It learns your store's own API, registers that store's tools, and runs them in the shopper's browser tab, using the shopper's own session. Nothing is configured per store by hand.
See the embedHow it worksThe model runs on Cloudflare. Every tool call runs back in the shopper's tab, against your own store.
We fingerprint the platform. Magento 2 and BigCommerce get a ready-made tool pack. Any other store is learned from how its own pages call its API.
The page verifies a signed manifest, then registers only the tools that fit the current page: search, product details, cart.
The shopper talks to an agent on Cloudflare Workers. It can only call tools that are in the signed manifest.
Each call is a same-origin request with the shopper's cookies and a fresh CSRF token. Results are trimmed and redacted before they leave the page.
For a store with no pack, tools are learned from real shopper traffic, checked, tested, and shipped on their own.
Records the shape of the page's own API calls, never the values. Cookies, auth headers and checkout or account paths are never read.
A model proposes what each endpoint is. Code builds the tool and runs static rules and a replay against recorded responses.
A fresh anonymous session searches, adds to cart, changes the quantity and removes it. Never logged in, never past the cart.
Tools that pass go into a newly signed manifest. A tool that breaks is pulled and learned again.
Every tool has a risk tier that is worked out from the request itself, and the stricter of the declared and derived tier wins.
| Tier | Examples | What the shopper sees |
|---|---|---|
| Read | Search, product details, view cart | Nothing extra |
| Cart | Add, change quantity, remove | One Allow card per conversation, plus Undo on every change |
| Submit | Newsletter, back-in-stock alert | A confirmation card for every call, built from the real request |
| Commit | Checkout, payment, password, address | Never registered, never run |
Tools can only reach the page's own origin and cannot set authorization, cookie or host headers. Store text reaches the model wrapped as untrusted data. The manifest is signed with Ed25519 and verified in the page. Shopper consent signals are respected, and conversations are deleted after 30 days.