested_scopes / description
      Added value: +"OAuth/permission scopes you requested when authenticating with this store — send only if it applies to you."
    • addedInput schema / properties / cel_context / properties / return_policy_mismatch / description
      Added value: +"True if the return policy you were shown does not match what this store publishes elsewhere. Merchant/platform fact — send only with evidence; it can only make a check stricter, never looser."
    • addedInput schema / properties / cel_context / properties / shipping_freight_forwarder / description
      Added value: +"True if the shipping address is a freight-forwarder address — send only if it applies to you."
    • addedInput schema / properties / cel_context / properties / shipping_po_box / description
      Added value: +"True if the shipping address is a PO box. The server checks this itself; a value you send cannot hide what it detects."
    • addedInput schema / properties / cel_context / properties / stored_value_cents / description
      Added value: +"Stored-value amount (e.g. gift card) applied to this cart, in cents. The server checks this itself; a value you send cannot hide what it detects."
    • changedInput schema / properties / checkout_session_id / description
      Previous value: -"Checkout session ID from preview_checkout (must be a valid UUID)"New value: +"Checkout session ID from preview_checkout — the same value as create_cart's cart_id (must be a valid UUID)"
    • changedInput schema / properties / payment_method / description
      Previous value: -"Payment method to use. PAYPAL creates a PayPal order and presents approval URL. KYAPAY requires kyapay_token. ACP (Agentic Commerce Protocol / Stripe-native settlement) is NOT enabled by default: unless MCP_ACP_NATIVE_SETTLEMENT_ENABLED=true, a non-zero non-Shopify ACP cart returns an explicit 'not enabled' response instead of a mock completion. Defaults to MOCK if not specified."New value: +"Payment method to use. PAYPAL creates a PayPal order and presents approval URL. KYAPAY requires kyapay_token. ACP (Stripe-native settlement) returns a 'not enabled' response unless this deployment enables native settlement. MOCK moves no money: it completes the order without charging. Whether a store accepts it depends on the store's configuration (it is the default on demo-store). Defaults to MOCK if not specified."
    • addedOutput schema / properties / next_action
      Added value: +{
      +  "additionalProperties": true,
      +  "properties": {
      +    "actor": {
      +      "const": "buyer",
      +      "type": "string"
      +    },
      +    "do": {
      +      "enum": [
      +        "approve",
      +        "pay"
      +      ],
      +      "type": "string"
      +    },
      +    "instruction": {
      +      "type": "string"
      +    },
      +    "reuse_arguments": {
      +      "items": {
      +        "enum": [
      +          "checkout_session_id",
      +          "idempotency_key"
      +        ],
      +        "type": "string"
      +      },
      +      "type": "array"
      +    },
      +    "then_call": {
      +      "const": "complete_checkout",
      +      "type": "string"
      +    },
      +    "url": {
      +      "type": "string"
      +    }
      +  },
      +  "required": [
      +    "actor",
      +    "do",
      +    "url",
      +    "instruction"
      +  ],
      +  "type": "object"
      +}
    • addedOutput schema / properties / order_placed
      Added value: +{
      +  "type": "boolean"
      +}
  17. Changed1 schema field changed
    • changedInput schema / properties / payment_mandate / description
      Previous value: -"Payment mandate with `mandate_id`, `max_amount_cents` (integer, minor units), `currency` (3 letters, must match the cart's), `exp` (expiry as an INTEGER of Unix seconds — not an ISO 8601 date string), `sub` (your agent id) and `aud` (the store slug this mandate is for, e.g. the slug in the URL you are calling — not a domain). Use this when your client cannot set an `X-Payment-Mandate` header."New value: +"Payment mandate with `mandate_id`, `max_amount_cents` (integer, minor units), `currency` (3 letters, must match the cart's), `exp` (expiry as an INTEGER of Unix seconds — not an ISO 8601 date string), `sub` (the identity you authenticate as — it is compared against it) and `aud` (the store slug this mandate is for, e.g. the slug in the URL you are calling — not a domain). It is a spending cap you declare to limit yourself: it authorises nothing and does not prove the buyer's consent. Use this when your client cannot set an `X-Payment-Mandate` header."
  18. Changed2 schema fields changed
    • addedOutput schema / properties / shipping_authoritative
      Added value: +{
      +  "type": "boolean"
      +}
    • addedOutput schema / properties / shipping_source
      Added value: +{
      +  "enum": [
      +    "platform",
      +    "merchant_policy",
      +    "estimated"
      +  ],
      +  "type": "string"
      +}
  19. Changed1 schema field changed
    • addedOutput schema / properties / approval_url
      Added value: +{
      +  "type": "string"
      +}
  20. Changed1 schema field changed
    • changedInput schema / properties / payment_mandate / description
      Previous value: -"Payment mandate with `mandate_id`, `max_amount_cents`, `currency`, `exp`, `sub`, `aud`. Its `currency` must match the cart's. Use this when your client cannot set an `X-Payment-Mandate` header."New value: +"Payment mandate with `mandate_id`, `max_amount_cents` (integer, minor units), `currency` (3 letters, must match the cart's), `exp` (expiry as an INTEGER of Unix seconds — not an ISO 8601 date string), `sub` (your agent id) and `aud` (the store slug this mandate is for, e.g. the slug in the URL you are calling — not a domain). Use this when your client cannot set an `X-Payment-Mandate` header."
  21. Changed2 schema fields changed
    • addedInput schema / properties / agent_key
      Added value: +{
      +  "description": "Sandbox credential from `create_sandbox_key`. Use this when your client cannot set an `Authorization: Bearer` header.",
      +  "type": "string"
      +}
    • addedInput schema / properties / payment_mandate
      Added value: +{
      +  "anyOf": [
      +    {
      +      "additionalProperties": {},
      +      "type": "object"
      +    },
      +    {
      +      "type": "string"
      +    }
      +  ],
      +  "description": "Payment mandate with `mandate_id`, `max_amount_cents`, `currency`, `exp`, `sub`, `aud`. Its `currency` must match the cart's. Use this when your client cannot set an `X-Payment-Mandate` header."
      +}
  22. Changed4 schema fields changed
    • changedInput schema / additionalProperties
      Previous value: -falseNew value: +true
    • changedInput schema / properties / buyer / additionalProperties
      Previous value: -falseNew value: +true
    • changedInput schema / properties / cel_context / additionalProperties
      Previous value: -falseNew value: +true
    • changedOutput schema / additionalProperties
      Previous value: -falseNew value: +true
  23. Changed1 schema field changed
    • addedOutput schema / properties / payment_url
      Added value: +{
      +  "type": "string"
      +}
  24. Changed1 schema field changed
    • changedOutput schema / (root)
      Previous value: -nullNew value: +{
      +  "$schema": "http://json-schema.org/draft-07/schema#",
      +  "additionalProperties": false,
      +  "properties": {
      +    "checkout_session_id": {
      +      "type": "string"
      +    },
      +    "currency": {
      +      "type": "string"
      +    },
      +    "external_order_id": {
      +      "type": "string"
      +    },
      +    "idempotent": {
      +      "type": "boolean"
      +    },
      +    "order_id": {
      +      "type": "string"
      +    },
      +    "status": {
      +      "enum": [
      +        "COMPLETED",
      +        "ALREADY_PLACED",
      +        "PENDING_EXTERNAL_CONFIRMATION"
      +      ],
      +      "type": "string"
      +    },
      +    "store_name": {
      +      "type": "string"
      +    },
      +    "total_cents": {
      +      "type": "number"
      +    }
      +  },
      +  "required": [
      +    "order_id",
      +    "checkout_session_id",
      +    "store_name",
      +    "total_cents",
      +    "currency",
      +    "status",
      +    "idempotent"
      +  ],
      +  "type": "object"
      +}
  25. Changed1 schema field changed
    • addedInput schema / properties / reconfirmed_state_hash
      Added value: +{
      +  "description": "SHA-256 of the authoritative merchant state, as returned in details.reconfirm_state_hash by a previous STATE_RECONFIRMATION_REQUIRED error. Required to proceed when the merchant state moved after the approved preview. Passing a stale hash is refused: it means the state moved again and must be reconfirmed anew.",
      +  "pattern": "^[0-9a-f]{64}$",
      +  "type": "string"
      +}
  26. Changed4 schema fields changed
    • addedInput schema / $schema
      Added value: +"http://json-schema.org/draft-07/schema#"
    • addedInput schema / additionalProperties
      Added value: +false
    • addedInput schema / properties
      Added value: +{
      +  "buyer": {
      +    "additionalProperties": false,
      +    "description": "Optional buyer contact information",
      +    "properties": {
      +      "email": {
      +        "description": "Buyer email address",
      +        "format": "email",
      +        "type": "string"
      +      },
      +      "name": {
      +        "description": "Buyer full name",
      +        "type": "string"
      +      },
      +      "phone": {
      +        "description": "Buyer phone number",
      +        "type": "string"
      +      }
      +    },
      +    "type": "object"
      +  },
      +  "cel_context": {
      +    "additionalProperties": false,
      +    "description": "Optional enforcement context for Trusteed native MCP flows (no Shopify/WooCommerce/PrestaShop/Magento plugin). Providing these fields enables full evaluation of rules R004, R006, R008, R012-R013, R015-R017, R022, R026-R029. Fields are validated and signed — do not include values you cannot substantiate.",
      +    "properties": {
      +      "agent_provider_id": {
      +        "maxLength": 64,
      +        "minLength": 1,
      +        "pattern": "^[a-z0-9_\\-]+$",
      +        "type": "string"
      +      },
      +      "autorenew_consent": {
      +        "type": "boolean"
      +      },
      +      "cart_total_cents": {
      +        "maximum": 100000000,
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "completed_orders": {
      +        "maximum": 1000000,
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "completed_orders_24h": {
      +        "maximum": 1000000,
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "cross_merchant_abuse": {
      +        "type": "boolean"
      +      },
      +      "digital_good_types": {
      +        "items": {
      +          "enum": [
      +            "gift_card",
      +            "license_key",
      +            "downloadable",
      +            "stored_value"
      +          ],
      +          "type": "string"
      +        },
      +        "maxItems": 10,
      +        "type": "array"
      +      },
      +      "discount_bps": {
      +        "maximum": 10000,
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "discount_codes_tried": {
      +        "maximum": 100,
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "dispute_count": {
      +        "maximum": 1000000,
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "is_b2b": {
      +        "type": "boolean"
      +      },
      +      "is_subscription": {
      +        "type": "boolean"
      +      },
      +      "item_count": {
      +        "maximum": 10000,
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "key_age_hours": {
      +        "maximum": 720,
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "lowest_stock": {
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "merchant_avg_order_cents": {
      +        "maximum": 100000000,
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "merchant_orders_1h": {
      +        "maximum": 1000000,
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "payment_method": {
      +        "maxLength": 64,
      +        "minLength": 1,
      +        "type": "string"
      +      },
      +      "price_delta_bps": {
      +        "maximum": 10000,
      +        "minimum": -10000,
      +        "type": "integer"
      +      },
      +      "product_categories": {
      +        "items": {
      +          "maxLength": 64,
      +          "type": "string"
      +        },
      +        "maxItems": 50,
      +        "type": "array"
      +      },
      +      "provider_confidence": {
      +        "maximum": 1,
      +        "minimum": 0,
      +        "type": "number"
      +      },
      +      "purchase_order_hash": {
      +        "maxLength": 128,
      +        "type": "string"
      +      },
      +      "qty_per_sku_max": {
      +        "maximum": 10000,
      +        "minimum": 0,
      +        "type": "integer"
      +      },
      +      "refund_ratio": {
      +        "maximum": 1,
      +        "minimum": 0,
      +        "type": "number"
      +      },
      +      "regulated_evidence_present": {
      +        "type": "boolean"
      +      },
      +      "requested_scopes": {
      +        "items": {
      +          "maxLength": 64,
      +          "type": "string"
      +        },
      +        "maxItems": 20,
      +        "type": "array"
      +      },
      +      "return_policy_mismatch": {
      +        "type": "boolean"
      +      },
      +      "shipping_freight_forwarder": {
      +        "type": "boolean"
      +      },
      +      "shipping_po_box": {
      +        "type": "boolean"
      +      },
      +      "stored_value_cents": {
      +        "maximum": 100000000,
      +        "minimum": 0,
      +        "type": "integer"
      +      }
      +    },
      +    "type": "object"
      +  },
      +  "checkout_session_id": {
      +    "description": "Checkout session ID from preview_checkout (must be a valid UUID)",
      +    "type": "string"
      +  },
      +  "idempotency_key": {
      +    "description": "Unique key to prevent duplicate charges on retry. Generate once per purchase attempt. Replay is enforced primarily on checkout_session_id (the existing order is returned). The first key seen for a session is recorded; reusing the same key short-circuits to the existing order.",
      +    "type": "string"
      +  },
      +  "kyapay_token": {
      +    "description": "Skyfire pay or kya-pay JWT for autonomous payment via Skyfire (payment_method=KYAPAY). Alternative to passing the token in the skyfire-pay-id request header — the header takes precedence if both are provided. Claims required: sub, jti, amount (USD), cur=USD, sps.",
      +    "type": "string"
      +  },
      +  "payment_method": {
      +    "description": "Payment method to use. PAYPAL creates a PayPal order and presents approval URL. KYAPAY requires kyapay_token. ACP (Agentic Commerce Protocol / Stripe-native settlement) is NOT enabled by default: unless MCP_ACP_NATIVE_SETTLEMENT_ENABLED=true, a non-zero non-Shopify ACP cart returns an explicit 'not enabled' response instead of a mock completion. Defaults to MOCK if not specified.",
      +    "enum": [
      +      "ACP",
      +      "KYAPAY",
      +      "PAYPAL",
      +      "MOCK"
      +    ],
      +    "type": "string"
      +  }
      +}
    • addedInput schema / required
      Added value: +[
      +  "checkout_session_id",
      +  "idempotency_key"
      +]
  27. Changed5 schema fields changed
    • removedInput schema / $schema
      Removed value: -"http://json-schema.org/draft-07/schema#"
    • removedInput schema / additionalProperties
      Removed value: -false
    • removedInput schema / properties
      Removed value: -{
      -  "buyer": {
      -    "additionalProperties": false,
      -    "description": "Optional buyer contact information",
      -    "properties": {
      -      "email": {
      -        "description": "Buyer email address",
      -        "format": "email",
      -        "type": "string"
      -      },
      -      "name": {
      -        "description": "Buyer full name",
      -        "type": "string"
      -      },
      -      "phone": {
      -        "description": "Buyer phone number",
      -        "type": "string"
      -      }
      -    },
      -    "type": "object"
      -  },
      -  "checkout_session_id": {
      -    "description": "Checkout session ID from preview_checkout (must be a valid UUID)",
      -    "type": "string"
      -  },
      -  "idempotency_key": {
      -    "description": "Unique key to prevent duplicate charges on retry. Generate once per purchase attempt.",
      -    "type": "string"
      -  },
      -  "kyapay_token": {
      -    "description": "Skyfire pay or kya-pay JWT for autonomous payment via Skyfire (payment_method=KYAPAY). Alternative to passing the token in the skyfire-pay-id request header — the header takes precedence if both are provided. Claims required: sub, jti, amount (USD), cur=USD, sps.",
      -    "type": "string"
      -  },
      -  "payment_method": {
      -    "description": "Payment method to use. PAYPAL creates a PayPal order and presents approval URL. KYAPAY requires kyapay_token. Defaults to MOCK if not specified.",
      -    "enum": [
      -      "ACP",
      -      "KYAPAY",
      -      "PAYPAL",
      -      "MOCK"
      -    ],
      -    "type": "string"
      -  }
      -}
    • removedInput schema / required
      Removed value: -[
      -  "checkout_session_id",
      -  "idempotency_key"
      -]
    • changedOutput schema / (root)
      Previous value: -{
      -  "$schema": "http://json-schema.org/draft-07/schema#",
      -  "additionalProperties": false,
      -  "properties": {
      -    "checkout_session_id": {
      -      "type": "string"
      -    },
      -    "currency": {
      -      "type": "string"
      -    },
      -    "external_order_id": {
      -      "type": "string"
      -    },
      -    "idempotent": {
      -      "type": "boolean"
      -    },
      -    "order_id": {
      -      "type": "string"
      -    },
      -    "status": {
      -      "enum": [
      -        "COMPLETED",
      -        "ALREADY_PLACED",
      -        "PENDING_EXTERNAL_CONFIRMATION"
      -      ],
      -      "type": "string"
      -    },
      -    "store_name": {
      -      "type": "string"
      -    },
      -    "total_cents": {
      -      "type": "number"
      -    }
      -  },
      -  "required": [
      -    "order_id",
      -    "checkout_session_id",
      -    "store_name",
      -    "total_cents",
      -    "currency",
      -    "status",
      -    "idempotent"
      -  ],
      -  "type": "object"
      -}New value: +null
  28. First observed

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations cover safety/idempotency hints, but the description adds far more: idempotency keyed on checkout_session_id, PENDING_EXTERNAL_CONFIRMATION semantics, KYAPAY being rejected before any charge, the platform-issued payment mandate workflow, the sandbox credential requirement, and the demo-store non-verification caveat. Consistent with idempotentHint=true and readOnlyHint=false.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Despite inline section labels (KYAPAY:, PAYMENT MANDATE:, CREDENTIAL:), it is one dense monolithic block and repeats schema-documented facts about KYAPAY, the mandate, and the credential. Most content is load-bearing for a checkout tool with this many branches, but there is measurable redundancy and no clean paragraph breaks.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described, yet the description still explains the PENDING_EXTERNAL_CONFIRMATION read path (order_placed, next_action). Combined with credential, mandate, and idempotency guidance, an agent has everything needed to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3, but the description adds real meaning for parameters beyond the schema: it clarifies that payment_mandate must be platform-issued (not authored by the agent), that agent_key comes from create_sandbox_key, and the checkout_session_id/idempotency_key retry contract. It duplicates some KYAPAY detail already in the schema, keeping it from a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening sentence 'Complete the purchase' names a specific verb and resource, and the body distinguishes it from siblings like preview_checkout and the cart card path. An agent can tell immediately what this tool does and when it is the wrong entry point.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when/when-not routing: 'PREFER THE CART CARD... Only call it yourself when there is no interactive card or the buyer explicitly asks.' It names the alternatives (cart card, preview_checkout, create_sandbox_key) and the exact conditions selecting each, including retry-after-decline handling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources