Agents
AI assistants (agents) can find a shop and book a time for you on BookMy.Shop. This page says what they can do, what they cannot do, and how you stay in control.
What any agent can do
Without a connection to your account, an agent can do what anyone can do on a shop's Booking Page:
- search shops
- read a shop's profile, services, staff and free times
- hold a time
- confirm a hold with the customer's code
The code goes to the customer's phone, never to the agent. A held time becomes a booking only when the customer passes the code on.
What an agent can do once you connect it
When you connect an agent, you choose what it may do for you. Each permission is shown to you in these words:
- “see my upcoming and past bookings”
- “book for me”
- “change or cancel my bookings”
An agent follows the same rules as you: the same booking windows, cancellation times and fees as when you book or cancel yourself. A connection ends 12 months after you allow it, or sooner if you revoke it.
What agents cannot do
Whatever permissions you give, agents cannot:
- change a customer's contacts, consents or payment methods
- join a queue
- read anyone else's data
Agents never pay for you. When a booking needs a deposit, the agent gives you the shop's Booking Page to finish it there.
Connecting and revoking an agent
An agent that wants to act for you sends you to a BookMy.Shop page, never a page inside the agent. There you sign in with a code and see the agent's name, the company that runs it (or that its operator is not verified), the permissions it asks for and the date the connection ends. Nothing is shared until you allow it.
You can see every agent you have connected, and revoke any of them, when you are signed in to BookMy.Shop. A revoked agent is refused at once. Bookings it already made stay yours.
For shops: switching bookings through agents off
The owner or an admin of a shop can turn off the setting "Take bookings through agents" in Settings, under "Bookings through agents". It is on unless you turn it off.
While it is off, agents can still show your profile, services, staff and free times, but cannot hold, book or reschedule a time: they send customers to your Booking Page instead. Times held before you turned it off can still be confirmed, and cancellations still go through. Your Booking Page is not affected.
Registered agents
Every registered agent is listed in the Agent Client Registry with the company that runs it, the date it registered and whether it is active or blocked. We block an agent that misbehaves.
For agent developers
Agents connect over the Model Context Protocol (MCP). Two addresses serve the same tools.
- For any agent (no connection needed)
https://api.dev.bookmy.shop/public/agent/mcp- For an agent you connect
https://api.dev.bookmy.shop/public/agent/mcp/connected
Use the second address when an agent should act for a customer: it always asks the customer to connect first (OAuth 2.1 with dynamic client registration), then works with that connection. The first address offers the public tools without a connection.
Tool names, descriptions and refusals are in English.
To act under your own name and appear in the registry, register your agent: send its display name, your company's legal name and a contact email, as JSON fields displayName, operatorLegalName and contactEmail, in a POST to this address.
- Registration address
POST https://api.dev.bookmy.shop/public/agent-clients
We email a confirmation link to the contact address. Open it and confirm: your client id and client secret are shown once. Send them as the headers X-Agent-Client-Id and X-Agent-Client-Secret on every call.
A registration that is not confirmed within 7 days lapses, and its name is free again. The contact email is never shown in the registry.