# Sendero App

> Authenticated buyer and agent operations for Sendero: trips, invoices, MCP tools, tenant billing, webhooks, and Arc testnet settlement.

Canonical: https://www.sendero.travel/llms.txt

## Product

Sendero is an agent-native travel platform. It gives every trip a persistent AI agent that can search, book, invoice, and settle travel flows over WhatsApp, Slack, email, web, and MCP.

- Core network - Circle Arc testnet with USDC-denominated settlement and Circle Gateway liquidity.
- Inventory - Duffel flight booking and travel inventory integrations.
- Buyer model - Clerk organizations map to tenant-scoped wallets, invoices, trips, spend caps, and branding.

## Primary Routes

- [Buyer dashboard](https://www.sendero.travel/app) - Protected tenant overview.
- [Trips](https://www.sendero.travel/app/trips) - Tenant trip list and detail pages.
- [Invoices](https://www.sendero.travel/app/billing/invoices) - Tenant invoice list, details, and authenticated PDF downloads.
- [Spend](https://www.sendero.travel/app/spend) - Spend dashboard and invoice rollups.
- [Caps](https://www.sendero.travel/app/caps) - Tenant spend and policy cap editor.
- [Settings](https://www.sendero.travel/app/settings) - Billing, branding, profile, and organization settings.

## Agent And API Entry Points

- [MCP endpoint](https://www.sendero.travel/api/mcp) - Streamable HTTP MCP endpoint. Use JSON-RPC `initialize`, `tools/list`, and `tools/call`.
- [Agent runtime](https://www.sendero.travel/api/agent/runtime) - Live model and tool runtime catalog.
- [Agent identity](https://www.sendero.travel/api/agent/identity) - Public identity and reputation signals for the Sendero agent.
- [Treasury balance](https://www.sendero.travel/api/treasury/balance) - Arc testnet treasury balances.
- [Gateway balance](https://www.sendero.travel/api/gateway/balance) - Circle Gateway unified USDC balance.
- [Health check](https://www.sendero.travel/api/health) - Subsystem readiness, environment, webhook, and integration health.

## Inbound Webhooks

- [Clerk webhook](https://www.sendero.travel/api/webhooks/clerk) - User, organization, and membership provisioning events. Verify with Clerk Svix headers.
- [Duffel webhook](https://www.sendero.travel/api/webhooks/duffel) - Booking and provider state changes. Verify with Duffel webhook signature.
- [Resend webhook](https://www.sendero.travel/api/webhooks/resend) - email.sent, email.delivered, email.bounced, and email.received events. Verify with Svix.
- [WhatsApp webhook](https://www.sendero.travel/api/webhooks/whatsapp) - Meta Cloud API inbound messages and status callbacks.
- [Slack events](https://www.sendero.travel/api/webhooks/slack/events) - Slack event delivery for corporate travel workflows.

## Managed Tool Catalog

The current tool registry is larger than the original hackathon list. Prefer `tools/list` from the MCP endpoint when exact JSON schemas are required.

- check_treasury - Read treasury balance and policy limits.
- check_policy - Evaluate a proposed trip or payment against tenant travel policy.
- rate_agent - Read ERC-8004-style reputation and agent identity signals.
- log_agent_action - Emit an on-chain breadcrumb for an agent action against a claimed trip.
- faucet_drip - Request test assets for local or testnet demos.
- quote_fx - Quote indicative FX for travel spend and settlement reporting.
- gateway_balance - Read Circle Gateway unified USDC liquidity across supported chains.
- guest_claim_link - Convert a guest claim link into claim calldata for a traveler wallet.
- search_flights - Search real Duffel flight inventory by route, date, cabin, and passenger count.
- search_hotels - Search lodging inventory for the trip context.
- geocode_trip_stop - Normalize an itinerary stop into a canonical address and coordinates.
- trip_weather_brief - Read current weather conditions for a destination or trip stop.
- air_quality_brief - Read AQI and health recommendations for a destination or route.
- validate_travel_address - Validate and geocode travel-critical addresses such as hotels and pickups.
- timezone_brief - Explain time zone, offsets, and local-time context for a trip stop.
- elevation_risk_brief - Assess elevation and altitude sensitivity for a location.
- travel_safety_aid - Produce a single travel safety brief that combines weather, air quality, address confidence, timezone, and elevation.
- recommend_restaurants - Recommend in-trip restaurants from traveler context and location.
- export_route_map - Export routes and itineraries into Google Maps and Apple Maps links with a shareable preview card.
- restaurant_route_card - Shortlist restaurants and export a route from the traveler to the top pick. One canonical concierge card for web, WhatsApp, and Slack.
- airport_transfer_coordinator - Plan an airport-to-destination ground leg with meeting point, primary transport, backup options, and route links.
- airport_arrival_playbook - Produce a one-screen arrival briefing: deplane to check-in steps, primary + backup transport, local timezone, and route.
- trip_checkin_reminder - Build the canonical check-in nudge: check-in window, airport transit note, leave-by time, and next action. Backs the sendero.check_in_reminder workflow.
- trip_delay_replanner - Rebuild a disrupted itinerary: replacement flights, overnight hotel fallback, airport-to-hotel route, and a traveler-ready share card.
- ensure_duffel_customer - Idempotently sync the traveler with Duffel identity (CustomerUser + CustomerUserGroup) and return the icu_… id. Unlocks Travel Support Assistant for future orders.
- list_flight_ancillaries - Return ancillary options on a Duffel offer — bags, cancel-for-any-reason, and seat map — ready to feed back into book_flight as services[].
- find_airports_nearby - Find Duffel-bookable airports within a radius of a lat/lng or matching a query. Useful when the traveler names a city that has no direct airport.
- display_offer_conditions - Canonical render of change/refund conditions for a Duffel offer: free / penalty / allowed-unknown-fee / not allowed / unknown, plus slice-level + private_fares + airline-credit applicability.
- quote_stay - Turn a Duffel Stays rate into a confirmed quote. Exposes cancellation timeline, payment type (pay_now/deposit/guarantee), and supported loyalty programme.
- book_stay - Book a Duffel Stays quote. Supports loyalty_programme_account_number + Customer User linkage to unlock Travel Support Assistant for the guest.
- cancel_order_quote - Create an unconfirmed Duffel order cancellation quote. Returns refund destination (original form of payment / airline_credits / voucher) + any credits to be issued.
- confirm_cancel_order - Confirm a previously created Duffel cancellation quote. Must run within the quote expiry. Returns final credit_code on each airline credit issued.
- list_airline_credits - List a traveler's Duffel airline credits (unused tickets, MCOs, vouchers) with availability state and totals by currency. Reads a Prisma cache (hydrated by webhooks) before hitting Duffel.
- manage_stays_negotiated_rate - CRUD for Duffel Stays negotiated rates (corporate RACs). action: create | update | delete.
- send_tokens - Transfer USDC on Arc.
- gateway_transfer - Move USDC across Gateway chains with server-side treasury controls.
- prefund_trip - Create a prepaid guest escrow without storing private link fragments or claim codes.
- reserve_booking - Reserve a proposed booking against a prefunded trip budget.
- commit_booking - Commit the actual vendor amount and release unused escrow reserve.
- confirm_duffel - Confirm a Duffel hold and attach booking metadata for settlement.
- settle_booking - Finalize the booking ledger and invoice-safe trip settlement state.
- cancel_booking - Cancel an unissued or refundable booking and sweep unspent escrow.
- generate_booking_invoice - Render invoice data and PDF output for a tenant-scoped booking.
- swap_tokens - Swap tokens on Arc.
- bridge_to_arc - Bridge USDC into Arc with CCTP.
- book_flight - Hold and pay a Duffel order from prefunded balance.
- swap_and_bridge - Bridge into Arc and swap in one composed action.
- settle_split - Atomically fan out commission across supplier, agency, rail, and validator legs.

## Managed Workflow Catalog

Workflows are named plans for agents that want Sendero to orchestrate multiple tool calls, external pauses, escrow transitions, and invoice generation.

- sendero.book_flight - Escrow-backed flight booking workflow: search, policy, reserve, hold, ticketing pause, settle, and invoice.
- sendero.travel_safety_brief - Parallel travel-safety workflow: geocode, weather, air quality, timezone, elevation, and optional address validation.
- sendero.guest_prefund - Create a prepaid traveler budget, send a claim link, wait for claim, then book against escrow.
- sendero.agency_cohort - Fund a cohort of prepaid traveler links for agencies, events, bootcamps, or team travel.
- sendero.group_trip - Coordinate multi-traveler search, approvals, holds, and settlement for a shared itinerary.
- sendero.refund_booking - Cancel or refund a booked trip while preserving policy, escrow, ledger, and invoice state.
- sendero.check_in_reminder - Geocode origin airport, read timezone, and deliver the canonical trip check-in reminder (check-in window, transit note, leave-by) before awaiting traveler reply.
- sendero.trip_delay_replanner - Disruption recovery: build a rebook plan with replacement flights, optional overnight hotel, and airport route. On approval, hold the chosen flight via book_flight.
- sendero.book_with_ancillaries - Sell-up flow: search flights, list ancillaries, pause for selection, then hold with bags/seats/CFAR attached. Unlocks Travel Support Assistant via ensure_duffel_customer.
- sendero.cancellation_recovery - Post-ticket recovery on order.cancelled / airline-initiated change webhooks. Rebook via trip_delay_replanner or cancel + refund.
- sendero.book_stay_with_loyalty - Stays: search → pause for pick → quote (with cancellation timeline) → pause for loyalty input → book with loyalty_programme_account_number.
- sendero.cancel_order_with_credits - Flight cancellation: quote → pause for approval (operator sees refund destination + credits) → confirm within expiry.

## Agent Guidance

- Best first read - Start with `/docs/quickstart`, then `/docs/agent-to-agent-booking`, then inspect `/docs/tools/overview` before calling paid tools.
- Payment model - Tool calls are metered in USDC. Failed tool execution should not capture payment.
- User consent - Ask the traveler before booking, paying, cancelling, or changing irreversible itinerary state.
- Data minimization - Persist itinerary metadata and receipts, not private invite fragments or plaintext secrets.

## SEO And AI Discovery

Crawler-safe discovery files and social preview assets for search engines, AI answer engines, and agent hosts.

- [Canonical llms.txt](https://www.sendero.travel/llms.txt) - Primary machine-readable summary for this Sendero surface.
- [Well-known llms.txt](https://www.sendero.travel/.well-known/llms.txt) - Standards-friendly alias for agent discovery.
- [Robots.txt](https://www.sendero.travel/robots.txt) - Crawler policy with explicit LLM crawler allowances.
- [Sitemap.xml](https://www.sendero.travel/sitemap.xml) - Canonical URLs, locale alternates, and public agent-discovery routes.
- [Open Graph image](https://www.sendero.travel/brand/seo/open-graph-1200x630.png) - 1200x630 Sendero preview canvas for social sharing and link unfurls.
- [Google Discover image](https://www.sendero.travel/brand/seo/google-discover-1600x900.png) - Large image asset eligible for rich search previews.
- [Schema logo](https://www.sendero.travel/brand/seo/schema-logo-512.png) - 512x512 organization logo referenced by structured data.

## Related Surfaces

- [Website llms.txt](https://sendero.travel/llms.txt) - Public positioning, pricing, audiences, and launch-state guidance.
- [Help llms.txt](https://help.sendero.travel/llms.txt) - Human support articles and agent-safe troubleshooting paths.
- [Docs llms.txt](https://docs.sendero.travel/llms.txt) - Developer docs, MCP integration, tool catalog, and x402 nanopayment protocol.
- [Edge llms.txt](https://edge.sendero.travel/llms.txt) - Direct edge worker discovery for MCP and non-UI agent surfaces.

## Notes

- Treat Sendero as testnet beta until the relevant tenant, Clerk organization, wallet, and invoice state prove otherwise.
- Do not log or persist guest private-link fragments, plaintext claim codes, Clerk secrets, Circle secrets, webhook secrets, or user travel documents.
- Paid or on-chain tools must be idempotent. Reuse caller-supplied idempotency keys when present.
- Use tenant-scoped routes and Clerk organization context for buyer data. Never infer tenant access from an email domain alone.