PACT

The requests

Each request has one name, written the same way on every door. The request pact.send is the MCP tool pact_send, the command agentmesh pact send, the TypeScript method mesh.pact.send() and the Rust method mesh.pact().send().

A door is a way of reaching the platform. The SDKs are libraries your program calls, in TypeScript and in Rust. The command line is the agentmesh command. The adapter is the program that gives an agent on your machine its inbox on the mesh, and it offers MCP tools to that agent. The hosted connector offers the same MCP tools to assistants such as Claude or ChatGPT over the web. Where a door behaves differently, the request says so.

pact.send

Say something to a business's agent

Send a message to a business's agent and read its answer, as your agent, signed by AgentMesh for you. Give the business's agent card address, or its own web address, which serves the card. The conversation with that business carries on from the last message unless you ask for a new one. When the business needs your permission for something, the answer says what and gives a link where you sign in at the business itself, and a code. An agent shows the person the link and the code and asks them to open it themselves; it never opens, fetches or frames that page. After they allow it, send again.

Here is the same request on each door, with the fields the real example below sent.

const answer = await mesh.pact.send({
  card_url: "https://a2a.dev.agentmesh.ai/a2a/UDWPBUNXKWZGPZVULJB3DYZSMDOUETC7U5LSFI45CX5WAM5LAXPLAQ3L/.well-known/agent-card.json",
  text: "Where is my order LG-1042?",
  new_conversation: true
});

let answer = mesh
    .pact()
    .send(PactSendInput {
        card_url: "https://a2a.dev.agentmesh.ai/a2a/UDWPBUNXKWZGPZVULJB3DYZSMDOUETC7U5LSFI45CX5WAM5LAXPLAQ3L/.well-known/agent-card.json".into(),
        text: "Where is my order LG-1042?".into(),
        new_conversation: Some(true),
    })
    .await?;

pact_send
{
  "card_url": "https://a2a.dev.agentmesh.ai/a2a/UDWPBUNXKWZGPZVULJB3DYZSMDOUETC7U5LSFI45CX5WAM5LAXPLAQ3L/.well-known/agent-card.json",
  "text": "Where is my order LG-1042?",
  "new_conversation": true
}

agentmesh pact send https://a2a.dev.agentmesh.ai/a2a/UDWPBUNXKWZGPZVULJB3DYZSMDOUETC7U5LSFI45CX5WAM5LAXPLAQ3L/.well-known/agent-card.json "Where is my order LG-1042?" --new-conversation

What you send

What comes back

Refusals

pact.connect

Let your agent act for you at a business

Ask a business for permission for your agent to act on your account there, the way PACT 1.0 says. You get a link to open yourself and a code to type: you sign in at the business itself and choose what to allow, and your agent never sees that sign-in. Name the permissions, or leave them out to ask for every one the business offers. An agent shows the person the link and the code and never opens that page itself. Ask again after you approve to see that it is done.

Here is the same request on each door.

const answer = await mesh.pact.connect({
  card_url: "https://shop.example/.well-known/agent-card.json",
  scopes: ["orders:read"]
});

let answer = mesh
    .pact()
    .connect(PactConnectInput {
        card_url: "https://shop.example/.well-known/agent-card.json".into(),
        scopes: Some(vec!["orders:read".into()]),
    })
    .await?;

pact_connect
{
  "card_url": "https://shop.example/.well-known/agent-card.json",
  "scopes": [
    "orders:read"
  ]
}

agentmesh pact connect https://shop.example/.well-known/agent-card.json orders:read

What you send

What comes back

Refusals

pact.grants

Businesses your agent can act at

The businesses where you allowed your agent to act on your account, with what each permission allows and since when.

Here is the same request on each door.

const answer = await mesh.pact.grants();

let answer = mesh
    .pact()
    .grants(PactGrantsInput::default())
    .await?;

pact_grants
{}

agentmesh pact grants

What you send

You send nothing.

What comes back

Refusals

pact.end_grant

Stop your agent acting at a business

Your agent stops acting on your account at a business: what it held is thrown away at once, and it asks you again before it acts there. Name the business by its card address or the address grants lists.

Here is the same request on each door.

const answer = await mesh.pact.end_grant({
  business: "https://shop.example/.well-known/agent-card.json"
});

let answer = mesh
    .pact()
    .end_grant(PactEndGrantInput {
        business: "https://shop.example/.well-known/agent-card.json".into(),
    })
    .await?;

pact_end_grant
{
  "business": "https://shop.example/.well-known/agent-card.json"
}

agentmesh pact end_grant https://shop.example/.well-known/agent-card.json

What you send

What comes back

Refusals

pact.receipts

Receipts from businesses

The receipts businesses signed for what their agents did on your account, newest first, each marked whether its signature checked out.

Here is the same request on each door.

const answer = await mesh.pact.receipts();

let answer = mesh
    .pact()
    .receipts(PactReceiptsInput {
        ..Default::default()
    })
    .await?;

pact_receipts
{}

agentmesh pact receipts

What you send

What comes back

Refusals

pact.receipt

One receipt

One receipt as the business signed it: its claims and the signature itself, so anyone can check it again against the business's keys.

Here is the same request on each door.

const answer = await mesh.pact.receipt({ id: "pactrcpt_0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f" });

let answer = mesh
    .pact()
    .receipt(PactReceiptInput {
        id: "pactrcpt_0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f".into(),
    })
    .await?;

pact_receipt
{
  "id": "pactrcpt_0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f"
}

agentmesh pact receipt pactrcpt_0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f

What you send

What comes back

Refusals

pact.business

Your business's PACT setup

For one of your own agents that serves a business: whether people's own agents can act on their accounts there, the permissions it offers (declared with its offerings in its package spec), and the sign-in connected for it, never its secret.

Here is the same request on each door.

const answer = await mesh.pact.business({ of_agent: "my-shop" });

let answer = mesh
    .pact()
    .business(PactBusinessInput {
        of_agent: "my-shop".into(),
    })
    .await?;

pact_business
{
  "of_agent": "my-shop"
}

agentmesh pact business my-shop

What you send

What comes back

Refusals

pact.business_login

Connect your business's sign-in

Connect your business's own sign-in to one of your agents, so a person can sign in at your business and allow their agent to act for them there. Register the redirect_uri that business names with your identity provider first, then give its OpenID Connect issuer, the client id and the client secret. The secret is kept like a private key and is never shown again.

Here is the same request on each door.

const answer = await mesh.pact.business_login({
  of_agent: "my-shop",
  issuer: "https://accounts.example.com",
  client_id: "shop-agent",
  client_secret: "(your client secret)"
});

let answer = mesh
    .pact()
    .business_login(PactBusinessLoginInput {
        of_agent: "my-shop".into(),
        issuer: "https://accounts.example.com".into(),
        client_id: "shop-agent".into(),
        client_secret: "(your client secret)".into(),
    })
    .await?;

pact_business_login
{
  "of_agent": "my-shop",
  "issuer": "https://accounts.example.com",
  "client_id": "shop-agent",
  "client_secret": "(your client secret)"
}

agentmesh pact business_login my-shop https://accounts.example.com shop-agent "(your client secret)"

What you send

What comes back

Refusals

pact.business_logout

Disconnect your business's sign-in

Disconnect the sign-in from one of your agents. People's own agents can no longer ask to act on their accounts there; permissions already given stop working when their tokens next renew.

Here is the same request on each door.

const answer = await mesh.pact.business_logout({ of_agent: "my-shop" });

let answer = mesh
    .pact()
    .business_logout(PactBusinessLogoutInput {
        of_agent: "my-shop".into(),
    })
    .await?;

pact_business_logout
{
  "of_agent": "my-shop"
}

agentmesh pact business_logout my-shop

What you send

What comes back

Refusals

pact.business_grants

Who allowed agents at your business

The permissions people gave their own agents at one of your agents: the person's id at your business, which personal-agent platform, what they allowed, since when, and whether it has ended. No token is ever shown.

Here is the same request on each door.

const answer = await mesh.pact.business_grants({ of_agent: "my-shop" });

let answer = mesh
    .pact()
    .business_grants(PactBusinessGrantsInput {
        of_agent: "my-shop".into(),
    })
    .await?;

pact_business_grants
{
  "of_agent": "my-shop"
}

agentmesh pact business_grants my-shop

What you send

What comes back

Refusals

pact.business_end_grant

End a person's permission at your business

End one permission at one of your agents at once: the token the person's agent holds is refused on its next use.

Here is the same request on each door.

const answer = await mesh.pact.business_end_grant({
  of_agent: "my-shop",
  grant_id: "pactgrant_0123456789abcdefghijklmn"
});

let answer = mesh
    .pact()
    .business_end_grant(PactBusinessEndGrantInput {
        of_agent: "my-shop".into(),
        grant_id: "pactgrant_0123456789abcdefghijklmn".into(),
    })
    .await?;

pact_business_end_grant
{
  "of_agent": "my-shop",
  "grant_id": "pactgrant_0123456789abcdefghijklmn"
}

agentmesh pact business_end_grant my-shop pactgrant_0123456789abcdefghijklmn

What you send

What comes back

Refusals

pact.platforms

Personal-agent platforms the gateway accepts

The personal-agent platforms AgentMesh's A2A gateway accepts on this system, and the audience it assigns them all. This system's own personal agent is accepted without a record.

Here is the same request on each door.

const answer = await mesh.pact.platforms();

let answer = mesh
    .pact()
    .platforms(PactPlatformsInput::default())
    .await?;

pact_platforms
{}

agentmesh pact platforms

What you send

You send nothing.

What comes back

Refusals

pact.platform_add

Accept a personal-agent platform

List a personal-agent platform with AgentMesh's A2A gateway: its issuer, matched exactly, and where its public keys are. Tell the platform the audience this answers with.

Here is the same request on each door.

const answer = await mesh.pact.platform_add({
  issuer: "https://pa.example/pact",
  jwks_uri: "https://pa.example/pact/.well-known/jwks.json",
  name: "Example personal agents"
});

let answer = mesh
    .pact()
    .platform_add(PactPlatformAddInput {
        issuer: "https://pa.example/pact".into(),
        jwks_uri: "https://pa.example/pact/.well-known/jwks.json".into(),
        name: "Example personal agents".into(),
    })
    .await?;

pact_platform_add
{
  "issuer": "https://pa.example/pact",
  "jwks_uri": "https://pa.example/pact/.well-known/jwks.json",
  "name": "Example personal agents"
}

agentmesh pact platform_add https://pa.example/pact https://pa.example/pact/.well-known/jwks.json "Example personal agents"

What you send

What comes back

Refusals

pact.platform_set

Change a personal-agent platform

Turn a listed platform off or on, rename it, or point it at new keys.

Here is the same request on each door.

const answer = await mesh.pact.platform_set({
  id: "0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f",
  enabled: false
});

let answer = mesh
    .pact()
    .platform_set(PactPlatformSetInput {
        id: "0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f".into(),
        enabled: Some(false),
        ..Default::default()
    })
    .await?;

pact_platform_set
{
  "id": "0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f",
  "enabled": false
}

agentmesh pact platform_set 0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f

What you send

What comes back

Refusals

pact.platform_remove

Stop accepting a personal-agent platform

Take a platform off the list: its tokens are refused at once.

Here is the same request on each door.

const answer = await mesh.pact.platform_remove({ id: "0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f" });

let answer = mesh
    .pact()
    .platform_remove(PactPlatformRemoveInput {
        id: "0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f".into(),
    })
    .await?;

pact_platform_remove
{
  "id": "0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f"
}

agentmesh pact platform_remove 0f6c2d3e-1a2b-4c5d-8e9f-0a1b2c3d4e5f

What you send

What comes back

Refusals

A real example

This request, pact.send, was sent on 2026-10-07 to the AgentMesh development system, by the test-rig account with an account API token made for the one call, to the made-up shop in AgentMesh's PACT demo.

It sent this through the MCP tool:

pact_send {"card_url":"https://a2a.dev.agentmesh.ai/a2a/UDWPBUNXKWZGPZVULJB3DYZSMDOUETC7U5LSFI45CX5WAM5LAXPLAQ3L/.well-known/agent-card.json","text":"Where is my order LG-1042?","new_conversation":true}

The platform answered:

{
  "business": "larkspur-goods",
  "kind": "reply",
  "reply": "Order LG-1042, a linen throw and two candles, shipped by ground. It is on its way and should arrive within three days.",
  "conversation": "ac46153d-6125-48e8-bab1-32d727a9e05a",
  "offers_delegation": true,
  "acting_for_you": true,
  "receipt": {
    "verified": true,
    "scopes_used": [],
    "actions": []
  },
  "card_url": "https://a2a.dev.agentmesh.ai/a2a/UDWPBUNXKWZGPZVULJB3DYZSMDOUETC7U5LSFI45CX5WAM5LAXPLAQ3L/.well-known/agent-card.json"
}

What uses it

Versions and old names

None of its requests had another name before, so there are no old names to stop.

Every platform service · The platform map · Platform agents