get_edit_policyExplain the policy
Read the store's editing window, allowed changes and payment rules in plain language.
- Inputs
No inputs: {}- Read-only key
- Available
- Link-only key
- Available
AGENT & DEVELOPER PREVIEW · COMING SOON
Alfred Order Edits includes a native Model Context Protocol (MCP) server and a REST API. Give your support tools the policy, context and safe next step for an order change, while your customer stays in control.
This is a prelaunch reference. Connect after installing Alfred Order Edits when it becomes available; the marketing website is not an authenticated MCP endpoint.
FIVE TOOLS, ONE POLICY
The same tools are available over REST and MCP. Tool access is enforced by Alfred, using the key's trust level.
get_edit_policyRead the store's editing window, allowed changes and payment rules in plain language.
No inputs: {}get_edit_optionsCheck eligible changes, the closing time and a suggested reply. A link-only key can also trigger an eligible edit-link email.
order_number, customer_email; optional actioncreate_edit_linkHave Alfred email an action-specific link to the order's own address. The URL is never returned to the agent.
order_number, customer_email, actionpreview_editPrice a proposed change, including the resulting total, refund or balance. No order change is committed.
order_number, customer_email, changeget_edit_historyRead past changes, who made them and their timing. Address details are excluded from the response.
order_number, customer_emailTHE BOUNDARIES ARE PART OF THE PRODUCT
Read-only keys check policy, eligibility, previews and history without emailing a link. Link-only keys can also ask Alfred to email one. Neither level commits an order change or changes your settings.
Order tools require an order number and matching customer email. Alfred sends the edit link only to the order's own email address. The agent receives a send result, never the link URL.
Create store-scoped agent keys in Agents and API. Keys are shown once and stored as hashes. Trust levels are checked on each call; you can revoke a key or disconnect an agent.
Every tool call is audited by tool, outcome, order and timing; request and response bodies are not stored. Current limits are 60 calls/minute and 2,000/day per key, plus 3 link emails per order per day across keys. Limits may change before launch.
CHOOSE THE INTERFACE YOUR TOOL SUPPORTS
Use an MCP client that supports Streamable HTTP and Bearer-token authentication, or configure an HTTP action in your helpdesk. Both routes use the same merchant rules and safeguards.
POST https://YOUR_ALFRED_APP_HOST/mcp
Authorization: Bearer YOUR_ALFRED_AGENT_KEYStateless Streamable HTTP with JSON responses. tools/list exposes the tools allowed by your key; tools/call runs them. No SSE stream or session lifecycle.
POST https://YOUR_ALFRED_APP_HOST/api/v1/get_edit_options
Authorization: Bearer YOUR_ALFRED_AGENT_KEY
Content-Type: application/jsonSend the tool's inputs as a JSON body. Use the real app host and your agent key after installation; these are placeholders, not working credentials.
{
"name": "get_edit_options",
"arguments": {
"order_number": "#1042",
"customer_email": "customer@example.com",
"action": "address"
}
}{
"can_edit": true,
"link_sent_to_order_email": true
}For an eligible order with a link-only key, the agent tells the customer to check the inbox for their order. The customer then makes and confirms the change.
THE DETAILS THAT MATTER
They expose the same five tools and use the same policy checks, Bearer-key authentication, trust levels, rate limits and call auditing. REST uses POST /api/v1/<tool>. MCP uses POST /mcp with stateless Streamable HTTP and JSON responses.
No. Alfred emails links directly to the order's own email address. The agent receives link_sent_to_order_email and a suggested reply, so it can tell the customer to check their inbox. Read-only keys never trigger a link email.
No. v1 tools can read, preview and request an edit-link email. They do not commit order changes, issue refunds themselves or change store settings. The customer confirms the actual change on the storefront edit page.
Use an MCP client that supports Streamable HTTP with a Bearer token, or an HTTP-based support action that can call the REST API. A Gorgias AI Agent HTTP action is documented in the app's setup guide. A dedicated Gorgias sidebar app is not part of v1; test your chosen client's authentication and action setup before launch.
Your store policy. A secure handoff. Customer confirmation.
Get Order Edits launch updates