ar-agents is a Mercado Pago Agent Toolkit for the Vercel AI SDK 6. It ships 89 typed tools that an LLM agent can call directly to drive Mercado Pago billing flows: subscriptions, payments, refunds, checkout pro, marketplace OAuth, cuotas (installments), QR in-store, 3DS challenge resolution, point-of-sale devices, webhooks. Sidecar packages cover AFIP/ARCA, WhatsApp Business Cloud, banking (CBU/CVU + BCRA), and shipping (Andreani/OCA/Correo Argentino).

How is this different from the official mercadopago SDK?

The official mercadopago SDK is a thin REST client. It does not ship Vercel AI SDK tool schemas, does not implement webhook HMAC verification with replay protection, does not run on Edge Runtime (Node-only), and does not gate irreversible operations. ar-agents adds all of that on top of the underlying API: 89 typed tools, deterministic idempotency keys derived from inputs, programmatic human-in-the-loop on refund/cancel/delete, npm provenance attestation, Vercel KV adapters via subpath, OpenTelemetry instrumentation. You can use both packages in the same project; ar-agents wraps the underlying API directly without depending on the official SDK.

Does ar-agents work on Edge Runtime?

Yes. The whole package is Web Crypto-based with no node:crypto dependency, so it runs on Vercel Edge Functions, Cloudflare Workers, Deno, and any other V8-isolate runtime. Webhook signature verification, HMAC, and idempotency-key generation all use the Web Crypto API.

What is HITL (human-in-the-loop) in ar-agents?

Eight tools mutate state irreversibly (refund_payment, cancel_subscription, delete_customer_card, etc.). The toolkit accepts a requireConfirmation callback that gates each invocation: the tool function literally will not execute until your callback returns true. This is a programmatic gate, not just an LLM instruction. You can show the user a UI and wait for their explicit approval before any irreversible operation runs.

How does idempotency work?

Every POST request gets an auto-generated idempotency key. For LLM-driven retries, four mutating tools (create_payment, create_subscription, create_payment_preference, refund_payment) use a deterministic key derived from a SHA-256 hash of the meaningful inputs (external_reference, amount, payment_method, etc.). Same inputs produce the same key, so retries return the existing resource instead of double-charging the customer.

Yes. MIT license. No paid tier, no telemetry phone-home, no usage caps. The package is published to npm under the @ar-agents scope with SLSA v1 provenance attestations.

What about AFIP, WhatsApp, banking, shipping?

Sidecar packages cover the rest of the Argentine business stack: @ar-agents/identity (CUIT/CUIL validation + AFIP/ARCA padron lookup with monotributo category and IVA condition), @ar-agents/facturacion (AFIP/ARCA factura electronica via WSFE), @ar-agents/whatsapp (WhatsApp Business Cloud API with HMAC webhook verify and AR phone normalizer), @ar-agents/banking (CBU/CVU validation + BCRA Central de Deudores), @ar-agents/shipping (Andreani, OCA, Correo Argentino), @ar-agents/identity-attest (HMAC-signed verification orchestrator). Each ships independently to npm.

Is there a Model Context Protocol (MCP) server?

Yes. @ar-agents/mcp bundles all 7 ar-agents packages into a single MCP server compatible with Claude Desktop, Cursor, Codeium, Continue, Cline, or any MCP host. Auto-detects which packages to enable from environment variables. Listed on Glama (glama.ai/mcp/servers/ar-agents/ar-agents) and the official MCP Registry (io.github.ar-agents/mcp).

status · live

Operational state

What is wired in production right now. Refreshed automatically every 30s. The page is public + screenshot-friendly so an asesor or journalist can paste it into an email without follow-up questions.

OK

8

Warn

1

Demo mode

3

Live RFC-002 + RFC-004 self-cert. Re-fetched from /api/certifier every page load. Click to run live.

Audit log

OKVercel KV (Upstash, sa-east-1)RFC-001 § 9.1

Persistent across Edge instances. Append-only, 7-day TTL. Backend reports vercel-kv.

OKHMAC-SHA256 signingRFC-001 § 9.2

AUDIT_HMAC_SECRET wired. Every entry is signed at write; /verify and /api/play/audit/{id}?verify=1 confirm tamper-free state.

LLM provider

OKVercel AI Gateway

Routed via the gateway model string `anthropic/claude-sonnet-4-6`. Per-route observability + per-key spend cap configured in the Vercel dashboard.

ARCA

DEMOAFIP/ARCA cert (WSAA + WSFE + ws_sr_constancia_inscripcion)

Demo runs in mocked-upstream mode for ARCA padrón + factura. Wire AFIP_CERT_PEM / AFIP_KEY_PEM / AFIP_CUIT to enable real calls.

Payments

DEMOMercado Pago

MP demo runs against synthetic responses. Wire MERCADOPAGO_ACCESS_TOKEN to enable real calls.

Comms

DEMOWhatsApp Business Cloud API

Demo mode. Wire WHATSAPP_ACCESS_TOKEN + WHATSAPP_PHONE_NUMBER_ID to enable.

Banking

OKBCRA Principales Variables (USD oficial, CER, UVA, reservas)

Public BCRA endpoints — no auth required. Always available; the demo's get_usd_oficial / get_cer / get_uva tools point at this surface.

WARNBCRA Central de Deudores

Demo runs in mocked-upstream mode. Set BCRA_DEUDORES_URL to point at your adapter.

Public surfaces

OK/api/discovery (16 packages, 168 tools, 3 hosted endpoints)

JSON inventory + OpenAPI 3.1 stub. Auto-discoverable by external agents.

OK/api/auto-incorporate

POST → generated repo + Vercel deploy URL + signed audit-log reference.

OK/api/play (12-tool sociedad-IA agent)

Streaming via Vercel AI Gateway. 30/min per-IP soft rate limit.

OK/api/play/tamper-demo

Read-only synthetic tampering proof. Demonstrates HMAC catches edits mechanically.