Your AI agent wants to buy things for you. The hard part isn't finding the best price — it's giving an agent permission to spend money without getting fleeced.
NorthCinder (1,055 ★ in under 24 hours) is an open-source MCP server that makes your shopping agent compare, explain, and ask before buying. No cloud service, no account — you run it locally alongside your existing AI app.
The architecture is the story:
- Deterministic ranking. Sponsored offers are labeled and placed below organic results. Seller payments and affiliate data never nudge a result higher. Ranking is done against your brief — price, fit, delivery, merchant trust — with a written explanation of why the winner won.
- Signed purchase mandates. The agent doesn't have blanket access to your wallet. Every checkout requires a cryptographic approval token created for that specific purchase — item, quantity, and spending limit. The mandate is signed, auditable, and useless for anything else.
- Local audit trail. Every search, every ranking decision, every rejected option, every approved purchase is logged locally. You can review, correct, and feed back into future searches.
The readme is unusually honest about store coverage: Shopify needs setup, eBay requires approved API access, Amazon is read-only via a browser profile you already control. No fake promises about "any store, any time." It reports a store as unavailable rather than pretending partial coverage is a complete market search.
This matters because shopping agents are coming whether we're ready or not. The question isn't if they'll spend money — it's who controls the spending authority. NorthCinder's answer (signed mandates + deterministic ranking + local audit) is a specific architectural stance: the agent is a recommender with bounded authority, not a blank check.
Verdict: NorthCinder is early infrastructure for agent-commerce. 1,055 stars in a day says the market feels the gap. The signed purchase mandate pattern is the one to watch — it's the right primitive for letting agents spend real money with real guardrails.