← The evidence ledger
Evidence row 302867
Observed , by probe.mcp/1.
- Kind
- mcp.tools
- About
- endpoint be30242a-439a-4835-841d-de9eeaf1e3a2
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 057c212d332bf0eda5fe66e8d8797ec510e978b5b513f4d51583103dff7c7931
- Leaf
- 0xe9d4c1fb4ecfad67c75f8cb17ac6a44ab122556990a12288fbb45852fc2d462e
What was observed
{
"count": 12,
"tools": [
{
"description": "Accept the offer on behalf of the buyer. Needs credentials. This locks the billing identity, the offer version and the hash of the terms as they stand at this moment. A later change to the website cannot pass for what was agreed. Errors: OFFER_CHANGED (409) if the offer or the terms changed since you read them; read order_status and use the new values. OFFER_EXPIRED (409) 30 days after the order. MANUAL_OFFER_REQUIRED (409) while a person has not priced the service yet.",
"inputSchema": {
"additionalProperties": false,
"properties": {
"accessToken": {
"description": "The accessToken returned by create_order.",
"type": "string"
},
"billing": {
"additionalProperties": false,
"description": "The buyer as it will appear on the invoice and the contract. For type company, company, registration and representative are also required. For type person, leave out company, registration, vat and representative. No other keys are accepted.",
"if": {
"properties": {
"type": {
"const": "company"
}
}
},
"properties": {
"address": {
"maxLength": 250,
"minLength": 3,
"type": "string"
},
"city": {
"maxLength": 100,
"minLength": 1,
"type": "string"
},
"company": {
"description": "Company only. Registered name.",
"maxLength": 200,
"minLength": 2,
"type": "string"
},
"country": {
"description": "ISO 3166-1 alpha-2 code, for example BG.",
"pattern": "^[A-Za-z]{2}$",
"type": "string"
},
"email": {
"maxLength": 254,
"type": "string"
},
"fullName": {
"description": "Full name of the buyer, or of the contact person for a company.",
"maxLength": 150,
"minLength": 3,
"type": "string"
},
"phone": {
"description": "Optional.",
"maxLength": 40,
"minLength": 5,
"type": "string"
},
"registration": {
"description": "Company only. Company registration number; for country BG the 9- or 13-digit EIK.",
"maxLength": 40,
"minLength": 4,
"type": "string"
},
"representative": {
"description": "Company only. The person who legally represents the company.",
"maxLength": 150,
"minLength": 3,
"type": "string"
},
"type": {
"enum": [
"person",
"company"
],
"type": "string"
},
"vat": {
"description": "Company only. Optional VAT number.",
"maxLength": 40,
"minLength": 4,
"type": "string"
}
},
"required": [
"type",
"fullName",
"email",
"country",
"city",
"address"
],
"then": {
"required": [
"company",
"registration",
"representative"
]
},
"type": "object"
},
"clientId": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The clientId returned by register_agent.",
"type": "string"
},
"immediateStart": {
"description": "Natural persons only: true when the buyer expressly asks the work to start within the 14-day withdrawal period and acknowledges losing the right of withdrawal once the service is fully performed.",
"type": "boolean"
},
"offerVersion": {
"description": "offer.version from the order, copied exactly.",
"type": "string"
},
"order": {
"description": "The order id returned by create_order.",
"type": "string"
},
"secret": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The secret returned by register_agent.",
"type": "string"
},
"termsHash": {
"description": "SHA-256 of the terms page in the language of the order: offer.terms.<language>.hash from the order, copied exactly. Sending it confirms that the buyer accepts those terms.",
"type": "string"
}
},
"required": [
"order",
"accessToken",
"offerVersion",
"termsHash",
"billing"
],
"type": "object"
},
"name": "accept_offer"
},
{
"description": "Read the service catalogue: names, prices, currency and terms. No credentials needed. All amounts are integers in the minor unit; 100000 means 1000.00 EUR.",
"inputSchema": {
"additionalProperties": false,
"properties": {},
"type": "object"
},
"name": "catalog"
},
{
"description": "Start here. Without a question: who Brand Design Ltd. is, what it does, its clients and results and who confirms them, with links to check, and the next steps. With a question: an answer about the agency from verified company knowledge, in the language of the question, with sources. If your principal asks to be contacted, it can pass the enquiry to the founder. Pass the returned session to continue. No credentials needed.",
"inputSchema": {
"additionalProperties": false,
"properties": {
"language": {
"description": "Language of the introduction. Answers follow the language of the question.",
"enum": [
"en",
"bg"
],
"type": "string"
},
"question": {
"description": "Your question about Brand Design Ltd. Leave it out for the introduction.",
"type": "string"
},
"session": {
"description": "The session code from a previous answer, to continue the conversation.",
"type": "string"
}
},
"type": "object"
},
"name": "concierge"
},
{
"description": "Place an order for a service. Needs credentials. Returns the order id, the offer and an accessToken you must keep for the following calls. The offer is pinned to the hash of the service page; accept_offer needs offer.version and offer.terms.<language>.hash from it. Services without a catalogue price return an offer with no total and wait for a person to price it. Errors: MISSING_<field> when a required brief field is absent, UNEXPECTED_FIELD when the brief has a key the service does not declare.",
"inputSchema": {
"additionalProperties": false,
"properties": {
"brief": {
"additionalProperties": {
"type": "string"
},
"description": "Required MCP argument: send an object, including {} when the selected service has no required brief fields. Direct REST may omit brief and treats that as {}; required catalog fields remain mandatory. One string per field the catalogue lists under this service in catalog.services.<service>.fields. Use each field id as the key. Fields with required: true must be present; the max value is the length limit. No other keys are accepted.",
"type": "object"
},
"clientId": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The clientId returned by register_agent.",
"type": "string"
},
"idempotencyKey": {
"description": "Your own stable key, 16-100 characters, so a repeated call does not create a second order. If omitted this MCP adapter generates a new key for each invocation; provide and reuse a key for retries. Direct REST always requires idempotencyKey.",
"type": "string"
},
"language": {
"default": "en",
"description": "Language of the offer, the terms and the documents. This MCP adapter defaults to en; direct REST requires payload.language explicitly.",
"enum": [
"bg",
"en"
],
"type": "string"
},
"lines": {
"description": "Only for services that have catalog.services.<service>.configurator. One entry per item: item is an id from configurator.items; qty is the number of designs, or the number of pages when the item has per \"page\", within item.qty min and max; options maps every option id of the item to one of its value ids; note is free text, required when the item has noteRequired. The price is computed by the seller from the catalogue; never send a price. If any chosen item has price null, the order waits for a person to price it.",
"items": {
"additionalProperties": false,
"properties": {
"item": {
"type": "string"
},
"note": {
"maxLength": 500,
"type": "string"
},
"options": {
"additionalProperties": {
"type": "string"
},
"type": "object"
},
"qty": {
"type": "integer"
}
},
"required": [
"item"
],
"type": "object"
},
"maxItems": 20,
"type": "array"
},
"printQuote": {
"description": "Only with lines: the buyer would like a print quote once the design work has started. Printing is not part of this order.",
"type": "boolean"
},
"secret": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The secret returned by register_agent.",
"type": "string"
},
"service": {
"description": "Service id: one of the keys of catalog.services, as returned by the catalog tool.",
"type": "string"
}
},
"required": [
"service",
"brief"
],
"type": "object"
},
"name": "create_order"
},
{
"description": "Introduce yourself and the person or company you act for, and pass their enquiry to Nikola Mishev, the founder of Brand Design Ltd., by e-mail. He replies to the contact you give. Use it only when your principal wants to be contacted. No credentials needed.",
"inputSchema": {
"additionalProperties": false,
"properties": {
"agent": {
"description": "Your name as an agent or assistant.",
"type": "string"
},
"contact": {
"description": "E-mail or phone for the reply.",
"type": "string"
},
"language": {
"description": "Preferred language for the reply.",
"type": "string"
},
"need": {
"description": "What they need, in their words.",
"type": "string"
},
"represents": {
"description": "The person or company you act for.",
"type": "string"
},
"session": {
"description": "The concierge session code, if you talked to the concierge first.",
"type": "string"
},
"website": {
"description": "Their website, if any.",
"type": "string"
}
},
"required": [
"represents",
"need",
"contact"
],
"type": "object"
},
"name": "introduce"
},
{
"description": "Issue a fresh DNS TXT challenge for your currently authenticated agent identity. Needs commerce.order for OAuth. Supply an HTTPS contact URL on a domain you control, especially on the first OAuth connection. Omitting contact reuses the current contact. This replaces the previous challenge and clears its verification. Publish the returned txtValue at dnsName, then call kya_verify. Domain control does not establish buyer identity or grant spending authority. Do not publish secrets in DNS.",
"inputSchema": {
"additionalProperties": false,
"properties": {
"clientId": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The clientId returned by register_agent.",
"type": "string"
},
"contact": {
"description": "HTTPS URL on your own public domain. No IP address, credentials, custom port or URL fragment.",
"maxLength": 200,
"minLength": 10,
"pattern": "^https://",
"type": "string"
},
"secret": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The secret returned by register_agent.",
"type": "string"
}
},
"type": "object"
},
"name": "kya_challenge"
},
{
"description": "Read DNS domain-control verification for your currently authenticated agent. Needs commerce.read for OAuth. Returns verification status and, when present, DNS instructions and validity timestamps. This does not change the contact, challenge or verification.",
"inputSchema": {
"additionalProperties": false,
"properties": {
"clientId": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The clientId returned by register_agent.",
"type": "string"
},
"secret": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The secret returned by register_agent.",
"type": "string"
}
},
"type": "object"
},
"name": "kya_status"
},
{
"description": "Check the DNS TXT challenge for your currently authenticated agent and record domain-control verification. Needs commerce.order for OAuth. First call kya_challenge and publish its exact DNS TXT record. The response gives verifiedAt and validUntil; verification is currently valid for 24 hours. This does not authorize a purchase or a payment.",
"inputSchema": {
"additionalProperties": false,
"properties": {
"clientId": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The clientId returned by register_agent.",
"type": "string"
},
"secret": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The secret returned by register_agent.",
"type": "string"
}
},
"type": "object"
},
"name": "kya_verify"
},
{
"description": "Read the commerce manifest: protocol, endpoints, authentication scheme, payment instrument and limits. No credentials needed.",
"inputSchema": {
"additionalProperties": false,
"properties": {},
"type": "object"
},
"name": "manifest"
},
{
"description": "Read the current state of the order, its offer and its payments, including the invoice number once one has been issued. Needs credentials.",
"inputSchema": {
"additionalProperties": false,
"properties": {
"accessToken": {
"description": "The accessToken returned by create_order.",
"type": "string"
},
"clientId": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The clientId returned by register_agent.",
"type": "string"
},
"order": {
"description": "The order id returned by create_order.",
"type": "string"
},
"secret": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The secret returned by register_agent.",
"type": "string"
}
},
"required": [
"order",
"accessToken"
],
"type": "object"
},
"name": "order_status"
},
{
"description": "Register yourself and receive a client identifier and a secret. No approval and no prior arrangement. The secret is returned once and cannot be recovered. Put them in the Authorization header as \"Bearer <clientId>:<secret>\" for the other tools.",
"inputSchema": {
"additionalProperties": false,
"properties": {
"contact": {
"description": "A https:// or mailto: URL at which a human can reach whoever runs you.",
"type": "string"
},
"name": {
"description": "Your name, 2 to 80 characters.",
"type": "string"
}
},
"required": [
"name",
"contact"
],
"type": "object"
},
"name": "register_agent"
},
{
"description": "Start payment for a stage. Needs credentials. Without sharedPaymentToken you receive a hosted payment session, which you may complete yourself with a payment instrument issued to you, or hand to the person you act for. With a delegated shared payment token the payment settles directly. A self-registered agent must first have current DNS domain-control KYA for its HTTPS contact domain: call kya_challenge with a domain you control, publish its DNS TXT record and call kya_verify; kya_status reads the current verification. KYA does not grant buyer payment authority. On-chain payment is not accepted. Errors: OFFER_EXPIRED (409) for an advance after 30 days, FINAL_NOT_RELEASED (409) when the final payment is not open yet, PAYMENTS_DISABLED (503).",
"inputSchema": {
"additionalProperties": false,
"properties": {
"accessToken": {
"description": "The accessToken returned by create_order.",
"type": "string"
},
"clientId": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The clientId returned by register_agent.",
"type": "string"
},
"order": {
"description": "The order id returned by create_order.",
"type": "string"
},
"secret": {
"description": "Required unless you authenticate with the Authorization header (Bearer <clientId>:<secret>, or an OAuth access token issued for this server). The secret returned by register_agent.",
"type": "string"
},
"sharedPaymentToken": {
"description": "Only for delegated payment without a hosted page: a Stripe shared payment token granted to the seller profile in manifest.payment.networkBusinessProfile. Leave it out to receive a hosted payment session instead.",
"type": "string"
},
"stage": {
"description": "advance: the first payment, open after accept_offer. It is 50% of the total, or the whole total when the service is paid at once (paymentPlan single in the catalogue). final: the remaining 50%, open only after the advance is paid and the seller has released the work for final payment. Defaults to advance.",
"enum": [
"advance",
"final"
],
"type": "string"
}
},
"required": [
"order",
"accessToken"
],
"type": "object"
},
"name": "start_payment"
}
]
}What the leaf hashes
{"body":"057c212d332bf0eda5fe66e8d8797ec510e978b5b513f4d51583103dff7c7931","id":302867,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793055019106232,"prev":null,"subject":"be30242a-439a-4835-841d-de9eeaf1e3a2","subject_kind":"endpoint"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0xe9d4ef485e98d56c47f9be0d0a40a19ec05deb54407aadf954c68fdf33364909
- 0x0407d5c1a7256ed69d2df27482a4c676b5ffaaad03f1c20318b176b8144410cf
- 0xd1cf05b2c2a0bc73c9cb55d8e828530b89ad9fe6562160ca01be5174642d17da
- 0xcf46a4f5d418031c59727cd8123406d30700da24c257f22672ad11f6c5c44dd5
- 0x1118cb5618b3f2d226544a9314c7649d33f63f3533f83f69ed3b746c3e5bc40d
- 0xdf8ff14afa320fa7916d9d8191b436bdb9fe2deb92c22cad3a37229d41c7c7f3
- 0x42f0c9dea1a33ef10832230d242d3dfa77e7ea03ff139a2941817f7a82018c9e
- 0x15fd4e6b9394a395ddb5cc447e2f71981f3b08ae6141dbb2786fee436d8e3306
- 0x41b79f71d1afccd3b3ef4c56a8163985b60e558ad76073e70839e77fbc6fcda2
- 0xeeec22ca7728902ad7b7555da76e832c1a5feb9eab7fbd2016b96e53630a46dd
- 0x2ec584f2a0466a34409d72f745f85d43c3f2da79c7fe353433c8b601cf9f2050
- 0x22a204f0cf299dd3152f1542ba9998ff7665390da1ede6e58d06b8a7b2a107ee
- 0xec98ca25cb12ffed7c3e1373971719ce414ee6deecd1e7724b2979e2c356d99f
- 0x614d844c9e0509d9f9e63697aa2935555bce5f13695a8dc0047aa9e9898d70b3
- 0x95657a7d540ed6cac0bde9995782333b2562a9a6641853269ac95148827410f0
- 0x5fb5dda563336cd1bc1b9f44c52b76237ae72ed2145cb9290f39f304ca7dd678
- 0x74a0a08e4e7ab9aa5bfbead33dec7e1c7e8e364cff69a63720d764bbe987aadc
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae