Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Added "record_payment" and "set_receipt_visibility"; changed the definition of "get_receipt", "record_approval" and "verify_receipt" (13 tools before, 15 now)
Read a public purchase receipt:approvalwhat was reported as approved, scope, price cap, merchant, proofs,andpayments, contenthash.hash, approver_confirmation, pay_allowed, and public_view. external_payment_ref is the latest recorded payment ref, or the approval-time ref when no payment is recorded. paid_before_confirmation and over_cap are true when any recorded payment has that flag. Those three fields are derived at read time and do not change the signed row. status is unconfirmed, confirmed, or declined. confirmed means the person with access to the contact clicked Confirm, with time and channel. unconfirmed is the default and is not a verification of the person. pay_allowed is true only when approver_confirmation.status is confirmed, or when no approver_contact was given and the price cap is under RECEIPT_CONFIRM_THRESHOLD (default 100, in the price cap currency). Agents must poll get_receipt and pay only when pay_allowed is true. When public_view is redacted, the approver is initials, the agent name is Agent, contacts are omitted, and payment refs and proof values are on file plus the last 4 characters. BotSupply does not move the money. The approver name is what the calling agent reported. No API key. Theapproverraw contact,andconfirmthelink, and edit token are not included. Poll this to learn the click result. Same as GET /v1/receipts/:id.
Recordpurchasereported approval
RecordWrite ahuman's approvalrecord of what was reported as approved for a purchase on any payment rail. The approver is a name supplied by the calling agent; this does not confirm who approved. BotSupply does not hold or move the money. Returns receipt_id, a public receipt_url, and an edit_token shown once. If approver_contact is an email, also issues a single-use expiring confirm link. When no email provider is configured, the response includes confirm_url and nothing is sent; the caller delivers that link. A click is a signed hash-chain event. approver_confirmation.status stays unconfirmed until the person with access to that contact clicks Confirm or Decline. confirmed means that person clicked Confirm. It is not a legal-identity check, and an unconfirmed receipt is not a verification of the person. Without an email approver_contact, pay_allowed is true only when the price cap is under RECEIPT_CONFIRM_THRESHOLD (default 100, in the price cap currency). At or above that threshold the receipt still records and shows that confirmation is required, and pay_allowed stays false. Poll get_receipt and pay only when pay_allowed is true. Optional public_view is full (default) or redacted, with optional public_scope for the redacted public text. That display setting is outside the hash.
⟨13 unchanged words⟩ stored receipt matches the chain and the serversignature.signature, so the record hasn't been changed since it was created. valid does not confirm who approved. The result also includes approver_confirmation: unconfirmed, confirmed, or declined. confirmed means the person with access to the contact clicked Confirm. valid is false when a row was altered. ⟨5 unchanged words⟩
Record a payment — Record a payment the calling agent already made against a receipt. BotSupply does not hold or move the money. Requires the edit_token from record_approval. Appends a signed hash-chain event payment_recorded. paid_at defaults to now. Sets paid_before_confirmation when the payment time is before the confirm event, or when a contact was set and the receipt was never confirmed. Sets over_cap when amount exceeds the price cap. Those cases are stored and flagged. They are not rejected. Poll get_receipt and pay only when pay_allowed is true; recording an early or over-cap payment does not make pay_a…
Set receipt public view — Change a receipt's public display to full or redacted. Requires the edit_token from record_approval. Optional public_scope replaces the scope shown publicly while redacted. Stored outside the hash chain, so the content hash and verify result do not change. redacted shows the approver as initials, the agent name as Agent, no email or phone, and payment refs and proof values as on file plus the last 4 characters. Merchant name, merchant URL, amounts, cap, timeline, and statuses stay visible. BotSupply does not move money. Same as POST /v1/receipts/:id/visibility.
Added "attach_proof", "get_receipt", "record_approval" and 1 more (9 tools before, 13 now)
Attach delivery proof — Attach proof of delivery to a receipt. Requires the edit_token from record_approval. Moves approved to delivered, or to disputed when status is disputed. over_cap is true when actual_amount exceeds the price cap. Does not move money. Same as POST /v1/receipts/:id/proof.
Get purchase receipt — Read a public purchase receipt: approval, scope, price cap, merchant, proofs, and content hash. No API key. The approver contact and the edit token are not included. Same as GET /v1/receipts/:id.
Record purchase approval — Record a human's approval of a purchase on any payment rail. BotSupply does not hold or move the money. Returns receipt_id, a public receipt_url, and an edit_token shown once. No wallet or API key. Rate limited per IP. Same as POST /v1/receipts.
Verify purchase receipt — Recompute the receipt hash chain and HMAC signature. valid is true when the stored receipt matches the chain and the server signature. valid is false when a row was altered. Same as GET /v1/receipts/:id/verify.
Added "create_job", "get_job", "refund_job" and 1 more; changed the definition of "create_checkout" (5 tools before, 9 now)
⟨21 unchanged words⟩ hosted-page fragment). credits is an integer from100500 to100000.100000 ($5 minimum). Credits are applied only after Stripe reports the ⟨11 unchanged words⟩
⟨29 unchanged words⟩ Credits to buy. 1 credit = $0.01 USD. Minimum 500 credits ($5). Same limits as POST /v1/wallets/:id/checkout.","maximum":100000,"minimum":100500,"type":"integer"},"wallet_id":{" ⟨19 unchanged words⟩
Certificate recorded, valid to 2026-12-20
Authorization not required
Unknown → Live
First tool surface recorded: 5 tools (server version 1.0.0)
https://botsupply.onrender.com/mcp (mcp_streamable_http) — from mcp_registry, with the record
Showing the latest 8 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
⟨34 unchanged words⟩ :"string"},"approver":{"description":"DisplayNamenametheorcallinghandleagentofreports as thehumanapprover.whoNotapprovedconfirmationthethatpurchase.this person approved.","maxLength":120,"type":"string"},"approver_contact":{"anyOf":[{"maxLength":320,"type":"string"},{"additionalProperties":false,"properties":{"address":{"maxLength":320,"type":"string"},"channel":{"description":"email today. sms is reserved.","enum":["email","sms"],"type":"string"}},"required":["channel","address"],"type":"object"}],"description":"Optional email string, orphone.{Storedchannel: \"email\", address }. An email issues a one-time confirm link. The address is stored only as a hash. sms is reserved and rejected until a sender exists. A non-email string is stored as a hash only andneverdoesshownnotonissuetheareceipt.link."},"maxLengthconfirmation_webhook_url":320{"description":"Optional public https URL. After the contact clicks Confirm or Decline, BotSupply POSTs { receipt_id, approver_confirmation }. Best-effort. Poll get_receipt if it does not arrive. Requires an email approver_contact.","type":"string"},"external_payment_ref":{"description" ⟨65 unchanged words⟩ :"string"}],"description":"Maximum amount reported as approved. A positive decimal, for example 25 or ⟨14 unchanged words⟩ or USDC.","type":"string"},"public_scope":{"description":"Optional scope shown on the public receipt while public_view is redacted. The stored scope is unchanged and is what the approver confirms.","maxLength":2000,"type":"string"},"public_view":{"description":"WhatPublic display. full (default) or redacted. Stored outside thehumanhash, so changing it later does not break verify. redacted shows initials, hides contacts, and shortens payment refs and proof values.","enum":["full","redacted"],"type":"string"},"scope":{"description":"What was reported as approved, in plain text.","maxLength":2000 ⟨11 unchanged words⟩
Create escrow job — Hold credits in escrow for a job another agent will do; release when the work is delivered, refund if not. Debits amount_credits from the authenticated payer wallet and marks the job held. payee_wallet_id receives the credits on release. Rejects amount_credits below 1, a payer equal to the payee, a missing or other-mode payee wallet, and insufficient balance. idempotency_key makes a retry return the same job without debiting twice. Same as POST /v1/jobs.
Get escrow job — Return an escrow job's status (held, released, or refunded), the held amount, any release fee, and the payer and payee wallets. The caller must be the payer or the payee. A job from another Stripe mode is not visible. Same as GET /v1/jobs/:id.
Refund escrow job — Return held escrow credits to the payer when the work is not delivered or the job is cancelled. The payer or the payee can refund, and only while the job is held. The full hold goes back to the payer; no platform fee is taken. Refunding twice, or refunding after release, is rejected and does not move credits again. Same as POST /v1/jobs/:id/refund.
Release escrow job — Release held escrow credits to the payee when the work is delivered. Only the payer can release, and only while the job is held. ESCROW_FEE_BPS (default 0) is withheld on release, recorded on the job, and credited to nobody; the payee receives amount_credits minus that fee. Releasing twice, or releasing after a refund, is rejected and does not move credits again. Same as POST /v1/jobs/:id/release.