Makeup by Mario

MAKEUP BY MARIO is a New York-based prestige colour-cosmetics brand founded by celebrity makeup artist Mario Dedivanovic and launched direct-to-consumer in October 2020, selling face, eye, lip, brow, blush and tool products at makeupbymario.com and through Sephora. Self-funded for its first two and a half years, it took a $40M minority growth investment from Provenance and Silas Capital in January 2023. It runs no developer program and publishes no OpenAPI, but its Shopify-hosted storefront exposes a substantial machine-readable surface from its own domain: an anonymously introspectable Storefront GraphQL API, TWO live Model Context Protocol servers whose tools/list both answer anonymously, a Universal Commerce Protocol merchant profile at /.well-known/ucp declaring cart, checkout, fulfillment, discount, order and catalog capabilities plus three payment handlers, OpenID Connect and RFC 8414 discovery for customer accounts, and a provider-authored /agents.md and /llms.txt that tell AI agents which surface to use and that no agent may finalize payment without contemporaneous human approval.

Makeup by Mario publishes 3 APIs on the APIs.io network. Tagged areas include Company, Beauty, Cosmetics, Consumer Packaged Goods, and E-Commerce.

Makeup by Mario’s developer surface includes documentation, authentication, FAQ, support, engineering blog, and 28 more developer resources.

🌐 Visit website 📡 Source on GitHub

31.5/100 thin ▬ flat Agent 45/100 agent native saas Full breakdown ↓
scored 2026-09-01 · rubric v0.17.2

3 APIs 1 MCP Servers

Company Beauty Cosmetics Consumer Packaged Goods E-Commerce Direct to Consumer Retail Agentic Commerce Shopify GraphQL MCP Universal Commerce Protocol

Kin Score

Kin Score How this is scored →
scored 2026-09-01 · rubric v0.17.2

Composite quality — 31.5/100 · thin

Contract Quality 9.3 / 25

Developer Ergonomics 6.1 / 20

Access Clarity 5.8 / 20

Operational Transparency 0.0 / 13

Contract Governance 2.2 / 12

Discoverability 8.2 / 10

Agent readiness — 45/100 · agent native

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 12 / 12

Machine-Readable Auth 10 / 10

Idempotency 9 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 5 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 6 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Surface 5 / 5

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/makeup-by-mario: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Rate Limits 1

Documented rate limits and quota policies.

Scopes 1

OAuth scopes governing access to this provider's APIs.

Makeup By Mario Scopes

OAuth 2.0 · no documented scopes

0 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Makeup By Mario Agentic Access

3 operations

3 operations · 0 acting

AGENTIC

Resources

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

GraphQL

GraphQL

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

LLMsTxt

WellKnown

MCPServer

AgenticAccess

AgentSkill

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

DataModel

Conventions

Idempotency

ErrorCatalog

Lifecycle

Conformance

Build 1

SDKs, sample code, and the tooling you integrate with

ToolCrosswalk

ToolCrosswalk

Access & Security 4

Authentication, authorization, and security posture

Authentication

OAuthScopes

Compliance

DomainSecurity

Operate 4

Status, limits, changes, and where to get help

RateLimits

FAQ

Support

ContactUs

Commercial 3

Pricing, plans, and the legal terms of use

Plans

Plans

TermsOfService

TermsOfService

PrivacyPolicy

PrivacyPolicy

Company 3

The organization behind the API

Website

Website

About

About

Blog

Blog

Other 5

Properties that don't map to a standard resource type

LoyaltyProgram

RefundPolicy

ShippingPolicy

CookiePolicy

DoNotSell

Source (apis.yml)

aid: makeup-by-mario
name: Makeup by Mario
description: 'MAKEUP BY MARIO is a New York-based prestige colour-cosmetics brand founded by celebrity makeup artist Mario
  Dedivanovic and launched direct-to-consumer in October 2020, selling face, eye, lip, brow, blush and tool products at makeupbymario.com
  and through Sephora. Self-funded for its first two and a half years, it took a $40M minority growth investment from Provenance
  and Silas Capital in January 2023. It runs no developer program and publishes no OpenAPI, but its Shopify-hosted storefront
  exposes a substantial machine-readable surface from its own domain: an anonymously introspectable Storefront GraphQL API,
  TWO live Model Context Protocol servers whose tools/list both answer anonymously, a Universal Commerce Protocol merchant
  profile at /.well-known/ucp declaring cart, checkout, fulfillment, discount, order and catalog capabilities plus three payment
  handlers, OpenID Connect and RFC 8414 discovery for customer accounts, and a provider-authored /agents.md and /llms.txt
  that tell AI agents which surface to use and that no agent may finalize payment without contemporaneous human approval.'
url: https://raw.githubusercontent.com/api-evangelist/makeup-by-mario/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
x-tier: profiled
x-tier-reason: enrichment-pipeline
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - pricing
  generated: '2026-08-28'
  method: derived
image: https://cdn.shopify.com/s/files/1/0275/4822/1505/files/MakeupByMario_Logo.png?height=628&pad_color=fff&v=1632760838&width=1200
specificationVersion: '0.23'
created: '2026-08-25'
modified: '2026-08-25'
tags:
- Company
- Beauty
- Cosmetics
- Consumer Packaged Goods
- E-Commerce
- Direct to Consumer
- Retail
- Agentic Commerce
- Shopify
- GraphQL
- MCP
- Universal Commerce Protocol
tags_raw:
- Company
- Beauty
- Cosmetics
- Consumer Packaged Goods
- Ecommerce
- Direct to Consumer
- Retail
- Agentic Commerce
- Shopify
- GraphQL
- Model Context Protocol
- Universal Commerce Protocol
apis:
- aid: makeup-by-mario:storefront-graphql
  name: MAKEUP BY MARIO Storefront GraphQL API
  description: The Shopify Storefront GraphQL API as served from MAKEUP BY MARIO's own domain. Introspection is anonymous
    — the full schema (416 types, 34 query fields, 41 mutations, 28 Relay connections, 49 deprecated fields) was retrieved
    without an X-Shopify-Storefront-Access-Token on 2026-08-25. Covers the product catalog, collections, cart and checkout
    preparation, editorial content, store policies and customer accounts. Four API versions answered anonymously (2025-10,
    2026-01, 2026-04, 2026-07 are supported; 2026-10 and unstable are published but unsupported).
  humanURL: https://shopify.dev/docs/api/storefront
  baseURL: https://www.makeupbymario.com/api/2026-04/graphql.json
  tags:
  - GraphQL
  - E-Commerce
  - Catalog
  - Cart
  tags_raw:
  - GraphQL
  - Ecommerce
  - Catalog
  - Cart
  properties:
  - type: GraphQL
    url: graphql/makeup-by-mario-storefront.graphql
  - type: GraphQLManifest
    url: graphql/makeup-by-mario-graphql.yml
  - type: DataModel
    url: data-model/makeup-by-mario-data-model.yml
- aid: makeup-by-mario:storefront-mcp
  name: MAKEUP BY MARIO Storefront MCP Server
  description: A live Model Context Protocol server on the MAKEUP BY MARIO storefront host. An anonymous JSON-RPC tools/list
    returned five tools with full JSON Schema input contracts — search_catalog, get_product_details, get_cart, update_cart
    and search_shop_policies_and_faqs. initialize reports serverInfo storefront-renderer 0.1.0 on MCP protocol 2025-06-18;
    resources/list and prompts/list both answer 200 with empty arrays.
  humanURL: https://www.makeupbymario.com/agents.md
  baseURL: https://www.makeupbymario.com/api/mcp
  tags:
  - MCP
  - Agents
  - E-Commerce
  tags_raw:
  - MCP
  - Agents
  - Ecommerce
  properties:
  - type: MCPServer
    url: mcp/makeup-by-mario-mcp.yml
  - type: ToolCrosswalk
    url: mcp/makeup-by-mario-tool-crosswalk.yml
- aid: makeup-by-mario:ucp-commerce
  name: MAKEUP BY MARIO UCP Agentic Commerce API
  description: MAKEUP BY MARIO implements the Universal Commerce Protocol for agent-driven commerce. The merchant profile
    at /.well-known/ucp declares UCP 2026-04-08 and 2026-01-23, the dev.ucp.shopping MCP service endpoint, the cart / checkout
    / fulfillment / discount / order / catalog-search / catalog-lookup capabilities and three payment handlers (Google Pay,
    Shopify card and Shop Pay). This endpoint's tools/list answers ANONYMOUSLY — thirteen tools with full JSON Schema input
    contracts spanning the whole cart-to-completed-order lifecycle. complete_checkout requires a meta.idempotency-key and
    still requires contemporaneous buyer approval for payment.
  humanURL: https://ucp.dev/2026-04-08/specification/overview/
  baseURL: https://www.makeupbymario.com/api/ucp/mcp
  tags:
  - UCP
  - Agentic Commerce
  - MCP
  - Checkout
  properties:
  - type: MCPServer
    url: mcp/makeup-by-mario-mcp.yml
  - type: AgenticAccess
    url: agentic-access/makeup-by-mario-agentic-access.yml
  - type: Idempotency
    url: conventions/makeup-by-mario-conventions.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.makeupbymario.com/
- type: Documentation
  url: https://www.makeupbymario.com/agents.md
- type: LLMsTxt
  url: llms/makeup-by-mario-llms.txt
- type: WellKnown
  url: well-known/makeup-by-mario-well-known.yml
- type: MCPServer
  url: mcp/makeup-by-mario-mcp.yml
- type: ToolCrosswalk
  url: mcp/makeup-by-mario-tool-crosswalk.yml
- type: AgenticAccess
  url: agentic-access/makeup-by-mario-agentic-access.yml
- type: GraphQL
  url: graphql/makeup-by-mario-storefront.graphql
- type: DataModel
  url: data-model/makeup-by-mario-data-model.yml
- type: Authentication
  url: authentication/makeup-by-mario-authentication.yml
- type: OAuthScopes
  url: scopes/makeup-by-mario-scopes.yml
- type: Conventions
  url: conventions/makeup-by-mario-conventions.yml
- type: Idempotency
  url: conventions/makeup-by-mario-conventions.yml
- type: ErrorCatalog
  url: errors/makeup-by-mario-problem-types.yml
- type: Lifecycle
  url: lifecycle/makeup-by-mario-lifecycle.yml
- type: Conformance
  url: conformance/makeup-by-mario-conformance.yml
- type: Compliance
  url: conformance/makeup-by-mario-conformance.yml
- type: AgentSkill
  url: skills/_index.yml
- type: RateLimits
  url: rate-limits/makeup-by-mario-rate-limits.yml
- type: Plans
  url: plans/makeup-by-mario-plans-pricing.yml
- type: DomainSecurity
  url: security/makeup-by-mario-domain-security.yml
- type: About
  url: https://www.makeupbymario.com/pages/about
- type: FAQ
  url: https://www.makeupbymario.com/pages/frequently-asked-questions
- type: Support
  url: https://www.makeupbymario.com/pages/contact-us
- type: ContactUs
  url: https://www.makeupbymario.com/pages/contact-us
- type: Blog
  url: https://www.makeupbymario.com/blogs/education
- type: LoyaltyProgram
  url: https://www.makeupbymario.com/pages/rewards
- type: TermsOfService
  url: https://www.makeupbymario.com/policies/terms-of-service
- type: PrivacyPolicy
  url: https://www.makeupbymario.com/policies/privacy-policy
- type: RefundPolicy
  url: https://www.makeupbymario.com/policies/refund-policy
- type: ShippingPolicy
  url: https://www.makeupbymario.com/policies/shipping-policy
- type: CookiePolicy
  url: https://www.makeupbymario.com/pages/cookies
- type: DoNotSell
  url: https://www.makeupbymario.com/pages/do-not-sell-my-data
x-enrichment:
  date: '2026-08-25'
  status: enriched
  artifacts_added: 30
  pass: local-v1
x-coverage:
  state: covered
  reason: null
  detail: Contract discovery succeeded. MAKEUP BY MARIO runs no developer program and publishes no OpenAPI, but four machine-readable
    surfaces answered anonymously from its own domain — Storefront GraphQL introspection at /api/2026-04/graphql.json, an
    MCP server at /api/mcp, a UCP commerce MCP server at /api/ucp/mcp whose tools/list returned all thirteen tools including
    complete_checkout, and a UCP merchant profile at /.well-known/ucp. The brand also authors its own /llms.txt and /agents.md
    and submits the latter for crawling via a dedicated sitemap_agentic_discovery.xml.
  evidence:
  - url: https://www.makeupbymario.com/api/2026-04/graphql.json
    status: 200
  - url: https://www.makeupbymario.com/api/ucp/mcp
    status: 200
  - url: https://www.makeupbymario.com/api/mcp
    status: 200
  - url: https://www.makeupbymario.com/.well-known/ucp
    status: 200
  - url: https://www.makeupbymario.com/llms.txt
    status: 200
  - url: https://www.makeupbymario.com/.well-known/openid-configuration
    status: 200
  - url: https://www.makeupbymario.com/openapi.json
    status: 404
  - url: https://www.makeupbymario.com/.well-known/agent-card.json
    status: 404
  - url: https://www.makeupbymario.com/.well-known/security.txt
    status: 404
  checked: '2026-08-25'

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/makeup-by-mario"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/makeup-by-mario/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/makeup-by-mario/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.