Concierge Agent Protocol

io.github.conciergeprotocolPublished by GitHub account conciergeprotocolv0.1.6Updated Oct 29, 2026

Ask a company through its Concierge Agent Protocol front door.

Overview

AI-generated overview

Lets an assistant ask companies that publish a CAP front door, check whether a site has one, and read replies that are still being answered.

What you can do
  • Check whether a website publishes a CAP front door and whether visitors can log in
  • Ask a company a question through its front door, with follow-ups in the same conversation
  • Read a message that was still being answered when the ask timed out
When to use it
Useful when the user asks about a specific company, product, store or organization with a known website that may run a CAP front door, and you would rather ask the company directly than browse its site.
Requirements
Runs locally over stdio, installed from the npm package or launched with npx, so Node.js is needed. The CAP_FROM environment variable sets the caller identity and defaults to agent:cap-mcp. Network access to the target company's site is required.
Before you install
Questions and follow-ups are sent to third-party companies, which see the caller identity from CAP_FROM. Account questions involve a login flow that stores a token in the client's token store. The ask tool waits up to 60 seconds and may return a message that is still working, so replies should be checked rather than guessed.

Installation

In SourceWeft

  1. Open Concierge Agent Protocol in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Concierge Agent Protocol for JavaScript

Packages for both sides of a CAP front door. @conciergeprotocol/client calls a door. @conciergeprotocol/mcp exposes that client as three tools, so Claude, Cursor, and other MCP hosts can ask a company. @conciergeprotocol/server runs a door from one answer function. @conciergeprotocol/agent builds that function from a model, an llms.txt file, and MCP tools.

The protocol is at conciergeprotocol.org. A company publishes agent.txt. It does not publish an MCP server for visitors. An MCP server, when there is one, stays behind the door.

Install

sh
npm install @conciergeprotocol/client

The MCP server is a command. Install it, or run it with npx as in the block below.

sh
npm install @conciergeprotocol/mcp

Client

js
import { createClient } from '@conciergeprotocol/client'
const cap = createClient({ from: 'agent:my-assistant' })
const answer = await cap.ask('example.com', 'Do you have a free plan?')console.log(answer.reply)

A follow-up sends only the new question:

js
const thread = cap.thread('example.com')await thread.ask('What do you sell?')const price = await thread.ask('How much is the cheapest paid plan?')

discover returns null when a site has no front door. ask throws NoDoorError for the same case, which is the signal to browse the site instead.

ask waits up to two minutes. If the company is still answering, the message comes back with status: 'working' and no reply. get reads it again.

Account questions use login. The client opens the company's page, and finishLogin stores the token for the next ask. The token stays in the token store you pass to createClient.

MCP

Cursor, Claude Desktop, and VS Code use the same block. In VS Code it goes in .vscode/mcp.json. In Cursor and Claude Desktop it goes in the MCP settings file.

json
{  "mcpServers": {    "cap": {      "command": "npx",      "args": ["-y", "@conciergeprotocol/mcp"],      "env": { "CAP_FROM": "agent:my-assistant" }    }  }}

CAP_FROM defaults to agent:cap-mcp. The tools are cap_discover, cap_ask, and cap_check. The server is listed in the MCP registry as io.github.conciergeprotocol/mcp. cap_ask waits 60 seconds. If the company is still answering, it returns the message id and the model calls cap_check instead of guessing.

Run a door

answer is the company's own function. The server keeps the thread, hides one caller's reply from another, and enforces the daily message cap.

js
import { createAnswer } from '@conciergeprotocol/agent'import { createCapServer } from '@conciergeprotocol/server'
const answer = await createAnswer({  model: 'anthropic/claude-sonnet-4.5',  instructions: 'You answer for Harbor Goods. Link to the page.',  sources: [{ type: 'llms', url: 'https://harborgoods.example/llms.txt' }],})
const cap = await createCapServer({  agent: { name: 'Harbor Goods', chat: 'https://harborgoods.example/chat' },  answer,})
await cap.listen(8088)

A company that already has a bot can skip the agent package and pass its own answer. npx cap-check http://127.0.0.1:8088 reads agent.txt, asks one question, and checks that a second caller cannot read the reply.

Release

Add a changeset, then merge to main:

sh
bun run changeset

Package Checks runs on every push. When it passes on main, the publish workflow opens a version pull request, or publishes both packages and tags the release. The two packages stay on one version. When the npm publish succeeds, the same workflow lists the server in the MCP registry. The repository needs an NPM_TOKEN secret.

License

Apache 2.0

Source: README.md at commit a117299

Tools

3

cap_discover

Check whether a website has a CAP front door, and whether visitors can log in.

Parametersdomainrequired

cap_ask

Ask a company that publishes a CAP front door. Use this when the person asks about a specific company, product, store, or organization with a known website. Prefer it to browsing when the site has a front door. Send only the new question in a follow-up, with conversation_id. Never write an answer for the site while it is still answering. The reply is the site's own framing. For comparisons and reviews, check other sources too. Never put the person's password or another site's data in context.

Parametersdomainrequiredcontextmessagerequiredconversation_id

cap_check

Read a CAP message that was still being answered. Do not guess a reply while the status is working.

Parametersdomainrequiredmessage_idrequired

Version history

3
  1. v0.1.6LatestOct 23, 2026
  2. v0.1.5Oct 22, 2026
  3. v0.1.3Oct 19, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts