# Next Session: Prototype Setu UPI Deeplinks MCP for Annie Payments

## Context
Session 398 (2026-04-03) completed deep research on Razorpay MCP, Pine Labs, and the agentic payments landscape. Key finding: **Setu UPI Deeplinks MCP** (`pip install setu_mcp_upi_deeplinks`) is the most actionable discovery — 5 tools, FREE, purpose-built for creating UPI payment links with webhook confirmation.

## Research Docs (read these first)
- `docs/RESEARCH-RAZORPAY-MCP.md` — Razorpay MCP: 45+ tools, 100% merchant-only, useless for Annie spending. Agentic Payments (UPI Reserve Pay) = closed pilot.
- `docs/RESEARCH-PINE-LABS-DEVELOPER-ECOSYSTEM.md` — Pine Labs: dev productivity MCP only. Setu BBPS agent = bills only. Agentic SDK = empty repo.
- `docs/RESEARCH-AGENTIC-PAYMENTS.md` (v2, 500+ lines) — Full landscape. **Setu UPI Deeplinks MCP** is the gem. Also: Mastercard Agent Pay LIVE, RBI 2FA effective Apr 1 2026.

## What to Do

### 1. Prototype Setu UPI Deeplinks MCP
- `pip install setu_mcp_upi_deeplinks` and explore what tools it exposes
- Can Annie create a UPI payment link for a specific amount (e.g., Zomato order total)?
- Can the link be sent via Telegram to Rajesh?
- Does Setu provide webhook confirmation when Rajesh pays?
- What Setu account/API keys are needed? Is there a sandbox?
- Compare: Setu UPI Deeplinks vs raw `upi://pay?...` deep links vs Razorpay payment links

### 2. Test Zomato UPI QR Extraction
- Zomato `checkout_cart` returns UPI QR data — can Annie extract the QR image and send it via Telegram?
- This is an alternative to Setu: Zomato-native payment flow

### 3. Remaining Food Ordering Tasks
- Zepto + Blinkit login on Pixel
- Test Instamart `your_go_to_items` (restock feature)
- Test Dineout table booking (`mcp.swiggy.com/dineout`, 8 tools)
- Build Telegram ordering UX

## Architecture (unchanged)
- **MCP = intelligence** (search, menu, coupons, history, cart reading)
- **ADB = execution** (cart building, navigating to payment)
- **Human-in-the-loop = payment** (UPI deep link via Telegram OR Setu payment link OR Zomato UPI QR)
- NEW option: Setu UPI Deeplinks MCP could replace the ADB payment step with a cleaner link-based flow

## Key Constraint
RBI 2FA (effective April 1, 2026): Fully autonomous zero-auth agent payments are ILLEGAL in India. Every payment flow must have a human tap/approval step.