{
  "type": "agent-commerce-contract",
  "version": "1.5",
  "updated": "2026-04-19",
  "generated_at": "2026-04-19T00:00:00.000Z",
  "canonical_scope": "Commerce contract: platform capabilities, API endpoints, authentication, trust framework, ranking model, connected platforms, protocol declarations. For agent action policies see agent-policy.json. For trust thresholds see agent-trust-manifest.json.",
  "fidoDigitalCredentials": {
    "passkeys": {
      "status": "active",
      "description": "WebAuthn passkeys as optional 2FA for merchant dashboard accounts. Max 5 passkeys per user.",
      "endpoints": "/api/v1/auth/webauthn/*"
    },
    "merchantVerification": {
      "status": "active",
      "description": "Merchant identity verification via Digital Credentials API (Chrome 141+, Safari 26+). Supports US mDL (AAMVA VICAL).",
      "protocols": ["openid4vp", "org-iso-mdoc"],
      "endpoints": "/api/v1/verification/credentials/*",
      "trustBoost": { "BASIC": 0.05, "STANDARD": 0.1 }
    },
    "agentOperatorKya": {
      "status": "active",
      "description": "Agent operator identity verification via Verifiable Digital Credentials. Verified operators receive a +0.10 trust score boost.",
      "trustBoost": 0.1
    }
  },
  "platform": {
    "name": "Trusteed",
    "url": "https://www.trusteed.xyz",
    "api": "https://www.trusteed.xyz/api/v1",
    "docs": "https://www.trusteed.xyz/api/docs",
    "openapi": "https://www.trusteed.xyz/api/v1/openapi.json",
    "llmsTxt": "https://www.trusteed.xyz/llms.txt",
    "llmsTxtLarge": "https://www.trusteed.xyz/llms_large.txt",
    "protocolCoverageMatrix": "https://www.trusteed.xyz/en/protocol-coverage",
    "directories": {
      "merchantIndex": "https://www.trusteed.xyz/.well-known/merchant-index.json",
      "storeDirectory": "https://www.trusteed.xyz/api/v1/stores/directory",
      "description": "merchantIndex: full merchant registry with slug, top_categories, trust_score, freshness_tier, mcp_endpoint (ISR 5min). storeDirectory: paginated REST API supporting ?platform= and ?q= filters."
    },
    "description": "Multi-merchant trust and execution layer for agentic commerce. Provides a single authenticated REST API for AI agents to search, compare, and purchase products across verified merchants."
  },
  "capabilities": [
    {
      "action": "search_products",
      "method": "POST",
      "path": "/agent/search",
      "description": "Search products across all connected merchants in one request. Supports filters by category, price range, verification level, and trust score.",
      "authentication": "required"
    },
    {
      "action": "get_product_detail",
      "method": "GET",
      "path": "/agent/products/{id}",
      "description": "Retrieve full product data including structured policies, trust signals, and merchant operational data.",
      "authentication": "required"
    },
    {
      "action": "compare_products",
      "method": "POST",
      "path": "/agent/compare",
      "description": "Side-by-side comparison of multiple products with normalised data, price range, and best trust score summary.",
      "authentication": "required"
    },
    {
      "action": "check_availability",
      "method": "GET",
      "path": "/agent/availability/{id}",
      "description": "Check real-time stock and price with freshness indicator (fresh < 1h, stale > 24h).",
      "authentication": "required"
    },
    {
      "action": "create_cart",
      "method": "POST",
      "path": "/agent/cart",
      "description": "Create a cart with stock validation and merchant grouping. Cart expires after 24 hours.",
      "authentication": "required"
    },
    {
      "action": "complete_checkout",
      "method": "POST",
      "path": "/agent/checkout",
      "description": "Complete checkout flow. Creates a per-merchant checkout session and returns checkout URLs. Does NOT process payments.",
      "authentication": "required"
    },
    {
      "action": "get_merchant_profile",
      "method": "GET",
      "path": "/agent/merchants/{slug}",
      "description": "Retrieve merchant profile with trust score, verification level, structured policies (return, shipping), and platform connectors.",
      "authentication": "required"
    }
  ],
  "authentication": {
    "type": "api_key",
    "header": "X-Agent-Api-Key",
    "prefix": "agnt_",
    "registration": "https://www.trusteed.xyz/en/developers"
  },
  "rateLimits": [
    {
      "tier": "FREE",
      "requestsPerMinute": 20,
      "notes": "Default for new keys"
    },
    { "tier": "GROWTH", "requestsPerMinute": 500, "notes": "Paid plan" },
    { "tier": "PRO", "requestsPerMinute": 1000, "notes": "Paid plan" },
    {
      "tier": "ENTERPRISE",
      "requestsPerMinute": null,
      "notes": "Custom SLA, unlimited"
    }
  ],
  "rateLimitHeaders": [
    "X-RateLimit-Limit",
    "X-RateLimit-Remaining",
    "X-RateLimit-Reset"
  ],
  "eligibilityRequirements": {
    "minimumVerificationLevel": "BASIC",
    "minimumTrustScore": 0.3,
    "description": "Only merchants with BASIC+ verification and trustScore >= 0.3 appear in agent API results."
  },
  "trustFramework": {
    "description": "Every merchant has a trustScore (0.0–1.0) computed every 6 hours from operational data. This is a platform operational reliability score, not a consumer review rating and not a legal certification.",
    "components": [
      { "name": "catalog_completeness", "weight": 0.15 },
      { "name": "catalog_freshness", "weight": 0.15 },
      { "name": "price_accuracy", "weight": 0.15 },
      { "name": "availability_accuracy", "weight": 0.1 },
      { "name": "policy_coverage", "weight": 0.1 },
      { "name": "checkout_success_rate", "weight": 0.15 },
      { "name": "fulfillment_rate", "weight": 0.1 },
      { "name": "dispute_rate", "weight": 0.1 }
    ],
    "methodologyUrl": "https://www.trusteed.xyz/en/trust#methodology"
  },
  "verificationLevels": [
    { "level": "UNVERIFIED", "description": "No verification completed" },
    { "level": "BASIC", "description": "Email and domain control verified" },
    { "level": "STANDARD", "description": "Business review completed" },
    {
      "level": "PREMIUM",
      "description": "Business review plus stronger operational history requirements"
    }
  ],
  "merchantStatusStates": [
    {
      "status": "active",
      "condition": "trustScore >= 0.5, not suspended",
      "visibility": "Full visibility in agent API results"
    },
    {
      "status": "deprioritized",
      "condition": "trustScore in [0.3, 0.5)",
      "visibility": "Appears after all active merchants in ranked results (hard boundary)"
    },
    {
      "status": "hidden",
      "condition": "trustScore in [0.2, 0.3)",
      "visibility": "Excluded from agent API, visible only in merchant dashboard"
    },
    {
      "status": "suspended",
      "condition": "trustScore < 0.2 or manually suspended",
      "visibility": "Excluded everywhere"
    }
  ],
  "ranking": {
    "formula": "relevanceScore = (text_relevance * 0.55) + (store_trust_score * 0.25) + (freshness * 0.10) + (in_stock * 0.10)",
    "factors": {
      "text_relevance": {
        "range": "0.0-1.0",
        "description": "Normalised sum of title match (1.0) + description match (0.5) + tag match (0.3), divided by 1.8"
      },
      "store_trust_score": {
        "range": "0.0-1.0",
        "description": "Operational reliability score described in trustFramework"
      },
      "freshness": {
        "range": "0.0-1.0",
        "tiers": {
          "< 1h": 1,
          "< 6h": 0.8,
          "< 24h": 0.6,
          ">= 24h": 0.3,
          "null": 0
        }
      },
      "in_stock": {
        "range": "0.0 or 1.0",
        "description": "1.0 if inventoryQuantity > 0, otherwise 0.0"
      }
    },
    "deprioritizationBoundary": "Products from stores with trustScore < 0.5 (deprioritized: true) are placed after all active-store products regardless of their computed relevanceScore. This is a hard two-tier sort, not a tiebreaker."
  },
  "connectedPlatforms": [
    { "platform": "Shopify", "status": "available" },
    { "platform": "WooCommerce", "status": "available" },
    { "platform": "PrestaShop", "status": "available" },
    { "platform": "Odoo", "status": "beta" }
  ],
  "agentRiskControls": {
    "description": "The platform applies anti-fraud and anti-abuse signals per checkout flow. Signal details are not exposed to protect integrity.",
    "documentedAt": "https://www.trusteed.xyz/en/trust#agent-rules",
    "playground": "https://www.trusteed.xyz/en/demo-store",
    "playgroundTab": "agent-rules",
    "playgroundDescription": "Interactive simulator: test all 10 merchant rules and the KYAI policy engine against predefined agent profiles (conservative, aggressive, corporate, luxury, budget). No authentication required.",
    "merchantConfigurable": true,
    "configurableRules": [
      "maximum_order_value",
      "allowed_categories",
      "require_confirmation_above_threshold"
    ]
  },
  "dataNotice": {
    "isPaymentProcessor": false,
    "isMerchantOfRecord": false,
    "isLegalCertificationAuthority": false,
    "trustScoresAreGuarantees": false,
    "trustScoreDescription": "Trust scores and signals are decision-support tools, not guarantees of merchant quality."
  },
  "protocolDeclarations": {
    "acp": {
      "name": "Agent Commerce Protocol",
      "version": "2026-01-30",
      "spec": "https://github.com/agentic-commerce-protocol/agentic-commerce-protocol",
      "discovery_url": "/.well-known/acp.json",
      "status": "production-ready",
      "environment": "sandbox",
      "provider": "stripe",
      "capabilities": {
        "inbound": true,
        "outbound": true,
        "settlement": "stripe",
        "sandbox": true,
        "cart_persistence": true,
        "agent_session_resume": true,
        "display_context": ["webview", "headless"],
        "payment_handlers": ["stripe", "x402", "paypal", "ucp"]
      },
      "detectionMethod": "X-Protocol header or body shape",
      "mcpTools": [
        "create_cart",
        "get_shipping_rates",
        "select_shipping_option",
        "apply_discount",
        "preview_checkout",
        "complete_checkout"
      ],
      "documentation": "/en/for-agents"
    },
    "ap2": {
      "name": "Agent Payment Protocol v2",
      "version": "0.1",
      "spec": "https://ap2-protocol.org/specification/",
      "status": "beta",
      "environment": "sandbox",
      "provider": "google",
      "capabilities": {
        "inbound": true,
        "outbound": true,
        "settlement": "cart-mandate",
        "sandbox": true
      },
      "detectionMethod": "X-Protocol header or Cart Mandate body",
      "mcpTools": ["create_cart", "complete_checkout"],
      "documentation": "/en/for-agents"
    },
    "x402": {
      "name": "x402 Stablecoin Protocol",
      "version": "1.0",
      "spec": "https://www.x402.org/",
      "status": "production-ready",
      "environment": "sandbox",
      "provider": "coinbase",
      "capabilities": {
        "inbound": true,
        "outbound": true,
        "settlement": "USDC-on-chain",
        "sandbox": true
      },
      "detectionMethod": "PAYMENT-SIGNATURE or X-PAYMENT header",
      "currency": "USDC",
      "mcpTools": ["create_cart", "complete_checkout"],
      "documentation": "/en/for-agents"
    },
    "ucp": {
      "name": "Universal Commerce Protocol",
      "version": "2026-01-15",
      "spec": "/.well-known/ucp",
      "status": "active",
      "environment": "production",
      "provider": "trusteed",
      "capabilities": {
        "inbound": true,
        "outbound": false,
        "settlement": "protocol-bridge",
        "sandbox": true
      },
      "detectionMethod": "UCP discovery endpoint",
      "mcpTools": ["ucp_discover", "ucp_checkout", "ucp_status"],
      "documentation": "/en/for-agents"
    },
    "ag_ui": {
      "name": "AG-UI (Agent-User Interaction Protocol)",
      "version": "0.0.48",
      "spec": "/en/for-agents",
      "status": "production",
      "environment": "production",
      "provider": "trusteed",
      "type": "UI/Communication Protocol",
      "transport": "Server-Sent Events (SSE)",
      "capabilities": {
        "inbound": true,
        "outbound": false,
        "streaming": true,
        "humanInTheLoop": true,
        "stateSync": "RFC 6902 JSON Patch"
      },
      "testing": {
        "phasesComplete": 6,
        "totalTests": 188,
        "passRate": "100%",
        "coverage": "80%+",
        "unitTests": 146,
        "integrationTests": 24,
        "e2eTests": 14,
        "performanceTests": 4
      },
      "detectionMethod": "AG-UI endpoint POST /{storeSlug}/ag-ui",
      "endpoint": "/{storeSlug}/ag-ui",
      "confirmationEndpoint": "/{storeSlug}/ag-ui/confirm",
      "confirmationMechanism": "HMAC-SHA256 token (5-minute window)",
      "supportedEvents": 12,
      "mcpTools": [
        "search_products",
        "get_product_details",
        "browse_categories",
        "get_merchant_profile",
        "create_cart",
        "apply_discount",
        "preview_checkout",
        "complete_checkout"
      ],
      "documentation": "/en/for-agents"
    },
    "mcp_server": {
      "name": "Model Context Protocol",
      "version": "2025-11-25",
      "server_card": "/.well-known/mcp.json",
      "sdk_version": "1.29.0",
      "status": "production",
      "environment": "production",
      "transport": "streamable-http",
      "endpoint_template": "https://www.trusteed.xyz/{storeSlug}/mcp"
    }
  },
  "recent_changes": [
    "1.5 (2026-04-12): Added environment per protocol, related_documents, canonical_scope, generated_at, recent_changes, agent_rules_playground in agentRiskControls",
    "1.4 (2026-04-12): Added agentRiskControls playground, version bump",
    "1.3 (2026-04-04): protocolDeclarations expansion, UCP active status"
  ],
  "related_documents": {
    "agent_policy": "/.well-known/agent-policy.json",
    "agent_trust_manifest": "/.well-known/agent-trust-manifest.json",
    "agent_playbooks": "/.well-known/agent-playbooks.json",
    "agent_pay": "/.well-known/agent-pay.json",
    "agent_failsafe": "/.well-known/agent-failsafe.json",
    "merchant_index": "/.well-known/merchant-index.json",
    "mcp_server_card": "/.well-known/mcp.json",
    "mcp_manifest": "/mcp.json",
    "llms_txt": "/llms.txt",
    "oauth_resource": "/.well-known/oauth-protected-resource"
  }
}