# Sealith Agent Commerce

Canonical endpoint: https://agent.sealith.com

## Interfaces

- MCP: https://agent.sealith.com/api/mcp
- Commerce orders: https://agent.sealith.com/api/commerce/orders
- JPYC payment relay: https://agent.sealith.com/api/commerce/orders/{orderId}/relay
- OAuth metadata: https://agent.sealith.com/.well-known/oauth-authorization-server
- MCP metadata: https://agent.sealith.com/.well-known/mcp.json
- Documentation: https://agent.sealith.com/developers/mcp

## Security model

- Agent APIs use Bearer Agent Tokens. Browser cookie authentication is not accepted for commerce operations.
- JPYC moves directly from the payer wallet to the merchant wallet.
- EOA payers may use EIP-3009. Smart accounts use direct ERC-20 transfer attribution.
- Payment, risk review, and fulfillment states are independent. Fulfillment requires a confirmed payment and clear risk status.