Skerry/ Reference/ Agentic Commerce Protocol
Agentic Commerce Protocol6
Called by an agent platform, not by a partner. Authentication is the bearer token the customer issued (POST /customers/{id}/agentic/credentials), not an API key. Every call sends API-Version (2026-04-17, or an earlier published version) and every POST sends Idempotency-Key. Paths, fields, statuses and messages follow the protocol's specification; errors are the protocol's { type, code, message, param }, not Skerry's envelope. The refunds call is a Skerry extension and says so.
- Create a checkout session. Answers 201 with the sessionpost/agentic/{customer_id}/checkout_sessions
- Retrieve a checkout sessionget/agentic/{customer_id}/checkout_sessions/{checkout_session_id}
- Update a checkout sessionpost/agentic/{customer_id}/checkout_sessions/{checkout_session_id}
- Complete with a delegated payment tokenpost/agentic/{customer_id}/checkout_sessions/{checkout_session_id}/complete
- Cancel a session that has not completed. 405 afterwardspost/agentic/{customer_id}/checkout_sessions/{checkout_session_id}/cancel
- A Skerry extension (`xyz.skerry.refunds`), not part of the protocolpost/agentic/{customer_id}/checkout_sessions/{checkout_session_id}/refunds