Agentzon vs Vendure

Agentzon

Public OpenAPI 3.1 description and llms.txt, with a whole-basket checkout that needs no account or key. The buyer pays on a private page, so a person completes each purchase. No status page, security.txt or registered seller address was found on agentzon.co, and 34 of 500 listed items cannot be bought.

Vendure

Full cart, coupon, shipping and payment flow in the GraphQL Shop API, with ErrorResult types an agent can branch on. No vendor-hosted API. Vendure Cloud is only partly available.

Agentzon

1. Search with GET /api/products. Use only items with checkoutAvailable true and a non-null unitAmount, because a null price means unavailable, never free
2. Send every item and quantity in one POST /api/checkout, with a new Idempotency-Key for each purchase attempt and the same key only to retry that basket
3. Show the buyer the product image from /api/products/{id}/image and get their approval before opening the checkout URL
4. Tell the buyer that catalogue prices exclude sales tax, that shipping is U.S. only and that change-of-mind returns exclude hygiene and food items
5. Keep the checkout URL and the orderToken private. A paid status confirms payment, not shipment

Vendure

1. Keep the session token from the first Shop API response and send it on every call. It holds the active order
2. Check each mutation result's __typename and errorCode. Expected failures return 200 with an ErrorResult
3. Don't retry addItemToOrder blindly. Read the active order first, since a repeat adds the quantity again
4. For server-side work, enable api-key in authOptions.tokenMethod and give the key one role in one channel
5. Run 3.7.3 or later, and purge old job records, which may still hold session tokens