agentscore · vvillait88 · Jun 3, 2026 · Jun 3, 2026
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
@@ -24,7 +24,7 @@ Examples of unacceptable behavior:
 
 ## Enforcement
 
-Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the project team at engineering@agentscore.sh. All complaints will be reviewed and investigated promptly and fairly.
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the project team at engineering@agentscore.com. All complaints will be reviewed and investigated promptly and fairly.
 
 ## Attribution
 

diff --git a/README.md b/README.md
@@ -3,7 +3,7 @@
 [![PyPI version](https://img.shields.io/pypi/v/agentscore-commerce.svg)](https://pypi.org/project/agentscore-commerce/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
-The full merchant-side SDK for [AgentScore](https://agentscore.sh) in Python: agent commerce in one install. Identity middleware (FastAPI, Flask, Django, AIOHTTP, Sanic, ASGI), payment helpers, 402 challenge builders, MPP discovery, and Stripe multichain support.
+The full merchant-side SDK for [AgentScore](https://agentscore.com) in Python: agent commerce in one install. Identity middleware (FastAPI, Flask, Django, AIOHTTP, Sanic, ASGI), payment helpers, 402 challenge builders, MPP discovery, and Stripe multichain support.
 
 ## Install
 
@@ -527,7 +527,7 @@ The [examples/](./examples) directory has 8 runnable single-file FastAPI apps co
 
 ## Documentation
 
-Full integration docs at [docs.agentscore.sh/integrations/python-commerce](https://docs.agentscore.sh/integrations/python-commerce).
+Full integration docs at [docs.agentscore.com/integrations/python-commerce](https://docs.agentscore.com/integrations/python-commerce).
 
 ## License
 

diff --git a/SECURITY.md b/SECURITY.md
@@ -6,7 +6,7 @@ If you discover a security vulnerability, please report it responsibly.
 
 **Do not open a public GitHub issue for security vulnerabilities.**
 
-Instead, email us at **security@agentscore.sh** with:
+Instead, email us at **security@agentscore.com** with:
 
 - Description of the vulnerability
 - Steps to reproduce

diff --git a/agentscore_commerce/checkout.py b/agentscore_commerce/checkout.py
@@ -372,7 +372,7 @@ class CheckoutGateConfig:
 
     api_key: str
     """AgentScore API key. Required when ``run_gate`` is omitted."""
-    base_url: str = "https://api.agentscore.sh"
+    base_url: str = "https://api.agentscore.com"
     """AgentScore API base URL. Override for self-hosted / staging deployments."""
     merchant_name: str | None = None
     """Surfaced on auto-minted verification sessions (``product_name`` field) so
@@ -1560,7 +1560,7 @@ async def _run_wallet_sanctions_only(self, ctx: CheckoutContext) -> CheckoutResu
           - ``AGENTSCORE_API_KEY`` — required. No key → one-time warning + skip
             (dev/testnet pattern; production should always configure a key).
           - ``AGENTSCORE_BASE_URL`` — optional override for staging/dev API
-            (e.g. ``https://api-dev.agentscore.sh`` or ``http://localhost:3002``).
+            (e.g. ``https://api-dev.agentscore.com`` or ``http://localhost:3002``).
 
         Stripe SPT (no extractable wallet signer) → skip silently; Stripe runs
         its own OFAC screen on the buyer's Stripe account at customer creation.

diff --git a/agentscore_commerce/discovery/agentscore_content.py b/agentscore_commerce/discovery/agentscore_content.py
@@ -133,7 +133,7 @@ def build_agentscore_onboarding_steps(
         "`opc_...` token returns 403 `wallet_signer_mismatch`; the body lists `linked_wallets[]` and "
         "`agent_instructions.action: resign_or_switch_to_operator_token` with three deterministic "
         "recoveries (switch to a linked wallet, drop the operator_token to re-KYC the new wallet, "
-        "or pre-claim the new wallet via SIWE on agentscore.sh/verify)."
+        "or pre-claim the new wallet via SIWE on agentscore.com/verify)."
     )
     rail_count = len(accepted_rails)
     rail_plural = "" if rail_count == 1 else "s"

diff --git a/agentscore_commerce/identity/_denial.py b/agentscore_commerce/identity/_denial.py
@@ -85,7 +85,7 @@ def build_signer_mismatch_body(
     if result.kind == "pass":
         return None
 
-    learn_more = learn_more_url or "https://docs.agentscore.sh/guides/agent-identity"
+    learn_more = learn_more_url or "https://docs.agentscore.com/guides/agent-identity"
 
     if result.kind == "wallet_signer_mismatch":
         linked = result.linked_wallets or []
@@ -169,7 +169,7 @@ def verification_agent_instructions(
     """
     base_steps = [
         "Present the verify_url directly to the user — it is a complete, ready-to-open URL with the session "
-        "token already embedded (e.g. https://agentscore.sh/verify?session=sess_...). "
+        "token already embedded (e.g. https://agentscore.com/verify?session=sess_...). "
         "Do NOT modify or construct the URL yourself.",
         f"Immediately begin polling poll_url every {poll_interval_seconds} seconds with header X-Poll-Secret "
         "set to poll_secret. The user will complete verification in their browser while you poll in the background.",

diff --git a/agentscore_commerce/identity/_response.py b/agentscore_commerce/identity/_response.py
@@ -67,9 +67,9 @@
                 "with the user, then poll poll_url every 5s with the X-Poll-Secret header "
                 "until status=verified (the poll returns a one-time operator_token). If the "
                 "retry returns the same bare 403, this merchant does not support self-service "
-                "session bootstrapping — direct the user to https://agentscore.sh/sign-up to "
+                "session bootstrapping — direct the user to https://agentscore.com/sign-up to "
                 "create an AgentScore identity and mint an operator_token from their "
-                "dashboard (https://agentscore.sh/dashboard/verify). The user hands the "
+                "dashboard (https://agentscore.com/dashboard/verify). The user hands the "
                 "opc_... to you, and you retry with X-Operator-Token."
             ),
         ],

diff --git a/agentscore_commerce/identity/aiohttp.py b/agentscore_commerce/identity/aiohttp.py
@@ -130,7 +130,7 @@ def agentscore_gate_middleware(
     allowed_jurisdictions: list[str] | None = None,
     fail_open: bool = False,
     cache_seconds: int = 300,
-    base_url: str = "https://api.agentscore.sh",
+    base_url: str = "https://api.agentscore.com",
     chain: str | None = None,
     user_agent: str | None = None,
     extract_identity: Callable[[web.Request], AgentIdentity | None] | None = None,

diff --git a/agentscore_commerce/identity/core.py b/agentscore_commerce/identity/core.py
@@ -51,7 +51,7 @@
 
 _log = logging.getLogger(__name__)
 
-DEFAULT_BASE_URL = "https://api.agentscore.sh"
+DEFAULT_BASE_URL = "https://api.agentscore.com"
 DEFAULT_CACHE_SECONDS = 300
 
 
@@ -79,7 +79,7 @@ def __init__(
         user_agent: str | None = None,
     ) -> None:
         if not api_key:
-            msg = "AgentScore API key is required. Get one at https://agentscore.sh/sign-up"
+            msg = "AgentScore API key is required. Get one at https://agentscore.com/sign-up"
             raise ValueError(msg)
 
         self.fail_open = fail_open

diff --git a/agentscore_commerce/identity/django.py b/agentscore_commerce/identity/django.py
@@ -126,7 +126,7 @@ def __init__(self, get_response: Any) -> None:
             allowed_jurisdictions=config.get("allowed_jurisdictions"),
             fail_open=config.get("fail_open", False),
             cache_seconds=config.get("cache_seconds", 300),
-            base_url=config.get("base_url", "https://api.agentscore.sh"),
+            base_url=config.get("base_url", "https://api.agentscore.com"),
             chain=config.get("chain"),
             user_agent=config.get("user_agent"),
         )

diff --git a/agentscore_commerce/identity/fastapi.py b/agentscore_commerce/identity/fastapi.py
@@ -160,7 +160,7 @@ def __init__(
         allowed_jurisdictions: list[str] | None = None,
         fail_open: bool = False,
         cache_seconds: int = 300,
-        base_url: str = "https://api.agentscore.sh",
+        base_url: str = "https://api.agentscore.com",
         chain: str | None = None,
         user_agent: str | None = None,
         extract_identity: Callable[[Request], AgentIdentity | None] | None = None,

diff --git a/agentscore_commerce/identity/flask.py b/agentscore_commerce/identity/flask.py
@@ -134,7 +134,7 @@ def agentscore_gate(
     allowed_jurisdictions: list[str] | None = None,
     fail_open: bool = False,
     cache_seconds: int = 300,
-    base_url: str = "https://api.agentscore.sh",
+    base_url: str = "https://api.agentscore.com",
     chain: str | None = None,
     user_agent: str | None = None,
     extract_identity: Callable[[Request], AgentIdentity | None] | None = None,

diff --git a/agentscore_commerce/identity/middleware.py b/agentscore_commerce/identity/middleware.py
@@ -143,7 +143,7 @@ def __init__(
         allowed_jurisdictions: list[str] | None = None,
         fail_open: bool = False,
         cache_seconds: int = 300,
-        base_url: str = "https://api.agentscore.sh",
+        base_url: str = "https://api.agentscore.com",
         chain: str | None = None,
         user_agent: str | None = None,
         extract_identity: Callable[[Request], AgentIdentity | None] | None = None,

diff --git a/agentscore_commerce/identity/policy.py b/agentscore_commerce/identity/policy.py
@@ -82,7 +82,7 @@ def build_gate_from_policy(
     policy: Mapping[str, Any] | None,
     *,
     api_key: str,
-    base_url: str = "https://api.agentscore.sh",
+    base_url: str = "https://api.agentscore.com",
     create_session_on_missing: CreateSessionOnMissing | None = None,
 ) -> AgentScoreGate | None:
     """Build a per-request :class:`AgentScoreGate` from a :class:`PolicyBlock`-shaped mapping.

diff --git a/agentscore_commerce/identity/sanic.py b/agentscore_commerce/identity/sanic.py
@@ -131,7 +131,7 @@ def agentscore_gate(
     allowed_jurisdictions: list[str] | None = None,
     fail_open: bool = False,
     cache_seconds: int = 300,
-    base_url: str = "https://api.agentscore.sh",
+    base_url: str = "https://api.agentscore.com",
     chain: str | None = None,
     user_agent: str | None = None,
     extract_identity: Callable[[Request], AgentIdentity | None] | None = None,

diff --git a/agentscore_commerce/identity/sessions.py b/agentscore_commerce/identity/sessions.py
@@ -43,7 +43,7 @@ class CreateSessionOnMissing:
     """
 
     api_key: str
-    base_url: str = "https://api.agentscore.sh"
+    base_url: str = "https://api.agentscore.com"
     context: str | None = None
     product_name: str | None = None
     # Per-request override of context / product_name. Receives the framework request

diff --git a/agentscore_commerce/identity/types.py b/agentscore_commerce/identity/types.py
@@ -140,7 +140,7 @@ class SignerVerdict:
 
 # Canonical production AgentScore API; agent memory pointers are always hardcoded to this
 # value regardless of how a given merchant configured their gate.
-_CANONICAL_AGENTSCORE_API = "https://api.agentscore.sh"
+_CANONICAL_AGENTSCORE_API = "https://api.agentscore.com"
 
 
 def build_agent_memory_hint() -> AgentMemoryHint:
@@ -161,7 +161,7 @@ def build_agent_memory_hint() -> AgentMemoryHint:
             "per site. Save this pattern (and the endpoints below) to persistent memory so future "
             "AgentScore encounters skip the cold-start session flow."
         ),
-        quickstart="https://docs.agentscore.sh/guides/agent-identity",
+        quickstart="https://docs.agentscore.com/guides/agent-identity",
         identity_check_endpoint=f"{api}/v1/credentials",
         identity_paths={
             "wallet": (

diff --git a/agentscore_commerce/identity/ucp.py b/agentscore_commerce/identity/ucp.py
@@ -40,8 +40,8 @@
 to find verified-buyer claims attached to the profile."""
 
 _AGENTSCORE_CAPABILITY_VERSION = "2026-04-08"
-_AGENTSCORE_DEFAULT_SPEC_URL = "https://agentscore.sh/specification/identity"
-_AGENTSCORE_DEFAULT_SCHEMA_URL = "https://agentscore.sh/schemas/ucp/sh-agentscore-identity-v1.json"
+_AGENTSCORE_DEFAULT_SPEC_URL = "https://agentscore.com/specification/identity"
+_AGENTSCORE_DEFAULT_SCHEMA_URL = "https://agentscore.com/schemas/ucp/sh-agentscore-identity-v1.json"
 
 
 @dataclass
@@ -475,8 +475,8 @@ async def ucp_profile():
 # these constants; bumping a handler spec version is a one-line change here.
 
 _HANDLER_VERSION = "2026-04-08"
-_SPEC_BASE = "https://agentscore.sh/specification/payment-handlers"
-_SCHEMA_BASE = "https://agentscore.sh/schemas/payment-handlers"
+_SPEC_BASE = "https://agentscore.com/specification/payment-handlers"
+_SCHEMA_BASE = "https://agentscore.com/schemas/payment-handlers"
 
 
 # CAIP-2 → UCP-namespace network-name mapping. UCP payment_handler bindings publish

diff --git a/pyproject.toml b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentscore-commerce"
-version = "2.4.0"
+version = "2.4.1"
 description = "Agent commerce SDK for Python — identity middleware (FastAPI, Flask, Django, AIOHTTP, Sanic, ASGI) + payment helpers + 402 builders + discovery + Stripe multichain. The full merchant-side toolkit for AgentScore-powered agent commerce."
 readme = "README.md"
 license = "MIT"
@@ -47,7 +47,7 @@ ucp = ["joserfc>=1.0.0,<2"]
 redis = ["redis>=5.0,<8"]
 
 [project.urls]
-Homepage = "https://agentscore.sh"
+Homepage = "https://agentscore.com"
 Repository = "https://github.com/agentscore/python-commerce"
 Issues = "https://github.com/agentscore/python-commerce/issues"
 

diff --git a/scripts/regenerate_cross_lang_fixtures.py b/scripts/regenerate_cross_lang_fixtures.py
@@ -81,8 +81,8 @@ def _tempo_handler(config: dict[str, Any] | None = None) -> UCPPaymentHandlerBin
     h = UCPPaymentHandlerBinding(
         id="tempo",
         version="2026-04-08",
-        spec="https://agentscore.sh/specification/payment-handlers/tempo",
-        schema="https://agentscore.sh/schemas/payment-handlers/tempo.json",
+        spec="https://agentscore.com/specification/payment-handlers/tempo",
+        schema="https://agentscore.com/schemas/payment-handlers/tempo.json",
     )
     if config is not None:
         h.config = config
@@ -93,8 +93,8 @@ def _x402_handler(networks: list[str]) -> UCPPaymentHandlerBinding:
     return UCPPaymentHandlerBinding(
         id="x402",
         version="2026-04-08",
-        spec="https://agentscore.sh/specification/payment-handlers/x402",
-        schema="https://agentscore.sh/schemas/payment-handlers/x402.json",
+        spec="https://agentscore.com/specification/payment-handlers/x402",
+        schema="https://agentscore.com/schemas/payment-handlers/x402.json",
         config={"networks": networks},
     )
 
@@ -103,8 +103,8 @@ def _stripe_handler(config: dict[str, Any]) -> UCPPaymentHandlerBinding:
     return UCPPaymentHandlerBinding(
         id="stripe",
         version="2026-04-08",
-        spec="https://agentscore.sh/specification/payment-handlers/stripe_spt",
-        schema="https://agentscore.sh/schemas/payment-handlers/stripe_spt.json",
+        spec="https://agentscore.com/specification/payment-handlers/stripe_spt",
+        schema="https://agentscore.com/schemas/payment-handlers/stripe_spt.json",
         config=config,
     )
 
@@ -160,8 +160,8 @@ def main() -> None:
     key = generate_ucp_signing_key(kid=kid)
     custom_capability = UCPCapabilityBinding(
         version="2026-04-08",
-        spec="https://agentscore.sh/specification/identity",
-        schema="https://agentscore.sh/schemas/ucp/sh-agentscore-identity-v1.json",
+        spec="https://agentscore.com/specification/identity",
+        schema="https://agentscore.com/schemas/ucp/sh-agentscore-identity-v1.json",
         # `extras` flat on the binding — kyc_required is a vendor field on this binding.
         extras={"kyc_required": True},
     )

diff --git a/tests/fixtures/cross-lang/node-agentscore-gate-blocked.json b/tests/fixtures/cross-lang/node-agentscore-gate-blocked.json
@@ -17,8 +17,8 @@
         "sh.agentscore.identity": [
           {
             "version": "2026-04-08",
-            "spec": "https://agentscore.sh/specification/identity",
-            "schema": "https://agentscore.sh/schemas/ucp/sh-agentscore-identity-v1.json",
+            "spec": "https://agentscore.com/specification/identity",
+            "schema": "https://agentscore.com/schemas/ucp/sh-agentscore-identity-v1.json",
             "extends": [
               "dev.ucp.shopping.checkout",
               "dev.ucp.shopping.cart"
@@ -44,10 +44,10 @@
         "use": "sig",
         "crv": "Ed25519",
         "kty": "OKP",
-        "x": "ffpNqM2SBHyKorvO-lDKzycyMdh4AgMiOZsFjxj-hPU"
+        "x": "fKt6WDOqMtq19Y54WoVAO_vQDdST3NzL_GJmnezESgI"
       }
     ],
-    "signature": "eyJhbGciOiJFZERTQSIsImtpZCI6Im5vZGUtYWdlbnRzY29yZS1nYXRlLWJsb2NrZWQtRWREU0EiLCJ0eXAiOiJhZ2VudHNjb3JlLXByb2ZpbGUrandzIn0.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.wLBzWguXqHRyyD3md8nfKxdr2ge5eo7UfsYZ8yqArNay_lFx-q41T06FJCu0akan6hrjYoPymMVoDrHLD-GRAg"
+    "signature": "eyJhbGciOiJFZERTQSIsImtpZCI6Im5vZGUtYWdlbnRzY29yZS1nYXRlLWJsb2NrZWQtRWREU0EiLCJ0eXAiOiJhZ2VudHNjb3JlLXByb2ZpbGUrandzIn0.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.63QksVl3PkaQ6aXNygKCL2ozIgTl_k_Onh0aiJasU7ErRNENJ5MZSMz2_mGoxtEcgV-5kI1ri1sjLGIF3wDiBA"
   },
   "jwks": {
     "keys": [
@@ -57,7 +57,7 @@
         "use": "sig",
         "crv": "Ed25519",
         "kty": "OKP",
-        "x": "ffpNqM2SBHyKorvO-lDKzycyMdh4AgMiOZsFjxj-hPU"
+        "x": "fKt6WDOqMtq19Y54WoVAO_vQDdST3NzL_GJmnezESgI"
       }
     ]
   },