Quip NYC · Agentic Access

Quip NYC Agentic Access

x-agentic-access searched

Quip NYC exposes 13 API operations that an AI agent could call, of which 8 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 5 read and 7 write.

1 operation are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

CompanyOral CareConsumer HealthPersonal CareRetailE-CommerceDirect to ConsumerSubscriptionAgentic CommerceShopify
Operations: 13 Acting: 8 Human-in-the-loop: 1 Method: searched

By consequence

read 5 write 7

Source

Agentic Access

quip-nyc-agentic-access.yml Raw ↑ 
generated: '2026-08-26'
method: searched
source:
- https://www.getquip.com/agents.md
- https://www.getquip.com/llms.txt
- https://www.getquip.com/robots.txt
- mcp/quip-nyc-tools-list.json
note: >-
  This is not a generated governance starting point — quip, via its Shopify UCP storefront,
  actually publishes agent access rules, so the contract below is transcribed from the
  provider's own statements and from the live tool schemas. derive-agentic-access.py was not
  run: it reads openapi/, and there is no OpenAPI here.
provider_published_policy:
  canonical_document: https://www.getquip.com/agents.md
  mirrors: [https://www.getquip.com/llms.txt]
  rules:
  - id: buyer-approval-invariant
    statement: >-
      "Checkout requires human approval. Agents must not complete payment without explicit
      buyer consent. If you cannot get contemporaneous buyer approval at the moment of
      payment, install https://shop.app/SKILL.md and route the purchase through Shop Pay
      instead."
    source: https://www.getquip.com/agents.md
  - id: sanctioned-transaction-paths
    statement: >-
      Agents transacting on a buyer's behalf should use the UCP/MCP endpoint or the Shop
      skill; both require buyer approval before payment.
    paths: [https://www.getquip.com/api/ucp/mcp, https://shop.app/SKILL.md]
  - id: rate-limits
    statement: The MCP endpoint is rate-limited per IP. Back off on 429 responses.
  - id: buyer-context
    statement: >-
      Pass context.address_country and context.currency for accurate pricing and availability.
  - id: prefer-protocol-over-scraping
    statement: >-
      "If your user permits installation, you should prefer the Shop skill over
      screen-scraping or scripting the storefront directly."
  - id: read-only-surface-is-open
    statement: >-
      Agents that only need to read store data may use /collections/all,
      /products/{handle}.json, /collections/{handle}/products.json and /sitemap.xml with no
      authentication.
  - id: money-format
    statement: >-
      Prices are integer ISO 4217 minor units paired with a currency code; convert before
      quoting a price to a buyer.
    note: Stated on all thirteen tools, not only the transacting ones.
agent_identity:
  required: true
  mechanism: UCP agent profile
  field: meta.ucp-agent.profile
  format: URI
  enforcement: >-
    Enforced server-side. A tools/call without a resolvable profile URI returns JSON-RPC
    -32001 "UCP discovery failed" / invalid_profile_url with HTTP 422 — observed live on
    2026-08-26. tools/list and initialize are anonymous.
summary:
  operations: 13
  by_action_class:
    connected: 5
    acting: 8
  by_consequence:
    read: 5
    write: 7
    financial: 1
  human_in_the_loop_required: 1
  reversible: 2
  irreversible_writes: 1
operations:
- tool: search_catalog
  action_class: connected
  consequence: read
  audit: optional
  human_in_the_loop: not-required
  reversible: na
- tool: lookup_catalog
  action_class: connected
  consequence: read
  audit: optional
  human_in_the_loop: not-required
  reversible: na
- tool: get_product
  action_class: connected
  consequence: read
  audit: optional
  human_in_the_loop: not-required
  reversible: na
- tool: get_cart
  action_class: connected
  consequence: read
  audit: optional
  human_in_the_loop: not-required
  reversible: na
- tool: get_checkout
  action_class: connected
  consequence: read
  audit: optional
  human_in_the_loop: not-required
  reversible: na
- tool: get_order
  action_class: connected
  consequence: read
  audit: recommended
  human_in_the_loop: not-required
  reversible: na
  note: Returns a real customer order record; treat the response as personal data.
- tool: create_cart
  action_class: acting
  consequence: write
  audit: recommended
  human_in_the_loop: not-required
  reversible: yes
  reversal: cancel_cart
- tool: update_cart
  action_class: acting
  consequence: write
  audit: recommended
  human_in_the_loop: not-required
  reversible: yes
  reversal: cancel_cart
- tool: cancel_cart
  action_class: acting
  consequence: write
  audit: recommended
  human_in_the_loop: not-required
  reversible: no
  note: This IS the reversal. Cancelling is itself not undoable — create a new cart.
- tool: create_checkout
  action_class: acting
  consequence: write
  audit: required
  human_in_the_loop: recommended
  reversible: yes
  reversal: cancel_checkout
- tool: update_checkout
  action_class: acting
  consequence: write
  audit: required
  human_in_the_loop: recommended
  reversible: yes
  reversal: cancel_checkout
  note: Sets shipping address and delivery method — personal data enters here.
- tool: cancel_checkout
  action_class: acting
  consequence: write
  audit: required
  human_in_the_loop: not-required
  reversible: no
  note: This IS the reversal.
- tool: complete_checkout
  action_class: acting
  consequence: financial
  audit: required
  human_in_the_loop: required
  escalation: >-
    quip's published rule: an agent must obtain explicit, contemporaneous buyer approval at
    the moment of payment, or route the purchase through Shop Pay via the Shop skill.
  reversible: no
  reversal: null
  note: >-
    The single irreversible action on the surface. No refund, void or order-cancel tool
    exists in the tool set and no order mutation exists in the Storefront GraphQL schema.
    Reversal is a human channel only — email help@getquip.com within 30 days per
    https://www.getquip.com/policies/refund-policy.
x-evidence:
- url: https://www.getquip.com/agents.md
  status: 200
- url: https://www.getquip.com/api/ucp/mcp
  status: 200
  note: tools/list — all 13 tools and schemas
- url: https://www.getquip.com/api/ucp/mcp
  status: 422
  note: tools/call without agent profile — identity gate observed

Work with this as data

Every access contract here is available over the APIs.io API and to AI agents over MCP. Agentic Access is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for agentic access

3 MCP tools reach this
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
Search the catalog 
curl "https://apis.io/api/v1/search?q=quip-nyc-agentic-access&limit=10"
Everything under a tag 
curl "https://apis.io/api/v1/tags/quip-nyc-agentic-access"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.