Hosted agent checkout for sellers
A UCP and ACP endpoint for a merchant whose site has none.
Each merchant gets a tenant at shop.enruta.ai/s/{slug}. AI agents discover it, search the catalog, open a checkout and place the order over the Universal Commerce Protocol (REST and MCP) or the Agentic Commerce Protocol. The catalog, the checkouts, the orders and the payment connections stay in the merchant’s Enruta account; this service holds none of them.
What an agent finds under a tenant
| Path (after /s/{slug}) | What it answers |
|---|---|
| /.well-known/ucp | UCP profile: services, capabilities, payment handlers and the storefront's signing keys |
| /ucp/checkout-sessions | UCP REST checkout: create, get, update, complete, cancel |
| /ucp/orders/{id} | UCP order with its receipt signature (X-Receipt-Signature) |
| /ucp/catalog/search | Catalog search, lookup and product detail |
| /mcp | UCP MCP binding: the same checkout as tools |
| /.well-known/acp.json | ACP discovery |
| /acp/checkout_sessions | ACP checkout, API-Version 2025-09-29 or 2026-04-17 |
How an order is paid
Enruta single-use card
The agent presents a single-use credential bound to an Enruta mandate: the amount, the payee and the expiry the person who approved it set. The storefront checks the mandate against this checkout and authorizes the credential on the buyer’s own rail.
A token on the merchant’s own PSP
A PSP token, such as a Stripe Shared Payment Token, is charged on the merchant’s own PSP account through its Enruta connection. The money settles where the merchant already settles; Enruta never holds it.
What the merchant gets
Every agent order, labeled
Orders appear in the Enruta console with the agent, the mandate, the policy version and the buyer’s sealed record, and are written back to the PSP payment.
Signed answers
Every checkout carries the storefront’s merchant signature and every order a receipt signature, both verifiable with the keys in the tenant’s UCP profile.
On the merchant’s own domain
A merchant that wants agents to find the storefront at its own domain forwards five paths to its tenant: /.well-known/ucp, /.well-known/acp.json, /ucp/*, /acp/* and /mcp. The Enruta console shows the Cloudflare Worker and Vercel snippets for it. A tenant without a domain of its own is also served at {slug}.shop.enruta.ai.