# Sendero App

> Authenticated buyer and agent operations for Sendero: trips, invoices, MCP tools, tenant billing, webhooks, and Arc testnet settlement.

Canonical: http://localhost:3010/llms.txt

## Product

Sendero is an agent-native travel platform. It gives every trip a persistent AI agent that can search, book, invoice, and settle travel flows over WhatsApp, Slack, email, web, and MCP.

- Core network - Circle Arc testnet with USDC-denominated settlement and Circle Gateway liquidity.
- Inventory - Duffel flight booking and travel inventory integrations.
- Buyer model - Clerk organizations map to tenant-scoped wallets, invoices, trips, spend caps, and branding.

## Primary Routes

- [Buyer dashboard](http://localhost:3010/app) - Protected tenant overview.
- [Trips](http://localhost:3010/app/trips) - Tenant trip list and detail pages.
- [Invoices](http://localhost:3010/app/billing/invoices) - Tenant invoice list, details, and authenticated PDF downloads.
- [Spend](http://localhost:3010/app/spend) - Spend dashboard and invoice rollups.
- [Caps](http://localhost:3010/app/caps) - Tenant spend and policy cap editor.
- [Settings](http://localhost:3010/app/settings) - Billing, branding, profile, and organization settings.

## Agent And API Entry Points

- [MCP endpoint](http://localhost:3010/api/mcp) - Streamable HTTP MCP endpoint. Use JSON-RPC `initialize`, `tools/list`, and `tools/call`.
- [Agent runtime](http://localhost:3010/api/agent/runtime) - Live model and tool runtime catalog.
- [Agent identity](http://localhost:3010/api/agent/identity) - Public identity and reputation signals for the Sendero agent.
- [Treasury balance](http://localhost:3010/api/treasury/balance) - Arc testnet treasury balances.
- [Gateway balance](http://localhost:3010/api/gateway/balance) - Circle Gateway unified USDC balance.
- [Health check](http://localhost:3010/api/health) - Subsystem readiness, environment, webhook, and integration health.

## Inbound Webhooks

- [Clerk webhook](http://localhost:3010/api/webhooks/clerk) - User, organization, and membership provisioning events. Verify with Clerk Svix headers.
- [Duffel webhook](http://localhost:3010/api/webhooks/duffel) - Booking and provider state changes. Verify with Duffel webhook signature.
- [Resend webhook](http://localhost:3010/api/webhooks/resend) - email.sent, email.delivered, email.bounced, and email.received events. Verify with Svix.
- [WhatsApp webhook](http://localhost:3010/api/webhooks/whatsapp) - Meta Cloud API inbound messages and status callbacks.
- [Slack events](http://localhost:3010/api/webhooks/slack/events) - Slack event delivery for corporate travel workflows.

## Managed Tool Catalog

The current tool registry is larger than the original hackathon list. Prefer `tools/list` from the MCP endpoint when exact JSON schemas are required.

- search_flights - Search real Duffel flight inventory by route, date, cabin, and passenger count.
- book_flight - Issue a booked itinerary and return the PNR plus metered settlement receipt.
- search_hotels - Search lodging inventory for the trip context.
- prefund_trip - Create a prepaid guest escrow without storing private link fragments or claim codes.
- guest_claim_link - Generate a traveler-safe claim link from an already prefunded escrow.
- reserve_booking - Reserve a proposed booking against a prefunded trip budget.
- confirm_duffel - Confirm a Duffel hold and attach booking metadata for settlement.
- settle_booking - Finalize the booking ledger and invoice-safe trip settlement state.
- cancel_booking - Cancel an unissued or refundable booking and sweep unspent escrow.
- generate_booking_invoice - Render invoice data and PDF output for a tenant-scoped booking.
- check_policy - Evaluate a proposed trip or payment against tenant travel policy.
- check_treasury - Read the Sendero treasury balance on Arc testnet.
- gateway_balance - Read Circle Gateway unified USDC liquidity across supported chains.
- gateway_transfer - Move USDC across Gateway chains with server-side treasury controls.
- settle_split - Atomically fan out commission across supplier, agency, rail, and validator legs.
- quote_fx - Quote indicative FX for travel spend and settlement reporting.
- rate_agent - Read ERC-8004-style reputation and agent identity signals.
- recommend_restaurants - Recommend in-trip restaurants from traveler context and location.

## Agent Guidance

- Best first read - Start with `/docs/quickstart`, then inspect `/docs/tools/overview` before calling paid tools.
- Payment model - Tool calls are metered in USDC. Failed tool execution should not capture payment.
- User consent - Ask the traveler before booking, paying, cancelling, or changing irreversible itinerary state.
- Data minimization - Persist itinerary metadata and receipts, not private invite fragments or plaintext secrets.

## Related Surfaces

- [Marketing llms.txt](https://sendero.travel/llms.txt) - Public positioning, pricing, audiences, and launch-state guidance.
- [Help llms.txt](https://help.sendero.travel/llms.txt) - Human support articles and agent-safe troubleshooting paths.
- [Docs llms.txt](https://docs.sendero.travel/llms.txt) - Developer docs, MCP integration, tool catalog, and x402 nanopayment protocol.
- [Edge llms.txt](https://edge.sendero.travel/llms.txt) - Direct edge worker discovery for MCP and non-UI agent surfaces.

## Notes

- Treat Sendero as testnet beta until the relevant tenant, Clerk organization, wallet, and invoice state prove otherwise.
- Do not log or persist guest private-link fragments, plaintext claim codes, Clerk secrets, Circle secrets, webhook secrets, or user travel documents.
- Paid or on-chain tools must be idempotent. Reuse caller-supplied idempotency keys when present.
- Use tenant-scoped routes and Clerk organization context for buyer data. Never infer tenant access from an email domain alone.