Agentzon vs Spree Commerce

Agentzon

Public OpenAPI 3.1 description and llms.txt, with a whole-basket checkout that needs no account or key. The buyer pays on a private page, so a person completes each purchase. No status page, security.txt or registered seller address was found on agentzon.co, and 34 of 500 listed items cannot be bought.

Spree Commerce

A self-hosted BSD 3-Clause platform with public OpenAPI files for the Store and Admin APIs, scoped secret keys, documented rate limits and idempotency keys on cart and checkout calls. GitHub lists six security advisories between January and July 2026, four rated High, and the default docs describe the 6.0 release candidate while 5.6.1 is the stable release.

Agentzon

1. Search with GET /api/products. Use only items with checkoutAvailable true and a non-null unitAmount, because a null price means unavailable, never free
2. Send every item and quantity in one POST /api/checkout, with a new Idempotency-Key for each purchase attempt and the same key only to retry that basket
3. Show the buyer the product image from /api/products/{id}/image and get their approval before opening the checkout URL
4. Tell the buyer that catalogue prices exclude sales tax, that shipping is U.S. only and that change-of-mind returns exclude hygiene and food items
5. Keep the checkout URL and the orderToken private. A paid status confirms payment, not shipment

Spree Commerce

1. Send a publishable key in X-Spree-Api-Key on every Store API call. Add X-Spree-Token with the cart token for guest carts, or a customer JWT as a Bearer token
2. Send Idempotency-Key with the cart token or a customer JWT on cart, payment and completion calls. A request carrying only the publishable key is never cached
3. Ask for fields and expand explicitly. Relations are left out by default and limit stops at 100
4. Use a secret key with the narrowest scopes for the Admin API. read_all gives a read-only key, and the CLI's auto-minted local key is read-only
5. Read the docs under /docs/v5 for a 5.6 store. The default docs describe 6.0, which renames shipments to fulfilments and splits carts from orders