agent-dlocal

investigate returns a verdict, not a dump — plus a terminal flag saying whether the state is final, next_steps, and the evidence it drew on

Read-only by construction — every command is a GET and the raw api group has no --method flag; the guarantee is an absent code path, not a check

Reads the status triple properly — status, status_code and status_detail disagree in useful ways, and the detail carries the reason

Calls out DELIVERED — a payout status that is neither final nor a failure, and the one most often misread

Merchant order_id resolves to a dLocal payment — the "they say they paid, our order says unpaid" question, answered directly

Multi-market in one call — payment-methods list PH VN TH returns one record per country, in input order

Market discovery without an endpoint — countries probes all 43 markets in about a second, since dLocal has no list-countries API

payer.document redacted by default — CPF, CUIT and DNI are national ID numbers; --expose opts out per invocation

Native OS dialogs per secret — X-Login, X-Trans-Key and the secret key go keyboard-to-keychain, one titled dialog each

Live vs sandbox is recorded, never guessed — dLocal keys carry no test/live marker, so it is an explicit host distinction on the profile

Optional mutual TLS — --cert/--key take paths, and the files stay under your own permissions