@oneshot-agent/mcp-server 0.44.0 → 0.46.0

package/README.md

@@ -84,6 +84,7 @@ Every tool is named `oneshot_<name>`. Below are the names.
 | [Think](https://docs.oneshotagent.com/api-reference/research) | `research` `predict` `solve` |
 | [Web and buying](https://docs.oneshotagent.com/api-reference/web-search) | `web_search` `web_read` `browser` `product_find` `commerce_buy` |
 | [Physical mail](https://docs.oneshotagent.com/api-reference/physical-mail/overview) | `physical_mail_upload` `physical_mail_validate_address` `physical_mail_preview` `physical_mail_quote` `physical_mail_approve` `physical_mail_send` `physical_mail_recover` `physical_mail_order` `physical_mail_cancel` |
+| [Connected systems](https://docs.oneshotagent.com/api-reference/connections/overview) | `connections_list` `ledger_invoices` `ledger_bills` `ledger_reports` `crm_accounts` `crm_contacts` `crm_opportunities` `tax_rates` `tax_calculate` `shipping_shipments` `shipping_tracking` `shipping_rates` `procurement_transactions` `procurement_bills` `procurement_suppliers` |
 | [LinkedIn](https://docs.oneshotagent.com/api-reference/linkedin/overview) | `linkedin_connect` `linkedin_accounts` `linkedin_invite` `linkedin_message` `linkedin_reply` and more |
 | [Build](https://docs.oneshotagent.com/api-reference/build/create) | `build` `update_build` |
 | [Goals](https://docs.oneshotagent.com/api-reference/compute/create) | `compute` `compute_status` `compute_tasks` `compute_respond` `compute_pause` `compute_resume` `compute_fund` `compute_cancel` |
@@ -140,6 +141,16 @@ wallet. The server signs it for you. A read with no proof and no valid token is
 - [Python SDK (Core)](https://pypi.org/project/oneshot-python/)
 - [GitHub](https://github.com/oneshot-agent/sdk)
 
+## Tool discovery
+
+The MCP catalog contains 173 tools. `oneshot_discover_tools` is a free, read-only
+search over the tools your token can call. Call it with no arguments for category
+counts, `{ "query": "send a printed letter" }` to search, or `{ "category": "email" }`
+to browse. Results contain public tool names, purposes and required inputs.
+Category pages contain up to five tools; pass `nextCursor` as `cursor` with the
+same query and category. `nextCursor: null` marks the end. Both stdio and hosted
+`/mcp` expose it as an ordinary tool.
+
 ## License
 
 MIT

package/dist/index.js

@@ -50,7 +50,7 @@ async function main() {
     const agent = await initAgent();
     const server = new Server({
         name: "oneshot-mcp",
-        version: "0.44.0", // keep in sync with package.json; guarded by version.test.ts
+        version: "0.46.0", // keep in sync with package.json; guarded by version.test.ts
     }, {
         capabilities: {
             tools: {},

package/dist/tools/annotations.js

@@ -3,10 +3,13 @@ import { LOOKUP_MANIFEST, ROUTE_MANIFEST } from "./lookup-manifest.generated.js"
 const read = (title, openWorld) => ({ title, readOnlyHint: true, destructiveHint: false, openWorldHint: openWorld });
 /** Changes something. `destructive` only for delete / overwrite / revoke. */
 const write = (title, openWorld, destructive = false) => ({ title, readOnlyHint: false, destructiveHint: destructive, openWorldHint: openWorld });
+/** The connected-system reads (#2403): paid, but each reads the caller's own connected business system, so closed-world. */
+const CONNECTED_SYSTEM_READ = /^\/v1\/tools\/(ledger|crm|shipping|tax|procurement)\//;
 const OPEN = true;
 const OWN = false;
 const DESTRUCTIVE = true;
 export const TOOL_ANNOTATIONS = {
+    oneshot_discover_tools: read("Discover tools", OWN),
     oneshot_solve: read("Solve", OWN),
     oneshot_predict: read("Predict", OWN),
     oneshot_hunt_list: read("List Soul Hunts", OPEN),
@@ -94,12 +97,15 @@ export const TOOL_ANNOTATIONS = {
     oneshot_approval_list: read("List approvals", OWN),
     oneshot_approval_cancel: write("Cancel an approval", OWN, DESTRUCTIVE),
     oneshot_action_policy: read("Show approval rules", OWN),
+    // Connected systems (#2403): the list is hand-written; the reads come from the route manifest below.
+    oneshot_connections_list: read("List connections", OWN),
     // The lookup tools come from the generated manifest: paid retrieval over public or third-party data (#1445).
     ...Object.fromEntries(LOOKUP_MANIFEST.map((entry) => [`oneshot_${entry.name}`, read(entry.title, OPEN)])),
     // The declared routes come from the same manifest (#1580). A read of the agent's own data is closed-world; a paid
-    // read (Changes, Benchmark) reaches recorded third-party data; a write changes something, and a DELETE removes it.
+    // read (Changes, Benchmark) reaches recorded third-party data, a connected-system read the caller's own system; a
+    // write changes something, and a DELETE removes it.
     ...Object.fromEntries(ROUTE_MANIFEST.map((entry) => {
-        const own = !entry.paid;
+        const own = !entry.paid || CONNECTED_SYSTEM_READ.test(entry.path);
         return [
             `oneshot_${entry.name}`,
             entry.readOnly ? read(entry.title, own ? OWN : OPEN) : write(entry.title, own ? OWN : OPEN, entry.method === "DELETE"),

package/dist/tools/connections.d.ts

@@ -0,0 +1,11 @@
+import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+import type { OneShot } from "@oneshot-agent/sdk";
+/**
+ * The agent's connections (#2403). Hand-written because `GET /v1/connections` is not a declared route: the
+ * connected-system read tools (`oneshot_ledger_*`, `oneshot_crm_*`, `oneshot_shipping_*`, `oneshot_tax_*`,
+ * `oneshot_procurement_*`) are generated from their routes and each tells the model to call this one first.
+ * Connecting and revoking stay in the console.
+ */
+export declare const connectionsListTool: Tool;
+/** The route's answer as it is: `{ connections: [...] }`. Through `route()`, which the published SDK range already has. */
+export declare function handleConnectionsList(agent: OneShot, _args: Record<string, unknown>): Promise<unknown>;

package/dist/tools/connections.js

@@ -0,0 +1,21 @@
+/**
+ * The agent's connections (#2403). Hand-written because `GET /v1/connections` is not a declared route: the
+ * connected-system read tools (`oneshot_ledger_*`, `oneshot_crm_*`, `oneshot_shipping_*`, `oneshot_tax_*`,
+ * `oneshot_procurement_*`) are generated from their routes and each tells the model to call this one first.
+ * Connecting and revoking stay in the console.
+ */
+export const connectionsListTool = {
+    name: "oneshot_connections_list",
+    description: "List the agent's connections to business systems (accounting, CRM, shipping, tax, spend) and GitHub. " +
+        "Returns each connection's id, name, kind, system, account_label and status (only an active one can be read). " +
+        "Call it before any connected-system read: pick the connection by system and account_label and pass its id as connection_id. " +
+        "Connections are added and revoked in the console. Free.",
+    inputSchema: {
+        type: "object",
+        properties: {},
+    },
+};
+/** The route's answer as it is: `{ connections: [...] }`. Through `route()`, which the published SDK range already has. */
+export async function handleConnectionsList(agent, _args) {
+    return agent.route("GET", "/v1/connections");
+}

package/dist/tools/discover.d.ts

@@ -0,0 +1,4 @@
+import type { Tool } from '@modelcontextprotocol/sdk/types.js';
+import type { OneShot } from '@oneshot-agent/sdk';
+export declare const discoverToolsTool: Tool;
+export declare function handleDiscoverTools(agent: OneShot, args: Record<string, unknown>): Promise<unknown>;

package/dist/tools/discover.js

@@ -0,0 +1,20 @@
+export const discoverToolsTool = {
+    name: 'oneshot_discover_tools',
+    description: 'Find OneShot tools by task or category. Free. Returns public names, purposes and required inputs. With no query or category, lists categories. Category pages contain up to five tools; pass nextCursor with the same query and category.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            query: { type: 'string', description: 'Task or tool name to search for.' },
+            category: { type: 'string', description: 'Category ID from the directory.' },
+            cursor: { type: 'string', description: 'Opaque nextCursor from a category page.' },
+        },
+        additionalProperties: false,
+    },
+};
+export async function handleDiscoverTools(agent, args) {
+    if (Object.entries(args).some(([key, value]) => !['query', 'category', 'cursor'].includes(key) || typeof value !== 'string')) {
+        throw new Error('Expected optional query, category and cursor strings.');
+    }
+    // route() is available in the published SDK too; discoverTools() wraps this same free request.
+    return agent.route('GET', '/v1/tools/discover', { query: args, paid: false });
+}

package/dist/tools/email.js

@@ -1,13 +1,13 @@
 export const emailTool = {
     name: "oneshot_email",
-    description: "Send an email. Supports HTML body, attachments, and threaded replies (set reply_to_email_id to an inbound email id from oneshot_inbox_list/oneshot_inbox_get). Paid tool — quote provided before payment.\n\n" +
+    description: "Send an email. Supports HTML body, attachments, and threaded replies (set reply_to_email_id to an inbound email id from oneshot_inbox_list/oneshot_inbox_get, or one this agent sent). Paid tool — quote provided before payment.\n\n" +
         "Sending requires a domain the agent owns. A fresh account has none — call oneshot_list_domains first to see what's already owned. If there is no usable domain, pass from_domain with a new domain to register it. A call with a new from_domain only quotes — nothing is charged — and returns status 'confirmation_required' with the exact cost (domain registration plus fees) and a quote_id. Tell the user that exact computed number, never a guessed or approximate one, and only once they say to proceed, call this again with the same arguments and confirm_new_domain set to that quote_id: that registers the domain, charges exactly the quoted total, and sends the email in one call. The workspace balance must cover it, or the call fails with insufficient_credits.",
     inputSchema: {
         type: "object",
         properties: {
             to: {
                 type: "string",
-                description: "Recipient email address (or comma-separated list). Optional when reply_to_email_id is set — defaults to the inbound sender.",
+                description: "Recipient email address (or comma-separated list). Optional when reply_to_email_id is set — defaults to the other party.",
             },
             subject: {
                 type: "string",
@@ -15,7 +15,7 @@ export const emailTool = {
             },
             reply_to_email_id: {
                 type: "string",
-                description: "Reply within a thread: id of an inbound email (from oneshot_inbox_list/oneshot_inbox_get). Sets In-Reply-To/References headers so mail clients group the conversation.",
+                description: "Reply within a thread: id of an inbound email (from oneshot_inbox_list/oneshot_inbox_get), or one this agent sent. Sets In-Reply-To/References headers so mail clients group the conversation.",
             },
             body: {
                 type: "string",

package/dist/tools/index.js

@@ -1,3 +1,4 @@
+import { discoverToolsTool, handleDiscoverTools } from './discover.js';
 import { emailTool, handleEmail } from "./email.js";
 import { voiceTool, handleVoice } from "./voice.js";
 import { voiceNumberProvisionTool, voiceNumbersTool, voiceInboundSetTool, voiceInboundDisableTool, voiceInboundCallsTool, handleVoiceNumberProvision, handleVoiceNumbers, handleVoiceInboundSet, handleVoiceInboundDisable, handleVoiceInboundCalls, } from "./voice-inbound.js";
@@ -28,8 +29,10 @@ import { huntListTool, huntStatusTool, huntPredictTool, huntCollectionTool, hunt
 import { TOOL_ANNOTATIONS } from "./annotations.js";
 import { lookupToolDefinitions, lookupHandlers, routeToolDefinitions, routeHandlers } from "./lookup.js";
 import { physicalMailSendTool, physicalMailUploadTool, handlePhysicalMailSend, handlePhysicalMailUpload } from "./physical-mail.js";
+import { connectionsListTool, handleConnectionsList } from "./connections.js";
 import { spendBreakdownTool, rocsTool, rocsByGoalTool, receiptsListTool, tagReceiptValueTool, handleSpendBreakdown, handleRocs, handleRocsByGoal, handleReceiptsList, handleTagReceiptValue } from "./analytics.js";
 const toolDefinitions = [
+    discoverToolsTool,
     emailTool,
     voiceTool,
     smsTool,
@@ -112,6 +115,7 @@ const toolDefinitions = [
     approvalListTool,
     approvalCancelTool,
     actionPolicyGetTool,
+    connectionsListTool,
     ...lookupToolDefinitions,
     ...routeToolDefinitions,
 ];
@@ -124,6 +128,7 @@ export const tools = toolDefinitions.map((tool) => {
     return { ...tool, title: hints.title, annotations: { ...hints } };
 });
 const handlers = {
+    oneshot_discover_tools: handleDiscoverTools,
     "oneshot_email": handleEmail,
     "oneshot_voice": handleVoice,
     "oneshot_sms": handleSms,
@@ -209,6 +214,7 @@ const handlers = {
     "oneshot_approval_list": handleApprovalList,
     "oneshot_approval_cancel": handleApprovalCancel,
     "oneshot_action_policy": handleActionPolicyGet,
+    "oneshot_connections_list": handleConnectionsList,
     ...lookupHandlers,
     ...routeHandlers,
 };

package/dist/tools/lookup-manifest.generated.js

@@ -111,6 +111,29 @@ export const LOOKUP_MANIFEST = [
             "limit": 1
         }
     },
+    {
+        "name": "compound_hazards",
+        "path": "lookup/compound-hazards",
+        "title": "Compound Hazards",
+        "description": "Give the GHS hazard classification of a chemical compound by its compound identifier (CID) or by a name: a common, trade or systematic name, or a CAS registry number such as 50-00-0. Returns one classification per classifying source, in the source order: the GHS pictograms with their codes (GHS05), the signal word, the hazard statements with their codes (H314) and the precautionary statement codes. Only two classifying sources are returned: the EU harmonised classification (Regulation (EC) No 1272/2008) and the Hazardous Substances Data Bank of the US National Library of Medicine; every other source is left out, so a compound classified only by others returns an empty list. `classified` is true when a returned classification has a hazard statement. A name matching several compounds uses the first and lists them all in `matched_cids`. `compound` is null when the name or CID matches nothing, or the source has no classification for the compound. Give exactly one of `cid` and `name`. Toxicity values, exposure limits, the full safety data sheet, and any synthesis or preparation data are not returned.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "cid": {
+                    "type": "integer",
+                    "description": "The compound identifier (CID), for example 712. From 1 to 999999999."
+                },
+                "name": {
+                    "type": "string",
+                    "description": "A common, trade or systematic name, or a CAS registry number such as 50-00-0. 2 to 200 characters."
+                }
+            },
+            "required": []
+        },
+        "example": {
+            "name": "50-00-0"
+        }
+    },
     {
         "name": "compound_properties",
         "path": "lookup/compound-properties",
@@ -806,6 +829,44 @@ export const LOOKUP_MANIFEST = [
             "height_in": 48
         }
     },
+    {
+        "name": "vehicle_fuel_economy",
+        "path": "lookup/vehicle-fuel-economy",
+        "title": "Fuel Economy",
+        "description": "Get federal fuel economy ratings and annual fuel expenditure for US light-duty vehicles from model year 1984 on. The model name must be the source's: Camry, Camry AWD LE/SE and Camry Hybrid LE are three separate models. Make and model matching is case-insensitive. The result lists the engine and transmission options in source order. `variant` picks among the options by case-insensitive text, for example 4 cyl, 2.5 L or S8; without it the first option is used. An unknown model or unmatched variant completes with `matched: false` and the available options. City, highway and combined ratings are miles per gallon, or miles per gallon equivalent for electric vehicles. Unavailable or inapplicable values are null. The source refreshes weekly; updated_on dates the selected record.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "model_year": {
+                    "type": "integer",
+                    "description": "The model year, from 1984 through next calendar year. At least 1984. Model year cannot be later than next year."
+                },
+                "make": {
+                    "type": "string",
+                    "description": "The vehicle make, for example Toyota. 2 to 40 characters."
+                },
+                "model": {
+                    "type": "string",
+                    "description": "The model as the source names it, for example Camry or Camry Hybrid LE. 1 to 60 characters."
+                },
+                "variant": {
+                    "type": "string",
+                    "description": "Case-insensitive text in the option description, for example 4 cyl, 2.5 L or S8; omitted selects the first option. 1 to 60 characters."
+                }
+            },
+            "required": [
+                "model_year",
+                "make",
+                "model"
+            ]
+        },
+        "example": {
+            "model_year": 2020,
+            "make": "Toyota",
+            "model": "Camry",
+            "variant": "4 cyl"
+        }
+    },
     {
         "name": "gene_pathways",
         "path": "lookup/gene-pathways",
@@ -1270,6 +1331,39 @@ export const LOOKUP_MANIFEST = [
             "include_sequence": false
         }
     },
+    {
+        "name": "protein_resolve",
+        "path": "resolve/protein",
+        "title": "Protein Resolve",
+        "description": "Protein identities from UniProtKB under CC BY 4.0, attributed to the UniProt Consortium. For research and education only; not medical advice. Give a gene symbol or synonym (TP53, P53, HER2), an entry name (P53_HUMAN), or a protein name (insulin). Exact gene names and synonyms are searched first. If none match, protein names are searched unless the query is a single uppercase token or contains digits without spaces. taxon_id defaults to human (9606); reviewed_only defaults to true. Entry names are resolved directly across organisms and review statuses. Returns up to limit matches, reviewed entries first then source order, with recommended full protein name, primary gene, gene synonyms, organism, annotation score and how each matched. ambiguous is true when multiple matches are kept and none matched an entry name or primary gene. total is the sum of source counts for the searches made. With reviewed_only false, unreviewed entries are searched and counted only when reviewed matches do not fill limit. No match returns an empty list. Absent scalar values are null. Use the accession with Protein Function, Sequence, Structure or Domains for those facts. UniProt releases updates every eight weeks.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "query": {
+                    "type": "string",
+                    "description": "A gene symbol or synonym, entry name, or protein name; letters, digits, spaces and the characters . _ / - only. 1 to 60 characters."
+                },
+                "taxon_id": {
+                    "type": "integer",
+                    "description": "The organism taxonomy ID; human (9606) by default. From 1 to 999999999. Defaults to `9606`."
+                },
+                "reviewed_only": {
+                    "type": "boolean",
+                    "description": "Only reviewed entries; false includes unreviewed entries. Defaults to `true`."
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "The most matches to return. From 1 to 10. Defaults to `5`."
+                }
+            },
+            "required": [
+                "query"
+            ]
+        },
+        "example": {
+            "query": "TP53"
+        }
+    },
     {
         "name": "protein_sequence",
         "path": "lookup/protein-sequence",
@@ -1958,6 +2052,147 @@ export const ROUTE_MANIFEST = [
             "start_url": "https://example.com/login"
         }
     },
+    {
+        "name": "crm_accounts",
+        "method": "POST",
+        "path": "/v1/tools/crm/accounts",
+        "paid": true,
+        "readOnly": true,
+        "title": "CRM accounts",
+        "description": "Read accounts from a connected Salesforce or HubSpot account. Read-only. Nothing fetched is stored. Contacts include personal data, returned inline only. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "query": {
+                    "type": "string",
+                    "description": "Name contains this text, case insensitive. A filtered page can be empty; continue while next_cursor is present."
+                },
+                "updated_since": {
+                    "type": "string",
+                    "description": "Updated on or after this ISO date (YYYY-MM-DD, UTC)"
+                },
+                "limit": {
+                    "type": "number",
+                    "description": "Records per page (1 to 100, default 25)"
+                },
+                "cursor": {
+                    "type": "string",
+                    "description": "The next_cursor of the previous page; keep the same filters"
+                }
+            },
+            "required": [
+                "connection_id"
+            ]
+        },
+        "example": {
+            "connection_id": "5f4a3b2c-1d0e-4f9a-8b7c-6d5e4f3a2b1c",
+            "limit": 25
+        }
+    },
+    {
+        "name": "crm_contacts",
+        "method": "POST",
+        "path": "/v1/tools/crm/contacts",
+        "paid": true,
+        "readOnly": true,
+        "title": "CRM contacts",
+        "description": "Read contacts from a connected Salesforce or HubSpot account. Read-only. Nothing fetched is stored. Contacts include personal data, returned inline only. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "query": {
+                    "type": "string",
+                    "description": "Name contains this text, case insensitive. A filtered page can be empty; continue while next_cursor is present."
+                },
+                "updated_since": {
+                    "type": "string",
+                    "description": "Updated on or after this ISO date (YYYY-MM-DD, UTC)"
+                },
+                "limit": {
+                    "type": "number",
+                    "description": "Records per page (1 to 100, default 25)"
+                },
+                "cursor": {
+                    "type": "string",
+                    "description": "The next_cursor of the previous page; keep the same filters"
+                },
+                "account_id": {
+                    "type": "string",
+                    "description": "Only records associated with this account id"
+                }
+            },
+            "required": [
+                "connection_id"
+            ]
+        },
+        "example": {
+            "connection_id": "5f4a3b2c-1d0e-4f9a-8b7c-6d5e4f3a2b1c",
+            "limit": 25
+        }
+    },
+    {
+        "name": "crm_opportunities",
+        "method": "POST",
+        "path": "/v1/tools/crm/opportunities",
+        "paid": true,
+        "readOnly": true,
+        "title": "CRM opportunities",
+        "description": "Read opportunities from a connected Salesforce or HubSpot account. Read-only. Nothing fetched is stored. Contacts include personal data, returned inline only. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "query": {
+                    "type": "string",
+                    "description": "Name contains this text, case insensitive. A filtered page can be empty; continue while next_cursor is present."
+                },
+                "updated_since": {
+                    "type": "string",
+                    "description": "Updated on or after this ISO date (YYYY-MM-DD, UTC)"
+                },
+                "limit": {
+                    "type": "number",
+                    "description": "Records per page (1 to 100, default 25)"
+                },
+                "cursor": {
+                    "type": "string",
+                    "description": "The next_cursor of the previous page; keep the same filters"
+                },
+                "account_id": {
+                    "type": "string",
+                    "description": "Only records associated with this account id"
+                },
+                "status": {
+                    "type": "string",
+                    "enum": [
+                        "open",
+                        "won",
+                        "lost",
+                        "all"
+                    ],
+                    "description": "Opportunity status (default all)"
+                }
+            },
+            "required": [
+                "connection_id"
+            ]
+        },
+        "example": {
+            "connection_id": "5f4a3b2c-1d0e-4f9a-8b7c-6d5e4f3a2b1c",
+            "limit": 25
+        }
+    },
     {
         "name": "watch_delete",
         "method": "DELETE",
@@ -2078,6 +2313,174 @@ export const ROUTE_MANIFEST = [
             "phone_number_id": "pn_01HX"
         }
     },
+    {
+        "name": "ledger_bills",
+        "method": "POST",
+        "path": "/v1/tools/ledger/bills",
+        "paid": true,
+        "readOnly": true,
+        "title": "Ledger bills",
+        "description": "Bills (payables) from a connected accounting system (QuickBooks, Zoho Books, Xero, NetSuite), filtered by date, status and counterparty. Read-only. Nothing fetched is stored. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "limit": {
+                    "type": "number",
+                    "description": "Records per page (1 to 100, default 25)"
+                },
+                "cursor": {
+                    "type": "string",
+                    "description": "The next_cursor of the previous page"
+                },
+                "from": {
+                    "type": "string",
+                    "description": "Records issued on or after this date (YYYY-MM-DD)"
+                },
+                "to": {
+                    "type": "string",
+                    "description": "Records issued on or before this date (YYYY-MM-DD)"
+                },
+                "status": {
+                    "type": "string",
+                    "enum": [
+                        "open",
+                        "paid",
+                        "overdue",
+                        "all"
+                    ],
+                    "description": "Payment status filter (default all)"
+                },
+                "counterparty": {
+                    "type": "string",
+                    "description": "Only records whose counterparty name contains this text"
+                }
+            },
+            "required": [
+                "connection_id"
+            ]
+        },
+        "example": {
+            "connection_id": "5f4a3b2c-1d0e-4f9a-8b7c-6d5e4f3a2b1c",
+            "status": "overdue",
+            "limit": 25
+        }
+    },
+    {
+        "name": "ledger_invoices",
+        "method": "POST",
+        "path": "/v1/tools/ledger/invoices",
+        "paid": true,
+        "readOnly": true,
+        "title": "Ledger invoices",
+        "description": "Invoices from a connected accounting system (QuickBooks, Zoho Books, Xero, NetSuite), filtered by date, status and counterparty. Read-only. Nothing fetched is stored. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "limit": {
+                    "type": "number",
+                    "description": "Records per page (1 to 100, default 25)"
+                },
+                "cursor": {
+                    "type": "string",
+                    "description": "The next_cursor of the previous page"
+                },
+                "from": {
+                    "type": "string",
+                    "description": "Records issued on or after this date (YYYY-MM-DD)"
+                },
+                "to": {
+                    "type": "string",
+                    "description": "Records issued on or before this date (YYYY-MM-DD)"
+                },
+                "status": {
+                    "type": "string",
+                    "enum": [
+                        "open",
+                        "paid",
+                        "overdue",
+                        "all"
+                    ],
+                    "description": "Payment status filter (default all)"
+                },
+                "counterparty": {
+                    "type": "string",
+                    "description": "Only records whose counterparty name contains this text"
+                }
+            },
+            "required": [
+                "connection_id"
+            ]
+        },
+        "example": {
+            "connection_id": "5f4a3b2c-1d0e-4f9a-8b7c-6d5e4f3a2b1c",
+            "status": "open",
+            "limit": 25
+        }
+    },
+    {
+        "name": "ledger_reports",
+        "method": "POST",
+        "path": "/v1/tools/ledger/reports",
+        "paid": true,
+        "readOnly": true,
+        "title": "Ledger reports",
+        "description": "A report from a connected accounting system. QuickBooks: balance_sheet, profit_and_loss and trial_balance, dated with as_of or from/to. Xero: the same three, with a profit_and_loss of at most 365 days. Zoho Books: trial_balance as of today only (no as_of); no balance_sheet or profit_and_loss. NetSuite reports are not supported. A report the system does not serve is refused as unsupported_for_system before payment. Read-only. Nothing fetched is stored. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "limit": {
+                    "type": "number",
+                    "description": "Records per page (1 to 100, default 25)"
+                },
+                "cursor": {
+                    "type": "string",
+                    "description": "The next_cursor of the previous page"
+                },
+                "type": {
+                    "type": "string",
+                    "enum": [
+                        "balance_sheet",
+                        "profit_and_loss",
+                        "trial_balance"
+                    ],
+                    "description": "The report. QuickBooks and Xero: all three. Zoho Books: trial_balance only. NetSuite: no reports"
+                },
+                "as_of": {
+                    "type": "string",
+                    "description": "Balance sheet and trial balance: the date the report stands at (YYYY-MM-DD). QuickBooks and Xero; Zoho Books serves the trial balance as of today"
+                },
+                "from": {
+                    "type": "string",
+                    "description": "Profit and loss: the first day of the period (YYYY-MM-DD)"
+                },
+                "to": {
+                    "type": "string",
+                    "description": "Profit and loss: the last day of the period (YYYY-MM-DD)"
+                }
+            },
+            "required": [
+                "connection_id",
+                "type"
+            ]
+        },
+        "example": {
+            "connection_id": "5f4a3b2c-1d0e-4f9a-8b7c-6d5e4f3a2b1c",
+            "type": "balance_sheet",
+            "as_of": "2026-09-30"
+        }
+    },
     {
         "name": "linkedin_sync_run",
         "method": "GET",
@@ -2185,6 +2588,132 @@ export const ROUTE_MANIFEST = [
             }
         }
     },
+    {
+        "name": "procurement_bills",
+        "method": "POST",
+        "path": "/v1/tools/procurement/bills",
+        "paid": true,
+        "readOnly": true,
+        "title": "Procurement bills",
+        "description": "Bills awaiting or past approval, read from the customer's connected spend system. Read-only: nothing is approved or paid. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "from": {
+                    "type": "string",
+                    "description": "Bills issued on or after this day (YYYY-MM-DD, UTC)"
+                },
+                "to": {
+                    "type": "string",
+                    "description": "Bills issued on or before this day (YYYY-MM-DD, UTC)"
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "Bills per page, 1 to 100 (default 25)"
+                },
+                "cursor": {
+                    "type": "string",
+                    "description": "The next_cursor of the previous page"
+                }
+            },
+            "required": [
+                "connection_id"
+            ]
+        },
+        "example": {
+            "connection_id": "6f1c2d3e-4b5a-4c6d-8e7f-9a0b1c2d3e4f",
+            "from": "2026-09-01",
+            "limit": 25
+        }
+    },
+    {
+        "name": "procurement_suppliers",
+        "method": "POST",
+        "path": "/v1/tools/procurement/suppliers",
+        "paid": true,
+        "readOnly": true,
+        "title": "Procurement suppliers",
+        "description": "Suppliers with their category and all-time spend, read from the customer's connected spend system. Read-only. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "from": {
+                    "type": "string",
+                    "description": "Suppliers added on or after this day (YYYY-MM-DD, UTC)"
+                },
+                "to": {
+                    "type": "string",
+                    "description": "Suppliers added on or before this day (YYYY-MM-DD, UTC)"
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "Suppliers per page, 1 to 100 (default 25)"
+                },
+                "cursor": {
+                    "type": "string",
+                    "description": "The next_cursor of the previous page"
+                }
+            },
+            "required": [
+                "connection_id"
+            ]
+        },
+        "example": {
+            "connection_id": "6f1c2d3e-4b5a-4c6d-8e7f-9a0b1c2d3e4f",
+            "limit": 25
+        }
+    },
+    {
+        "name": "procurement_transactions",
+        "method": "POST",
+        "path": "/v1/tools/procurement/transactions",
+        "paid": true,
+        "readOnly": true,
+        "title": "Procurement transactions",
+        "description": "Card and spend transactions read from the customer's connected spend system. Read-only. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "from": {
+                    "type": "string",
+                    "description": "Transactions made on or after this day (YYYY-MM-DD, UTC)"
+                },
+                "to": {
+                    "type": "string",
+                    "description": "Transactions made on or before this day (YYYY-MM-DD, UTC)"
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "Transactions per page, 1 to 100 (default 25)"
+                },
+                "cursor": {
+                    "type": "string",
+                    "description": "The next_cursor of the previous page"
+                }
+            },
+            "required": [
+                "connection_id"
+            ]
+        },
+        "example": {
+            "connection_id": "6f1c2d3e-4b5a-4c6d-8e7f-9a0b1c2d3e4f",
+            "from": "2026-10-01",
+            "to": "2026-10-15",
+            "limit": 25
+        }
+    },
     {
         "name": "physical_mail_recover",
         "method": "GET",
@@ -2277,6 +2806,308 @@ export const ROUTE_MANIFEST = [
             "limit": 10
         }
     },
+    {
+        "name": "shipping_rates",
+        "method": "POST",
+        "path": "/v1/tools/shipping/rates",
+        "paid": true,
+        "readOnly": true,
+        "title": "Shipping rates",
+        "description": "Rates already quoted on a shipment, read from the customer's connected shipping system. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "shipment_id": {
+                    "type": "string",
+                    "description": "The existing shipment whose quoted rates to read"
+                }
+            },
+            "required": [
+                "connection_id",
+                "shipment_id"
+            ]
+        },
+        "example": {
+            "connection_id": "6f1c2d3e-4b5a-4c6d-8e7f-9a0b1c2d3e4f",
+            "shipment_id": "se-1001"
+        }
+    },
+    {
+        "name": "shipping_shipments",
+        "method": "POST",
+        "path": "/v1/tools/shipping/shipments",
+        "paid": true,
+        "readOnly": true,
+        "title": "Shipping shipments",
+        "description": "Shipments read from the customer's connected shipping system. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "Shipments per page, 1 to 100 (default 25)"
+                },
+                "cursor": {
+                    "type": "string",
+                    "description": "The next_cursor of the previous page"
+                },
+                "from": {
+                    "type": "string",
+                    "description": "Shipments created on or after this day (YYYY-MM-DD)"
+                },
+                "to": {
+                    "type": "string",
+                    "description": "Shipments created on or before this day (YYYY-MM-DD)"
+                },
+                "status": {
+                    "type": "string",
+                    "description": "Only shipments in this status, as the system names it (for example label_purchased)"
+                }
+            },
+            "required": [
+                "connection_id"
+            ]
+        },
+        "example": {
+            "connection_id": "6f1c2d3e-4b5a-4c6d-8e7f-9a0b1c2d3e4f",
+            "limit": 25,
+            "from": "2026-10-01",
+            "to": "2026-10-15"
+        }
+    },
+    {
+        "name": "shipping_tracking",
+        "method": "POST",
+        "path": "/v1/tools/shipping/tracking",
+        "paid": true,
+        "readOnly": true,
+        "title": "Shipping tracking",
+        "description": "Tracking of one shipment read from the customer's connected shipping system. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "shipment_id": {
+                    "type": "string",
+                    "description": "The shipment to track, by the system's shipment id"
+                },
+                "carrier": {
+                    "type": "string",
+                    "description": "The carrier code, with tracking_number, to track without a shipment id"
+                },
+                "tracking_number": {
+                    "type": "string",
+                    "description": "The tracking number, with carrier"
+                }
+            },
+            "required": [
+                "connection_id"
+            ]
+        },
+        "example": {
+            "connection_id": "6f1c2d3e-4b5a-4c6d-8e7f-9a0b1c2d3e4f",
+            "shipment_id": "se-1001"
+        }
+    },
+    {
+        "name": "tax_calculate",
+        "method": "POST",
+        "path": "/v1/tools/tax/calculate",
+        "paid": true,
+        "readOnly": true,
+        "title": "Tax calculation",
+        "description": "Tax calculation for an order, read from the customer's connected tax system. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "from": {
+                    "type": "object",
+                    "properties": {
+                        "country": {
+                            "type": "string",
+                            "description": "Two-letter country code"
+                        },
+                        "zip": {
+                            "type": "string",
+                            "description": "Postal code"
+                        },
+                        "state": {
+                            "type": "string",
+                            "description": "State or province code (required for US and CA)"
+                        },
+                        "city": {
+                            "type": "string"
+                        },
+                        "street": {
+                            "type": "string"
+                        }
+                    },
+                    "required": [
+                        "country",
+                        "zip"
+                    ],
+                    "description": "Where the order ships from"
+                },
+                "to": {
+                    "type": "object",
+                    "properties": {
+                        "country": {
+                            "type": "string",
+                            "description": "Two-letter country code"
+                        },
+                        "zip": {
+                            "type": "string",
+                            "description": "Postal code"
+                        },
+                        "state": {
+                            "type": "string",
+                            "description": "State or province code (required for US and CA)"
+                        },
+                        "city": {
+                            "type": "string"
+                        },
+                        "street": {
+                            "type": "string"
+                        }
+                    },
+                    "required": [
+                        "country",
+                        "zip"
+                    ],
+                    "description": "Where the order ships to"
+                },
+                "line_items": {
+                    "type": "array",
+                    "description": "The goods on the order (1 to 100 lines)",
+                    "items": {
+                        "type": "object",
+                        "properties": {
+                            "id": {
+                                "type": "string",
+                                "description": "Your reference for the line; returned in the breakdown"
+                            },
+                            "quantity": {
+                                "type": "integer",
+                                "description": "Units on the line (default 1)"
+                            },
+                            "unit_price": {
+                                "type": "number",
+                                "description": "Price of one unit, before tax"
+                            },
+                            "discount": {
+                                "type": "number",
+                                "description": "Discount on the whole line, before tax"
+                            },
+                            "product_tax_code": {
+                                "type": "string",
+                                "description": "The system's product tax category code, when the goods are not taxed at the general rate"
+                            }
+                        },
+                        "required": [
+                            "unit_price"
+                        ]
+                    }
+                },
+                "shipping": {
+                    "type": "number",
+                    "description": "Shipping charged on the order, before tax (default 0)"
+                }
+            },
+            "required": [
+                "connection_id",
+                "from",
+                "to",
+                "line_items"
+            ]
+        },
+        "example": {
+            "connection_id": "6f1c2d3e-4b5a-4c6d-8e7f-9a0b1c2d3e4f",
+            "from": {
+                "country": "US",
+                "zip": "92093",
+                "state": "CA"
+            },
+            "to": {
+                "country": "US",
+                "zip": "90002",
+                "state": "CA",
+                "city": "Los Angeles"
+            },
+            "line_items": [
+                {
+                    "id": "1",
+                    "quantity": 1,
+                    "unit_price": 15,
+                    "product_tax_code": "20010"
+                }
+            ],
+            "shipping": 1.5
+        }
+    },
+    {
+        "name": "tax_rates",
+        "method": "POST",
+        "path": "/v1/tools/tax/rates",
+        "paid": true,
+        "readOnly": true,
+        "title": "Tax rates",
+        "description": "Tax rate for a location, read from the customer's connected tax system. Paid per read. Call oneshot_connections_list first and pick the connection_id by system and account_label.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "connection_id": {
+                    "type": "string",
+                    "description": "The connection to read. An agent can have several connections to the same system: list your connections first (`GET /v1/connections`) and pick by `system` and `account_label`."
+                },
+                "country": {
+                    "type": "string",
+                    "description": "Two-letter country code; US when omitted"
+                },
+                "zip": {
+                    "type": "string",
+                    "description": "Postal code of the location"
+                },
+                "state": {
+                    "type": "string",
+                    "description": "State or province code, for a more precise rate"
+                },
+                "city": {
+                    "type": "string",
+                    "description": "City, for a more precise rate"
+                },
+                "street": {
+                    "type": "string",
+                    "description": "Street address, for a rooftop-precise rate where the system offers one"
+                }
+            },
+            "required": [
+                "connection_id",
+                "zip"
+            ]
+        },
+        "example": {
+            "connection_id": "6f1c2d3e-4b5a-4c6d-8e7f-9a0b1c2d3e4f",
+            "country": "US",
+            "zip": "90210",
+            "state": "CA",
+            "city": "Beverly Hills"
+        }
+    },
     {
         "name": "physical_mail_validate_address",
         "method": "POST",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@oneshot-agent/mcp-server",
-  "version": "0.44.0",
-  "description": "MCP server for OneShot - 154 tools for AI agents",
+  "version": "0.46.0",
+  "description": "MCP server for OneShot - 173 tools for AI agents",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -26,7 +26,7 @@
   "dependencies": {
     "@coinbase/cdp-sdk": "1.45.0",
     "@modelcontextprotocol/sdk": "1.27.1",
-    "@oneshot-agent/sdk": "^0.57.0",
+    "@oneshot-agent/sdk": "^0.58.0",
     "zod": "3.25.76"
   },
   "devDependencies": {