Skip to main content
The largest MCP surface StateSet ships: 938 tools across 87 modules, exposing the embedded commerce engine to an MCP host. Three servers come with the CLI:

​
Connect

DB_PATH points at the SQLite database the engine carries. Because the engine is embedded, the agent operates directly against that file — no server to run and no network hop.
Point DB_PATH at a copy of your database the first time you connect an agent. With 401 write, 39 admin, and 21 delete tools available, a mistaken call is easier to recover from when the original is untouched.

​
Permission profile

Worth understanding before you hand this to an agent: A tools/list against the server returns 938 tools; 907 of them carry one of the permissions above, the rest coming from the agent, a2a and x402 registries.
Roughly half the surface mutates state, and 21 tools delete. The engine’s own safeguards still apply — idempotency keys are required on order and payment writes, and High-Value Action thresholds gate large amounts — but scope the agent to the domains it actually needs rather than granting the full catalog.

​
Domain coverage

The 87 tool modules span the whole engine: Commerce — customers with address books, products with variants and lifecycle, orders, carts and checkout, returns and the full RMA workflow, warranties, subscriptions, gift cards, loyalty, store credits, reviews, wishlists, customer segments. Finance — general ledger with journals and periods, accounts payable and receivable, fixed assets, revenue recognition, invoices, payments, refunds, tax, prepayments, vendor credits, price schedules and levels. Operations — inventory and stock snapshots, warehouses and locations, cycle counts, purchase orders and suppliers, transfer orders, inbound shipments, fulfillment waves and pick tasks, shipping zones, lots and serial numbers. Manufacturing — bills of materials, work orders, production batches, quality inspections and NCRs. Infrastructure — activity logs, channels, companies, units of measure, integration and field mappings, EDI documents, topology snapshots, search config, and ERC-8004 identity, reputation, and validation. See Finance & Accounting and Bindings for what these domains do.

​
Maintenance and recovery

Five tools cover backup and restore, so an agent can back up the engine it carries before doing something consequential. See Backup & Restore — in particular that import is content-preserving, not identity-preserving.

​
Money values

Every monetary amount crosses as an exact decimal string ("30.01"), not a float. Don’t parse into a binary float before arithmetic.
This holds for the MCP surface and the newer binding domains. Some older binding fields still convert to f64 — see the money precision warning.
Last modified on August 29, 2026