OpenPermit Docs
Roadmap

Public MCP for Agent Clients

Planned hosted and package-based MCP surfaces for OpenPermit agent-client adoption.

The approval-gated checkout MCP surface has shipped: an in-process MCP server at POST /mcp exposes preview_checkout, create_checkout_approval, get_checkout_status, redeem_preapproved_checkout, and get_receipt to ChatGPT and Claude, with explicit human approval, basket-bound + idempotent redemption, and side-effect metadata on every tool. See apps/api/src/mcp/README.md. The broader paid-fetch MCP surface below (paid_fetch, quote_resource, …) and the hosted mcp.openpermit.ai endpoint are still planned.

OpenPermit MCP should be public in two forms:

  • Hosted remote MCP: https://mcp.openpermit.ai/mcp
  • Publishable npm package: @openpermit/mcp

The hosted endpoint is the default for clients such as Codex, Claude Code, desktop assistants, and hosted agent runtimes that can connect to remote MCP servers. The package is for local development, self-hosting, and platforms that need to run the MCP adapter beside the agent runtime.

Planned v1 tools:

  • paid_fetch: fetch a paid resource through OpenPermit policy and payment execution.
  • quote_resource: discover price and payment challenge type before execution when possible.
  • list_mandates: show scoped mandates available to the connected agent client.
  • get_receipt: retrieve receipt and settlement status.
  • request_manual_approval: start an escalation flow when policy requires human approval.

MCP tool calls will require OAuth or a scoped agent credential bound to one organization and one mandate. Bootstrap tokens and broad service-account keys are not valid agent-client credentials.

The MCP adapter will share the same paid-fetch core as planned /api/v1/agent/fetch; payment, policy, retry, and receipt behavior should not fork between MCP and HTTP agent paths. For storefront checkout today, browser-only agents should open seller-hosted continuation links; SDK-capable clients and seller servers can use /api/v1/agent/commerce/readiness, /api/v1/agent/commerce/continuations, and /api/v1/agent/commerce/continue.