Use one seller's tools directly

With @zanora/mcp, the model decides to buy. It calls zanora_invoke with a capability id. With the proxy, a paid tool is just a tool. The model calls extract_invoice(imageUrl), and payment happens during the call.

You can use both. The model can shop, and also have your chosen seller's tools to hand.

#Add it

{
  "mcpServers": {
    "acme-ocr": {
      "command": "npx",
      "args": ["-y", "@zanora/mcp-proxy", "https://demo-seller.zanora.dev/mcp"],
      "env": {
        "ZANORA_API_KEY": "zk.akey_…",
        "ZANORA_AGENT_KEY_FILE": "/absolute/path/to/agent-key.pem",
        "ZANORA_MAX_PRICE_MINOR": "500"
      }
    }
  }
}

The model now sees the seller's tools, with the price added to each description:

extract_invoice(imageUrl)   Extract text and structured line items from scanned invoices.
                            Costs $1.00 USD per call, charged to this agent's wallet.

#Configuration

The same variables as @zanora/mcp, so one agent running both sets them once:

The seller URL is the argument. Use one proxy entry per seller, so two sellers' tool names can't collide.

#Behaviour to know

• The seller's result is passed through unchanged: content blocks, structuredContent, the seller's _meta. You get exactly what you paid for.
• It only calls URLs. It won't run a seller's package. That needs a separate opt-in in @zanora/mcp.
• It refuses plain http:// sellers, except loopback for local development. The answer you paid for comes back over that connection.
• It keeps the tool list current. It declares tools/listChanged, and notices price changes both from each purchase's receipt and from a slow poll. It never announces a change on a guess: a seller that's briefly unreachable hasn't changed its list.
• Refusals come back as readable results (POLICY_DENIED, APPROVAL_REQUIRED, INSUFFICIENT_FUNDS), not protocol errors, and nothing is charged.
• Cancelling stops the purchase only until the payment proof is sent, the same as the SDK.