DOCS

Build agentic commerce the right way.

Technical guides for the teams wiring their catalog, checkout, and payments into AI agents. Primary-source, spec-level, and kept current with the protocols.

MCP·scoped tokens·agent auth

Guides

Security · Updated September 2026

Securing an MCP server for agentic commerce

The eight controls every MCP server needs before an AI agent can transact through it: scoped tokens, least-privilege tools, input validation, rate limiting, and audit logging.

Read the guide →

Looking for the concepts rather than the code? The agentic commerce glossary defines every protocol and surface, and MCP App Builder ships a compliant server without the hand-rolling.

Want the server built and secured for you?

See MCP App Builder or talk to founders