Meister Agent Authentication & Access Boundaries
Public catalog access
The Meister MCP integration is anonymous and read-only. No developer API key is required for its catalog tools. Do not send WooCommerce consumer credentials, Stripe secrets, session cookies, customer identifiers or addresses to the MCP endpoint. The server uses its own configured backend connection and returns public product information only. This endpoint is not an account, cart or payment API.
Private account operations
The interactive storefront has a separate sign-in flow and encrypted customer session. Accessing a public product does not authorize account or order access. Private account routes require the existing customer session, and cart and checkout operations continue through the storefront’s normal user interface. There is no published OAuth server or agent purchase permission flow in this integration. Any future agent transaction capability requires a separate product and security decision.