> ## Documentation Index
> Fetch the complete documentation index at: https://learn.orbexa.io/llms.txt
> Use this file to discover all available pages before exploring further.

# ORBEXA platform architecture overview

> How ORBEXA automatically deploys AI agentic commerce infrastructure for every merchant — platform architecture, data flow, and component overview.

# Platform Architecture

## Design Philosophy

ORBEXA is an Infrastructure as a Service (IaaS) platform for AI agentic commerce. Once a merchant connects, the platform automatically deploys a complete protocol endpoint stack -- without requiring the merchant to understand the technical details of UCP, ACP, or MCP.

Core principle: **Connect once, full protocol coverage**.

## Endpoints Auto-Deployed After Merchant Connection

When a merchant completes onboarding (whether through Shopify, WooCommerce, WordPress, or API), ORBEXA automatically generates all of the following endpoints:

### UCP Endpoints

| Endpoint                    | Function                                                     |
| --------------------------- | ------------------------------------------------------------ |
| `/.well-known/ucp`          | UCP discovery document, the entry point for AI agents        |
| `/ucp/v1/products`          | Product listing (supports JSON and TSV formats)              |
| `/ucp/v1/products/:id`      | Individual product details, including variants and inventory |
| `/ucp/v1/search`            | Full-text product search                                     |
| `/ucp/v1/checkout-sessions` | Create checkout sessions                                     |
| `/ucp/v1/manifest`          | Merchant capability declaration                              |
| `/ucp/acp-feed.json`        | ACP-formatted product feed                                   |

### ACP Endpoints (JSON-RPC 2.0)

| Method                  | Function                        |
| ----------------------- | ------------------------------- |
| `commerce.search`       | Product search                  |
| `commerce.product`      | Product details                 |
| `commerce.checkout`     | Initiate checkout               |
| `commerce.order_status` | Order status query              |
| `commerce.capabilities` | Merchant capability declaration |

ACP also provides REST-style endpoints:

* `/acp/v1/products` -- Product listing
* `/acp/v1/checkout` -- Checkout operations

### MCP Endpoints

| Endpoint             | Function                |
| -------------------- | ----------------------- |
| `/api/mcp/tools`     | List of available tools |
| `/api/mcp/execute`   | Execute tool calls      |
| `/api/mcp/resources` | Resource listing        |
| `/api/mcp/prompts`   | Prompt listing          |
| `/api/mcp/usage`     | Usage statistics        |

### Discovery Endpoints

| Endpoint           | Function               |
| ------------------ | ---------------------- |
| `/.well-known/ucp` | UCP protocol discovery |
| `/.well-known/acp` | ACP protocol discovery |
| `/.well-known/mcp` | MCP protocol discovery |

## Auto-Generated AI Discoverability Files

In addition to protocol endpoints, ORBEXA automatically generates and maintains the following files for every merchant:

### llms.txt

The auto-generated `llms.txt` file includes:

* The merchant's UCP endpoint address
* ACP endpoint address
* MCP endpoint address
* OTR trust verification link
* Protocol version numbers
* Error code descriptions

An AI agent reading this file can immediately understand which protocols and capabilities the merchant supports.

### robots.txt

The auto-configured `robots.txt`:

* Allows AI crawlers to access key product resources
* References the sitemap.xml path
* References the agent.json path

### sitemap.xml

* Contains URLs for all product pages
* 4-hour cache cycle
* Automatically invalidated and regenerated when new products are added

### agent.json

An AI agent service capability declaration file describing the merchant's supported AI interaction capabilities.

### Schema.org JSON-LD

Automatically injects structured data markup into product pages, ensuring both search engines and AI agents can correctly interpret product information.

## Data Consistency Guarantee

All endpoints -- UCP, ACP, MCP -- read from the same product database. This means:

* Prices are always consistent between UCP endpoints and ACP endpoints
* Inventory status is always synchronized between MCP tool queries and UCP product listings
* Product availability changes take effect in real time across all protocol endpoints

Merchants manage product data in one place, and all protocol endpoints stay in sync automatically.

## OTR Trust Score Integration

Every merchant connected to ORBEXA automatically receives an OTR (Open Trust Registry) trust score:

* **Coverage**: 3,200,000+ domains
* **Six-dimension assessment**: V (Verification) / S (Security) / G (Governance) / T (Transparency) / D (Data Quality) / F (Fulfillment)
* **77 assessment signals**: From GLEIF, SEC EDGAR, OpenFIGI, Wikidata, Google Web Risk, SSL, DNS, and other data sources
* **Trust badges**: PLATINUM / GOLD / SILVER / BRONZE / UNRATED (see [Book 2 Chapter 5](/en/book-2/ch5-scoring-engine) for scoring details)

Trust scores are exposed to AI agents through:

* REST API: `GET /api/otr/verify/:domain`
* MCP tools: `verify_merchant`, `search_registry`
* Standard endpoint: `/.well-known/otr/verify`
* PDF Trust Assessment Reports

## Rate Limiting

ORBEXA enforces tiered rate limiting across all endpoints:

| Endpoint Type            | Rate Limit           |
| ------------------------ | -------------------- |
| UCP endpoints            | 100 requests/minute  |
| API endpoints            | 60 requests/minute   |
| Authentication endpoints | 10 requests/minute   |
| Webhook endpoints        | 200 requests/minute  |
| WordPress plugin         | 3 requests/minute/IP |

When rate limits are exceeded, the API returns HTTP 429 status codes. Clients should implement exponential backoff retry strategies.

## Summary

The ORBEXA architecture is designed so that once a merchant completes a single onboarding, they never need to worry about protocol details. The platform automatically deploys, maintains, and updates all endpoints, ensuring the merchant's products are always discoverable, transactable, and trustworthy to AI agents.

***

Next chapter: [Shopify Integration](/en/book-7/ch2-shopify) -- OAuth authorization flow, automatic product sync, Webhook event handling