Commerce Gate MCP
Commerce Gate MCP lets an agent check seven kinds of commerce action against your policy before acting: a price change, an inventory update, accepting an order, a fulfillment step, a promotion change, a refund, or a return authorization. Evaluations run in Shadow Mode and return available margin, stock or authority detail. A separate tool gives Dynamics 365 an enforced ALLOW or BLOCK for one complete transaction, within the agent's spend budget. A separate preflight checks a Microsoft Partner Center or AWS Marketplace SaaS offer packet before manual submission. The agent can read a signed Decision Dossier, proof packet or Shadow report where available; it can never perform the marketplace or ERP write itself.
Marketplace operations, pricing, fulfillment, finance, and automation teams get one commerce evaluation outcomes and a separate binary ERP guard without giving the MCP direct execution power.
Ask whether a price change, stock change, order acceptance, fulfillment step, promotion change, refund or return clears policy. Commerce Gate MCP submits evaluations in Shadow Mode; decision evidence is returned where supported.
Capability discovery maps Walmart Commerce Evaluation, Price Guard, Order Guard, order interception, margin protection, release, hold, and cancel to bounded Shadow preflights. The MCP does not inspect a merchant connection or execute the connected Walmart path.
Retrieve a Decision Dossier or proof packet by identifier without reaching into a production database or marketplace account.
List and summarize recent advisory evaluations so an operator can understand patterns before enabling enforcement elsewhere.
Send one complete bounded D365 transaction to the enforced binary policy and agent-budget guard without posting, releasing, or modifying it in the ERP.
Check the bounded SaaS offer, plan, public URL, marketplace identity, preview or test, and digest-backed release-evidence packet before a person submits it. Microsoft requires Entra identity; AWS requires a Login with Amazon identity linked to the seller AWS account and IAM role. The MCP never calls a marketplace.
Plain questions map to seven Shadow action contracts, the enforced ERP guard, and a Microsoft Partner Center and AWS Marketplace SaaS offer-submission preflight. The agent evaluates, validates, and reads evidence; a person or the connected platform still executes.
“Would repricing DC-AFR-55 to $89 on Walmart still clear our margin floor after the referral fee?”
The agent submits the proposed price and supplied cost facts in Shadow Mode, then receives a policy outcome and evidence reference. The response does not publish the price or call Walmart.
commercegate_evaluate_action“Can the Walmart Order Guard intercept this order, hold it for margin protection, or release or cancel it?”
The agent evaluates the exact order or fulfillment proposal in Shadow Mode. Order interception and margin protection map to ORDER_ACCEPTANCE; release maps to FULFILLMENT_ACTION with acknowledge, while hold and cancel use their matching fulfillment actions. The result never calls Walmart.
commercegate_evaluate_action“Would accepting this $4,000 order after a $300 discount clear policy with $2,900 in estimated cost?”
The agent submits the supplied gross amount, discount, and estimated cost in Shadow Mode. HOLD means a person reviews the economics before any separate execution step.
commercegate_evaluate_action“Would this stock change leave only seven units and create oversell risk?”
The agent sends the current and new quantity and gets a verdict against your inventory floor. Whether the platform can then stop the write depends on that platform; the verdict is recorded either way.
commercegate_evaluate_action“Should this $2,850 refund request be held for review?”
The agent submits the refund request without issuing it. Any later refund requires a separately connected marketplace path with the required API, scope, lifecycle checks, and explicit authority.
commercegate_evaluate_action“What would Shadow Mode have held this month, and why?”
The agent lists and summarizes recent Shadow evaluations: outcome counts and rates, near misses, reason breakdowns, and candidate enforcement paths.
commercegate_summarize_shadow_reports“Finance wants the signed evidence for dossier 8d4d…e201.”
The agent fetches the Decision Dossier and proof packet by ID. Verification is evidence, never permission to execute.
commercegate_get_proof_packet“Does this complete Business Central sales document clear policy and the agent budget?”
The agent calls the enforced ERP guard with the bounded transaction and ERP region. ALLOW or BLOCK applies to that exact request; the MCP does not release or post the document.
commercegate_validate_erp_transaction“Is this Commerce Gate SaaS offer packet ready for manual Microsoft Partner Center or AWS Marketplace submission?”
The agent checks the exact offer, plans, markets, public URLs, platform identity, preview or test confirmation, and release-evidence digests in Shadow Mode. It does not create, change, upload, or submit an offer in a marketplace.
commercegate_evaluate_marketplace_offer_submissionAgent operating rule
Confirm the supported action shape and configuration readiness.
Submit one exact proposed commerce action, a complete D365 transaction when the ERP guard is the intended authority, or the complete marketplace SaaS offer packet before manual submission.
Stop on HOLD, ESCALATE, BLOCK, errors, or ambiguity and surface the evidence.
Tool catalog
commercegate_describe_capabilitiescommercegate_validate_erp_transactioncommercegate_evaluate_actioncommercegate_get_dossiercommercegate_get_proof_packetcommercegate_list_shadow_reportscommercegate_summarize_shadow_reportscommercegate_evaluate_marketplace_offer_submissionPublic npm transport
Install and run the pinned @decionis/commerce@0.1.6 release with npx -y @decionis/commerce@0.1.6. The package runs as a local STDIO process. Calls use configured DECIONIS_API_KEY and DECIONIS_ORG_ID, or access from the private AgentOps store. Environment configuration takes precedence. The API origin defaults to https://api.decionis.com.
On macOS and Linux, the first valid local Shadow evaluation can create provisional access with trial limits. Discovery, evidence reads and ERP calls never create access; ERP authorization requires owned access. Windows requires existing credentials. Set AGENTOPS_AUTO_PROVISION=0 to disable new provisioning while retaining existing access.
It is a commerce-operations adapter over the Decionis decision and evidence APIs. It does not expose a remote Commerce Gate MCP endpoint. The broader hosted Protocol MCP remains a separate parent interface.
A verdict from the MCP says whether an action clears policy. Whether the platform can then enforce it depends on that platform: the marketplace has to offer the API, you have to grant the scope, and the connector has to support the action. Each platform page states what is enforced today.
View the package on npm Decionis Protocol MCPStart with Shadow Mode, inspect the dossier, and keep marketplace execution outside the MCP boundary.