{
  "agent_policy": {
    "allowed_actions": ["search_products", "get_product", "create_checkout_quote", "create_cart", "create_order", "get_order_status_with_signed_url"],
    "allowed_with_customer_login": ["create_order_from_saved_settings", "get_order_status"],
    "requires_webhook_confirmation": ["stripe_payment_confirmation"],
    "requires_user_confirmation": ["public_create_order", "cancel_order", "change_subscription"],
    "auth": "public read, quote, draft cart, and pending order creation; /api/order requires customer_email, billing fields, and Idempotency-Key; status polling uses the signed status_url returned by order creation; payment confirmation is asynchronous and Stripe-webhook-confirmed",
    "missing_billing_behavior": "If only customer_email is known, ask the customer for billing_name, billing_street, billing_city, billing_postal_code, and billing_country before creating the order. Use ISO-3166 alpha-2 country codes when possible, for example SK. The API returns 422 instead of guessing billing data.",
    "configuration_normalization": "Quote, draft cart, and initial order responses include configuration_normalized and configuration_warnings when unsupported options or out-of-range limits are replaced by defaults. Invalid high limits are defaulted down rather than clamped to the maximum.",
    "rate_limits": "60 requests/minute per client on the public API routes",
    "idempotency_required_for": ["create_order", "cancel_order", "change_subscription"],
    "audit_log": "Commit-class attempts are logged server-side with an audit_event_id.",
    "commit_actions_available_to_public_agents": true,
    "commit_actions_available_to_authenticated_customer_agents": true,
    "requires_customer_email_and_billing": ["create_order"],
    "requires_complete_account_settings": ["create_order_from_saved_settings"],
    "payment_confirmation_available_to_customer_or_ai": false,
    "signed_status_url_sensitive": true,
    "human_approval_required_for_public_agents": false,
    "contact": "ai-support@cliopen.com"
  }
}