# AIShop

> This site can be operated by AI agents on behalf of a user, with the user's consent.

Use the MCP server or REST action API instead of scraping pages.

- MCP server (Streamable HTTP): https://aishop-alpha.vercel.app/mcp
- OAuth 2.1 metadata: https://aishop-alpha.vercel.app/.well-known/oauth-authorization-server (dynamic client registration + PKCE)
- REST actions: GET https://aishop-alpha.vercel.app/agent/v1/actions, POST https://aishop-alpha.vercel.app/agent/v1/actions/{name} with "Authorization: Bearer <token>"
- Users manage connected agents at https://aishop-alpha.vercel.app/agents

## Actions
- products.search (products:read): Search the AIShop catalog by keyword with optional category, price and stock filters. Prices are in US cents.
- products.get (products:read): Full details of one product: description, specs, price, stock and rating.
- products.categories (products:read): List product categories with product counts and starting prices.
- cart.view (cart:read): Show the cart with line items, subtotal, shipping, tax and total.
- cart.add (cart:write): Add a product to the cart (adds to the existing quantity). Returns the updated cart.
- cart.update (cart:write): Set the quantity of a product already in the cart. 0 removes it.
- cart.remove (cart:write): Remove a product from the cart entirely.
- cart.clear (cart:write): Remove every item from the cart.
- checkout.preview (cart:read): Preview the order checkout.create would place: items, totals, shipping address and this agent's spending limit. Show it to the user and get approval before checkout.create.
- checkout.create (checkout:create): Place an order for the whole cart and pay with the user's simulated AIShop Demo Wallet (no real money moves). The total must be within the per-order spending limit the user set for this agent.
- orders.list (orders:read): List the user's recent orders, newest first.
- orders.get (orders:read): Get one order by number (e.g. "AIS-1A2B3C4D") or id: items, totals, shipping and payment status.
- account.whoami (profile:read): The signed-in user's name and email, plus this agent's identity, permissions and spending limit.