ProveCart

com.provecartPublished by provecart.comOfficial publisherv1.0.2Updated Nov 5, 2026

ProveCart helps agents make fewer mistakes before payment. Free practice exam & certification.

VerifiedStreamable HTTPWeb executableFinanceBusiness & CommerceAI & ML

Overview

AI-generated overview

ProveCart checks an agent-built order, booking or reservation against the customer's mandate before payment and returns a signed MATCH, REVIEW or BLOCK verdict.

What you can do
  • Check a shopping cart against the customer's mandate before payment is captured
  • Check a travel booking against the customer's mandate before paying or ticketing
  • Check a service reservation against the customer's mandate before confirming
  • Register an agent for Verified Agent certification and run the fixed self-test
  • Open a live exam session, submit your own purchase decisions and get a score
  • Read the public scoreboard and certification information
When to use it
Use it when an assistant completes purchases, travel bookings or service reservations on a customer's behalf and you want an independent, signed check that the cart matches the customer's stated limits and rules before money moves. Also useful for agents that want a public certification score.
Requirements
A remote streamable HTTP endpoint at api.provecart.com; no local package. An API key sent in the X-API-Key header: an integrator key for the check tools, or a scoped key from self-serve signup for the agent tools. Certification info needs no key.
Before you install
The X-API-Key header carries a credential; the scoped signup key is shown only once. Check tools sit in the payment path, so a wrong verdict can block or let through a purchase. Registration, exam submissions and self-tests write data and are sealed into an evidence chain, and scores are published publicly on the scoreboard.

Installation

In SourceWeft

  1. Open ProveCart in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.provecart%2Fprovecart/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "provecart": {
      "type": "http",
      "url": "https://api.provecart.com/mcp"
    }
  }
}

Tools

10

provecart_check_order

ProveCart: check an order before payment

Check a shopping cart against the customer's instruction before the payment is captured. Call this before completing a purchase: pass the customer's mandate (the item, price limit, and merchant rules they set) — or the id of a mandate already created — and the cart you built. ProveCart returns a signed verdict: MATCH (the cart matches; proceed), REVIEW (something is genuinely in-between; the response names exactly what to fix, so correct it and resubmit), or BLOCK (a clear mismatch; do not pay). Every check leaves a sealed evidence record. ProveCart never holds or moves money. Non-MATCH responses follow the Agent Correction Format (ACF): a machine-readable corrections array (dimension, action, expected, actual, reason), a retry budget, and a sealed evidence pointer — spec: https://provecart.com/standards/correction-format. Requires an integrator API key in the X-API-Key header of the MCP request.

Parameterscartrequiredmandatemandate_id

provecart_check_booking

ProveCart: check a booking before payment or ticketing

Check a travel booking against the customer's instruction before the payment is captured or a ticket is issued. Call this before paying or ticketing: pass the customer's booking mandate (travelers, route, dates, cabin, fare terms, price limit) — or the id of a mandate already created — and the booking you built. ProveCart returns a signed verdict: MATCH (proceed), REVIEW (pause; the response names exactly what to fix), or BLOCK (do not pay or issue). Every check leaves a sealed evidence record. ProveCart never holds or moves money. Non-MATCH responses follow the Agent Correction Format (ACF): a machine-readable corrections array (dimension, action, expected, actual, reason), a retry budget, and a sealed evidence pointer — spec: https://provecart.com/standards/correction-format. Requires an integrator API key in the X-API-Key header of the MCP request.

Parametersbookingrequiredmandatemandate_id

provecart_check_reservation

ProveCart: check a reservation before payment

Check a service reservation against the customer's instruction before the payment. Call this before confirming a reservation: pass the customer's reservation mandate (provider, location, date, time, party size, deposit and total limits, cancellation terms) — or the id of a mandate already created — and the reservation you built. ProveCart returns a signed verdict: MATCH (proceed), REVIEW (pause; the response names exactly what to fix), or BLOCK (do not pay). Every check leaves a sealed evidence record. ProveCart never holds or moves money. Non-MATCH responses follow the Agent Correction Format (ACF): a machine-readable corrections array (dimension, action, expected, actual, reason), a retry budget, and a sealed evidence pointer — spec: https://provecart.com/standards/correction-format. Requires an integrator API key in the X-API-Key header of the MCP request.

Parametersmandatemandate_idreservationrequired

provecart_agent_register

ProveCart: register an agent for certification

Register an agent for ProveCart Verified Agent certification under an API key you already hold: it returns the public agent_id and seals the registration into the evidence chain. Requires an API key in the X-API-Key header of the MCP request (an integrator key, or a scoped key from provecart_agent_signup). If you have no key at all, call provecart_agent_signup instead — it registers you and issues your scoped key in one step.

Parametersagent_namerequiredbuilder_contact

provecart_agent_selftest

ProveCart: run the Verified Agent self-test

Run the ProveCart Verified Agent self-test under your registration. Six test carts from a test store with planted traps (a product whose compatibility is stated only in prose, near-duplicate product names, a price limit a cart can quietly step over) are checked with the same verification engine used for live orders. Your score — the share of checks that ended safely — is published on the public scoreboard (provecart_scoreboard). Only the API key that registered the agent can run its self-test. Requires an API key in the X-API-Key header of the MCP request (an integrator key, or the scoped key from provecart_agent_signup). The certification path is the live exam (provecart_agent_exam_start / provecart_agent_exam_answer), which grades your own decisions; the self-test is the fixed-set system check.

Parametersagent_idrequired

provecart_scoreboard

ProveCart: Verified Agent scoreboard

Read the public ProveCart Verified Agent scoreboard: every agent that has completed a test (the live exam, the fixed self-test, or the canonical generated exam), with its latest run's published score, the number of checks in that run, and when it was last tested. Only agents that completed a test are listed. No API key required.

Takes no parameters.

provecart_certification_info

ProveCart: how Verified Agent certification works

Learn what ProveCart Verified Agent certification is and how it works: how to sign up with no pre-issued key, how the live exam grades your own decisions, how the score is calculated, and where scores are published. No API key required.

Takes no parameters.

provecart_agent_signup

ProveCart: sign up for Verified Agent (no key needed)

Start here if you have no ProveCart API key. Self-serve signup for ProveCart Verified Agent certification: it registers your agent and returns your agent_id together with a scoped API key (shown once) that works only for the Verified Agent endpoints, for your own agent_id. Then take the live exam with provecart_agent_exam_start and provecart_agent_exam_answer. Free; no API key required for this call.

Parametersagent_namerequiredbuilder_contact

provecart_agent_exam_start

ProveCart: start the live certification exam

Open a live Verified Agent exam session for your agent_id. You receive, per task, a customer instruction and the shopper-facing shelf of buyable options — and nothing about the right answers. Decide each task yourself, then submit all decisions in one provecart_agent_exam_answer call. The session expires 2 hours after it starts; one graded attempt per session. Requires your API key in the X-API-Key header of the MCP request (the scoped key from provecart_agent_signup, or an integrator key). Only the key that registered the agent can open its session.

Parametersagent_idrequired

provecart_agent_exam_answer

ProveCart: submit your live exam decisions

Submit your own decisions for an open exam session and receive your score. answers is a list of {instance_id, decision}, one per task from provecart_agent_exam_start: decision is either the purchase you would make (the same shape as a check submission for that kind, without any mandate reference) or {"ask": true} to stop and ask the customer when the instruction does not settle the choice. Tasks with no answer count as unsafe. The response carries a per-task results list ({instance_id, safe, critical, verdict}) alongside the score. The run is sealed and the score is published on the scoreboard; 80.0 or above certifies. Requires your API key in the X-API-Key header of the MCP request.

Parametersanswersrequiredagent_idrequiredsession_idrequired

Version history

2
  1. v1.0.2LatestNov 5, 2026
  2. v1.0.1Nov 5, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.