BazaarMCP
BazaarMCP is an autonomous enterprise transaction router that completely eliminates fragile, traditional web-scraping by utilizing Google's new WebMCP standard to interact with websites natively as structured API toolset
Core trick
Gemini function-calls structured supplier catalog tools, compares totals against a budget ceiling, and downgrades to a cheaper SKU when over.
Description
BazaarMCP is an autonomous enterprise transaction router that completely eliminates fragile, traditional web-scraping by utilizing Google's new WebMCP standard to interact with websites natively as structured API toolsets.
Operating within an isolated, remote Managed Agent Linux sandbox powered by Gemini 3.5 Flash and the Antigravity SDK, the platform reads server-side functional manifests to safely discover product catalog and checkout contracts.
It dynamically evaluates real-time pricing telemetry, executes multi-turn compliance fallback branching loops to honor strict corporate budget ceilings, and securely signs transactions with runtime-masked authorization tokens.
README excerpt
# BazaarMCP > **🌐 Live supplier portal:** [vnmoorthy.github.io/bazaarmcp-supplier-portal](https://vnmoorthy.github.io/bazaarmcp-supplier-portal/) > **🖥️ Local agent dashboard:** `http://localhost:8000` (run `npm start` in `Bazaar-mcp-travel/`) **Constraint-aware corporate procurement agent.** A user types a travel/booking request with a hard budget ceiling. Gemini 2.5 Flash uses function calling to query a supplier catalog, audits the total against the budget, and either stages the premium booking or auto-downgrades to a cheaper SKU. The decision logic lives in the model, not in hardcoded `if/else` branches. ## What's real | Claim | Reality | |---|---| | Gemini 2.5 Flash function calling | Real. Two tools (`query_travel_catalog`, `stage_secure_booking`), multi-turn loop, model decides the fallback. | | Multi-agent pipeline visualization | Real. Three UI nodes (Orchestrator → Compliance Guard → WebMCP Driver) light up on actual server-sent phase transitions, not animations. | | Server-side compliance guard | Real. Even if the LLM stages an over-budget booking, the server overrides to the Courtyard fallback before issuing the payment token. | | HMAC-bound payment session token | Real. SHA-256 fingerprint of the CC secret + HMAC-bound random session ID. The CC secret never leaves the server. | | Booking persistence | Real. Each completed booking appends to `bookings.jsonl`. Queryable via `GET /api/bookings`. | | Server-side input validation | Real. Query length ≤4000 chars,