Search by

koh / sylius-a2a

o.hartwig

Publishes an A2A Agent Card at /.well-known/agent-card.json, built from the shop's registered agent skills.

Package info

github.com/ohartwig/sylius-a2a

Homepage

Type:sylius-bundle

pkg:composer/koh/sylius-a2a

Statistics

Installs: 0

Dependents: 1

Suggesters: 0

Stars: 0

Open Issues: 0

v1.1.35 2026-10-14 02:38 UTC

README

koh/sylius-a2a

Publishes an A2A Agent Card at /.well-known/agent-card.json.

Install

composer require koh/sylius-a2a
// config/bundles.php
Koh\SyliusA2a\KohSyliusA2aBundle::class => ['all' => true],
# config/routes/koh_agent.yaml
koh_a2a:
    resource: '@KohSyliusA2aBundle/config/routes.php'

Configure

# config/packages/koh_a2a.yaml
koh_a2a:
    version: '1.0.0'
    description: 'Tobacco, shipped from Germany.'   # defaults to the channel name
    transport_path: '/_mcp'

transport_path must name an endpoint the shop actually serves. A card advertising a transport that 404s is worse than no card.

Skills come from the registry

Not from a list in this package. Two other documents project the same skills — the agent-skills index and the MCP server card — and hand-maintaining three copies is how they end up disagreeing about what the shop can do. Register a skill once by implementing AgentSkillProviderInterface from koh/sylius-agent-contracts and all three follow.

A shop with no skills still serves the card. It is discovery, not a capability: an agent asking what this origin can do deserves an answer, even if the answer is "nothing yet".

Decommission

Remove the composer require, the bundle entry, the route import and config/packages/koh_a2a.yaml. No table, no cache pool.

Security

Report vulnerabilities privately — see SECURITY.md. Advisories are published as CSAF 2.0 at https://ole-hartwig.eu/.well-known/csaf/.

Licence

MIT — see LICENSE.