start_purchase
Start a purchase when the user asks to pay with Envoy or has chosen Envoy as the default for this checkout.
MCP tool start_purchase, called with tools/call on https://api.envoy.money/mcp (Streamable HTTP).
Start a purchase when the user asks to pay with Envoy or has chosen Envoy as the default for this checkout. Never ask for card details. Retry with the same key; a new key is a new purchase. Send the full cart exactly as the user asked, the delivery address, each item's image and the merchant_logo: the user sees them on the approval screen. Only items bought; no gifts. Never split a cart or lower a total. Envoy decides who checks out: read checkout_by in each reply. agent: you get a one-time card. envoy: Envoy checks out; never open the payment step. Envoy never shares a browser live-view link.
| Title | Service | Read only | Destructive | Idempotent | External sites |
|---|---|---|---|---|---|
| Start a purchase | purchase | false | true | true | true |
The text content is a plain-English briefing, then one line of JSON with the slim agent data. structuredContent holds that same slim data. isError is true when the call failed and changed nothing. Diagnostics for support are in _meta["money.envoy/support"]; they are not for the model. Tool annotations describe effects; they do not grant permission. The HTTP API returns the full envelope: see the API reference page.
Input
Prop
Type
Unknown fields are rejected. The exact input schema is on the schemas page.
Synthetic request
{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "start_purchase",
"arguments": {
"idempotency_key": "synthetic-intent-0001",
"merchant_url": "https://shop.example.test",
"merchant_logo": "https://shop.example.test/logo.png",
"total": "2499.00",
"items": [
{
"name": "Headphones",
"image": "https://shop.example.test/headphones.jpg"
}
],
"user_request": "Buy the headphones"
}
}
}Success data
The text content opens with a briefing: one to three sentences for the user, then What to do: for the agent. Tell the user the first part in your own words and do what What to do says. One JSON line follows with these fields. Pass next.args unchanged to next.tool. Never show the JSON line, ids or codes to the user. Outputs may gain fields, so ignore ones you do not recognize.
| Field | Required | Type | Description and rules |
|---|---|---|---|
quote | No | object | INR price; not a charge/refund. |
spending_closed | No | boolean | Spending access is closed: no further card details are released. It does not prove the issuer blocked the card, and recovery of any money continues separately. |
situation | No | "needs_details" | "needs_answer" | "waiting_for_user" | "working" | "ready" | "confirming" | "done" | "stopped" | "needs_support" | Where the purchase stands. The English briefing above says what it means. |
money | No | "not_charged" | "set_aside" | "charged" | "refunding" | "refunded" | "unknown" | What has happened to the user's money. |
purchase_id | No | string | Pass as purchase in later calls. Never show it to the user. |
checkout_by | No | "agent" | "envoy" | Who completes the merchant checkout. agent: you pay once with the one-time card Envoy releases. envoy: Envoy checks out itself; no card is released, so never open the merchant payment step. Absent until Envoy decides; it can change, so act on the latest reply. |
next | No | object | The call to make next: tool, args (pass verbatim) and wait_seconds before calling. |
purchase | No | object or null | question: the open question while situation is needs_answer or needs_details: id, kind and prompt. Show the user prompt word for word. funding: only for a gift-card pay_link task, the URL the user pays, amount and expiry. Never an approval link. |
follow_up | No | object | Optional feedback call after a completed purchase: tool and args. Add the user's words as answer. |
retry | No | "same_call" | "after_fix" | "check_status_first" | "new_purchase" | "no" | Whether and how to retry. |
fix | No | array | Input fields to fix before retrying. |
card | No | object | One-time card, only while ready. |
support_ref | No | string | Give this to the user only if they ask for help. |
account | No | object | Requested account sections. |
transactions | No | array | Spending transactions. |
next_cursor | No | string | Pass as cursor to list_transactions for the next page. |
Synthetic result
Example synthetic-waiting-for-approval (synthetic data, the MCP text content; JSON is formatted here for reading but arrives on one line):
What to do: Tell the user the message below once; they can't see tool results. They need to do it within about 15 minutes. Call get_purchase_status with the next args from the data below: it waits for as long as the server holds for a change. Follow the returned next action until the situation changes or Envoy says to stop. get_purchase_status moves on by itself as soon as the user finishes in the Envoy app; the user doesn't need to tell you. Envoy will give you a one-time card to enter at checkout. The total the user approves, ₹2,499.00, is a hard cap: the card can't be charged more. If the merchant total is higher, don't pay.
Approve this purchase in the Envoy app. (₹2,499.00 at "Example Store") Your assistant carries on by itself once you approve.
{
"situation": "waiting_for_user",
"money": "not_charged",
"purchase_id": "pur_5b1e9c7a3f2d5a8e9c0b1d2e3f4a5b6c",
"checkout_by": "agent",
"next": {
"tool": "get_purchase_status",
"args": {
"purchase": "pur_5b1e9c7a3f2d5a8e9c0b1d2e3f4a5b6c",
"after_revision": 1,
"wait_seconds": 45
}
}
}Errors
A failure sets isError to true and changes nothing. The briefing says what happened and what to do; retry and fix in the JSON line say whether and how to retry. Branch on those, not on a code: these common codes appear only in _meta["money.envoy/support"], for support. See all error codes for the complete contract list.
| Code | HTTP status | Meaning | What the agent does |
|---|---|---|---|
INVALID_INPUT | 400 | Fix the supplied input. | Fix the fields listed in the data below and make the same call again. |
UNAUTHENTICATED | 401 | Reconnect through Central Auth. | Ask the user to reconnect Envoy, then try again. |
UNAVAILABLE | 503 | The service is unavailable; follow retryable and next. | Wait, then make the same call again. Don't pay any other way meanwhile. |