Agent tools

What AI agents may do on Legible Demo Store

The scanner read the site's code and sorted every action by risk. A human decides which ones agents get.

manifest runs/snapshot/manifest.json · scanned with openai/gpt-oss-20b · read-only snapshot

Tools found

Approved

7/7

Kept from agents

Read-only

This is a snapshot: approvals are shown as they were for these runs and cannot be changed here.

How an agent payment works

1
Agent
calls checkout with only a cart id
2
MCP server
approved tools only; every call logged
Limit gate
over the limit is blocked; PayPal is never called
PayPal order
Orders v2, intent CAPTURE; agent gets an approval link
5
Human approves
in PayPal; no card data ever reaches the agent
Capture
Safe Pay captures once
=
Verify
PayPal's record is checked against the store

Money

Moves money. Always through PayPal, with a human approving.

checkout

MoneyReview

Starts a PayPal payment for the specified cart and returns the approval URL.

Safe Pay limit gate

max per payment (USD)

$100.00

PayPal · human approves

blocked

$0.00$100.00over the limit

Creates a PayPal order. The agent never sees card data.
A human approves every payment in PayPal before money moves.
Over the limit? Blocked before PayPal is called.

Calls: PAYPALvia Safe Pay · total from /api/cart/{cartId}
Inputs: cartId*: string
Source: src/routes/checkout.ts:11
Confidence: 57%

Review: rules said money (mentions "checkout"), model said write (Creates a checkout record and initiates a payment, changing state but not moving money); using money.

Write

Changes data on the site. No money moves.

create_cart

Write

Creates an empty cart and returns the cart object.

Calls: POST/api/cart
Inputs: none
Source: src/routes/cart.ts:15
Confidence: 90%

Creates a new cart, modifying server state.

add_to_cart

Write

Adds a product to the cart and returns the updated cart.

Calls: POST/api/cart/{cartId}/items
Inputs: cartId*: stringproductId*: stringsize: stringqty: integer
Source: src/routes/cart.ts:25
Confidence: 95%

Modifies cart contents but does not involve payment.

apply_coupon

Write

Apply a coupon code to the cart and return the updated cart.

Calls: POST/api/cart/{cartId}/coupon
Inputs: cartId*: stringcode*: string
Source: src/routes/cart.ts:31
Confidence: 90%

Changes cart state by applying a coupon.

Read

Look things up. Changes nothing.

get_cart

Read

Retrieves the contents and totals of a cart by cart ID.

Calls: GET/api/cart/{cartId}
Inputs: cartId*: string
Source: src/routes/cart.ts:20
Confidence: 100%

Only reads data, no state changes.

search_products

Read

Search products by text and optional max price (USD) and returns a list of products.

Calls: GET/api/products
Inputs: q: stringmaxPrice: number
Source: src/routes/products.ts:11
Confidence: 95%

This endpoint only reads data, no state changes.

get_product

Read

Returns product details for the given product ID.

Calls: GET/api/products/{productId}
Inputs: productId*: string
Source: src/routes/products.ts:18
Confidence: 100%

Only reads data, no state changes.

Kept away from agents (4)

Routes the scanner found but did not expose: internal, web-page-only, or a money action that can't go through PayPal.

Route	Risk	Why	Source
POST /api/orders	Money	Internal: only the payment service (Safe Pay) calls it to record orders, so no agent may.	src/routes/orders.ts:11
GET /api/orders/:checkoutId	Money	Internal: only the payment service (Safe Pay) calls it to record orders, so no agent may.	src/routes/orders.ts:18
POST /api/orders/:checkoutId/status	Money	Only called by payment service after PayPal capture, not intended for direct agent use.	src/routes/orders.ts:23
POST /web/cart/:cartId/coupon	Write	Used only by the site's web page; not intended for external API use.	src/routes/pages.ts:10

Kept away from agents (4)

Routes the scanner found but did not expose: internal, web-page-only, or a money action that can't go through PayPal.

Route

Risk

Why

Source

POST /api/orders

Money

Internal: only the payment service (Safe Pay) calls it to record orders, so no agent may.

src/routes/orders.ts:11

GET /api/orders/:checkoutId

Money

Internal: only the payment service (Safe Pay) calls it to record orders, so no agent may.

src/routes/orders.ts:18

POST /api/orders/:checkoutId/status

Money

Only called by payment service after PayPal capture, not intended for direct agent use.

src/routes/orders.ts:23

POST /web/cart/:cartId/coupon

Write

Used only by the site's web page; not intended for external API use.

src/routes/pages.ts:10