Goody for AI agents

Goody lets businesses send gifts and physical products to customers or employees without handling shipping logistics themselves. Merchants use it to run this as a routine part of their storefront operations. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

E-commerceAPI keyMCP + RESTongoody.com
AUDIT LOG · GOODYPOLICY: acme-support
09:41:07 · claude · u_8f2read
goody.list_all_orders
List All Orders✓ allowed · 212ms
09:41:08 · claude · u_8f2read
goody.list_collections
List Collections✓ allowed · 164ms
09:41:09 · claude · u_8f2write
goody.create_webhook
Create Webhook✓ approved · approved by user
09:41:12 · claude · u_8f2destructive
goody.delete_webhook
Delete Webhook✕ blocked · policy: deny
EVERY GOODY CALL, ON THE RECORD
01 · USE CASES

What agents do in Goody.

01

Browse the active gift catalog

List currently active gift products to pick an option for a client thank-you send.

02

Price a batch of gift orders

Calculate the total cost for a batch of gift orders before approving the spend.

03

Check an order batch's status

List recent order batches to confirm a round of client gifts has shipped.

02 · ACTIONS

13 Goody actions, graded by risk.

Every Goody action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

11

Look things up. Allowed by default.

  • goody.list_all_orders
    List All Orders
  • goody.list_collections
    List Collections
  • goody.list_all_workspaces
    List All Workspaces
  • goody.list_all_active_cards
    List All Active Cards
  • goody.list_order_activities
    List Order Activities
  • goody.list_all_order_batches
    List All Order Batches
  • goody.list_all_active_products
    List All Active Products
  • goody.list_all_payment_methods
    List All Payment Methods
  • goody.retrieve_product
    Retrieve Product
  • goody.retrieve_current_user
    Retrieve Current User
  • goody.calculate_price_for_order_batch
    Calculate Price for Order Batch

write

1

Create and change things. Allow, or ask the user first.

  • goody.create_webhook
    Create Webhook

destructive

1

Delete, cancel or archive. Ask first, or deny outright.

  • goody.delete_webhook
    Delete Webhook
03 · HOW IT WORKS

Goody in three steps.

  1. 01Your users connect GoodyThey add their Goody api key on Arc0 Connect, under your brand. It goes straight into the vault.
  2. 02You set the rulesReads run, writes like “create Webhook” can wait for the user, and “delete Webhook” can be denied outright.
  3. 03Any agent can actYour agent calls Goody through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
POLICY.TS
await arc0.policies.set('goody', {
  read: 'allow',
  write: 'ask',        // create_webhook
  destructive: 'deny',  // delete_webhook
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2
04 · AUTH AND DATA

How Goody connects.

Users add their Goody api key on Arc0 Connect. It is encrypted in the vault, never shown to the model, and each user can rotate or revoke it at any time.

The same Goody connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH
API key
CREDENTIALS
Per-tenant encrypted vault
MODEL SEES
Results only, never credentials
AUDIT LOG
Every call, on every plan
05 · WORKS WITH

Use Goody from any agent.

Claude
ChatGPT
Cursor
Codex
VS Code
OpenAI Agents SDK
Claude Agent SDK
Vercel AI SDK
Mastra
LangGraph
07 · FAQ

Goody and Arc0, answered.

Q01

Can I use Goody with Claude, ChatGPT or Cursor?

Yes. Connect Goody to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Goody actions you allow.

Q02

How do users connect Goody?

Users add their Goody api key on Arc0 Connect. It is encrypted in the vault, never shown to the model, and each user can rotate or revoke it at any time.

Q03

Which Goody actions can my agent take?

13 in total: 11 read, 1 write and 1 destructive, such as “create Webhook”. Your policies decide which of them each agent may call.

Q04

Can I stop my agent from deleting things in Goody?

Yes. Actions like “delete Webhook” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.

Q05

Can my own backend call Goody too?

Yes. The same Goody connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Goody into your agent.

Your users connect Goody once, under your brand. Your agent gets 13 actions behind your policies, with every call on the record.

Free to build · MCP + REST · Audit log on every plan