Travel Supplier

ANS-registered agent at supplier.webmesh.ai (A2A 1.0, 0.3-compatible, + MCP at one origin).
ANS name: ans://v1.0.8.supplier.webmesh.ai

Discoverable endpoints:
  GET  /.well-known/agent-card.json       (A2A 1.0 AgentCard, signed)
  GET  /.well-known/agent.json            (legacy A2A SDK alias)
  GET  /.well-known/ans/trust-card.json   (ANS Trust Card, hybrid)
  GET  /.well-known/did.json              (W3C DID document, did:web)
  GET  /.well-known/http-message-signatures-directory  (Web Bot Auth key directory, RFC 9421 signed)
  GET  /.well-known/signature-agent-card  (Web Bot Auth Signature Agent Card)
  GET  /.well-known/mcp.json              (MCP server discovery)
  GET  /.well-known/ai-catalog.json       (AI Catalog, Level 3)
  GET  /.well-known/ucp                  (UCP 2026-08-25 profile: role, capabilities, P-256 key)
  POST /ucp/v1/catalog/search             (UCP catalog search; buyer-signed request, RFC 9421)
  GET  /ucp/v1/catalog/seat-map?item_id=  (optional seat selection: seat map; buyer-signed, covers @query)
  POST /ucp/v1/catalog/seat-offer         (optional seat selection: seat-inclusive offer to check out)
  POST /ucp/v1/checkout-sessions          (UCP checkout: create session, returns merchant authorization)
  POST /ucp/v1/checkout-sessions/{id}/complete  (UCP complete: AP2 mandate pair, Stripe test-mode settlement, SCITT anchor)
  GET  /.well-known/mandate-forms/ap2-v0.2-delegate-chain.json  (AP2 v0.2 mandate form and request-signing rules, JSON Schema)
  GET  /ledger                            (Public ledger: recent purchases, no PII)
  GET  /agentfacts.json                   (Project NANDA AgentFacts)
  GET  /bots                              (Bot policy: purpose, contact, opt-out)
  POST /mcp/                              (MCP streamable-HTTP)
  POST /                                  (A2A 1.0 JSON-RPC, 0.3-compatible)
  GET  /health

Proof-of-concept flight seller: no airline ticket is issued and settlement is test-mode only. Two ways to buy. 1) UCP 2026-08-25 REST checkout with an AP2 v0.2 mandate pair, settled as a Stripe test-mode PaymentIntent; buyers must be ANS-registered, publish a UCP profile and sign every request with a key in it (RFC 9421) (skill ucp_checkout, extension urn:webmesh:ucp:2026-08-25). 2) MCP tools get_quote then book_flight with a pov1 mandate from authority.webmesh.ai and a DPoP proof (EIP-3009 settlement on Base Sepolia only when enabled). Refusals carry a named error code.