Poppy Handcrafted Popcorn

Poppy Hand-Crafted Popcorn is a woman-owned gourmet snack maker founded in 2014 by Ginger Frank in Asheville, North Carolina, producing small-batch sweet and savory popcorn from non-GMO corn and simple natural ingredients. It sells direct-to-consumer, through wholesale and corporate gifting, and via retailers across North America. Its public machine surface is not a developer API program but an agent-commerce one: the Shopify-hosted storefront publishes a first-party /llms.txt and /agents.md, a /.well-known/ucp Universal Commerce Protocol merchant profile, and an unauthenticated UCP MCP endpoint at /api/ucp/mcp exposing thirteen catalog, cart, checkout and order tools with full JSON Schema inputs.

Poppy Handcrafted Popcorn publishes 1 API on the APIs.io network. Tagged areas include Company, Food and Beverage, Consumer Packaged Goods, Retail, and E-Commerce.

Poppy Handcrafted Popcorn’s developer surface includes documentation, API reference, getting-started guide, support, engineering blog, pricing, signup flow, and 11 more developer resources.

🌐 Visit website 📡 Source on GitHub

28.6/100 thin ▬ flat Agent 28/100 agent aware Front door AI 1/6 silent saas Full breakdown ↓
scored 2026-09-20 · rubric v0.22.0

1 APIs 1 MCP Servers

Company Food and Beverage Consumer Packaged Goods Retail E-Commerce Agentic Commerce Universal Commerce Protocol MCP Shopify Snacks

Kin Score

Kin Score How this is scored →
scored 2026-09-20 · rubric v0.22.0

Composite quality — 28.6/100 · thin

Contract Quality 0.0 / 25

Developer Ergonomics 9.9 / 20

Access Clarity 8.9 / 20

Operational Transparency 0.0 / 13

Contract Governance 2.2 / 12

Discoverability 7.6 / 10

Agent readiness — 28/100 · agent aware

Machine-Readable Contract 0 / 18

Agentic Access Contract 0 / 10

Documented Reversibility 0 / 6

MCP Server 12 / 12

Machine-Readable Auth 10 / 10

Idempotency 9 / 9

Stable Error Semantics 8 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 5 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 6 / 6

Protected Resource Metadata 5 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 5 / 5

Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero: never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and several others — scorable at all.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/poppy-handcrafted-popcorn: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Poppy Hand-Crafted Popcorn UCP Commerce API

The agent-facing commerce surface for the Poppy Hand-Crafted Popcorn storefront, implementing the Universal Commerce Protocol (UCP) 2026-04-08 over MCP. Thirteen tools cover cat...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Poppy Hand-Crafted Popcorn UCP Commerce MCP Server

MCP SERVER

Pricing Plans 1

Published pricing tiers and plan structures.

Poppy Handcrafted Popcorn Plans Pricing

0 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Poppy Handcrafted Popcorn Rate Limits

0 limits

RATE LIMITS

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Poppy Handcrafted Popcorn Authentication

5 schemes

SECURITY

Poppy Handcrafted Popcorn Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Poppy Handcrafted Popcorn Scopes

OAuth 2.0 · no documented scopes

0 scopes

SCOPES

Resources

Get Started 3

Portal, sign-up, and the first successful call

GettingStarted

GettingStarted

SignUp

SignUp

Login

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

Agent Surfaces 4

MCP servers, agent skills, and machine-readable catalogs

LLMsTxt

WellKnown

MCPServer

AgentSkill

Access & Security 1

Authentication, authorization, and security posture

DomainSecurity

DomainSecurity

Operate 2

Status, limits, changes, and where to get help

Support

Support

HelpCenter

HelpCenter

Commercial 4

Pricing, plans, and the legal terms of use

Pricing

TermsOfService

PrivacyPolicy

Plans

Company 2

The organization behind the API

Website

Website

Blog

Blog

Source (apis.yml)

aid: poppy-handcrafted-popcorn
name: Poppy Handcrafted Popcorn
description: 'Poppy Hand-Crafted Popcorn is a woman-owned gourmet snack maker founded in 2014 by Ginger Frank in Asheville,
  North Carolina, producing small-batch sweet and savory popcorn from non-GMO corn and simple natural ingredients. It sells
  direct-to-consumer, through wholesale and corporate gifting, and via retailers across North America. Its public machine
  surface is not a developer API program but an agent-commerce one: the Shopify-hosted storefront publishes a first-party
  /llms.txt and /agents.md, a /.well-known/ucp Universal Commerce Protocol merchant profile, and an unauthenticated UCP MCP
  endpoint at /api/ucp/mcp exposing thirteen catalog, cart, checkout and order tools with full JSON Schema inputs.'
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source:
  - authentication
  - scopes
  - rate-limits
  - security
  generated: '2026-09-03'
  method: derived
image: https://cdn.shopify.com/s/files/1/0424/8387/6008/files/New_Bags_Collections_-_web_banner.jpg?v=1704995950
url: https://raw.githubusercontent.com/api-evangelist/poppy-handcrafted-popcorn/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
x-tier: profiled
x-tier-reason: agent-commerce-surface
specificationVersion: '0.20'
created: '2026-08-26'
modified: '2026-08-26'
tags:
- Company
- Food and Beverage
- Consumer Packaged Goods
- Retail
- E-Commerce
- Agentic Commerce
- Universal Commerce Protocol
- MCP
- Shopify
- Snacks
tags_raw:
- Company
- Food and Beverage
- Consumer Packaged Goods
- Retail
- E-Commerce
- Agent Commerce
- Universal Commerce Protocol
- Model Context Protocol
- Shopify
- Snacks
apis:
- name: Poppy Hand-Crafted Popcorn UCP Commerce API
  description: The agent-facing commerce surface for the Poppy Hand-Crafted Popcorn storefront, implementing the Universal
    Commerce Protocol (UCP) 2026-04-08 over MCP. Thirteen tools cover catalog search and lookup, product detail, cart create/update/cancel,
    checkout create/update/complete/cancel, and order retrieval. tools/list is served unauthenticated; completing a checkout
    requires a buyer-approved payment and an idempotency-key.
  humanURL: https://poppyhandcraftedpopcorn.com/agents.md
  baseURL: https://poppyhandcraftedpopcorn.com/api/ucp/mcp
  tags:
  - Agentic Commerce
  - Universal Commerce Protocol
  - MCP
  - E-Commerce
  - Catalog
  - Checkout
  tags_raw:
  - Agent Commerce
  - Universal Commerce Protocol
  - Model Context Protocol
  - E-Commerce
  - Catalog
  - Checkout
  properties:
  - type: MCPServer
    url: mcp/poppy-handcrafted-popcorn-mcp.yml
  - type: Authentication
    url: authentication/poppy-handcrafted-popcorn-authentication.yml
  - type: OAuthScopes
    url: scopes/poppy-handcrafted-popcorn-scopes.yml
  - type: Conventions
    url: conventions/poppy-handcrafted-popcorn-conventions.yml
  - type: Idempotency
    url: conventions/poppy-handcrafted-popcorn-conventions.yml
  - type: ErrorCatalog
    url: errors/poppy-handcrafted-popcorn-problem-types.yml
  - type: RateLimits
    url: rate-limits/poppy-handcrafted-popcorn-rate-limits.yml
  - type: DataModel
    url: data-model/poppy-handcrafted-popcorn-data-model.yml
  - type: Lifecycle
    url: lifecycle/poppy-handcrafted-popcorn-lifecycle.yml
  - type: Conformance
    url: conformance/poppy-handcrafted-popcorn-conformance.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/poppy-handcrafted-popcorn-domain-security.yml
- type: Website
  url: https://poppyhandcraftedpopcorn.com/
- type: Documentation
  url: https://poppyhandcraftedpopcorn.com/agents.md
- type: APIReference
  url: https://poppyhandcraftedpopcorn.com/llms.txt
- type: GettingStarted
  url: https://poppyhandcraftedpopcorn.com/llms.txt
- type: Support
  url: https://poppyhandcraftedpopcorn.com/pages/contact
- type: HelpCenter
  url: https://poppyhandcraftedpopcorn.com/pages/faq
- type: Blog
  url: https://poppyhandcraftedpopcorn.com/blogs/news
- type: Pricing
  url: https://poppyhandcraftedpopcorn.com/collections/all
- type: SignUp
  url: https://poppyhandcraftedpopcorn.com/account/register
- type: Login
  url: https://poppyhandcraftedpopcorn.com/account/login
- type: TermsOfService
  url: https://poppyhandcraftedpopcorn.com/policies/terms-of-service
- type: PrivacyPolicy
  url: https://poppyhandcraftedpopcorn.com/policies/privacy-policy
- type: LLMsTxt
  url: llms/poppy-handcrafted-popcorn-llms.txt
- type: WellKnown
  url: well-known/poppy-handcrafted-popcorn-well-known.yml
- type: MCPServer
  url: mcp/poppy-handcrafted-popcorn-mcp.yml
- type: AgentSkill
  url: skills/_index.yml
- type: Plans
  url: plans/poppy-handcrafted-popcorn-plans-pricing.yml
x-enrichment:
  date: '2026-08-26'
  status: enriched
  artifacts_added: 22
  pass: local-v1

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/poppy-handcrafted-popcorn"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/poppy-handcrafted-popcorn/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/poppy-handcrafted-popcorn/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.