AgentScore Commerce (Node.js)

npm install @agent-score/commerce

npm install hono mppx @x402/core @x402/evm stripe   # whatever your stack needs

import { buildA2AAgentCard, buildUCPProfile } from '@agent-score/commerce';

// 1. Google A2A v1.0 Signed Agent Card — published at /.well-known/agent-card.json
const card = buildA2AAgentCard({
  name: 'My Agent Service',
  url: 'https://agents.example.com',
  capabilities: { endpoints: [{ name: 'purchase', method: 'POST' }] },
  data,
});

// 2. Google Universal Commerce Protocol profile — published at /.well-known/ucp
const profile = buildUCPProfile({
  name: 'My Agent Service',
  services: [{ type: 'rest', url: 'https://agents.example.com' }],
  payment_handlers: [{ name: 'tempo', config: { recipient: TEMPO_ADDR } }],
  signing_keys: yourJWKS,
  data,
});

import { Hono } from 'hono';
import { agentscoreGate, getAgentScoreData } from '@agent-score/commerce/identity/hono';
import {
  createX402Server,
  createMppxServer,
  paymentDirective,
  wwwAuthenticateHeader,
} from '@agent-score/commerce/payment';
import { build402Body, buildAcceptedMethods, buildAgentInstructions, buildHowToPay } from '@agent-score/commerce/challenge';

const x402 = await createX402Server({
  facilitator: 'coinbase',
  rails: ['x402-base-mainnet'],
});
const mppx = await createMppxServer({
  rails: {
    tempo: { recipient: process.env.TEMPO_RECIPIENT! },
    solana: { recipient: process.env.SOLANA_RECIPIENT!, network: 'mainnet-beta' },
  },
  secretKey: process.env.MPP_SECRET_KEY!,
});

const app = new Hono();
const _gate = agentscoreGate({ apiKey: process.env.AGENTSCORE_API_KEY!, requireKyc: true, minAge: 21 });

// Gate runs CONDITIONALLY — fires only when a payment credential is attached so
// anonymous discovery returns a 402 challenge with rails + pricing. Identity is
// verified at settle time on the retry leg.
app.use('/purchase', async (c, next) => {
  const hasPaymentHeader = Boolean(
    c.req.header('payment-signature') ||
    c.req.header('x-payment') ||
    c.req.header('authorization')?.startsWith('Payment '),
  );
  if (!hasPaymentHeader) { await next(); return; }
  return _gate(c, next);
});

app.post('/purchase', async (c) => {
  // ... identity + payment processing ...
});

import { agentscoreGate, getGateDegradedState } from '@agent-score/commerce/identity/hono';

const gate = agentscoreGate({ apiKey: process.env.AGENTSCORE_API_KEY!, failOpen: true });
app.use('/purchase', gate);

app.post('/purchase', async (c) => {
  const { degraded, infraReason } = getGateDegradedState(c);
  if (degraded) console.warn(`[gate] degraded: ${infraReason}`);
  // ...
});