Agent Ordering MCP + REST

AI assistants can order food from Soldi Now restaurants on a customer’s behalf: read the live menu, quote the cart exactly, place a pay-first order, and hand the customer the payment link. The customer pays on Soldi Now’s hosted page (card, Apple Pay, Google Pay, or their Soldi Now account); the assistant never touches payment details. The kitchen starts the order only after it is paid.

Connect

Surface	Where	For
MCP server (Streamable HTTP, stateless, no auth)	`https://web.soldinow.com/mcp`	Claude.ai custom connectors, Claude Desktop and Claude Code, ChatGPT and Gemini connectors, any MCP client
REST + OpenAPI 3.1	`https://web.soldinow.com/api/agent/v1/` · spec: openapi.json	Custom GPT actions, plain HTTP agents, schema-driven frameworks

Claude.ai: Settings → Connectors → Add custom connector → paste the MCP URL, choose “no authentication”. Staging: https://web-staging.soldinow.com/mcp.

Participating restaurants are listed at /restaurants; each page carries the menu as HTML and schema.org markup, and says how to order from it.

The six operations

MCP tool	REST	What it does
`find_stores`	`GET /stores?q=`	Participating restaurants by name or address substring, with whether online ordering is accepting right now and when it closes or reopens.
`get_menu`	`GET /stores/{storeId}/menu?menu=full\|veg`	Categories, items with prices and dietary tags (veg, vegan, gf, spicy), popularity, and each item’s modifier groups (required choices, add-ons, quantities). Use these ids in the next two calls.
`quote_order`	`POST /stores/{storeId}/quote`	Server-priced dry run of the cart: resolved lines, promo, tax, estimated total — or an error whose code says what to fix. Nothing is written. Confirm with the customer before placing.
`place_order`	`POST /stores/{storeId}/orders`	Creates the pay-first order. Returns `paymentUrl`, a 4-digit `payAtCounterCode`, `expiresAt` (30 minutes), `statusUrl`. Requires `customerName` and a fresh `idempotencyKey` per new order (a repeated key returns the original order, never a second one).
`get_order_status`	`GET /orders/{orderId}`	`awaiting_payment` → `paid` (the kitchen has it), or `expired` / `cancelled`. Poll every 15–30 seconds while the customer pays.
`cancel_order`	`POST /orders/{orderId}/cancel`	Retire an unpaid order the customer no longer wants. Refused once paid or while a payment is in progress. To change an order: cancel and place again.

Also: GET /orders/{orderId}/payment-qr renders the payment link as a PNG QR code for assistants with a screen but no tap target.

The flow

The customer asks their assistant to order. find_stores("chaat house") → store card with address and “accepting until 9:30 pm”.
get_menu → the assistant maps what the customer said onto item and option ids.
quote_order → the resolved cart and total, or a problem such as REQUIRED_MODIFIER_MISSING (“Samosa Chaat needs a spice level: Mild, Medium, Hot”). The assistant confirms with the customer.
place_order → the assistant shows the link: “Pay $23.41 here → … (or give code 4821 at the counter)”. The customer opens it on Soldi Now’s payment page; a signed-in member gets their Cash Club points and offers, a guest pays by card or wallet.
Payment closes the order and the kitchen ticket prints. get_order_status flips to paid; the assistant tells the customer where to pick up.
Nothing paid in 30 minutes → the order expires and never reaches the kitchen; the assistant offers to reorder.

Request shape (quote and place)

{
  "lineItems": [
    {"menuItemId": "…", "quantity": 2, "optionIds": ["…"], "notes": "no onions"}
  ],
  "fulfillment": "TAKEOUT",          // or DINE_IN
  "menu": "full",                    // or veg, where the restaurant offers it
  "promoCode": "SCHOOL10",           // optional

  "customerName": "Priya",           // place only, required
  "customerPhone": "+14085551212",   // optional
  "idempotencyKey": "chat-7f3a-…",   // place only, required, unique per new order
  "agent": "claude"                  // optional attribution
}

Always send optionIds (an empty array when the item has no choices) so required groups are enforced. Repeat an option id to take it more than once only when its group has allowQuantity. Prices never come from the assistant.

Errors the model can act on

Every failure is {"error": {"code", "message", "details"}} (MCP: a tool error carrying the same JSON). The message is customer-facing and safe to relay.

Code	HTTP	Meaning / details
`STORE_NOT_FOUND`	404	Not a participating restaurant.
`ORDERING_CLOSED`	409	Outside online-ordering hours or paused; `reopensAt`, `message`, `paused`.
`ITEM_NOT_FOUND` / `ITEM_UNAVAILABLE`	400	Unknown id, wrong store, sold out, not today, or not on the vegetarian menu; `menuItemId`.
`REQUIRED_MODIFIER_MISSING` / `INVALID_OPTION` / `TOO_MANY_OPTIONS`	400	Fix the `optionIds` for the named item and group.
`PROMO_INVALID`	400	The code does not apply; the message says why.
`QUANTITY_TOO_LARGE` / `ORDER_TOO_LARGE`	400	20 per line, 60 units per order, 30 lines; `limit`. Confirm with the customer and split.
`FREE_ITEMS_ONLY`	400	A cart with nothing to pay for cannot be ordered online.
`REQUEST_IN_PROGRESS`	409	Another call with the same `idempotencyKey` is still running; retry in a few seconds.
`ALREADY_PAID` / `PAYMENT_IN_PROGRESS` / `ORDER_EXPIRED`	409	For `cancel_order` and the QR.
`RATE_LIMITED`	429	`retryAfterSeconds`. Per-address limits, and at most 25 unpaid assistant orders per restaurant at a time.
`MENU_UNAVAILABLE`	503	Transient; retry.

Rules for agent builders

Payment happens only on our page. Never ask the customer for card or bank details; you cannot pay on their behalf. Present paymentUrl (and the counter code) and poll status.
Quote, confirm, then place. The quote is exact for the goods and tax; tip and any payment-method adjustments are the customer’s choice on the payment page.
Links expire in 30 minutes. An unpaid order is retired and never cooked; place a new one.
Ids can change. A restaurant re-importing its menu re-mints option ids; re-read the menu on INVALID_OPTION or ITEM_NOT_FOUND.
One order per place. No editing after placement: cancel and place again while unpaid.

Security model

Property	How
Assistant never holds credentials	Only a payment link and an order id ever reach it.
Links are not bearer secrets	The payment page verifies the link’s signature and pays that order only; a leaked link cannot pay anything else.
Human-present approval	The customer sees the restaurant, the lines and the total on our page before any money moves.
Abuse bounded	Unpaid orders expire in 30 minutes and never reach the kitchen; per-address rate limits, per-restaurant caps, per-line quantity caps, idempotency keys.
Restaurants opt in	Only restaurants that switched assistant ordering on are reachable at all.

For restaurants

Switch on “Let AI assistants order from this store” on your Soldi Now menu page and set the public page address. Set your Google Business Profile “Order online” link to your Soldi Now takeout link so assistants that search the web find the ordering path. Questions — support@soldinow.com.