DEVELOPER PLATFORM
Build the action layer for the agent economy.
Use our agent, publish a service agents can discover, or connect your product through a narrow and auditable tool contract.
STELLAR TESTNETNON-CUSTODIAL3 MCP SURFACES
01 · START
Choose how you want to build
Each path starts small, proves one useful action and keeps sensitive execution behind explicit authority.
Use Carmelita
Connect an external agent to our public commerce sandbox or, during development, to a user's personal agent.
Start with public MCP →Publish your service
Create a scoped provider identity, publish structured offers and make them discoverable by agents.
See provider flow →Connect your product
Expose one official MCP or API action and let Carmelita call it after user consent.
Use integration checklist →02 · ARCHITECTURE
One gateway, two directions
External agents can use us. Our agent can use external products. Providers can publish the services both sides discover.
External agent
→CarmelitaPolicy + receipts
↔Provider catalog
↔External product
03 · QUICKSTART
Public MCP quickstart
No API key is required for the commerce sandbox. Add the endpoint, list the tools and keep one stable idempotency key for every logical action.
{
"mcpServers": {
"Carmelita": {
"url": "https://agente-asistente.vercel.app/api/mcp"
}
}
}04 · TOOL CONTRACT
Seven narrow tools, one safe lifecycle
Discovery is separated from intent creation, policy, approval, execution and evidence.
search_offersREADFind public agent-ready services.
get_offerREADInspect one structured offer.
create_intentWRITEFreeze one action with an idempotency key.
evaluate_policySAFEApply limits before approval.
demo_authorize_intentDEMORecord explicit sandbox confirmation.
execute_authorized_intentREPLAY SAFECreate or replay one sandbox receipt.
get_receiptREADRetrieve durable execution evidence.
05 · PROVIDER MCP
Publish a service without rebuilding your product
The current pilot flow uses one scoped key per provider. Self-service verification and rotation are the next public milestone.
Register provider
Founder creates the pilot identity and returns the raw token once.
Create a draft
Map one service to a strict offer contract with a stable external ID.
Publish
Only published offers appear in public search.
Receive intent
Orders and fulfillment events remain the next vertical slice.
06 · OUTBOUND CONNECTOR
Bring your own MVP
You do not need to rebuild your product around MCP. We select the smallest official surface that can prove one useful action.
Send this brief to your developer or implementation agentOpen integration agent brief ↗
- 01Official API, MCP, SDK or WebMCP surface
- 02Minimum user consent and scopes
- 03Stable identifiers and normalized errors
- 04Sandbox or reversible first action
- 05Idempotency, timeout and retry behavior
- 06Settlement and fulfillment verified separately
07 · DOCS
Documentation that matches the product state
DOC
Product narrative
What Carmelita does, how the control model works and how to explain it.
Open ↗DOCMission and vision
Why Carmelita exists, its north star and the principles that constrain growth.
Open ↗DOCBusiness onboarding
Choose the smallest API, MCP, WebMCP or guided integration path.
Open ↗DOCDeveloper guide
Quickstart, APIs, connectors, errors and definition of done.
Open ↗DOCArchitecture
Identity, consent, tools, payment boundaries and deployment diagrams.
Open ↗DOCMCP gateway
Public sandbox, personal agent and provider-admin surfaces.
Open ↗DOCAgent Gateway v1
Connect Codex or another agent with scoped Testnet credentials.
Open ↗DOCDeFindex Testnet
Trustline, transaction review, Privy signature and receipt flow.
Open ↗08 · HONEST STATUS
Know exactly what is real
- Public commerce MCP
- Sandbox live
- Provider MCP
- Pilot ready
- Personal agent MCP
- Testnet PAT ready
- DeFindex signing
- Live Testnet proof
- Mainnet settlement
- Disabled
SECURITY
Security contract
- No private key or seed phrase reaches Carmelita.
- Personal users and providers are isolated principals.
- Provider keys are hashed, scoped and returned raw only once.
- Creating an intent never moves funds.
- Retries reuse the original intent or receipt.
- Mainnet and public MCP payment signing remain disabled.
READY WHEN YOU ARE
Start with one action worth proving.
Connect the public sandbox today or bring us one product action for a guided Testnet pilot.