Wever Labs Agent Products

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Agent commerce: 27 tools, 10 production services, signed authority, planning, Base USDC x402.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Wever Labs Agent Products": {
      "url": "https://weverlabs.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (57)

• wever_delegated-authority destructive

  Paid URL: 2.00 USDC per mandate on Base; 10 signed-wallet free calls shared over rolling 30 days. Only issue_mandate is billed; GET, contract reads, drafts and all other modes have no x402 fee. Credentials and grants remain required for their existing operations. Read the backend 402 body for x402 terms. Issue signed mandates and approve an exact action. The named agent uses its grant to create an immutable work-order record. Operating boundary: The operator issues a mandate, then approves an action grant lasting up to 300 seconds. The credentialed agent consumes the grant once to create one work-order record. Inspect the same grant until its result is final. Mandate issuance costs 2 USDC after the free calls are used, except that Wever absorbs the issuance cost of a mandate whose every scope is money_back_case during the money-back operator launch. Reads, drafts, the public read-only inspect_mandate status check and other authority modes use their existing credentials at no access fee. Work execution, delivery and payment each use their own service. POST /api/delegated-authority. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a credentialed authority control plane for immutable work-order record creation. It does not execute the recorded work, deliver results, or authorize payment. Operator issuance and grant approval require X-Wever-Operator-Key and Idempotency-Key; consumption requires the target agent's X-Wever-Agent-Key. Usage and attribution come from validated credentials and durable authority records. AP2 issuance also accepts issue_mandate with mandate.profile com.weverlabs.ap2.direct-checkout.1, the holder public key, signed checkout challenge, consent digest and bounded expiry. It requires a dedicated AP2 issuer credential in X-Wever-Operator-Key, Idempotency-Key and a fresh holder wallet proof. Issuance costs 2.00 USDC per issued mandate; verification at /api/ap2-mandate-gateway costs 0.10 USDC per call, subject to the same shared free allowance. The AP2 mandate records checkout intent and grants no tool access, execution authority or spending authority.

  Parameters:

  • mode (required)

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_agent-paid-workflow

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Turn a task into an ordered plan of supported computations, with the fields needed for each step. Operating boundary: Supply the task and supported steps. Read the ordered plan and required fields. An agent submits each prepared step through its listed service; a human reviews the sequence and budget first. POST /api/agent-paid-workflow. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a bounded computation on caller-supplied data.

  Parameters:

  • mode (required)
  • agent_id (required) — string
  • product_key (required)
  • constraints (required) — object

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_unified-agent-checkout

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Itemize caller-supplied USD estimates and calculate a total for supported computations. Operating boundary: Supply computation items and your USD estimates. Read the itemized total. An agent carries the estimate into its work plan; a human compares the items before requesting a provider checkout. POST /api/unified-agent-checkout. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a bounded computation on caller-supplied data.

  Parameters:

  • mode (required)
  • agent_id (required) — string
  • currency (required)
  • items (required) — array
  • payment_reference (required)
  • allowance_reference (required)

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_diligenceops-paid-run

  Paid URL: 1.00 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Free computation: /api/mcp or /api/service-resolver. Read the backend 402 body for x402 terms. Compare submitted evidence labels with the required list and return matched and missing items. Operating boundary: Supply required and available evidence labels. Read matched and missing labels. An agent uses the result to request the missing items; a human reviews the list and checks the documents. Direct runs cost 1 USDC after the shared free allowance; the Labs MCP and resolver computation paths are free. POST /api/diligenceops-paid-run. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a bounded computation on caller-supplied data.

  Parameters:

  • available_evidence (required) — array
  • expected_evidence (required) — array

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_receipt-passport destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Issue and verify signed receipt passports backed by completed, wallet-owned Wever computation records. Operating boundary: Issue and verify signed receipt passports backed by completed, wallet-owned Wever computation records. Agents issue or verify a passport after a completed run; humans inspect its receipt and linked artifacts. Sign wallet ownership proof for each request. POST /api/receipt-passport. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. Wallet-authenticated durable trust service. Signed records attest only to the stated evidence and permission scope. See /api/trust-contract for the public verification key and bounded contract.

  Parameters:

  • mode (required)
  • work
  • usage
  • passport — string
  • idempotency_key — string

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_return-package-viewer destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Retrieve a wallet-owned completed Wever computation from durable billing records, including its exact result and verified digest. Operating boundary: Provide the completed computation ID from your wallet to retrieve its retained result and content digest. The response includes the record status and available evidence. POST /api/return-package-viewer. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. Wallet-authenticated bounded operations service with durable records. See /api/operations-contract for exact schemas, verified scope and unavailable capabilities.

  Parameters:

  • mode (required)
  • work (required)

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_agent-allowance-console

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Preview whether an action fits the supplied scope, budget, usage, expiry and fee limits. Operating boundary: Supply the policy, usage and proposed action. Read the preview and reasons. An agent uses them to prepare the next request; a human adjusts the policy or approves the action through its service. POST /api/agent-allowance-console. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a bounded computation on caller-supplied data.

  Parameters:

  • mode (required)
  • agent_id (required) — string
  • allowed_product_keys (required) — array
  • requested_product_key (required) — string
  • currency (required)
  • budget_minor (required) — integer
  • spent_minor (required) — integer
  • requested_fee_minor (required) — integer
  • max_fee_minor (required) — integer
  • max_runs (required) — integer
  • used_runs (required) — integer
  • expires_at (required) — string
  • as_of (required) — string

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_callback-health-monitor destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Send a bounded HTTPS callback probe and persist the actual response, timing and exact acknowledgment check. Retrieve prior observations without resending. Operating boundary: Supply one public HTTPS callback URL and the acknowledgment you expect. The service makes one request, saves its timing and response, and lets you retrieve that observation later. Each new probe is an explicit call. POST /api/callback-health-monitor. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. Wallet-authenticated bounded operations service with durable records. See /api/operations-contract for exact schemas, verified scope and unavailable capabilities.

  Parameters:

  • mode (required)
  • usage
  • probe_id — string
  • callback_url — string
  • idempotency_key — string

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_agent-work-order-exchange

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Validate a task with a local dry run, then prepare the POST request for its supported computation. Operating boundary: Choose a supported computation and supply its task fields. Review validation and the prepared POST request. The agent submits that request to the named endpoint; the human reviews the task and result. POST /api/agent-work-order-exchange. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a bounded computation on caller-supplied data.

  Parameters:

  • mode (required)
  • requesting_agent_id (required) — string
  • product_key (required)
  • requested_outcome (required) — string
  • task (required) — object

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_agent-budget-guard

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Compare a proposed request with the policy, usage and budget values you supply and return an allow-or-deny preview. Operating boundary: Supply policy, usage and request values. Read the preview and reasons. An agent checks the preview before the payment flow; a human sets the budget and approves any exception. POST /api/agent-budget-guard. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current money service follows its published inspection, policy evaluation or private invoice contract. Payment is an API access fee and grants no spending authority.

  Parameters:

  • mode (required)
  • agent_id (required) — string
  • policy (required) — object
  • usage (required) — object
  • request (required) — object

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_agent-sla-rail destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Record wallet-scoped SLA terms and evaluate deadlines against retained completed-work or callback observations. Operating boundary: Save your wallet’s service terms and deadlines, then evaluate them against retained work and callback observations. Read the result to identify completed and overdue commitments. POST /api/agent-sla-rail. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. Wallet-authenticated bounded operations service with durable records. See /api/operations-contract for exact schemas, verified scope and unavailable capabilities.

  Parameters:

  • mode (required)
  • label — string
  • usage
  • sla_id — string
  • deadline_at — integer
  • retry_limit — integer
  • callback_url
  • expected_work
  • idempotency_key — string
  • callback_probe_id

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_agent-trust-scorecard destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Compute a bounded trust score from verified completed work, Base payment receipts and Wever escrow refunds, disclosing all inputs and unavailable dispute coverage. Operating boundary: Compute a bounded trust score from verified completed work, Base payment receipts and Wever escrow refunds, disclosing all inputs and unavailable dispute coverage. Agents compare the disclosed inputs; humans review the completed-work, payment and refund evidence. Scores summarize the records covered by this service. Sign wallet ownership proof for each request. POST /api/agent-trust-scorecard. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. Wallet-authenticated durable trust service. Signed records attest only to the stated evidence and permission scope. See /api/trust-contract for the public verification key and bounded contract.

  Parameters:

  • mode (required)
  • completed_work (required) — array
  • payments (required) — array

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_payment-authority-inspector

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Inspect a canonical Base USDC transaction receipt for the configured Wever recipient and return the observed payment details. Operating boundary: Supply the receipt reference. Read the chain, recipient, amount and verification result. An agent links the receipt to its work record; a human inspects the same transaction details. POST /api/payment-authority-inspector. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current money service follows its published inspection, policy evaluation or private invoice contract. Payment is an API access fee and grants no spending authority.

  Parameters:

  • mode (required)
  • transaction_hash (required) — string
  • payer (required) — string
  • payee (required) — string
  • amount_atomic (required) — string
  • authorization_nonce (required) — string
  • min_confirmations (required) — integer

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_x402-payment-gateway

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Check an EOA payment signature and read its Base USDC nonce, balance and chain time. Operating boundary: Supply the payment signature and its terms. Read the signature check, nonce, balance and chain time. An agent uses these observations before settlement; a human reviews the payment terms in the wallet. POST /api/x402-payment-gateway. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current money service follows its published inspection, policy evaluation or private invoice contract. Payment is an API access fee and grants no spending authority.

  Parameters:

  • mode (required)
  • target_product (required)
  • payment (required) — object

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_ap2-mandate-gateway destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Verifies allowlisted AP2 direct closed-checkout mandates, binds the presenter to the holder wallet, rejects expiry and replay, and durably consumes each mandate once. Operating boundary: Submit a signed AP2 direct checkout mandate from a trusted provider. Sign wallet ownership proof as its holder. The gateway checks expiry and replay, binds the holder and records one-time consumption. Agents call the gateway; humans review the exact checkout intent and sign in their wallet. POST /api/ap2-mandate-gateway. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This gateway verifies only its published AP2 direct closed-checkout profile, requires a trusted issuer and holder wallet proof, and consumes the mandate once. It does not execute the checkout or transfer funds. Start at /api/ap2-contract and /api/ap2-challenge.

  Parameters:

  • mode (required)
  • presentation (required) — string
  • challenge_token (required) — string

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_agent-to-agent-handoff-pack destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Build and verify durable signed task handoff packs with authenticated sender, recipient, context, declared permissions and checkpoint state. Operating boundary: Build and verify durable signed task handoff packs with authenticated sender, recipient, context, declared permissions and checkpoint state. The sender builds a pack, the recipient verifies it and applies the declared permissions, and a human reviews the context and next step. Sign wallet ownership proof for each request. POST /api/agent-to-agent-handoff-pack. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. Wallet-authenticated durable trust service. Signed records attest only to the stated evidence and permission scope. See /api/trust-contract for the public verification key and bounded contract.

  Parameters:

  • mode (required)
  • task — object
  • state — object
  • usage
  • permissions — object
  • handoff_pack — string
  • idempotency_key — string
  • recipient_wallet — string

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_proof-inbox destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Store, list and retrieve durable verification proofs in a private authenticated wallet inbox. Operating boundary: Store, list and retrieve durable verification proofs in a private authenticated wallet inbox. Agents store and retrieve proofs by reference; humans inspect those records through their wallet-connected agent. Each proof keeps its verification status. Sign wallet ownership proof for each request. POST /api/proof-inbox. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. Wallet-authenticated durable trust service. Signed records attest only to the stated evidence and permission scope. See /api/trust-contract for the public verification key and bounded contract.

  Parameters:

  • mode (required)
  • limit — integer
  • proof — object
  • offset — integer
  • proof_id — string
  • idempotency_key — string

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_rail-playground destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Execute supported bounded Wever computations, measure their runs and compare actual outputs and caller-specified expectations. Operating boundary: Choose a supported Wever computation, supply input and expected results, then compare the actual output and timing. Sample acceptance inputs stay labeled as tests. POST /api/rail-playground. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. Wallet-authenticated bounded operations service with durable records. See /api/operations-contract for exact schemas, verified scope and unavailable capabilities.

  Parameters:

  • idempotency_key (required) — string
  • usage (required)
  • mode (required)
  • repeats (required) — integer
  • cases (required) — array

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_agent-escrow-lite destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Escrow principal and API-fee wallet: 0x69255FeaC86268C0D0bD0CBd128da7B9aB44b1c4. Principal funding is separate, and every call requires a signed wallet ownership proof. Managed Base USDC custody with verified funding, immutable parties, EIP-712 release policies, expiry refunds to the payer and a durable public release log. Operating boundary: Create an escrow with a fixed payer, payee, amount and expiry. Fund it with Base USDC, then use the signed release policy to pay the payee or receive an expiry refund as the payer. Agents call the escrow tools; humans review and sign the funding and release terms. API fees and escrow principal are separate amounts. POST /api/agent-escrow-lite. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This managed custody service uses immutable escrow parties and EIP-712 release policies. Releases pay only the payee; expiry refunds pay only the payer. Public logs report durable state and transaction evidence. Work-order grants do not authorize payment.

  Parameters:

  • mode (required)
  • terms — object
  • mandate — object
  • escrow_id — string
  • funding_payment
  • idempotency_key — string
  • payer_terms_signature — string

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_agent-invoice-rail destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Keep a private issuer-wallet ledger of invoice amounts, parties, run references and the issuer’s review. Operating boundary: Sign issuer-wallet ownership proof, create the invoice record and attach run references. The issuer reviews those references and records the result. Agents manage the ledger through the API; humans inspect it through their agent. Payment collection uses the separate Invoices product. POST /api/agent-invoice-rail. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current money service follows its published inspection, policy evaluation or private invoice contract. Payment is an API access fee and grants no spending authority.

  Parameters:

  • schema_version (required)
  • mode (required) — string
  • note — string
  • usage
  • decision
  • rail_key — string
  • expires_at — integer
  • invoice_id — string
  • description — string
  • run_binding — object
  • buyer_wallet — string
  • amount_atomic — string
  • buyer_reference — string
  • idempotency_key — string
  • expected_version — integer

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_agent-permission-ledger destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Persist wallet-scoped permission grants and revocations and evaluate an exact subject, action and resource against those records. Operating boundary: Record a permission grant or revocation for a subject, action and resource. Query those records to make an access decision in the target system. POST /api/agent-permission-ledger. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. Wallet-authenticated bounded operations service with durable records. See /api/operations-contract for exact schemas, verified scope and unavailable capabilities.

  Parameters:

  • mode (required)
  • limit — integer
  • usage
  • action — string
  • offset — integer
  • reason — string
  • actions — array
  • grant_id — string
  • resource — string
  • resources — array
  • expires_at — integer
  • subject_wallet — string
  • idempotency_key — string

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_agent-work-order-rail

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Free computation: /api/mcp or /api/service-resolver. Read the backend 402 body for x402 terms. Prepare a validated DiligenceOps task for a specific Connect recipient. Submission, recipient permission and execution remain separate steps. Operating boundary: Supply the DiligenceOps task and Connect recipient. Read the validated task package. The agent submits it through Connect with the recipient’s permission; the human reviews the requested work and returned result. POST /api/agent-work-order-rail. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a bounded computation on caller-supplied data.

  Parameters:

  • service_id (required)
  • recipient_id (required) — string
  • available_evidence (required) — array
  • expected_evidence (required) — array

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_agent-decision-packet-rail destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Evaluate supplied alternatives against explicit weighted numeric criteria and constraints, with transparent scores, evidence gaps and ties. Operating boundary: Submit alternatives, numeric criteria, weights and constraints. Read the resulting scores alongside missing evidence, failed constraints and tied alternatives. POST /api/agent-decision-packet-rail. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. Wallet-authenticated bounded operations service with durable records. See /api/operations-contract for exact schemas, verified scope and unavailable capabilities.

  Parameters:

  • idempotency_key (required) — string
  • usage (required)
  • mode (required)
  • objective (required) — string
  • criteria (required) — array
  • constraints (required) — array
  • options (required) — array

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_agent-file-desk-rail destructive

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Inspect supplied file bytes, compute content hashes, identify exact duplicates and report bounded content metadata. Operating boundary: Send inline file bytes in a supported format. The response includes content hashes, exact duplicates and metadata. The input schema lists size and format limits. POST /api/agent-file-desk-rail. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. Wallet-authenticated bounded operations service with durable records. See /api/operations-contract for exact schemas, verified scope and unavailable capabilities.

  Parameters:

  • idempotency_key (required) — string
  • usage (required)
  • mode (required)
  • files (required) — array

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_mcp-diligence-rail

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Free computation: /api/mcp or /api/service-resolver. Read the backend 402 body for x402 terms. Review submitted MCP tool declarations and list missing annotations and actions that change data or spend money. Operating boundary: Supply MCP tool declarations. Read the annotation inventory and review items. Agents compare the declared interfaces; humans review the actions and choose which tools to connect. POST /api/mcp-diligence-rail. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a bounded computation on caller-supplied data.

  Parameters:

  • tools (required) — array

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_agent-daily-operator-brief

  Paid URL: 0.25 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Free computation: /api/mcp or /api/service-resolver. Read the backend 402 body for x402 terms. Turn supplied service health and queue observations into a prioritized operator brief. Operating boundary: Supply service health and queue observations. Read the ordered priorities and their source observations. Agents prepare the brief; humans use it to choose the next operational task. POST /api/agent-daily-operator-brief. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a bounded computation on caller-supplied data.

  Parameters:

  • as_of (required) — string — A valid UTC calendar timestamp with whole seconds, supplied by the caller.
  • services (required) — array — Unique service_id values.
  • queues (required) — array — Unique queue names. Empty queues must have a null or zero oldest age.

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_proof-relay

  Paid URL: 0.10 USDC per call on Base; 10 signed-wallet free calls shared over rolling 30 days. Read the backend 402 body for x402 terms. Prepare a reference envelope and a digest binding the supplied source and destination, ready for the sender’s delivery step. Operating boundary: Supply source, destination and artifact references. Read the prepared envelope and binding digest. The sending agent delivers it through its chosen transport; the human reviews the references and resulting acknowledgment. POST /api/proof-relay. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a bounded computation on caller-supplied data.

  Parameters:

  • mode (required)
  • source_agent_id (required) — string
  • destination (required)
  • proof_references (required) — array

  Hints: read-only no · destructive no · idempotent no · open-world yes

• wever_referral-rail destructive

  Create a rail-signed WL-R-XXXXXX referral code, permanently attribute your own wallet with a signed code_token, inspect earnings, claim USDC, or verify a signed referral receipt. POST /api/referral-rail. Every call requires X-Wever-Wallet-Proof signed by the caller wallet and bound to the exact request body. Attribution requires the referee wallet proof, rejects self-referrals and permits only the first code. Earnings accrue from verified real payment and settlement records: 20 percent of eligible USDC paid for 12 months from the first attributed paid call. Claims reserve earnings and create a linked payout instruction for the authenticated referrer wallet, require a stable claim_id for retries, and allow 1.00 to 25.00 USDC per claim. Optional amount_usdc requests an exact amount within the available balance; omit it to claim the available balance up to 25 USDC. The treasury holder uses wever_payout-authorize and wever_payout-execute with AP2 holder binding v2 and separate EIP-712 spending consent. The dedicated payout wallet requires manual funding; the shared payout cap is 100 USDC per UTC day. Retry the original claim after execution to reconcile the confirmed transfer and obtain its receipt. Total outstanding accruals are capped at 200.00 USDC and fail closed beyond that cap. Attributions and confirmed payouts return record-backed, verifiable signed receipts. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. The payout wallet does not receive API fees or escrow principal. Read the backend 402 body and /api/referral-contract for the exact contract and public verification key. This adapter forwards only caller-supplied credentials and grants no spending authority.

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_subscription-rail destructive

  Prepay wallet-bound 30-day tool subscriptions. action=plans lists signed server-configured prices and terms. action=subscribe requires a stable 64-hex purchase_id and plan name; single-tool also requires the covered MCP tool name. Pay the quoted plan amount up front through x402 exact on Base mainnet. A shared free access call is reserved for checkout when available; otherwise the quote includes the 0.10 USDC rail access fee. Confirmed settlement returns a record-backed Ed25519 subscription receipt. action=status shows quota and cycle end. action=cancel marks cancellation at cycle end with no mid-cycle refund. Manual renewal requires a fresh subscribe after expiry; no stacking within one wallet and plan scope. Covered calls authenticate with X-Wever-Wallet-Proof. Fresh valid per-call authorizations from that same wallet also use quota; existing payment retries retain their recorded billing. Omit Payment-Signature for covered calls to avoid unnecessary payment verification. Expired or exhausted quota returns normal per-call 402. Subscription purchases and escrow principal never consume quota. auto_renew defaults false; true is rejected because the installed AP2 gateway cannot authorize recurring pulls or mandate revocation. cancel_auto_renew confirms no automatic mandate is held. verify_receipt checks both signature and durable wallet-owned record. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. POST /api/subscription-rail with a fresh exact-body wallet proof. Public keys, signed plans and terms: /api/subscription-contract.

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_atlas-asset-passport read-only

  Look up a covered tokenized asset by its id or ticker and return its full sourced Asset Passport, including taxonomy stage, six-field rights matrix, claim, backing, access, liquidity, risks and source trail. Reads the versioned Atlas reference dataset, not live market quotes. Each result preserves source dates and labels for provisional or unverified historical display data. POST /api/atlas-asset-passport. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. X-Wever-Wallet-Proof must bind to the exact JSON arguments and this API path, not /mcp. The adapter forwards only caller-supplied proof and payment headers. Authority is read-only: no dataset or external writes, asset trading, autonomous source fetches, spending authority or publication. API access billing is separate: it records free usage or settles an explicit caller-supplied payment authorization. Read /api/atlas-contract and the backend 402 body for exact schemas and billing terms.

  Parameters:

  • asset (required) — string — A covered Atlas asset id or ticker, case-insensitive. Example: paxg or PAXG.

  Hints: read-only yes · destructive no · idempotent no · open-world yes

• wever_atlas-asset-search read-only

  Search covered tokenized assets by literal text, category, stage or six rights filters and return paginated summaries with stage and rights. Empty arguments list all covered assets within the result limit. Reads the versioned Atlas reference dataset, not live market quotes. Each result preserves source dates and labels for provisional or unverified historical display data. POST /api/atlas-asset-search. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. X-Wever-Wallet-Proof must bind to the exact JSON arguments and this API path, not /mcp. The adapter forwards only caller-supplied proof and payment headers. Authority is read-only: no dataset or external writes, asset trading, autonomous source fetches, spending authority or publication. API access billing is separate: it records free usage or settles an explicit caller-supplied payment authorization. Read /api/atlas-contract and the backend 402 body for exact schemas and billing terms.

  Parameters:

  • limit — integer
  • query — string — Case-insensitive literal text search over sourced asset fields. Combined with category when both are supplied.
  • stage — integer — Exact taxonomy stage: 1 wrapper, 2 issuer-sponsored, 3 native issuance. All supplied filters are combined.
  • offset — integer
  • rights — object — Combine disclosed rights filters. Enumerated values match exactly. not disclosed matches missing public disclosure, not a negative right.
  • category — string — Case-insensitive exact category id or label from the dataset.

  Hints: read-only yes · destructive no · idempotent no · open-world yes

• wever_treasury-balance read-only

  Read a wallet's native USDC balance and ETH balance for gas visibility on Base mainnet. wallet_address must use the exact EIP-55 checksum. Reads public chain data only. Treasury arguments never accept private keys, signatures or transaction instructions; these tools cannot sign, submit transactions, transfer funds or spend. POST /api/treasury-balance. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. API access billing is separate from wallet visibility: the existing access layer processes caller-supplied payment and wallet-proof headers only. X-Wever-Wallet-Proof must bind to the exact JSON arguments and this API path, not /mcp. The inspected wallet need not be the access payer. Read /api/treasury-contract and the backend 402 body for schemas, coverage and billing terms.

  Parameters:

  • wallet_address (required) — string — Public Base wallet address in its exact EIP-55 checksum spelling. No ownership proof or secrets belong in tool arguments.

  Hints: read-only yes · destructive no · idempotent no · open-world yes

• wever_treasury-flows read-only

  Read recent native USDC transfers into and out of a wallet on Base mainnet, including amounts, timestamps and transaction hashes. Optional limit and UTC time window bound the returned history. wallet_address must use the exact EIP-55 checksum. Reads public chain data only. Treasury arguments never accept private keys, signatures or transaction instructions; these tools cannot sign, submit transactions, transfer funds or spend. POST /api/treasury-flows. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. API access billing is separate from wallet visibility: the existing access layer processes caller-supplied payment and wallet-proof headers only. X-Wever-Wallet-Proof must bind to the exact JSON arguments and this API path, not /mcp. The inspected wallet need not be the access payer. Read /api/treasury-contract and the backend 402 body for schemas, coverage and billing terms.

  Parameters:

  • wallet_address (required) — string — Public Base wallet address in its exact EIP-55 checksum spelling. No ownership proof or secrets belong in tool arguments.
  • limit — integer
  • end_time — string — UTC ISO 8601 timestamp, for example 2026-10-01T00:00:00Z. Start is inclusive and end is exclusive; maximum window 366 days. Defaults to the current time.
  • start_time — string — UTC ISO 8601 timestamp, for example 2026-10-01T00:00:00Z. Start is inclusive and end is exclusive; maximum window 366 days. Defaults to 30 days before end_time.

  Hints: read-only yes · destructive no · idempotent no · open-world yes

• wever_workorder-create destructive

  The hirer names one worker wallet and defines the title, description, acceptance criteria, USDC price and deadline. Creates immutable work terms for an order capped at 25.00 USDC. POST /api/workorder-create. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path, including paid calls. Order value is capped at 25.00 USDC under the existing escrow-lite rail; API access fees and escrow principal are separate. Normal states are open, funded, accepted, delivered and released. Disputed orders freeze release and retain an expiry refund path; expired funded orders refund only the hirer. No private keys are accepted, no arbitrary payee or payer substitution is allowed, and the adapter grants no authority. Read /api/workorder-contract for schemas, recovery and evidence bounds. Live funded acceptance remains a manual operator step.

  Parameters:

  • idempotency_key (required) — string
  • title (required) — string — At most 200 UTF-8 bytes. Control characters are not allowed.
  • description (required) — string — At most 4000 UTF-8 bytes. Control characters are not allowed.
  • acceptance_criteria (required) — array
  • price_usdc (required) — string
  • deadline (required) — integer
  • worker_wallet (required) — string
  • usage

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_workorder-fund destructive

  The hirer funds the order through escrow-lite using caller-signed principal authorization. Only confirmed principal funding moves an open order to funded. Escrow principal is the hirer's order value, separate from the API access fee. POST /api/workorder-fund. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path, including paid calls. Order value is capped at 25.00 USDC under the existing escrow-lite rail; API access fees and escrow principal are separate. Normal states are open, funded, accepted, delivered and released. Disputed orders freeze release and retain an expiry refund path; expired funded orders refund only the hirer. No private keys are accepted, no arbitrary payee or payer substitution is allowed, and the adapter grants no authority. Read /api/workorder-contract for schemas, recovery and evidence bounds. Live funded acceptance remains a manual operator step.

  Parameters:

  • order_id (required) — string
  • idempotency_key (required) — string
  • payer_terms_signature (required) — string
  • funding_payment (required)

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_workorder-accept destructive

  Only the named worker wallet may accept a funded order before its deadline. POST /api/workorder-accept. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path, including paid calls. Order value is capped at 25.00 USDC under the existing escrow-lite rail; API access fees and escrow principal are separate. Normal states are open, funded, accepted, delivered and released. Disputed orders freeze release and retain an expiry refund path; expired funded orders refund only the hirer. No private keys are accepted, no arbitrary payee or payer substitution is allowed, and the adapter grants no authority. Read /api/workorder-contract for schemas, recovery and evidence bounds. Live funded acceptance remains a manual operator step.

  Parameters:

  • order_id (required) — string
  • idempotency_key (required) — string

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_workorder-deliver destructive

  Only the named worker wallet may submit a deliverable reference and proof hash for an accepted order. Delivery evidence is recorded in the proof inbox; submission is not automatic acceptance or payment. POST /api/workorder-deliver. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path, including paid calls. Order value is capped at 25.00 USDC under the existing escrow-lite rail; API access fees and escrow principal are separate. Normal states are open, funded, accepted, delivered and released. Disputed orders freeze release and retain an expiry refund path; expired funded orders refund only the hirer. No private keys are accepted, no arbitrary payee or payer substitution is allowed, and the adapter grants no authority. Read /api/workorder-contract for schemas, recovery and evidence bounds. Live funded acceptance remains a manual operator step.

  Parameters:

  • order_id (required) — string
  • idempotency_key (required) — string
  • deliverable_reference (required) — string — At most 2048 UTF-8 bytes. Control characters are not allowed.
  • proof_hash (required) — string

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_workorder-release destructive

  Only the hirer may approve a delivered order. The AP2 gateway verifies a trusted holder-bound, unexpired, unused mandate for the exact order intent. A separate payer-signed EIP-712 escrow release mandate authorizes payment only to the immutable worker. Confirmed settlement produces signed record-backed receipts for both parties. POST /api/workorder-release. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path, including paid calls. Order value is capped at 25.00 USDC under the existing escrow-lite rail; API access fees and escrow principal are separate. Normal states are open, funded, accepted, delivered and released. Disputed orders freeze release and retain an expiry refund path; expired funded orders refund only the hirer. No private keys are accepted, no arbitrary payee or payer substitution is allowed, and the adapter grants no authority. Read /api/workorder-contract for schemas, recovery and evidence bounds. Live funded acceptance remains a manual operator step.

  Parameters:

  • order_id (required) — string
  • idempotency_key (required) — string
  • mandate (required) — object
  • presentation (required) — string — At most 32768 UTF-8 bytes. Control characters are not allowed.
  • challenge_token (required) — string — At most 16384 UTF-8 bytes. Control characters are not allowed.

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_workorder-dispute destructive

  Either authenticated party may pause release of the order and record bounded evidence in the proof inbox. Dispute blocks further release; expiry refund to the original hirer remains available. Arbitration UI is outside v1. POST /api/workorder-dispute. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path, including paid calls. Order value is capped at 25.00 USDC under the existing escrow-lite rail; API access fees and escrow principal are separate. Normal states are open, funded, accepted, delivered and released. Disputed orders freeze release and retain an expiry refund path; expired funded orders refund only the hirer. No private keys are accepted, no arbitrary payee or payer substitution is allowed, and the adapter grants no authority. Read /api/workorder-contract for schemas, recovery and evidence bounds. Live funded acceptance remains a manual operator step.

  Parameters:

  • order_id (required) — string
  • idempotency_key (required) — string
  • evidence_reference (required) — string — At most 2048 UTF-8 bytes. Control characters are not allowed.
  • proof_hash (required) — string

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• wever_payout-create destructive

  Create an immutable payout instruction with recipient, amount_usdc, idempotency_key, memo and rail_reference. Enforces the configured 25.00 USDC per-payout cap and 100.00 USDC daily cap before accepting. Returns created with a signed receipt. No money moves. POST /api/payout-create. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path, including paid calls. The tool fee is separate from the payout amount and grants no disbursement authority. The operator manually funds the dedicated hot payout wallet; Ledger keys never reach the server, and sweep and reclaim remain manual. No private keys are accepted. A disbursement primitive, not a bank: no yield, conversion or fiat. External custody and security audit required before large-value use. Company-authored; usage remains explicitly labeled. Read /api/payout-contract for exact schemas and authorization flow.

  Parameters:

  • recipient (required) — string
  • amount_usdc (required) — string
  • idempotency_key (required) — string
  • memo (required) — string
  • rail_reference (required) — string
  • usage

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

• wever_payout-authorize destructive

  Bind a trusted-issuer AP2 signed presentation and a separate EIP-712 principal_signature from a configured treasury holder to the exact payout recipient, amount and expiry. AP2 retains its API-fee scope; only the separate treasury signature authorizes principal. Uses the wever_ap2-mandate-gateway verifier, trust anchors and replay ledger with holder binding v2. Returns authorized with a signed receipt. No money moves. POST /api/payout-authorize. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path, including paid calls. The tool fee is separate from the payout amount and grants no disbursement authority. The operator manually funds the dedicated hot payout wallet; Ledger keys never reach the server, and sweep and reclaim remain manual. No private keys are accepted. A disbursement primitive, not a bank: no yield, conversion or fiat. External custody and security audit required before large-value use. Company-authored; usage remains explicitly labeled. Read /api/payout-contract for exact schemas and authorization flow.

  Parameters:

  • payout_id (required) — string
  • idempotency_key (required) — string
  • presentation (required) — string
  • challenge_token (required) — string
  • expires_at (required) — integer
  • principal_signature (required) — string

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

• wever_payout-execute destructive

  Disburse native USDC on Base from the dedicated service-operated payout wallet only for an authorized payout with a valid unexpired holder-bound mandate. The persisted transfer nonce prevents duplicate payment on retries. Returns executed with the independently confirmed transaction hash and signed receipt. POST /api/payout-execute. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path, including paid calls. The tool fee is separate from the payout amount and grants no disbursement authority. The operator manually funds the dedicated hot payout wallet; Ledger keys never reach the server, and sweep and reclaim remain manual. No private keys are accepted. A disbursement primitive, not a bank: no yield, conversion or fiat. External custody and security audit required before large-value use. Company-authored; usage remains explicitly labeled. Read /api/payout-contract for exact schemas and authorization flow.

  Parameters:

  • payout_id (required) — string
  • idempotency_key (required) — string

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

• wever_payout-status read-only

  Read a payout and its signed transition receipts by payout_id or the original create idempotency_key. Read-only: no payout state change, signing, reconciliation or transaction submission. POST /api/payout-status. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path, including paid calls. The tool fee is separate from the payout amount and grants no disbursement authority. The operator manually funds the dedicated hot payout wallet; Ledger keys never reach the server, and sweep and reclaim remain manual. No private keys are accepted. A disbursement primitive, not a bank: no yield, conversion or fiat. External custody and security audit required before large-value use. Company-authored; usage remains explicitly labeled. Read /api/payout-contract for exact schemas and authorization flow.

  Parameters:

  • payout_id — string
  • idempotency_key — string

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• wever_dispute-open destructive

  Either escrow party opens a dispute against already funded escrow or a funded work order. Records the claim reference, immutable parties and locked amount, and an operator-signed receipt. Atomically pauses release and refund. Rejects locked value above 25.00 USDC, unfunded or already disposed funds, and unrelated wallets. No new principal enters. POST /api/dispute-open. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path. Fees are separate from the locked principal and grant no resolution authority. Disputes expire after 14 days; unresolved expiry refunds the payer with a signed timeout receipt, subject to settlement confirmation and the UTC daily cap. External custody and security audit remains pending. Company-authored. Read /api/dispute-contract for schemas, operator authorization and recovery limits.

  Parameters:

  • idempotency_key (required) — string
  • claim (required) — object
  • order_id — string
  • escrow_id — string

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

• wever_dispute-submit-evidence destructive

  Either party submits bounded evidence hashes and URIs. Raw personal information is not accepted. Both parties can read the evidence and its operator-signed receipt. Closed or expired disputes reject evidence. POST /api/dispute-submit-evidence. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path. Fees are separate from the locked principal and grant no resolution authority. Disputes expire after 14 days; unresolved expiry refunds the payer with a signed timeout receipt, subject to settlement confirmation and the UTC daily cap. External custody and security audit remains pending. Company-authored. Read /api/dispute-contract for schemas, operator authorization and recovery limits.

  Parameters:

  • dispute_id (required) — string
  • idempotency_key (required) — string
  • references (required) — array

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

• wever_dispute-resolve destructive

  Requires a domain-bound operator signature for the exact dispute and outcome. Release to the payee, refund to the payer, or split explicit atomic amounts summing to the locked total. Durable transfer nonces prevent duplicate movement on concurrent retries. Total resolved value is limited to 100.00 USDC per UTC day. action=extend permits one operator-authorized 14-day extension before expiry. POST /api/dispute-resolve. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path. Fees are separate from the locked principal and grant no resolution authority. Disputes expire after 14 days; unresolved expiry refunds the payer with a signed timeout receipt, subject to settlement confirmation and the UTC daily cap. External custody and security audit remains pending. Company-authored. Read /api/dispute-contract for schemas, operator authorization and recovery limits.

  Parameters:

  • dispute_id (required) — string
  • idempotency_key (required) — string
  • action (required)
  • reason_sha256 (required) — string
  • operator_authorization (required) — string
  • outcome
  • reason_uri — string — HTTPS, ipfs, or ar reference. No raw evidence, personal data, credentials, query strings, or fragments.
  • payee_amount_atomic — string
  • payer_amount_atomic — string

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

• wever_dispute-status read-only

  Read the dispute and full operator-signed receipt chain, including opening, each evidence submission, extension and resolution or timeout. Read-only: no settlement, signing or reconciliation. Requires a party wallet proof. POST /api/dispute-status. Paid URL: 0.10 USDC per call on Base mainnet using x402 exact, under the existing shared 10 signed-wallet free calls over rolling 30 days. Every call requires X-Wever-Wallet-Proof bound to the exact JSON arguments and this API path. Fees are separate from the locked principal and grant no resolution authority. Disputes expire after 14 days; unresolved expiry refunds the payer with a signed timeout receipt, subject to settlement confirmation and the UTC daily cap. External custody and security audit remains pending. Company-authored. Read /api/dispute-contract for schemas, operator authorization and recovery limits.

  Parameters:

  • dispute_id (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• wever_boutique-list-products read-only

  Browse Rebecca Belle Boutique products with stable IDs, names, prices, photos, availability and descriptive details. Supply store=women, men, kids, or home to browse a live collection with query, size, brand, category, min_price, max_price, nwt, sort, page, and page_size. Home offers home goods. Product IDs use rb-#####, mm-#####, lc-#####, and rh-##### respectively. The collections share a cart with $8 shipping per whole order and card payment through the boutique checkout. Collection and product records expose agent_purchase_enabled. Omit store and filters to read the legacy nine-piece seasonal snapshot. Catalog prices use 1 USD = 1 USDC; checkout calculates shipping and tax. Anonymous catalog reads are free.

  Parameters:

  • nwt — boolean
  • page — integer
  • size — string
  • sort — string
  • brand — string
  • query — string
  • store — string
  • category — string
  • max_price — number
  • min_price — number
  • page_size — integer
  • availability — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• wever_boutique-product-detail read-only

  Read one Rebecca Belle Boutique product by its exact catalog ID. Supply store=women, men, kids, or home to browse a live collection with query, size, brand, category, min_price, max_price, nwt, sort, page, and page_size. Home offers home goods. Product IDs use rb-#####, mm-#####, lc-#####, and rh-##### respectively. The collections share a cart with $8 shipping per whole order and card payment through the boutique checkout. Collection and product records expose agent_purchase_enabled. Omit store and filters to read the legacy nine-piece seasonal snapshot. Catalog prices use 1 USD = 1 USDC; checkout calculates shipping and tax. Anonymous catalog reads are free.

  Parameters:

  • id (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• wever_boutique-create-order

  Simulation only. Create a boutique order with product_id and buyer_wallet. USD catalog amount maps exactly 1:1 to virtual USDC on the Base x402 pattern. Optional idempotency_key permits exact create retries; retain the returned bearer order_token. Repeat the same product_id and buyer_wallet with action=initiate_payment, simulate_payment, status, or confirm_fulfillment and order_token. Fulfillment confirmation also requires fulfillment_reference. Reuses existing x402 middleware and escrow-lite state machine with isolated synthetic settlement, no network signer or real funds. Simulation ceiling is 120 virtual USDC; real escrow remains capped at 25 USDC and real checkout is disabled. No merchant inventory reservation, shipping, tax, wallet ownership assertion, real payment authorization or actual fulfillment. All payment headers and simulation=false are rejected. Catalog tools remain read-only snapshots. No API fees or allowance consumption. Orders expire after 24 hours; bounded to 64 active simulations.

  Parameters:

  • product_id (required) — string
  • buyer_wallet (required) — string
  • action — string
  • simulation — boolean
  • order_token — string
  • idempotency_key — string
  • fulfillment_reference — string

  Hints: read-only no · destructive no · idempotent no · open-world no

• wever_boutique-record-shipment

  Record a simulated shipment against a funded boutique order using order_id, bearer order_token and tracking {carrier, tracking_number}. Marks shipped while keeping all virtual USDC in escrow. Exact retries are safe; conflicting tracking is rejected. Simulation only, no real funds, shipping verification, wallet ownership assertion or real treasury configuration. The existing order token is a simulation capability, not merchant or buyer authentication. Rejects payment headers and simulation=false. 120 virtual USDC ceiling, 64 orders, 2 MiB, 24-hour expiry. Synthetic test records are isolated from production custody and dispute records. Real escrow/dispute caps and all other tools are unchanged.

  Parameters:

  • order_id (required) — string
  • order_token (required) — string
  • tracking (required) — object
  • simulation — boolean

  Hints: read-only no · destructive no · idempotent yes · open-world no

• wever_boutique-confirm-delivery

  Confirm simulated delivery of a shipped order with order_id, bearer order_token and delivery_reference. Reuses escrow-lite signed release and atomically credits the order-scoped simulated boutique treasury once. action=dispute invokes existing dispute-open service and native escrow freeze with claim {reason_code, statement_sha256}; action=dispute-submit-evidence and dispute-status use the existing dispute services in the same simulation store. action=status reads operator state. Disputed orders cannot release. Resolution remains operator-authorized through the existing dispute rail and is not exposed by this bridge. Simulation only, no real funds, shipping verification, wallet ownership assertion or real treasury configuration. The existing order token is a simulation capability, not merchant or buyer authentication. Rejects payment headers and simulation=false. 120 virtual USDC ceiling, 64 orders, 2 MiB, 24-hour expiry. Synthetic test records are isolated from production custody and dispute records. Real escrow/dispute caps and all other tools are unchanged.

  Parameters:

  • order_id (required) — string
  • order_token (required) — string
  • claim — object
  • action — string
  • references — array
  • simulation — boolean
  • idempotency_key — string
  • delivery_reference — string

  Hints: read-only no · destructive no · idempotent yes · open-world no

• wever_boutique-real-money-acceptance

  One owner-operated Rebecca Belle Boutique acceptance order for a dedicated 1.00 USDC test product on Base mainnet. No catalog items. Creates a bounded order, observes the existing managed escrow, records test shipment and delivery, and independently checks native USDC receipts. This tool never signs, submits or initiates transfers and rejects payment headers. quote is public; other actions require a request-bound X-Wever-Wallet-Proof for /api/boutique-real-money-acceptance and configured buyer/operator. The human executes separately approved funding and release through the unchanged wever_agent-escrow-lite tool. That rail has separate 0.10 USDC API fees after its free allowance and automatic expiry refunds. Test evidence is not customer revenue or actual merchandise fulfillment.

  Hints: read-only no · destructive no · idempotent yes · open-world yes

• wever_purchase-create-intent destructive

  Create an immutable purchase intent and exact plain-language quote. Item price plus flat $8 shipping and $0 tax; no additional buyer API fees. Requires a configured X-Wever-Agent-Key. Boutique supports quantity 1 per unique catalog listing. Creates no payment or approval. If approval_mode is customer_agent, obtain your customer human's approval of the exact quote and delivery address, then call purchase-execute with customer_approval. Otherwise use the returned human review URL.

  Parameters:

  • business_id (required) — string
  • item_id (required) — string
  • quantity (required) — integer
  • delivery_address (required) — object
  • idempotency_key (required) — string

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

• wever_purchase-status read-only

  Read your own purchase quote, recorded human approval, fulfillment and completion state. Requires the same configured X-Wever-Agent-Key. No wallet or signing instructions are returned.

  Parameters:

  • intent_id (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• wever_purchase-execute destructive

  Execute a purchase after customer approval, without merchant review. Explicitly delegated customer agents may supply customer_approval attesting their human approved the exact saved quote and address: quote_sha256, exact amount_atomic in six-decimal USDC, currency USD, approval_text from the quote, approved_at Unix seconds and a stable approval_id. Never supply consent before the human approves. Other agents require the human review page. Approval is recorded before AP2 and escrow funding; no immediate treasury release. Omit customer_approval to retry an already approved intent. Exact retries reuse saved requests and cannot replace consent or create a second payment. Requires X-Wever-Agent-Key.

  Parameters:

  • intent_id (required) — string
  • customer_approval — object

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

• wever_purchase-dispute destructive

  Open a dispute for your funded purchase through wever_dispute-open. The private statement is retained with the purchase and its digest goes to the existing dispute rail. Existing operator resolution and 300 USDC per-dispute and 350 USDC daily boutique limits apply. Requires X-Wever-Agent-Key.

  Parameters:

  • intent_id (required) — string
  • reason_code (required)
  • statement (required) — string
  • idempotency_key (required) — string

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.