TopoloP2P

Public overview of Topolo's cross-organization capability network for human and agent business actions and settlement.

publicverified 2026-07-29p2pagentsnetworkpayments

What It Is

TopoloP2P is the Topolo network layer for organizations that want their people and agents to transact with other organizations safely. It turns a public directory of capabilities into a governed action rail with policy checks, approvals, ledgering, and payment settlement.

Architecture

Organizations publish capabilities through Topolo Developers. Other organizations discover those capabilities through TopoloOne and request work through TopoloP2P. Topolo Auth verifies the human or agent employee making the request, TopoloP2P applies org policy, TopoloOne handles approvals, and TopoloPay executes payment settlement when value needs to move.

Runtime Surfaces

The planned production host is https://p2p.topolo.app. The isolated staging host is https://p2p.stg.topolo.us. Public discovery is expected to appear through TopoloOne at https://topolo.io/directory.

API Reference

The public API is not generally available yet. The internal route contract is documented in /internal/platform/p2p-protocol.

Auth and Permissions

TopoloP2P uses Topolo Auth for organization identity, human employee identity, agent employee identity, grants, scopes, and approval policy. Agents can initiate requests, but organization policy decides whether the request is accepted automatically, needs human approval, or is rejected. The app resolves its Auth app identity from the topolo-p2p service slug at runtime.

Data Ownership

Topolo Auth owns workspace identity and accessible-workspace listing. TopoloP2P keeps identity-only workspace mirrors as foreign-key parents for workspace-scoped action, ledger, settlement, and audit rows; it cannot author workspace names or slugs. TopoloP2P owns cross-organization action requests, policy decisions, immutable ledger entries, settlement batches, and audit events. TopoloPay owns Stripe-backed settlement execution. Topolo Developers owns the source capability listings.

Deployments

TopoloP2P will deploy as a Cloudflare-backed first-party application. The canonical deployment metadata lives in the TopoloP2P system registry and CloudControl manifest.

Failure Modes

  • a paid action executes without the organization's configured approval policy
  • an agent bypasses P2P and calls another organization's app directly
  • settlement state is inferred from P2P ledger state instead of TopoloPay payment state

Debugging

Start from the P2P request id. For money movement, inspect TopoloPay settlement state before debugging Stripe.

Use It

Open TopoloP2P for the human product surface. The system handbook records its current hosts, ownership, Auth scopes, storage, deployment, failure modes, and machine artifact.

Discover the credential-scoped automation surface before making an API call:

topolo services --query topolo-p2p --json
topolo actions --service topolo-p2p --json
topolo actions capabilities --service topolo-p2p --json

Choose an action, inspect it with topolo actions get <action-id> --json, then validate and plan a published example. The Agent Actions reference exposes the same public schemas, effects, examples, verification, and recovery guidance.

Example workflow:

  1. Confirm the active identity and organization with topolo whoami --json.
  2. Discover TopoloP2P and select one published action rather than guessing a route.
  3. Inspect its input/output schemas and published example.
  4. Validate and plan the exact payload; obtain confirmation for a mutation.
  5. Execute and perform every published verification step.

Change Log / Verification

  • Reconciled the Auth-owned workspace identity mirror and split deployment topology through system-apps/TopoloP2P origin/staging 9d220da3c416 on 2026-07-29; the retired aggregate migration/config paths are no longer part of the product contract.

  • Reconciled workspace verification on 2026-06-28 against system-apps/TopoloP2P commits through ec04075; reviewed 281 commits since 2026-05-14, including ec04075 chore(deps): refresh @topolo-io/app-shell pins (package.json + lockfile); 1f0d15f Split P2P workspace tab bundles; ca497d5 Adopt canonical Topolo typography; 6a1edb4 Roll out ui-kit capture startup split.

  • 2026-04-29 — Clarified the human-and-agent scope and recorded the isolated staging host for pre-production verification.

  • 2026-05-13 — Verified P2P runtime app identity is resolved from Auth by slug instead of hardcoded in browser or Worker config.

  • 2026-04-28 — Initial public P2P overview added for the planned cross-organization action and settlement network.