AI agents and your store

Every Omniterra store answers two different kinds of assistant, and it is worth knowing which is which.

The shopper's assistant

Every store publishes a public, read-only endpoint at /mcp/shop, and a profile at /.well-known/ucp. An assistant anywhere can use them to search your catalogue, read a product's price and live stock, and build a link that opens your shop with items already in the cart.

It cannot do anything else. There is no tool that completes a purchase, takes payment, or reads a customer's name, address, orders or your settings. Everything it can see is already public on your website — if a product is not published, it does not exist to the assistant.

The shopper still pays, in your checkout.

To get more out of it: put your categories in your menu, and keep product titles, stock numbers and options filled in. The same things that help a shopper help an assistant.

Your own assistant

Separately, you can connect your own AI tool — ChatGPT, Claude or another — to your store's admin, with a token you create and can revoke. That one acts as you: it can read orders, edit products and change settings, within the permissions you give it.

Treat that token like a password. Do not paste it into a page you did not open yourself, and revoke it if you are not sure where it has been.

What a good assistant will not do

If you ask an assistant to set your shop up, it should:

• ask you for the country, currency, prices and providers, rather than choosing them for you;
• never ask for your password or a verification code;
• tell you what it actually checked, and say plainly what it did not;
• never report a test as passed if it did not run it.

If one tells you a payment works without having taken one, it is guessing.

What to check

• Open /.well-known/ucp on your own shop: it lists what an assistant may do, and says plainly that checkout and payment are not among them.
• Ask an assistant for a product you have unpublished. It should not find it.
• List your own API tokens and make sure you can name every one. Revoke the rest.