# RoamNow agent access policy

Agents may crawl public discovery pages, /catalogue.html, and the machine-readable catalogue for user-requested travel eSIM selection.
Use only current data from /api/agent/v1/catalogue or /pricing.json. Never infer coverage or quote unavailable products.
Approved channel integrations may use Bearer-authenticated /api/agent/v1/quotes, /api/agent/v1/checkout-sessions, and scoped /api/agent/v1/orders/{checkout_intent_id}.
Checkout creation requires explicit user confirmation, an opaque delegation reference, and an Idempotency-Key; Stripe payment remains a human action.
Do not access /admin, /access, /my-esim, /account, /checkout, /api/customer, /api/webhooks, or /api/jobs.
Do not claim live service while capabilities.json reports sandbox mode.