@oneshot-agent/mcp-server 0.46.0 → 0.47.0

package/README.md

@@ -143,7 +143,7 @@ wallet. The server signs it for you. A read with no proof and no valid token is
 
 ## Tool discovery
 
-The MCP catalog contains 173 tools. `oneshot_discover_tools` is a free, read-only
+The MCP catalog contains 183 tools. `oneshot_discover_tools` is a free, read-only
 search over the tools your token can call. Call it with no arguments for category
 counts, `{ "query": "send a printed letter" }` to search, or `{ "category": "email" }`
 to browse. Results contain public tool names, purposes and required inputs.

package/dist/index.js

@@ -50,7 +50,7 @@ async function main() {
     const agent = await initAgent();
     const server = new Server({
         name: "oneshot-mcp",
-        version: "0.46.0", // keep in sync with package.json; guarded by version.test.ts
+        version: "0.47.0", // keep in sync with package.json; guarded by version.test.ts
     }, {
         capabilities: {
             tools: {},

package/dist/tools/lookup-manifest.generated.d.ts

@@ -30,5 +30,7 @@ export interface RouteManifestEntry {
         required: string[];
     };
     example: Record<string, unknown>;
+    /** `false` for a route whose 202 envelope is the answer (a verification_url to hand on): the handler returns it and never waits for the job. */
+    wait?: false;
 }
 export declare const ROUTE_MANIFEST: readonly RouteManifestEntry[];

package/dist/tools/lookup-manifest.generated.js

@@ -188,6 +188,29 @@ export const LOOKUP_MANIFEST = [
             "name": "aspirin"
         }
     },
+    {
+        "name": "compound_targets",
+        "path": "lookup/compound-targets",
+        "title": "Compound Targets",
+        "description": "Reports what the Open Targets Platform public database says about a drug or clinical candidate’s protein targets and mechanisms of action, with gene symbols and references. For research; not medical advice. Give exactly one of chembl_id or name. A PubChem CID is not accepted: pass the compound’s name, which Compound Resolve and Compound Properties return. A name search selects the first hit and lists up to three candidates so you can retry by ChEMBL id. An unknown compound returns matched: false. Does not return indications, adverse events, warnings, measured bioactivity or synthesis and preparation data.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "chembl_id": {
+                    "type": "string",
+                    "description": "ChEMBL molecule identifier; lowercase is accepted. CHEMBL followed by 1 to 9 digits, without a leading zero."
+                },
+                "name": {
+                    "type": "string",
+                    "description": "Drug or compound name; the first search hit is used. 2 to 100 characters."
+                }
+            },
+            "required": []
+        },
+        "example": {
+            "chembl_id": "CHEMBL1201580"
+        }
+    },
     {
         "name": "company_consumer_complaints",
         "path": "lookup/company-consumer-complaints",
@@ -218,6 +241,47 @@ export const LOOKUP_MANIFEST = [
             "limit": 1
         }
     },
+    {
+        "name": "company_contractor_license",
+        "path": "lookup/company-contractor-license",
+        "title": "Contractor Licence",
+        "description": "Look up a construction contractor in the Washington State contractor licence register, which refreshes daily. `state` is required; currently only WA is covered. Give exactly one of `license_number`, `ubi` (the state business identifier) and `name`. Names are matched ignoring case as a substring of the business name, so a short distinctive fragment works best. Return at most `limit` licences, newest effective date first, each with its type, status, whether it is active, effective, expiration and suspension dates, specialties, business type, principal and address. The phone number is not returned, and the street line is null for an individual (a sole proprietor), whose street may be a home. Missing values are null; dates are YYYY-MM-DD. An empty licenses list is a completed result: no licence was found under that number, identifier or name, not evidence that the contractor never held one.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "state": {
+                    "type": "string",
+                    "enum": [
+                        "WA"
+                    ],
+                    "description": "State whose contractor register is searched"
+                },
+                "license_number": {
+                    "type": "string",
+                    "description": "The state contractor licence number, including any asterisks. 1 to 20 characters."
+                },
+                "ubi": {
+                    "type": "string",
+                    "description": "The state business identifier (UBI)"
+                },
+                "name": {
+                    "type": "string",
+                    "description": "A fragment of the business name, matched ignoring case. 2 to 100 characters."
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "Most licences to return. From 1 to 20. Defaults to `5`."
+                }
+            },
+            "required": [
+                "state"
+            ]
+        },
+        "example": {
+            "state": "WA",
+            "license_number": "ABSHEC*345PS"
+        }
+    },
     {
         "name": "record_court_cases_find",
         "path": "find/record-court-cases",
@@ -595,6 +659,41 @@ export const LOOKUP_MANIFEST = [
             "limit": 3
         }
     },
+    {
+        "name": "company_fda_registration",
+        "path": "lookup/company-fda-registration",
+        "title": "FDA Establishment Registration",
+        "description": "Covers medical device establishments registered with the US Food and Drug Administration, worldwide. Supply exactly one registration number, FEI number or firm name. A name search may match many establishments of one group; country narrows name searches only. registration_year is the year the registration runs to. Groups up to 100 source listings into establishments, in first-seen order. Products are unique by product code, at most 25 per establishment, newest created date first; duplicate codes use the newest listing’s details. When truncated is true, only the first 100 source listings are considered: product lists may be incomplete, and name searches may omit entire establishments. Named contacts are excluded. No match returns an empty list. The source refreshes weekly; the evidence date identifies its snapshot.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "registration_number": {
+                    "type": "string",
+                    "description": "The establishment’s FDA registration number"
+                },
+                "fei_number": {
+                    "type": "string",
+                    "description": "The FDA establishment identifier"
+                },
+                "firm_name": {
+                    "type": "string",
+                    "description": "Firm name phrase; only letters, digits, spaces, ampersands, hyphens, periods and commas are kept. 2 to 100 characters."
+                },
+                "country": {
+                    "type": "string",
+                    "description": "Two-letter ISO country code; narrows firm name searches only"
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "The most establishments to return. From 1 to 10. Defaults to `3`."
+                }
+            },
+            "required": []
+        },
+        "example": {
+            "registration_number": "1030489"
+        }
+    },
     {
         "name": "company_federal_awards",
         "path": "lookup/company-federal-awards",
@@ -867,6 +966,58 @@ export const LOOKUP_MANIFEST = [
             "variant": "4 cyl"
         }
     },
+    {
+        "name": "gene_diseases",
+        "path": "lookup/gene-diseases",
+        "title": "Gene Diseases",
+        "description": "Reports the diseases the Open Targets Platform (CC0) associates with a human gene, strongest overall score first, with the evidence score of each datatype (genetic association, somatic mutation, known drug, affected pathway, literature, RNA expression, animal model, genetic literature). Human genes only. Pass an official gene symbol or an Ensembl gene ID; a version suffix is dropped. A symbol matches only a search hit with exactly that name, ignoring case: otherwise matched is false and the near hits are listed as candidates so you can retry by Ensembl ID. An unknown Ensembl ID returns matched: false. A score between 0 and 1 summarises the strength of the evidence that the gene and disease are associated; it is not a measure of causation or clinical risk. The data is for research and is not medical advice.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "gene": {
+                    "type": "string",
+                    "description": "An official human gene symbol (BRCA1) or an Ensembl gene ID (ENSG00000012048); a version suffix is dropped. 1 to 30 characters. Letters, digits, \".\", \"_\" and \"-\" only."
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "Diseases returned, highest overall score first. From 1 to 25. Defaults to `10`."
+                }
+            },
+            "required": [
+                "gene"
+            ]
+        },
+        "example": {
+            "gene": "BRCA1",
+            "limit": 2
+        }
+    },
+    {
+        "name": "gene_expression",
+        "path": "lookup/gene-expression",
+        "title": "Gene Expression",
+        "description": "Reports median expression across donors of normal (non-diseased) tissue for human genes only. Uses open-access summary data from the Genotype-Tissue Expression (GTEx) project, US National Institutes of Health. Please cite the GTEx Portal (https://gtexportal.org) and dbGaP accession phs000424. Values are transcripts per million (TPM), static between releases; the answer names the dataset. Pass an official human gene symbol or an Ensembl gene ID, with or without a version. Exactly one matching reference row is required; otherwise matched is false and candidates lists the returned rows. Tissues are sorted by highest median first; omit limit for all tissues. The data is for research and is not medical advice.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "gene": {
+                    "type": "string",
+                    "description": "Official human gene symbol (TP53) or Ensembl gene ID (ENSG00000141510), with or without a version. 1 to 30 characters. Letters, digits, \".\", \"_\" and \"-\" only."
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "Tissues returned, highest median first; omit for all tissues. From 1 to 60."
+                }
+            },
+            "required": [
+                "gene"
+            ]
+        },
+        "example": {
+            "gene": "TP53",
+            "limit": 2
+        }
+    },
     {
         "name": "gene_pathways",
         "path": "lookup/gene-pathways",
@@ -1074,6 +1225,41 @@ export const LOOKUP_MANIFEST = [
             "npi": "1245319599"
         }
     },
+    {
+        "name": "company_health_provider",
+        "path": "lookup/company-health-provider",
+        "title": "Health Provider Registration (organisation)",
+        "description": "Look up US health care organisations (clinics, hospitals, pharmacies and suppliers) in the national provider register. Give a 10-digit NPI, or organization_name and state with an optional city, never both. Names match a prefix: a trailing * is appended when absent, with at least two characters before it. Returns registered names, active status, organisational subpart status, registration and update dates, specialties with primary flags and licence details, practice and mailing addresses, and the authorised official name and title. The official telephone is omitted. The registry refreshes daily; judge each record by last_updated_on. Registration is not a licence check or proof of current practice at the address. Use person_health_provider for individual practitioners. total is the number returned, at most limit; no match completes with providers: [].",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "npi": {
+                    "type": "string",
+                    "description": "The organisation provider number. Give this, or organization_name and state, never both. A health provider number is exactly 10 digits."
+                },
+                "organization_name": {
+                    "type": "string",
+                    "description": "Organisation name prefix. Needs state; a trailing * is appended when absent. 2 to 100 characters. Give at least two characters before an optional trailing *."
+                },
+                "state": {
+                    "type": "string",
+                    "description": "US state code. Needs organization_name. A state is two capital letters, such as MN."
+                },
+                "city": {
+                    "type": "string",
+                    "description": "A city, to narrow a name search. An optional trailing * needs at least two preceding characters. 1 to 100 characters."
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "Most providers to return. From 1 to 20. Defaults to `5`."
+                }
+            },
+            "required": []
+        },
+        "example": {
+            "npi": "1881018208"
+        }
+    },
     {
         "name": "place_hospitals",
         "path": "lookup/place-hospitals",
@@ -1127,6 +1313,47 @@ export const LOOKUP_MANIFEST = [
             "lei": "DPRBOZP0K5RM2YE8UU08"
         }
     },
+    {
+        "name": "business_liquor_license",
+        "path": "lookup/business-liquor-license",
+        "title": "Liquor Licence",
+        "description": "Look up a business location in the New York State Liquor Authority register, which lists active licences only and refreshes daily. `state` is required; currently only NY is covered. Give at least one of `license_id` and `name`; the id takes precedence when both are given. Names are matched as stored, ignoring case, as a substring of the trade or legal name. Try a short distinctive fragment: SORLEY matches MC SORLEYS, but McSorley's does not. `zipcode` narrows either search. Return at most `limit` licences, newest last issue date first, with their class, premises, issue dates and expiration date. Missing values are null; dates are YYYY-MM-DD. An empty licenses list is a completed result: no active licence was found under that name or id, not evidence that the location never held one. Pending and inactive licences are not searched.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "state": {
+                    "type": "string",
+                    "enum": [
+                        "NY"
+                    ],
+                    "description": "State issuing the licence"
+                },
+                "license_id": {
+                    "type": "string",
+                    "description": "The source licence identifier; takes precedence over name"
+                },
+                "name": {
+                    "type": "string",
+                    "description": "A distinctive fragment of the trade or legal name, matched ignoring case. 2 to 100 characters."
+                },
+                "zipcode": {
+                    "type": "string",
+                    "description": "ZIP code to narrow the search"
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "Most licences to return. From 1 to 25. Defaults to `10`."
+                }
+            },
+            "required": [
+                "state"
+            ]
+        },
+        "example": {
+            "state": "NY",
+            "license_id": "0138-21-123999"
+        }
+    },
     {
         "name": "company_lobbying",
         "path": "lookup/company-lobbying",
@@ -1158,6 +1385,48 @@ export const LOOKUP_MANIFEST = [
             "limit": 1
         }
     },
+    {
+        "name": "company_medicare_ownership",
+        "path": "lookup/company-medicare-ownership",
+        "title": "Medicare Ownership",
+        "description": "Look up the ownership of a US hospital, nursing home, home health agency, hospice, health center or rural health clinic, as reported by the facility to Medicare. facility_type picks the register: each kind of facility is its own dataset at the source. Give the facility enrollment_id, or part of its organization_name (matched as a substring, upper-cased), never both. Returns up to limit facilities, each with its owners: organisations and individuals with their role, share, join date, city and state, and owner-type flags such as holding_company, private_equity_company or reit. Individuals listed are owners, officers, directors or managing employees in that capacity; their street addresses are left out. Owners are sorted by share, highest first. The register is released monthly and release_file_date says which release answered. No match completes with facilities: []. When truncated is true the source page was full and the last facility may be missing owners.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "facility_type": {
+                    "type": "string",
+                    "enum": [
+                        "hospital",
+                        "skilled_nursing",
+                        "home_health",
+                        "hospice",
+                        "health_center",
+                        "rural_health_clinic"
+                    ],
+                    "description": "Which register to search: each kind of facility is its own dataset at the source"
+                },
+                "enrollment_id": {
+                    "type": "string",
+                    "description": "The facility Medicare enrolment id. Give this or organization_name, never both. An enrolment id is O followed by 14 digits."
+                },
+                "organization_name": {
+                    "type": "string",
+                    "description": "Part of the enrolled organisation legal name; matched as a substring, upper-cased. 3 to 100 characters. Must be well-formed text, without unpaired UTF-16 surrogates."
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "Most facilities to return. From 1 to 10. Defaults to `3`."
+                }
+            },
+            "required": [
+                "facility_type"
+            ]
+        },
+        "example": {
+            "facility_type": "hospital",
+            "enrollment_id": "O20020812000015"
+        }
+    },
     {
         "name": "company_motor_carrier",
         "path": "lookup/company-motor-carrier",
@@ -1421,6 +1690,56 @@ export const LOOKUP_MANIFEST = [
             "limit": 2
         }
     },
+    {
+        "name": "company_financials",
+        "path": "lookup/company-financials",
+        "title": "Reported Financials",
+        "description": "Look up one reported financial figure of a US public company by its Central Index Key (CIK), the registrant number the US Securities and Exchange Commission assigns to every filer, as for Company Filings. `metric` is one of `revenue`, `net_income`, `operating_income`, `total_assets`, `total_liabilities`, `stockholders_equity`, `cash` or `eps_diluted`; `period` is `annual` (default) or `quarterly`. Returns the company name, the US GAAP tag and unit the figures come from, and one value per period, newest first, each with its calendar frame, start and end dates, fiscal year and period, the form that reported it, its filing date and accession number. Figures are as the company reported them in its filings, not adjusted or restated by anyone else; a later filing that restates a period replaces the earlier value. Looks up by identifier only: it does not search by company name or ticker. `periods` is empty when the company never reported the metric under its US GAAP tag. History is kept per series: Changes addresses one by the padded identifier, metric and period joined with colons (`0000320193:revenue:annual`); a call with a non-default `limit` is kept as a query.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "cik": {
+                    "type": "string",
+                    "description": "The registry identifier (CIK), for example 320193. Shorter numbers are padded with zeros. A CIK is 1 to 10 digits."
+                },
+                "metric": {
+                    "type": "string",
+                    "enum": [
+                        "revenue",
+                        "net_income",
+                        "operating_income",
+                        "total_assets",
+                        "total_liabilities",
+                        "stockholders_equity",
+                        "cash",
+                        "eps_diluted"
+                    ],
+                    "description": "Which reported figure to return"
+                },
+                "period": {
+                    "type": "string",
+                    "enum": [
+                        "annual",
+                        "quarterly"
+                    ],
+                    "description": "Fiscal years or fiscal quarters. Defaults to `\"annual\"`."
+                },
+                "limit": {
+                    "type": "integer",
+                    "description": "Most periods to return, newest first. From 1 to 20. Defaults to `5`."
+                }
+            },
+            "required": [
+                "cik",
+                "metric"
+            ]
+        },
+        "example": {
+            "cik": "320193",
+            "metric": "revenue",
+            "limit": 2
+        }
+    },
     {
         "name": "variant_clinical_significance",
         "path": "lookup/variant-clinical-significance",
@@ -2920,6 +3239,48 @@ export const ROUTE_MANIFEST = [
             "shipment_id": "se-1001"
         }
     },
+    {
+        "name": "identity_start",
+        "method": "POST",
+        "path": "/v1/tools/identity/start",
+        "paid": true,
+        "readOnly": false,
+        "title": "Start an Identity Verification",
+        "description": "Ask a person to verify their identity: they photograph an identity document and their face on a hosted page, after a consent page that shows them your purpose. Returns request_id, a verification_url to hand to the person (nothing is sent to them) and expires_at; the session expires after 7 days. Poll the request for the result: status (approved, declined, resubmission_requested, expired or abandoned), reason, document_type, issuing_country, name_matches and decided_at; every result, a resubmission request included, ends the session, so a fresh check needs a new request. The document number, images, date of birth and address are never kept. Charged when the session starts and not refunded if the person declines, abandons it or it expires (see Pricing). Subject to the agent's approval rules.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "full_name": {
+                    "type": "string",
+                    "description": "The name of the person being verified, as it appears on their document (1 to 200 characters)"
+                },
+                "email": {
+                    "type": "string",
+                    "description": "Their email address (optional; deleted when the session ends)"
+                },
+                "purpose": {
+                    "type": "string",
+                    "description": "Why they are asked, shown to them on the consent page (at most 140 characters)"
+                },
+                "idempotency_key": {
+                    "type": "string",
+                    "description": "A key of your choosing (1 to 255 letters, digits, _ . : -); the same key with the same input returns the same session instead of starting and charging another"
+                }
+            },
+            "required": [
+                "full_name",
+                "purpose",
+                "idempotency_key"
+            ]
+        },
+        "example": {
+            "full_name": "Jane Doe",
+            "email": "jane@example.com",
+            "purpose": "Confirm the account holder before a payout",
+            "idempotency_key": "kyc-2026-10-jane-doe"
+        },
+        "wait": false
+    },
     {
         "name": "tax_calculate",
         "method": "POST",

package/dist/tools/lookup.js

@@ -40,5 +40,7 @@ export function routeRequest(entry, args) {
     }
     return entry.method === "GET" || entry.method === "DELETE" ? { params, query: rest } : { params, body: rest };
 }
-const routeHandler = (entry) => (agent, args) => agent.route(entry.method, entry.path, { ...routeRequest(entry, args), paid: entry.paid });
+// An acceptance route (`wait: false`, Identity Verification) answers with the envelope the caller acts on
+// (the verification_url to hand to the person): returned as it is, never polled until the person decides.
+const routeHandler = (entry) => (agent, args) => agent.route(entry.method, entry.path, { ...routeRequest(entry, args), paid: entry.paid, ...(entry.wait === false ? { wait: false } : {}) });
 export const routeHandlers = Object.fromEntries(ROUTE_MANIFEST.map((entry) => [`oneshot_${entry.name}`, routeHandler(entry)]));

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@oneshot-agent/mcp-server",
-  "version": "0.46.0",
-  "description": "MCP server for OneShot - 173 tools for AI agents",
+  "version": "0.47.0",
+  "description": "MCP server for OneShot - 183 tools for AI agents",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -26,7 +26,7 @@
   "dependencies": {
     "@coinbase/cdp-sdk": "1.45.0",
     "@modelcontextprotocol/sdk": "1.27.1",
-    "@oneshot-agent/sdk": "^0.58.0",
+    "@oneshot-agent/sdk": "^0.59.0",
     "zod": "3.25.76"
   },
   "devDependencies": {