@aifinpay/mcp 2.4.1 → 2.7.0

package/skills/SKILL.md

@@ -1,12 +1,12 @@
 ---
 name: aifinpay
-description: Pay for x402-gated APIs and sites as an agent (AIFP-1 on Polygon,
+description: Pay for x402-gated APIs and sites as an agent (AIFP-1 on an owner-selected EVM or accepted Solana network,
   within owner-set limits) — including when the owner just says "buy access for
   this site" — link the agent to its owner's AiFinPay dashboard, and read
   wallet, payment history, prepaid quotas and Agent Passport records through
   the AiFinPay MCP server or SDK.
 license: MIT
-version: 2.5.0
+version: 2.8.0
 author: AiFinPay Support
 metadata:
   hermes:
@@ -61,20 +61,112 @@ your language. There is no "install together" scenario.
 
 ## Version and release status
 
-Released and current: MCP **2.4.0**, Node SDK **2.2.0**, Python **2.2.1**.
-Payments are released — `payable_fetch` has shipped since MCP 2.2.0. An older
-copy of this skill that calls MCP "read-only" or payments "release pending" is
-out of date; follow this one. Install the `latest` release.
+Release target: MCP **2.7.0**, Node SDK **2.5.0**, Python **2.5.0**.
+This skill describes that coordinated package cohort. Check the installed
+versions before using its additional-network instructions; a release target
+does not establish npm/PyPI publication or production network activation.
+Published baseline checked 2026-10-04: MCP **2.5.0**, Node SDK **2.3.2**.
+`payable_fetch` has shipped since MCP 2.2.0, and Base since MCP 2.5.0.
+Published packages remain usable within their documented capabilities.
 
 | Surface | Can it pay? |
 |---|---|
-| MCP `@aifinpay/mcp` 2.4.x | Yes — `payable_fetch`, once the owner enables payments; POL, or USDC with `AIFINPAY_PAY_ASSET=USDC`; `scope: "merchant"` buys a whole site |
-| Node `@aifinpay/agent` 2.2.x | Yes — `fetchPaid` with a v14 journal and gas cap; POL (with your own POL/USD rate) or USDC (`v14.asset: "USDC"`) |
-| Python `aifinpay-agent` 2.2.x | Yes — `agent.fetch_paid(url, allowed_origins=…, max_amount_usd=…, daily_amount_usd=…)`; POL (priced independently) or USDC (`asset="USDC"`); recover an unconfirmed payment with `agent.recover_paid(journal_path)` |
+| MCP `@aifinpay/mcp` 2.7.x | `payable_fetch`, only with a persistent wallet and every owner limit set. Polygon is the default; other networks require explicit `AIFINPAY_PAY_CHAIN`. The merchant and backend must authorize and serve that network. `scope: "merchant"` buys a site-wide batch. |
+| Node `@aifinpay/agent` 2.5.x | `fetchPaid` with a v14 journal, gas cap and owner budgets. Select another network with `v14.chain`; select a pinned stablecoin with `v14.asset`. Native payments require an independent native/USD rate. |
+| Python `aifinpay-agent` 2.5.x | `agent.fetch_paid(url, allowed_origins=…, max_amount_usd=…, daily_amount_usd=…)`; use explicit `chain` and the chain's native gas cap for another network, or a pinned stablecoin `asset`. `agent.recover_paid(journal_path)` recovers the original transaction. |
+
+The client descriptors below are shared by the target cohort. They do not
+activate a deployment, enroll a merchant or prove a completed payment.
+
+| Owner chain name | Chain ID | Native payment and gas | Pinned stablecoin symbols |
+|---|---|---|---|
+| `polygon` | 137 | POL | `USDC`, `USDC.e` |
+| `base` | 8453 | ETH | `USDC` |
+| `optimism` | 10 | ETH | `USDC` |
+| `arbitrum` | 42161 | ETH | `USDC` |
+| `avalanche` | 43114 | AVAX | `USDC`, `USDT` |
+| `bnb` | 56 | BNB | `USDC`, `USDT` |
+| `unichain` | 130 | ETH | `USDC` |
+| `xrplevm` | 1440000 | XRP | None |
+| `robinhood` | 4663 | ETH | `USDe`, `USDG` |
+
+Use the exact symbols and chain names. Token addresses and decimals are pinned
+independently per network; a token with the same symbol at another address is
+not accepted. BNB USDC/USDT and Robinhood USDe use 18 decimals; the other pinned
+stablecoins use 6. USD micro-units remain 6 decimals. The SDK validates exact
+integer `token_settlement` amounts, approval, signed gross and every split leg;
+never scale, round or edit quote fields yourself.
+
+Read the selected issuer's `/api/payment-capabilities` and the merchant's
+discovery/quote. A new network also requires the merchant's explicit accepted
+network set, verified payout, a served deployment and a working verifier/rate.
+If the backend refuses a network, retain the refusal and ask the owner to
+resolve readiness; do not switch networks or construct a manual payment.
+The Solana source adapter in this target cohort remains unavailable while its
+canonical deployment is disabled. NEAR, Aptos and current Casper payment
+executors are outside this cohort.
+Historical BOT is not an alias for Robinhood. Wallet derivation on a network
+does not establish payment support.
+
+## Solana source integration and activation status
+
+The target cohort adds native SOL and accepted classic SPL transaction, receipt
+and recovery adapters using the existing v1.4 program/IDL. The checked
+`@aifinpay/deployments@1.1.3` mainnet and devnet records are disabled. Installing
+this cohort does not override that gate. Do not send a direct transaction to
+work around a refused quote or unavailable payment capability. Mainnet also
+requires governance acceptance; actual funded end-to-end acceptance remains
+separate from source tests.
+
+After a deployment is accepted and served, the owner explicitly selects Solana
+and its network. The environment independently binds mainnet to live/prod and
+devnet to dev; a quote cannot select the network. Example owner configuration
+for that future accepted mainnet route (limits are examples, not permission):
+
+```json
+{
+  "AIFINPAY_PAY_CHAIN": "solana",
+  "AIFINPAY_SOLANA_NETWORK": "mainnet",
+  "AIFINPAY_MODE": "live",
+  "AIFINPAY_PAY_ASSET": "SOL",
+  "AIFINPAY_MAX_FEE_LAMPORTS": "10000000"
+}
+```
+
+Keep the existing enabled-payments, origin, per-payment and daily USD limits.
+Use the existing local Solana identity, not an EVM address. Configure an
+owner-trusted Solana RPC with `AIFINPAY_RPC_URL`. The fee limit is an integer
+number of lamports (1 SOL = 1,000,000,000 lamports) and covers transaction fees
+and required nonce/token account rent; it is not a POL/ETH gas cap. Keep enough
+SOL for these costs even when paying in an accepted SPL asset. The SDK refuses
+missing fee/rent estimates and unsupported mints or decimals. Token2022 is not
+supported by this program. Devnet assets require separate accepted mint pins.
+
+Node selects the family with `solanaV14: { environment, network, asset,
+maxFeeLamports, onPrepared }`, preserving the existing EVM `v14` options. Do not
+provide both family options. Python uses `chain="solana"`, `environment`,
+`solana_network` and `max_fee_lamports` alongside its existing allowed origins,
+journal and USD caps. Maintain a private persistent journal and the SDK's
+required prepared-transaction callback; do not remove persistence to make a
+payment proceed.
+
+Before requesting a Solana quote, the SDK durably retains the exact owner-signed
+authorization and request identity. After a timeout or restart, resume that same
+admission; do not generate a fresh nonce while its outcome is unknown. An expired
+authorization can reconcile an existing admission but cannot authorize a new
+one. Keep issued-quote evidence separate from a prepared transaction: quote
+expiry alone does not prove a refund of a backend reservation.
+
+The signed Solana transaction and its base58 signature are saved before
+broadcast. A timeout, expired blockhash or missing RPC result does not permit
+a second payment: retain the unresolved reservation and recover the same
+transaction/receipt. Case-sensitive payer/mint/program/network identity must
+match throughout quote, journal, receipt and history. An on-chain nonce marker
+or event log alone does not prove a valid paid request.
 
 # AiFinPay agent workflow
 
-Use the tools actually returned by MCP tools/list. MCP 2.4.0 exposes
+Use the tools actually returned by MCP tools/list. MCP 2.7.0 exposes
 agent_address, agent_reload, agent_claim_self, agent_history, agent_quota,
 agent_passport_resolve, settlement_routes, settlement_invoice and
 deployment_info; `payable_fetch` appears when the owner has enabled payments.
@@ -99,7 +191,8 @@ into ratersapp.com", "купи доступ до цього сайту". Handle
    $0.10 for 200 standard requests), that it covers every path on the origin,
    and how it drains — each request costs its own listed `unit_price_usd`, so
    the same $0.10 is 200 standard or 20 premium requests in any mix. Gas is
-   separate, in POL. Use the display rules in "Transaction display" below.
+   separate, in the selected network's native currency. Use the display rules
+   in "Transaction display" below.
 4. **Check readiness.** `payable_fetch` must be in your tools and the origin
    must be in `AIFINPAY_GATEWAY_ORIGINS`; the tool names a refused origin. If
    either is missing, show the owner the exact change — the environment block
@@ -154,28 +247,57 @@ fund its EVM address on Polygon with POL, or with USDC plus some POL. Funding a
 unlimited spend authority. Use the owner's actual approved limits and origins,
 then call `payable_fetch({"url":"https://merchant.example/api/data"})`.
 
-It supports GET resources and Polygon AIFP-1 v1.4 payments in POL or USDC. It verifies
+For another network, the owner sets `AIFINPAY_PAY_CHAIN` to an exact name in
+the table and `AIFINPAY_MAX_GAS` in its native currency. For Base, for example,
+the currency is ETH; the owner must choose a cap that covers the current
+worst-case estimate. `AIFINPAY_MAX_GAS_POL` is refused outside Polygon rather
+than interpreted as another currency. Fund the same EVM address **on the
+selected network** with its native currency for gas and the selected asset
+for the batch. A quote for another network is refused; only the owner changes
+the network or limits.
+
+Stablecoin payments budget approval and settlement together. Base, Optimism
+and Unichain include L1 data and operator fees in the worst-case gas estimate;
+an unavailable required fee read stops payment before signing. Arbitrum and
+Robinhood use the Nitro estimate that already includes parent-chain data and
+do not add that fee twice. A refusal never authorizes raising a gas cap.
+
+It supports GET resources and authorized AIFP-1 v1.4 payments on the selected
+supported EVM network. It verifies
 the quote, price, deployment, signer and receipt, saves the transaction before
 broadcasting, and reuses the purchased batch. No custom merchant script is
 needed. Other protocol/version/asset paths fail closed.
 
-A pending result retains the original transaction. Retrying recovers its receipt;
-do not delete its journal, create a replacement wallet or switch contract versions.
-Prepared-but-unbroadcast/reverted transactions and stale process locks require
-owner reconciliation. Raw transactions and receipt JWTs remain private.
+A pending result retains the original signed transaction and network.
+Retrying recovers its receipt without sending a replacement transaction.
+Unknown broadcasts keep their budget reservation indefinitely; confirmed
+spend is never refunded by a later receipt or HTTP failure. Daily confirmed
+spend uses a rolling 24-hour window. Unresolved access stays guarded even if
+the owner later changes networks. Use one shared local filesystem for the
+wallet's ledger/journal across local processes; this is not a multi-host lock.
+Do not delete journals, remove an unknown lock, replace a wallet, bypass a
+reservation or downgrade with unresolved state. Reconcile with the original
+transaction and verified receipt/revert evidence first. A legacy journal
+without its network can be adopted only when actual signed bytes match the
+owner-selected chain, payer, pinned target and exact call. Insufficient
+evidence requires manual receipt reconciliation. Quote signing expiry does
+not itself require a second settlement. Raw transactions and receipt JWTs
+remain private.
 
 ### Network access
 
-In a sandbox that allowlists outbound hosts, allow `api.aifinpay.io` and a
-Polygon RPC. USDC payments need nothing else. For the independent POL/USD check
-on POL payments MCP 2.3.0 reads Chainlink on
-Polygon over that RPC, then `api.coinbase.com`, then `api.coingecko.com` — one
-is enough. (MCP 2.2.3 used only `api.coinbase.com`.) If no rate is available,
+In a sandbox that allowlists outbound hosts, allow `api.aifinpay.io` and an RPC
+for the owner-selected pay chain (`AIFINPAY_RPC_URL` overrides its default).
+Stablecoin payments need the issuer, merchant and that RPC. For the independent
+native/USD check MCP uses the pinned Chainlink feed on Polygon or Base, then
+`api.coinbase.com`, then `api.coingecko.com`. Other networks use those independent
+HTTP price sources. An implausible, stale or future-dated rate is refused. If no rate is available,
 `payable_fetch` stops before paying and nothing is spent; tell the owner which
 hosts to allow rather than inventing a workaround. With the Node SDK, pass your
 own `nativeUsdPrice`: Chainlink POL/USD on Polygon, Coinbase `POL-USD`, or
 CoinGecko `polygon-ecosystem-token` (never `matic-network`, frozen since
-February 2026).
+February 2026); on Base, ETH/USD from Chainlink on Base, Coinbase `ETH-USD` or
+CoinGecko `ethereum`.
 
 ## After creating a wallet: link it to the owner's dashboard
 
@@ -184,14 +306,19 @@ agent's balance, payments and receipts, and can set a daily-spend email alert,
 at https://dash.aifinpay.io → My Agents:
 
 - **MCP:** the owner clicks **Claim via MCP**, gets a one-time URL and gives it
-  to you; call `agent_claim_self({"magic_link_url": "…"})`.
+  to you; call `agent_claim_self({"magic_link_url": "…"})`. The owner-selected
+  payment family must be bound successfully; the other wallet is best-effort.
+  Binding a wallet does not activate a disabled payment network. Use the
+  selected wallet's **Fund** panel for available networks and assets.
 - **Node / Python:** the owner uses **Add agent by address** and gives you the
   challenge; return `agent.signDashboardClaim(challenge)` (Node) or
   `agent.sign_dashboard_claim(challenge)` (Python). These sign only
   `AiFinPay-claim:polygon:<own address>:<nonce>`.
 
-Hard spending limits stay in the agent's own configuration (`AIFINPAY_MAX_USD`,
-`AIFINPAY_DAILY_USD`), not in the dashboard.
+Keep local owner spending limits in the agent's configuration (`AIFINPAY_MAX_USD`,
+`AIFINPAY_DAILY_USD`). Claimed-wallet controls in the dashboard are additional
+backend restrictions on quotes and gateway access; they do not replace local
+limits or control transactions sent directly outside AiFinPay.
 
 Discover routes on the exact requested origin: `/.well-known/x402.json` and any
 API catalog linked by that site. A dev hostname does not imply testnet. If a
@@ -253,17 +380,23 @@ Use agent_history. Do not guess /v1/history, /v1/payments or /v1/wallet/tx.
 
 Canonical AIFP-1 economics are gross-inclusive: the agent pays the quoted
 price, AiFinPay takes **1 %** (100 bps) from it, and the merchant receives
-**99 %**. No fixed fee is implied. AIFP-1 settles live
-on Polygon (splitter v1.4); Solana settlement is disabled. The smallest batch is
-$0.10 plus gas.
+**99 %**. No fixed fee is implied. Production served Polygon and Base
+(splitter v1.4) at the 2026-10-04 baseline check. Additional client descriptors
+do not prove production activation; check issuer capabilities and merchant
+authorization. This source cohort adds a Solana v1.4 adapter with explicit
+network, asset and fee/rent limits; current published Solana deployment records
+remain disabled. The smallest paid batch is $0.10, plus network fees and any
+required account rent.
 
 (The older "98.99 / 1 / 0.01" figure was the v1.2 fee-on-top model.)
 
 Routes:
 
 - GET /v1/agents/:address/transactions?chain=polygon&limit=25&offset=0:
-  public facts from indexed AiFinPay Polygon settlements in the durable
-  ledger. Excludes arbitrary wallet transfers and may lag the chain.
+  public facts from indexed AiFinPay settlements in the durable ledger on
+  backends with that network's indexer. Select the configured network with
+  `chain`; a source descriptor does not prove indexing coverage. Excludes
+  arbitrary wallet transfers and may lag the chain.
 - GET /v1/agents/:address/receipts?limit=25&offset=0: retained prepaid-batch
   metadata, including test payments. Never includes the spendable receipt JWT.
 - GET /v1/agents/:address/statement?days=7: retained billing statement.
@@ -358,8 +491,9 @@ retype from memory:
   `setBudget({ per_call_usd, daily_usd })`, discovery + `fetchPaid`
 - `wallet-budget-paid.mjs` (JavaScript, ESM): same flow, no types
 - `wallet-budget-call.py` (Python): `from_seed(os.environ["SEED_HASH"])`,
-  `call(provider, body, cost=…)` cap; fails closed on paid 402s — use Node
-  `fetchPaid` for paid settlement
+  `call(provider, body, cost=…)` cap; this legacy snippet fails closed on paid
+  402s. For a paid purchase use the current SDK `fetch_paid` guide or Node
+  `fetchPaid`, with explicit origin, amount and gas limits.
 
 Browse: `https://github.com/AiFinPay/sdk/tree/main/examples/agent-snippets`
 
@@ -413,8 +547,8 @@ terminal for that request: do not lower units below the server minimum, edit
 quotes, or construct a manual nonce, receipt or transaction workaround.
 
 This dev quote tool never broadcasts. The new low-level SDK executor supports
-native Amoy v1.4, while MCP/fetchPaid receipt purchases remain Polygon-only.
-A full paid testnet receipt flow is not yet claimed. A prepaid batch means one settlement funding
+native Amoy v1.4; this MCP exposes no Amoy paid receipt executor.
+A full paid testnet receipt flow is not claimed. A prepaid batch means one settlement funding
 multiple API calls, not an arbitrary batch of on-chain transfers.
 
 After any actual settlement, retain its quote and transaction reference.

package/smithery.yaml

@@ -1,7 +1,7 @@
 name: aifinpay
 displayName: AiFinPay
-description: Stripe for AI agents. Pay for any HTTP API in stablecoins or native tokens across 8 EVM chains and Solana with one MCP call. Non-custodial, on-chain settlement.
-version: 2.0.0
+description: Payment infrastructure for AI agents. A persistent non-custodial agent wallet, Agent Passport resolution, route discovery and non-signing settlement invoices; with owner-set limits, payable_fetch buys prepaid access to AIFP-1 merchants on Polygon or Base, in POL/ETH or a pinned stablecoin.
+version: 2.5.0
 license: MIT
 homepage: https://aifinpay.io
 repository: https://github.com/AiFinPay/sdk
@@ -19,19 +19,11 @@ categories:
 tags:
   - payments
   - ai-agents
-  - x402
+  - payment-infrastructure
+  - aifp-1
   - polygon
-  - solana
-  - avalanche
-  - arbitrum
-  - bnb
-  - base
-  - unichain
-  - optimism
   - stablecoins
   - usdc
-  - usdt
-  - stripe-for-ai
   - non-custodial
   - agent-passport
   - settlement
@@ -63,47 +55,77 @@ configSchema:
     AIFINPAY_AGENT_SECRET:
       type: string
       title: Agent secret (base58)
-      description: Legacy Ed25519 secret for the agent identity. Both the Solana and the EVM address derive deterministically from it. Leave blank to generate a fresh keypair each session (testing only). Signing happens locally inside the MCP process; never transmitted to AiFinPay servers.
-    AIFINPAY_MAX_USD:
-      type: string
-      title: Max USD per call
-      description: Hard cap per paid call. Refuses to settle anything above this. Does not enable signing.
-      default: "0.10"
-    AIFINPAY_BASE_URL:
-      type: string
-      title: API base URL
-      description: Override the AiFinPay backend endpoint.
-      default: https://aifinpay.io
-    AIFINPAY_TIMEOUT_MS:
-      type: string
-      title: Request timeout (ms)
-      description: SDK request timeout in milliseconds.
-      default: "30000"
-    AIFINPAY_MODE:
-      type: string
-      title: Runtime mode
-      description: Set to "dev" to expose dev_payment_quote tool. Requires a separate dev backend URL.
+      description: Legacy Ed25519 secret for the agent identity. The Solana, EVM and Casper addresses derive deterministically from it. With no wallet source the server uses an ephemeral identity that must not be funded. Signing happens locally inside the MCP process; the secret is never transmitted to AiFinPay servers.
     AIFINPAY_HOME:
       type: string
       title: Wallet home directory
-      description: Directory of the legacy agent.json keystore.
+      description: Directory of the agent.json keystore written by `npx @aifinpay/mcp init` (default ~/.aifinpay).
     AIFINPAY_WALLET_PASSPHRASE:
       type: string
       title: Wallet passphrase
-      description: Passphrase for encrypted legacy keystore files.
+      description: Passphrase for an encrypted agent.json keystore. Without it an encrypted keystore cannot be opened and the server does not start.
+    AIFINPAY_PAYMENTS_ENABLED:
+      type: string
+      title: Enable payments
+      description: Set to "1" to register payable_fetch. Requires a persistent wallet and AIFINPAY_MAX_USD, AIFINPAY_DAILY_USD, AIFINPAY_GATEWAY_ORIGINS and a gas cap (AIFINPAY_MAX_GAS, or AIFINPAY_MAX_GAS_POL on Polygon); the server refuses to start if any is missing. Unset or "0" keeps the server read-only.
+    AIFINPAY_MAX_USD:
+      type: string
+      title: Max USD per payment
+      description: Per-payment cap for payable_fetch. Required when payments are enabled; there is no default. A tool argument can lower it for one call, never raise it.
+    AIFINPAY_DAILY_USD:
+      type: string
+      title: Max USD per 24 hours
+      description: Rolling 24-hour spending cap for payable_fetch. Required when payments are enabled.
     AIFINPAY_GATEWAY_ORIGINS:
       type: string
-      title: Gateway origins
-      description: Comma-separated exact HTTPS origins trusted for AIFP-1 settlement.
+      title: Payable origins
+      description: Comma-separated exact HTTPS origins the agent may pay (no wildcards). Required when payments are enabled.
     AIFINPAY_GATEWAY_PATH_MODE:
       type: string
       title: Gateway path mode
       description: "Use gateway for merchant-slug identity or direct for full request-path identity."
       default: gateway
+    AIFINPAY_PAY_CHAIN:
+      type: string
+      title: Payment chain
+      description: '"polygon" (default) or "base". Set by the owner; a quote for any other chain is refused.'
+    AIFINPAY_MAX_GAS:
+      type: string
+      title: Gas cap (native)
+      description: Gas cap per payment in the payment chain's native currency, for example "0.3" POL on Polygon or "0.0002" ETH on Base. Required when payments are enabled (or AIFINPAY_MAX_GAS_POL on Polygon).
+    AIFINPAY_MAX_GAS_POL:
+      type: string
+      title: Gas cap (POL, Polygon only)
+      description: The gas cap under its original name, in POL. Accepted on Polygon; refused on Base rather than read as ETH.
+    AIFINPAY_PAY_ASSET:
+      type: string
+      title: Payment asset
+      description: The chain's native currency (default; POL or ETH) or a stablecoin the SDK pins for that chain, such as "USDC". Gas is paid in the native currency either way.
+    AIFINPAY_RPC_URL:
+      type: string
+      title: RPC for the payment chain
+      description: Optional HTTPS RPC for the payment chain; defaults to its public RPC.
+    AIFINPAY_BASE_URL:
+      type: string
+      title: API base URL
+      description: Override the AiFinPay backend. Unset, read-only tools use https://aifinpay.io and payable_fetch quotes and receipts use https://api.aifinpay.io.
+    AIFINPAY_TIMEOUT_MS:
+      type: string
+      title: Request timeout (ms)
+      description: SDK request timeout in milliseconds.
+      default: "30000"
+    AIFINPAY_MODE:
+      type: string
+      title: Runtime mode
+      description: '"live" (default) or "dev". Dev exposes dev_payment_quote, needs a non-production AIFINPAY_BASE_URL and cannot be combined with payments.'
     AIFINPAY_TRUSTED_HOSTS:
       type: string
       title: Trusted hosts
-      description: Exact hosts allowed to bypass the DNS pre-check.
+      description: Exact hosts allowed to skip the DNS pre-check, for environments that resolve only through a proxy.
+    AIFINPAY_CLAIM_ORIGINS:
+      type: string
+      title: Claim origins
+      description: Comma-separated origins agent_claim_self may contact. Defaults to the aifinpay.io dashboard and API origins; override only for staging.
     AIFINPAY_ALLOW_PRIVATE_FETCH:
       type: string
       title: Allow private fetch
@@ -112,9 +134,13 @@ configSchema:
 
 tools:
   - name: agent_address
-    description: Return the agent's on-chain identities (Solana, EVM and Casper) derived from the configured secret. Used for funding the agent before its first paid call.
+    description: Return the agent's on-chain identities (Solana, EVM and Casper) derived from the configured wallet. Read-only.
   - name: agent_reload
     description: Reload the configured local wallet files after init or a file update, without starting a new conversation. Returns public addresses only.
+  - name: agent_claim_self
+    description: Link the agent to its owner's AiFinPay dashboard with a one-time URL from dash.aifinpay.io. Signs only an AiFinPay claim challenge for the agent's own address; moves no funds.
+  - name: payable_fetch
+    description: Registered only when the owner enables payments. Fetches a GET resource from an owner-approved AIFP-1 merchant, buys a prepaid batch through verified Polygon v1.4 within the owner's limits, and reuses its receipt. scope "merchant" buys one batch for the whole site.
   - name: agent_quota
     description: How many prepaid requests this agent has left, per service. Lists active quota batches (merchant, resource, used, remaining, expiry). Read-only.
   - name: agent_history
@@ -122,9 +148,15 @@ tools:
   - name: agent_passport_resolve
     description: Resolve an AiFinPay Agent Passport by @username, permanent AIFP number, or immutable agent id. Returns verified public wallet bindings only.
   - name: settlement_routes
-    description: Read AiFinPay's currently runtime-verified v1.3 settlement routes. AIFP-1 is merchant monetisation (99% merchant / 1% AiFinPay). AIFP-2/x402 is 100% provider.
+    description: Read AiFinPay's runtime-verified settlement routes. AIFP-1 is merchant monetisation (99% merchant / 1% AiFinPay / 0% creator). AIFP-2/x402 is 100% provider.
   - name: settlement_invoice
-    description: Build and validate a non-signing v1.3 settlement invoice. This tool never moves funds.
+    description: Build and validate a non-signing EVM settlement invoice. This tool never moves funds.
+  - name: settlement_solana
+    description: Build and validate a non-signing Solana settlement invoice. This tool never moves funds.
+  - name: settlement_casper
+    description: Build and validate a non-signing Casper settlement invoice. This tool never moves funds.
+  - name: deployment_info
+    description: AiFinPay deployment details across EVM, Solana and Casper — addresses, stablecoins, program IDs and settlement status. Read-only.
 
 live_evidence:
   - chain: polygon