SM-AMP-CPG

{
  "name": "SM-AMP-CPG",
  "description": "The Agentic Marketplace Protocol for Consumer Packaged Goods (AMP-CPG) is a deterministic, machine-readable protocol that enables an AI Agent to resolve the authoritative commercial endpoints for an identified product in a defined market. It answers one question: Given this product and this market, where can an Agent transact for it? One product. One market. One resolution set. This surface is the spec of record and its live read-only resolver; responses are signed (kid gsc-amp-2026-08) and verify from the public keyring. Publication is not open; third-party lodging is CEO-gated.",
  "supportedInterfaces": [
    {
      "url": "https://sm-amp-cpg.org/resolve",
      "protocolBinding": "HTTP+JSON",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://sm-amp-cpg.org/index.json",
      "protocolBinding": "HTTP+JSON",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://sm-amp-cpg.org/",
      "protocolBinding": "HTTP+JSON",
      "protocolVersion": "1.0"
    }
  ],
  "provider": {
    "url": "https://gsc-em.com",
    "organization": "GreenCore Solutions Corp."
  },
  "version": "1.1.0",
  "documentationUrl": "https://sm-amp-cpg.org/llms.txt",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extensions": [
      {
        "uri": "https://gsc-em.com/a2a/ext/scope-of-authority/v1",
        "description": "GSC scope of authority: read, resolve and discovery calls are autonomous; every transactional commit is human-signed at the GSC Navigator HITL boundary.",
        "required": false,
        "params": {
          "autonomous": [
            "read",
            "resolve",
            "discover"
          ],
          "humanSigned": [
            "transactional-commit",
            "order",
            "rfq-acceptance",
            "terms"
          ],
          "hitlBoundary": "https://gsc-navigator.ai/",
          "transactionSurface": "https://mcp.cpghumanintheloop.ai/mcp"
        }
      },
      {
        "uri": "https://gsc-em.com/a2a/ext/registry-attestation/v1",
        "description": "Protocol-spec surface and live read-only resolver: gsc-registry.ai is the one resolver of estate facts (the authority); the dpuone.ai keyring is the authoritative key set. AMP resolution responses sign with kid gsc-amp-2026-08. Publication is not open; third-party lodging is CEO-gated.",
        "required": false,
        "params": {
          "role": "protocol-spec-surface-and-resolver",
          "authoritativeResolver": "https://gsc-registry.ai/",
          "authoritativeKeyring": "https://dpuone.ai/.well-known/jwks.json",
          "resolutionKid": "gsc-amp-2026-08"
        }
      },
      {
        "uri": "https://gsc-em.com/a2a/ext/enforcement-posture/v1",
        "description": "These endpoints are open by design. When the buy side's credential standard reaches GA \u2014 expected Q4 2026-Q1 2027 \u2014 transactional methods migrate to OAuth 2.1 challenge per the MCP 2025-11-25 specification. Read access stays open. That is not pending work; that is the published plan.",
        "required": false,
        "params": {
          "enforcement_posture": "open-by-declaration",
          "migration_standard": "OAuth 2.1 + PKCE challenge (401 + WWW-Authenticate) on mcp:transact methods, per MCP spec 2025-11-25",
          "migration_trigger": "ecosystem GA of credentialed counterparties (enterprise A2A/MCP buy-side GA)",
          "migration_window": "Q4 2026 - Q1 2027",
          "declared": "2026-08-24",
          "operator": "GreenCore Solutions Corp.",
          "duns": "24-336-6774"
        }
      }
    ]
  },
  "securitySchemes": {
    "entraOAuth2": {
      "oauth2SecurityScheme": {
        "description": "Microsoft Entra OAuth 2.0 client credentials, GSC-provisioned after human review. Public reads on this surface are open by design; tokens are required where commitments are made.",
        "flows": {
          "clientCredentials": {
            "tokenUrl": "https://login.microsoftonline.com/54939635-2f2e-465a-8526-a907cb3c8ebd/oauth2/v2.0/token",
            "scopes": {
              "amp:read": "Read the SM-AMP-CPG protocol text, estate index, and attestation."
            }
          }
        },
        "oauth2MetadataUrl": "https://sm-amp-cpg.org/.well-known/oauth-authorization-server"
      }
    },
    "bearerJwt": {
      "httpAuthSecurityScheme": {
        "scheme": "Bearer",
        "bearerFormat": "JWT",
        "description": "Bearer access token presented in the Authorization header."
      }
    }
  },
  "defaultInputModes": [
    "application/json",
    "text/plain"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/markdown",
    "text/html"
  ],
  "skills": [
    {
      "id": "amp-resolve",
      "name": "Resolve",
      "description": "Read-only AMP resolution, live on this node and all 49 jurisdiction nodes: GET https://sm-amp-cpg.org/resolve?gtin=<gtin>&market=<market> \u2192 signed endpoint set (kid gsc-amp-2026-08, verifies from https://dpuone.ai/.well-known/jwks.json). Market defaults to the node's own market on a jurisdiction node. Typed states: GTIN_UNRESOLVED / MARKET_UNRECOGNIZED / REQUEST_INCOMPLETE.",
      "tags": [
        "amp-cpg",
        "resolve",
        "gtin",
        "market"
      ]
    },
    {
      "id": "amp-spec",
      "name": "The spec of record",
      "description": "The SM-AMP-CPG protocol text, served canonically: https://sm-amp-cpg.org/spec.md \u2014 canonical definition, authority chain, sovereign resolution, scale architecture, security model, design law, open rulings.",
      "tags": [
        "amp-cpg",
        "protocol",
        "spec",
        "cpg"
      ]
    },
    {
      "id": "sovereign-estate",
      "name": "Sovereign estate",
      "description": "1 Sovereign Manifest apex + 49 jurisdiction nodes = 50 nodes. Canonical surface per node is its .org; .com twins 308; dark door, live service: each node's page 308s to the apex while /resolve answers on the node's own host. Estate facts: https://sm-amp-cpg.org/index.json",
      "tags": [
        "sovereign-manifest",
        "jurisdiction",
        "estate"
      ]
    }
  ],
  "signatures": [
    {
      "protected": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImdzYy1jYXJkcy0yMDI2LTA4In0",
      "signature": "p54VgQsNIqowxlQKzw4-g_v7r9lb-PCr-uU09wNJ51peaIZ16T-ROJOsurgKZVMxB6AzMEqCXuR1oSxphj5gtQ"
    }
  ]
}