Olipop

OLIPOP PBC is an Oakland, California prebiotic soda maker founded in 2018 by Ben Goodwin and David Lester, built around its trademarked OLISMART blend of plant fibers, prebiotics and botanicals, sold across tens of thousands of US retail locations and direct to consumers at drinkolipop.com. It has no traditional developer program, but its Shopify-hosted storefront is a genuinely agent-native commerce surface: the domain publishes a first-party llms.txt and agents.md describing how AI agents may interact with the store, a Universal Commerce Protocol (UCP) merchant profile at /.well-known/ucp, a live UCP/MCP JSON-RPC endpoint at /api/ucp/mcp for catalog search, cart, checkout and order tools, an anonymously introspectable Shopify Storefront GraphQL API, unauthenticated product/collection JSON endpoints, and OpenID Connect discovery for customer accounts. Checkout is explicitly gated on contemporaneous human buyer approval.

Olipop publishes 3 APIs on the APIs.io network. Tagged areas include beverage, consumer-packaged-goods, direct-to-consumer, ecommerce, and retail.

Olipop’s developer surface includes documentation, support, engineering blog, signup flow, authentication, and 20 more developer resources.

🌐 Visit website 📡 Source on GitHub
36.9/100 thin ▬ flat Agent 57/100 agent native Full breakdown ↓
scored 2026-08-05 · rubric v0.9.1
3 APIs 1 MCP Servers
beverageconsumer-packaged-goodsdirect-to-consumerecommerceretailagent-commerceuniversal-commerce-protocolmcpgraphqlshopifyprebiotic-sodafunctional-beverage

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-05 · rubric v0.9.1
Composite quality — 36.9/100 · thin
Contract Quality 12.0 / 25
Developer Ergonomics 7.3 / 20
Commercial Clarity 6.8 / 20
Operational Transparency 0.0 / 13
Governance 1.5 / 12
Discoverability 9.3 / 10
Agent readiness — 57/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 9 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/olipop: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

OLIPOP Agent Commerce API (UCP over MCP)

Agent-facing commerce surface for the OLIPOP storefront, implementing the Universal Commerce Protocol (UCP) shopping service over MCP JSON-RPC. The merchant profile at /.well-kn...

OLIPOP Storefront GraphQL API

Shopify Storefront GraphQL API served on the OLIPOP domain, exposing 35 root query fields and 41 mutations across products, collections, search, blogs, pages, menus, metaobjects...

OLIPOP Storefront Product JSON

Unauthenticated read-only JSON endpoints the store's own agent instructions publish for agents that only need to read catalog data - all products, a single product by handle, an...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

olipop-mcp.yml

MCP SERVER

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Olipop Authentication

none/apiKey/oauth2/openIdConnect/agent-profile · 5 schemes

SECURITY

Olipop Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Olipop Scopes

4 scopes · authorizationCode

4 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Olipop Agentic Access

13 operations · 8 acting · 1 human-in-the-loop

13 operations · 8 acting

AGENTIC

Resources

Get Started 1

Portal, sign-up, and the first successful call

SignUp
SignUp

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 GraphQL
GraphQL

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

LLMsTxt
LLMsTxt
 MCPServer
MCPServer
 WellKnown
WellKnown
 AgenticAccess
AgenticAccess
 AgentSkill
AgentSkill

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Conventions
Conventions
 Idempotency
Idempotency
 Conformance
Conformance
 Lifecycle
Lifecycle
 ErrorCatalog
ErrorCatalog
 DataModel
DataModel

Build 1

SDKs, sample code, and the tooling you integrate with

ToolCrosswalk
ToolCrosswalk

Access & Security 3

Authentication, authorization, and security posture

Authentication
Authentication
 OAuthScopes
OAuthScopes
 DomainSecurity
DomainSecurity

Operate 2

Status, limits, changes, and where to get help

Support
Support
 HelpCenter
HelpCenter

Commercial 2

Pricing, plans, and the legal terms of use

TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Other 1

Properties that don't map to a standard resource type

OpenIDConnect
OpenIDConnect

Source (apis.yml)

apis.yml Raw ↑ 
aid: olipop
name: Olipop
description: 'OLIPOP PBC is an Oakland, California prebiotic soda maker founded in 2018 by Ben Goodwin and David Lester, built
  around its trademarked OLISMART blend of plant fibers, prebiotics and botanicals, sold across tens of thousands of US retail
  locations and direct to consumers at drinkolipop.com. It has no traditional developer program, but its Shopify-hosted storefront
  is a genuinely agent-native commerce surface: the domain publishes a first-party llms.txt and agents.md describing how AI
  agents may interact with the store, a Universal Commerce Protocol (UCP) merchant profile at /.well-known/ucp, a live UCP/MCP
  JSON-RPC endpoint at /api/ucp/mcp for catalog search, cart, checkout and order tools, an anonymously introspectable Shopify
  Storefront GraphQL API, unauthenticated product/collection JSON endpoints, and OpenID Connect discovery for customer accounts.
  Checkout is explicitly gated on contemporaneous human buyer approval.'
image: https://cdn.shopify.com/s/files/1/0034/6610/0806/files/Website_-_Social_-_Share_-_V1.png?v=1639521624
url: https://raw.githubusercontent.com/api-evangelist/olipop/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.21'
created: '2026-07-31'
modified: '2026-07-31'
tags:
- beverage
- consumer-packaged-goods
- direct-to-consumer
- ecommerce
- retail
- agent-commerce
- universal-commerce-protocol
- mcp
- graphql
- shopify
- prebiotic-soda
- functional-beverage
apis:
- name: OLIPOP Agent Commerce API (UCP over MCP)
  description: Agent-facing commerce surface for the OLIPOP storefront, implementing the Universal Commerce Protocol (UCP)
    shopping service over MCP JSON-RPC. The merchant profile at /.well-known/ucp declares protocol versions 2026-04-08 and
    2026-01-23, the checkout, cart, fulfillment, discount, order and catalog capabilities, and the Google Pay, Shopify Card
    and Shop Pay payment handlers. The tools/list call is gated on a registered UCP platform agent profile; the tool contract
    is the OpenRPC schema the profile itself points at.
  humanURL: https://drinkolipop.com/agents.md
  baseURL: https://drinkolipop.com/api/ucp/mcp
  tags:
  - agent-commerce
  - universal-commerce-protocol
  - mcp
  - checkout
  - cart
  - catalog
  properties:
  - type: Documentation
    url: https://drinkolipop.com/agents.md
  - type: APIReference
    url: https://ucp.dev/2026-04-08/services/shopping/mcp.openrpc.json
  - type: MCPServer
    url: mcp/olipop-mcp.yml
  - type: ToolCrosswalk
    url: mcp/olipop-tool-crosswalk.yml
  - type: WellKnown
    url: well-known/olipop-ucp.json
- name: OLIPOP Storefront GraphQL API
  description: Shopify Storefront GraphQL API served on the OLIPOP domain, exposing 35 root query fields and 41 mutations
    across products, collections, search, blogs, pages, menus, metaobjects, localization, cart and customer accounts. Introspection
    responds anonymously on the storefront host; write and customer operations require a storefront access token or a customer
    access token.
  humanURL: https://shopify.dev/docs/api/storefront
  baseURL: https://drinkolipop.com/api/2025-07/graphql.json
  tags:
  - graphql
  - ecommerce
  - catalog
  - cart
  - storefront
  properties:
  - type: GraphQL
    url: graphql/olipop-storefront.graphql
  - type: Documentation
    url: https://shopify.dev/docs/api/storefront
  - type: DataModel
    url: data-model/olipop-data-model.yml
- name: OLIPOP Storefront Product JSON
  description: Unauthenticated read-only JSON endpoints the store's own agent instructions publish for agents that only need
    to read catalog data - all products, a single product by handle, and the products in a collection - alongside the sitemap
    and an agentic discovery sitemap that points at /agents.md.
  humanURL: https://drinkolipop.com/llms.txt
  baseURL: https://drinkolipop.com/products.json
  tags:
  - ecommerce
  - catalog
  - json
  - read-only
  properties:
  - type: Documentation
    url: https://drinkolipop.com/llms.txt
  - type: LLMsTxt
    url: llms/olipop-llms.txt
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://drinkolipop.com/
- type: Documentation
  url: https://drinkolipop.com/agents.md
- type: Support
  url: https://drinkolipop.com/pages/contact-us
- type: HelpCenter
  url: https://drinkolipop.com/pages/faq
- type: Blog
  url: https://drinkolipop.com/blogs/digest
- type: SignUp
  url: https://drinkolipop.com/account/login
- type: TermsOfService
  url: https://drinkolipop.com/policies/terms-of-service
- type: PrivacyPolicy
  url: https://drinkolipop.com/policies/privacy-policy
- type: LLMsTxt
  url: llms/olipop-llms.txt
- type: MCPServer
  url: mcp/olipop-mcp.yml
- type: ToolCrosswalk
  url: mcp/olipop-tool-crosswalk.yml
- type: GraphQL
  url: graphql/olipop-storefront.graphql
- type: WellKnown
  url: well-known/olipop-well-known.yml
- type: Authentication
  url: authentication/olipop-authentication.yml
- type: OAuthScopes
  url: scopes/olipop-scopes.yml
- type: OpenIDConnect
  url: well-known/olipop-openid-configuration.json
- type: Conventions
  url: conventions/olipop-conventions.yml
- type: Idempotency
  url: conventions/olipop-conventions.yml
- type: Conformance
  url: conformance/olipop-conformance.yml
- type: Lifecycle
  url: lifecycle/olipop-lifecycle.yml
- type: ErrorCatalog
  url: errors/olipop-problem-types.yml
- type: DataModel
  url: data-model/olipop-data-model.yml
- type: AgenticAccess
  url: agentic-access/olipop-agentic-access.yml
- type: AgentSkill
  url: skills/_index.yml
- type: DomainSecurity
  url: security/olipop-domain-security.yml
x-enrichment:
  date: '2026-07-31'
  status: enriched
  artifacts_added: 22
  pass: local-v1