Frequently Asked Questions

Trusteed helps AI assistants read a store's product information and, where supported, request shopping actions under the store's rules. For example, an assistant can find a product and check its price; a purchase may need human approval. What is available depends on your platform and setup.

You can start with the free store audit without an account. For a guided pilot, tell us which platform you use and what you want to test; we will confirm its scope and any terms before you begin.

Assistants that support the relevant connection method can use a store's MCP endpoint. Claude and custom MCP clients are examples. ChatGPT uses a separate app integration, so availability and supported actions depend on the client and the store's configuration.

It depends on your platform and the actions you want to enable. Start with the free audit to see what your public pages show. For a store connection, check the integration page or tell us your setup so we can outline the steps.

Usually you can keep your current storefront and payment provider. The connection method varies by platform: Shopify uses authorization from the dashboard, while other platforms may need a module or guided setup. Check your platform's integration page for its current status.

The connection may use product, price, stock, policy, and order information, depending on the features you enable. Review the requested permissions before connecting your store. Credentials are encrypted at rest.

You can set limits for supported actions, such as an order amount that needs review. For example, a request above your agreed limit can pause for approval. Available controls depend on the integration and pilot setup.

The Trust Score determines your store's visibility in agent search results. Stores above a minimum trust level appear in the primary tier; lower trust levels are deprioritized; stores below the eligibility floor or suspended are hidden. Improve your score by keeping catalog data fresh, accurate pricing, and high fulfillment rates.

The Agent API uses API keys with the prefix agnt_. Create keys via POST /api/v1/agent-keys with your JWT. Keys support scoped permissions: agent:read (catalog browsing), agent:cart (cart creation), agent:checkout (checkout initiation). Include the key in the X-Agent-Api-Key header.

Each store gets a unique MCP endpoint at /{store-slug}/mcp. The global MCP server at /mcp serves all connected stores and accepts search queries across the full catalog. Transport: Streamable HTTP (MCP spec 2025-06-18+). SSE is deprecated by spec; not exposed.

All webhook POSTs include an X-Webhook-Signature header containing an HMAC-SHA256 signature. Compute HMAC-SHA256 of the raw request body using your webhook secret and compare with the header value. Reject requests where signatures don't match.

Yes. The full OpenAPI 3.0 spec is available at /api/v1/openapi.json. Import it into Postman, Insomnia, or any OpenAPI-compatible tool. An interactive Swagger UI is available at /api/docs.

Trusteed exposes multiple discovery layers: /.well-known/merchant-index.json (full merchant registry: slug, categories, trust_score, mcp_endpoint, freshness; ISR 5 min, no auth required), /.well-known/agent-commerce.json (canonical contract with endpoints, auth, rate limits, trust framework, and directories), /mcp.json (MCP manifest with all tools), /.well-known/ai-plugin.json (ChatGPT/OpenAI compatible), and <link rel='mcp'> tags in every page head for browser-based agents.

Cart creation and checkout initiation always require explicit human confirmation. Read-only operations (search, product detail, availability, merchant profile) never require confirmation. The confirmation threshold is also configurable per merchant. By default, any order above $100 triggers an additional confirmation step.

relevanceScore = (text_relevance × 0.55) + (store_trust_score × 0.25) + (freshness × 0.10) + (in_stock × 0.10). Stores below the active-tier trust threshold are always placed after all active-tier stores regardless of their computed relevanceScore. This is a hard two-tier sort, not a tiebreaker.

No. Trusteed is not a payment processor and not a merchant of record: where a charge happens, it is made on the merchant's own payment account, with their credentials. The checkout tool (complete_checkout) returns a status: COMPLETED with an order_id, or PENDING_EXTERNAL_CONFIRMATION with a link where the buyer approves or pays (on a Shopify store, the merchant's own checkout). On the demo store the order is simulated and nothing is charged.