generated: '2026-09-07'
method: searched
source:
- https://www.drinkaccelerator.com/agents.md
- https://www.drinkaccelerator.com/robots.txt
- https://www.drinkaccelerator.com/llms.txt
- mcp/adrenalineshoc-tools-list.json
note: >-
  This is not a generated governance starting point. A Shoc Beverage's storefront -
  via its Shopify UCP deployment - actually publishes agent access rules, so the
  contract below is transcribed from statements served on the company's own host and
  from the live tool schemas. derive-agentic-access.py was not run: it reads openapi/,
  and there is no OpenAPI here.
provider_published_policy:
  canonical_document: https://www.drinkaccelerator.com/agents.md
  mirrors: [https://www.drinkaccelerator.com/llms.txt]
  advertised_in: [robots.txt, sitemap_agentic_discovery.xml]
  authorship: >-
    Platform-authored by Shopify and served under the merchant's own name and domain
    - the document is titled "Agent Instructions - Accelerator Active Energy" and
    names this store's endpoints throughout.
  rules:
  - id: buyer-approval-invariant
    statement: >-
      "Checkouts are for humans. Do NOT complete checkout, payment, or order placement
      automatically - no scripted form fills, browser automation, or end-to-end agent
      flows that finalize payment without an explicit, contemporaneous human approval
      step."
    source: https://www.drinkaccelerator.com/robots.txt
  - id: sanctioned-transaction-paths
    statement: Agents transacting on a buyer's behalf must use the UCP/MCP endpoint or
      the Shop skill; both require buyer approval before payment.
    paths: [https://www.drinkaccelerator.com/api/ucp/mcp, https://shop.app/SKILL.md]
  - id: rate-limits
    statement: The MCP endpoint is rate-limited per IP. Back off on 429 responses.
  - id: buyer-context
    statement: Pass context.address_country and context.currency for accurate pricing
      and availability.
  - id: crawling-permitted
    statement: Public product, collection, page, blog, policy, cart and localized HTML
      is crawlable.
  - id: prefer-protocol-over-scraping
    statement: Agents should prefer the UCP/MCP endpoints or the Shop skill over screen-scraping
      or scripting the storefront directly.
  contact: bots@shopify.com
agent_identity:
  required: true
  mechanism: UCP agent profile
  field: meta.ucp-agent.profile
  format: URI
  enforcement: >-
    Enforced server-side. A tools/call without a resolvable profile URI returns JSON-RPC
    -32001 "UCP discovery failed" / invalid_profile_url with HTTP 422 - observed live.
    tools/list itself is anonymous.
summary:
  operations: 13
  by_action_class:
    connected: 6
    acting: 7
  by_consequence:
    read: 6
    write: 6
    financial: 1
  human_in_the_loop_required: 1
operations:
- tool: search_catalog
  action_class: connected
  consequence: read
  audit: optional
  human_in_the_loop: not-required
- tool: lookup_catalog
  action_class: connected
  consequence: read
  audit: optional
  human_in_the_loop: not-required
- tool: get_product
  action_class: connected
  consequence: read
  audit: optional
  human_in_the_loop: not-required
- tool: get_cart
  action_class: connected
  consequence: read
  audit: optional
  human_in_the_loop: not-required
- tool: get_checkout
  action_class: connected
  consequence: read
  audit: optional
  human_in_the_loop: not-required
- tool: get_order
  action_class: connected
  consequence: read
  audit: optional
  human_in_the_loop: not-required
  note: Reads buyer order data - treat the order id as a bearer capability.
- tool: create_cart
  action_class: acting
  consequence: write
  audit: required
  human_in_the_loop: not-required
  reversal: cancel_cart
- tool: update_cart
  action_class: acting
  consequence: write
  audit: required
  human_in_the_loop: not-required
  reversal: cancel_cart
  note: Carries buyer email/phone and marketing attribution - PII enters the call here.
- tool: cancel_cart
  action_class: acting
  consequence: write
  audit: required
  human_in_the_loop: not-required
- tool: create_checkout
  action_class: acting
  consequence: write
  audit: required
  human_in_the_loop: not-required
  reversal: cancel_checkout
- tool: update_checkout
  action_class: acting
  consequence: write
  audit: required
  human_in_the_loop: not-required
  reversal: cancel_checkout
  note: Carries the shipping address and the payment instrument - the highest-sensitivity
    payload on the surface.
- tool: cancel_checkout
  action_class: acting
  consequence: write
  audit: required
  human_in_the_loop: not-required
- tool: complete_checkout
  action_class: acting
  consequence: financial
  audit: required
  human_in_the_loop: required
  escalation: buyer-approval
  reversal: null
  note: >-
    The one operation the store explicitly fences. Payment is finalized here, the
    published policy forbids completing it without explicit contemporaneous human
    approval, and there is NO reversal tool - no refund, void or order-cancel exists
    in the tool set. Agents that cannot obtain approval are directed to route the
    purchase through Shop Pay via the Shop skill.
audience: null
x-evidence:
- url: https://www.drinkaccelerator.com/agents.md
  http_status: 200
- url: https://www.drinkaccelerator.com/robots.txt
  http_status: 200
- url: https://www.drinkaccelerator.com/api/ucp/mcp
  http_status: 422
  note: agent-profile gate observed on tools/call