# opencommerce (slim)

> opencommerce is Agentcard's Commerce SDK, a TypeScript package that gives an agent one buy tool. Agentcard searches stores, builds the cart and places the order after the shopper approves payment with a card saved in Agentcard's Vault.

- Full: https://www.anchorterminal.com/tools/opencommerce.md (~10,000 tokens) · this version ~2,130 tokens · JSON https://www.anchorterminal.com/tools/opencommerce.json · canonical https://www.anchorterminal.com/tools/opencommerce
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-10-31 · pricing https://www.anchorterminal.com/tools/opencommerce#pricing · reviews https://www.anchorterminal.com/tools/opencommerce#reviews
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

**B · 62/100 · rank #528 of 1239 · #3 in Shopping, returns & refunds · not agent-ready · confidence medium**


Assessment: One strictly typed buy tool covers search, cart, checkout and order updates, and every payment not covered by an auto-approval rule waits for the shopper's passkey. The tool's description runs to about 14.5 KB, the purchase API under it is undocumented, the monitoring page reports test passes rather than uptime, and the CLI says sign-ups are by invitation.

## Facts

- Kind: SDK + MCP · vendor: Agentcard · category: Shopping, returns & refunds · legal entity: Agentcard Corporation · provenance 83/100
- Endpoint: `https://api.agentcard.sh` (HTTP)
- Auth: OAuth · pricing: Pay per use · x402: no · licence: Proprietary. `@agent-cards/commerce-sdk` and the `agent-cards` CLI ship a licence of Agentcard Corporation that allows running them only to use Agentcard's services and forbids copying, reverse engineering and benchmarking a competing product. The repository they name is private
- Probe metrics: not measured yet (probes haven't run)
- Surface listed: The `buy` tool from `@agent-cards/commerce-sdk` 0.18.6 and the Agentcard service at api.agentcard.sh behind it, read from opencommerce.sh, docs.agentcard.com, the package files on npm and the monitoring page on 30 October 2026. No account was created, no API or MCP call was made and `init` was not run
- Relationship: A product of Agentcard, whose card Vault, Issuing, REST API and MCP server are the separate `agentcard` listing. The same `buy` loop is also a user tool on Agentcard's MCP server at https://mcp.agentcard.sh/mcp
- Buy tool input: Five required fields under a strict JSON Schema with no extra properties. `ask` (the shopper's words), `confirm`, `new_order`, `product_id` and `store_id`. The shopper and delivery address are set when the tool is built, so the model can change neither
- What it buys: Products from online stores, food delivery, table reservations, flights, and per `init`, groceries, hotels, fitness classes and event tickets. Some stores, such as DoorDash, check out only on the shopper's own account after a sign-in link
- Paying: The shopper saves a card once through a Vault link and approves each purchase with a passkey from an approval link that works for about 15 minutes. An auto-approval rule can pay where the processor fixes the amount. Stripe Link and Shop Pay are listed as coming soon
- Answers: `status` is one of needs_input, needs_card, approval_sent, placing, order_placed or declined, with `next_action`, carts with `max_charge`, up to eight product and eight store cards, `decline_code` and `error_code`. `forModel` strips every link before the model reads an answer
- Events: `listen` holds one connection to Agentcard, resumes after the last event and keeps events for 72 hours. Or `agentcardWebhook` verifies signed deliveries. Order events are order.placed, order.confirmed, order.failed and order.updated
- Timing: A purchase turn has a 110-second budget at Agentcard and the client waits 130 seconds. Store searches end at 30 seconds. After a timeout the docs say to read the conversation before sending the turn again
- HTTP API: Documented only in part. `GET /buy/merchants` reports whether Agentcard can pay at a store, with `supported_reason` and a cursor. The purchase endpoints the SDK calls are not in the API reference or the OpenAPI file, and API access is an Enterprise feature
- CLI: `npx agent-cards init` asks four questions, installs the SDK, signs in through app.agentcard.sh, writes production credentials to `.env` or `.env.local` by default and adds it to `.gitignore`, then runs Agentcard's coding agent in the project. `--print` prints the instructions for your own agent
- Merchant terms: Agentcard's terms of use and the Commerce SDK docs say nothing about stores whose terms bar automated buyers. `GET /buy/merchants` marks a store `held_back` after it cancelled orders Agentcard placed there as a guest
- Monitoring: https://monitoring.opencommerce.sh, linked as Status in the site footer, shows per-merchant test results, success rates, last run and first-response time. On 30 October 2026 its history began on 23 October
- Prices: Completed order fee, Standard plan 1% percentage fee

- Scores: Reliability 43, Performance pending, Schema & documentation 81, Agent ergonomics 69, Security & auth 68, Payments & pricing 40, Task success pending, Maintenance & community 75, Transparency & trust 63 · total over the 7 assessed categories
- Why: Reliability, Read with the hosted lines, since the SDK is a client and every purchase runs at api.agentcard.sh. · Schema & documentation, The buy tool's input is a strict JSON Schema with five required fields and `additionalProperties` false, and the package ships TypeScript de… · Agent ergonomics, One tool, inside the band for ten or fewer, but its description is 57 rules and about 14,500 characters, and the docs also recommend Agentca… · Security & auth, OAuth client credentials exchanged for a one-hour platform token, separate sandbox and production clients, and a per-shopper access token as… · Payments & pricing, No x402, MPP or L402. Purchases are paid with the shopper's card from the Vault, and agentcard.com's FAQ answers Not yet on agent payment pr… · Maintenance & community, `@agent-cards/commerce-sdk` 0.18.6 was published on 30 October 2026 (30 of 30). · Transparency & trust, Closed.
- Sources: 44, open questions: 13, both in the full twin
- Capabilities: shopping.search, shopping.orders, shopping.prices, commerce.cart, commerce.checkout, shopping.returns
- JSON: https://www.anchorterminal.com/api/v1/tools/opencommerce.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/opencommerce.svg` or a link to https://www.anchorterminal.com/tools/opencommerce from a page on opencommerce.sh or agentcard.sh or one of their subdomains, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.
- Support: support@agentcard.sh; https://docs.agentcard.com/commerce-sdk/quickstart; https://monitoring.opencommerce.sh; more in the full twin

## Before you call it

1. Call `buy` with the shopper's words in `ask`, and set `confirm` true only after the shopper says yes to the cart you showed
2. After a `timeout`, `unreachable` or `invalid_answer` error, read the conversation before sending the turn again, since the order may have gone through
3. Show the cart's `max_charge` beside its total, because the approval holds up to that amount
4. Use sandbox credentials for tests. `init` writes production credentials by default, and they place real orders
5. Check a store with `GET /buy/merchants` before sending a shopper there, and suggest another store when it is `held_back` or `supported` is false

## Connect

```bash
npm install @agent-cards/commerce-sdk
```

```bash
curl "https://api.agentcard.sh/buy/merchants?kind=catalog&q=target.com" -H "Authorization: Bearer $AGENTCARD_TOKEN"
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/opencommerce

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Shop MCP | B | 65.9 | shopping.search, shopping.prices, commerce.cart, commerce.checkout, shopping.orders | https://www.anchorterminal.com/tools/shop-mcp.min.md |
| Walmart Agent Gateway | F | 8.5 | shopping.orders, shopping.search, shopping.prices | https://www.anchorterminal.com/tools/walmart-agent-gateway.min.md |
| Shopify API + MCP | BB | 77 | commerce.cart, commerce.checkout | https://www.anchorterminal.com/tools/shopify.min.md |
| WooCommerce API + MCP | BB | 73 | commerce.cart, commerce.checkout | https://www.anchorterminal.com/tools/woocommerce.min.md |
| Shopware | BB | 71.6 | commerce.cart, commerce.checkout | https://www.anchorterminal.com/tools/shopware.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)