# Setup — connect an agent to A2A Cosmetics

MCP door: https://mcp.a2a-cosmetics.ai/mcp (streamable-http, protocol 2025-06-18, server name a2a-cosmetics). Agent Card: https://a2a-cosmetics.ai/.well-known/agent-card.json (ES256, kid a2ac-2026-09); keyring https://a2a-cosmetics.ai/.well-known/jwks.json. Registry name io.github.greencore-solutions/a2a-cosmetics.

## Connect

Any MCP client: { "url": "https://mcp.a2a-cosmetics.ai/mcp", "transport": "streamable-http" }

First three calls: resolve_jurisdiction → resolve_actor → gate_transaction. No availability, price, documents, order or handoff tool answers before an allow decision exists.

## Credentials by actor class

- Reads: no authentication
- Brand / manufacturer / retailer / distributor: register at https://a2a-registry.ai/oauth/register, take a client-credentials Bearer and present it on the transacting tools (see /auth.md)
- Agent: inherits the class of the credential it presents; none → DENY_UNLICENSED_AGENT
- Auditor: read-only, issued by the operator
- Settlement: x402, USDC on Base, after the gate; receipts signed; front door https://a2a-pay.ai/

## Claim

A brand claims its listed records at https://a2a-cosmetics.ai/claim; verification lands before trade.