@reclaimprotocol/agent 0.1.1-dev.1 → 0.1.1

package/src/mcp/api/operations.gen.ts

@@ -4,7 +4,7 @@
 // to regenerate. Do not edit by hand.
 // @ts-nocheck
 
-import { convertJsonSchemaToZod as toZod } from 'zod-from-json-schema'
+import { toZod } from './to-zod.ts'
 
 export const MCP_TOOLS = {
 	"AddOrgMember": {
@@ -172,6 +172,48 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"AdminSessions": {
+		description: "Explore verification sessions (admin-only)\n\nAdmin only. Search verification sessions across all organizations — paste a session id, provider id, or consumer ETH address into `q`, optionally filter by `status`. Rows link to the org-scoped session detail page (admins can open any org's pages). Capped at 100, newest first.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+						"q": {
+							"type": "string",
+							"maxLength": 100
+						},
+						"status": {
+							"type": "string",
+							"description": "Status of a verification session, derived from its events. New values\nmay be added over time; clients MUST tolerate unknown values in\nresponses.\n\n- `pending`: Created, not yet finished; completable until `expiresAt`.\n\n- `success`: Terminal — `verification_success` recorded.\n\n- `rejected`: Terminal — `verification_rejected` recorded.\n\n- `error`: Terminal — `verification_error` recorded.\n\n- `expired`: `expiresAt` passed before a terminal event; the end-user\n  can no longer complete it.",
+							"enum": [
+								"pending",
+								"success",
+								"rejected",
+								"error",
+								"expired"
+							]
+						}
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"CancelPublicListingRequest": {
 		description: "Cancel a pending public listing review request\n\nCancels a pending public listing request by moving the version from `in_review` back to `draft`. Only org members can cancel their own review requests. This allows users to withdraw a request before admin review if they change their mind.",
 		inputSchema: toZod({
@@ -251,6 +293,71 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"CreateCallbackSubscription": {
+		description: "Register a callback subscription\n\nRegisters a destination for verification results on the organization\nthe presented `OrgToken` resolves to. The body is just `callbackUrl`\nand `events`. At least one subscription must exist for the org before a\nverification session can be created. Delivery is scoped by org: terminal\nresults are encrypted as a compact JWE to the org's encryption\ncredential when set (see `PUT /orgs/{orgId}/credential`), else delivered\nas plaintext.\n",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object",
+					"additionalProperties": false,
+					"description": "Body for `POST /verifications/callback-subscriptions`. The owning organization is resolved from the presented `OrgToken`; delivery is scoped to that org and encrypted to its credential when set.",
+					"required": [
+						"callbackUrl",
+						"events"
+					],
+					"properties": {
+						"callbackUrl": {
+							"type": "string",
+							"format": "uri",
+							"maxLength": 2000
+						},
+						"events": {
+							"type": "array",
+							"minItems": 1,
+							"maxItems": 12,
+							"items": {
+								"type": "string",
+								"description": "Lifecycle event reported for a verification session. A healthy run\nproceeds through these in order; reading the gaps locates where a\nsession stalled. Session-level terminal events trigger callback\ndelivery; request-level events are progress pings carrying a\n`request_id` in their event data. New values may be added over time;\nclients MUST tolerate unknown values in responses.\n\n- `session_pending`: Session created; awaiting the end-user.\n\n- `verification_client_opened`: The end-user opened the link. Absent ⇒\n  the link was never opened.\n\n- `verification_client_ready`: The client initialized.\n\n- `request_matched`: The target request was captured on the provider\n  site. Absent (after opened) ⇒ the user didn't complete the journey.\n\n- `request_claim_created`: A proof claim was started.\n\n- `request_claim_completed`: A proof claim finished.\n\n- `request_claim_rejected`: A claim was rejected (detail in `eventData`).\n\n- `request_claim_failed`: A claim errored (detail in `eventData`).\n\n- `verification_success`: Terminal — verified. Triggers callback delivery.\n\n- `verification_rejected`: Terminal — rejected (detail in `eventData`).\n\n- `verification_error`: Terminal — errored (detail in `eventData`).\n\n- `session_expired`: `expiresAt` passed before a terminal event.",
+								"enum": [
+									"session_pending",
+									"verification_client_opened",
+									"verification_client_ready",
+									"request_matched",
+									"request_claim_created",
+									"request_claim_completed",
+									"request_claim_rejected",
+									"request_claim_failed",
+									"verification_success",
+									"verification_rejected",
+									"verification_error",
+									"session_expired"
+								]
+							}
+						}
+					}
+				}
+			},
+			"required": [
+				"params",
+				"query",
+				"body"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"CreateOrg": {
 		description: "Create an organization\n\nCreates a new `ORG`-kind organization with the caller as its first `OWNER`. The personal org is created automatically at user signup and is not created via this endpoint.",
 		inputSchema: toZod({
@@ -291,6 +398,78 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"CreateOrgCallbackSubscription": {
+		description: "Register a callback subscription on an organization\n\nRegisters a destination for verification results on the organization. Caller must be an active member of the org. The body is just `callbackUrl` and `events`; delivery is scoped to the org and encrypted as a compact JWE to the org's encryption credential when set, else delivered as plaintext.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object",
+					"additionalProperties": false,
+					"description": "Body for `POST /orgs/{orgId}/callback-subscriptions`. The owning organization comes from the path; bearer-authenticated and gated on org membership. Delivery is scoped to the org and encrypted to its credential when set.",
+					"required": [
+						"callbackUrl",
+						"events"
+					],
+					"properties": {
+						"callbackUrl": {
+							"type": "string",
+							"format": "uri",
+							"maxLength": 2000
+						},
+						"events": {
+							"type": "array",
+							"minItems": 1,
+							"maxItems": 12,
+							"items": {
+								"type": "string",
+								"description": "Lifecycle event reported for a verification session. A healthy run\nproceeds through these in order; reading the gaps locates where a\nsession stalled. Session-level terminal events trigger callback\ndelivery; request-level events are progress pings carrying a\n`request_id` in their event data. New values may be added over time;\nclients MUST tolerate unknown values in responses.\n\n- `session_pending`: Session created; awaiting the end-user.\n\n- `verification_client_opened`: The end-user opened the link. Absent ⇒\n  the link was never opened.\n\n- `verification_client_ready`: The client initialized.\n\n- `request_matched`: The target request was captured on the provider\n  site. Absent (after opened) ⇒ the user didn't complete the journey.\n\n- `request_claim_created`: A proof claim was started.\n\n- `request_claim_completed`: A proof claim finished.\n\n- `request_claim_rejected`: A claim was rejected (detail in `eventData`).\n\n- `request_claim_failed`: A claim errored (detail in `eventData`).\n\n- `verification_success`: Terminal — verified. Triggers callback delivery.\n\n- `verification_rejected`: Terminal — rejected (detail in `eventData`).\n\n- `verification_error`: Terminal — errored (detail in `eventData`).\n\n- `session_expired`: `expiresAt` passed before a terminal event.",
+								"enum": [
+									"session_pending",
+									"verification_client_opened",
+									"verification_client_ready",
+									"request_matched",
+									"request_claim_created",
+									"request_claim_completed",
+									"request_claim_rejected",
+									"request_claim_failed",
+									"verification_success",
+									"verification_rejected",
+									"verification_error",
+									"session_expired"
+								]
+							}
+						}
+					}
+				}
+			},
+			"required": [
+				"params",
+				"query",
+				"body"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"CreateProvider": {
 		description: "Create a verification\n\nCreate a new Reclaim verification. Use this only after `providers` returned nothing useful for the domain. The caller must be an active member of the target organization.\nCreates a new verification in the specified organization. `visibility` is coerced to `PRIVATE` at creation regardless of what's sent; the author may toggle to `PUBLIC` later via `PATCH /providers/{id}`. While `PRIVATE`, versions go to the go live freely; once `PUBLIC`, non-admin versions need admin review. See `Provider.visibility`.\nThe server also seeds an initial `0.1.0` version on the `draft` branch in the same transaction so the verification is immediately editable. Its `initialUrl` defaults to `https://<domain>`; all other version fields fall back to their schema-declared defaults (structured verification, empty requests, empty web settings). `Provider.latestVersion` stays `null` until the draft is promoted to the live channel.",
 		inputSchema: toZod({
@@ -660,7 +839,143 @@ export const MCP_TOOLS = {
 								"description": "A template for selecting request",
 								"allOf": [
 									{
-										"$ref": "#/components/schemas/RequestSelection"
+										"type": "object",
+										"additionalProperties": false,
+										"description": "A matcher for one HTTP request in observed traffic, together with the response constraints that must hold for a Reclaim proof over that request to be valid. Used by interceptors, in-page injections, and LLM agents.",
+										"required": [
+											"url",
+											"method"
+										],
+										"properties": {
+											"url": {
+												"type": "string",
+												"description": "The URL or generic path of the HTTP request."
+											},
+											"method": {
+												"type": "string",
+												"description": "The HTTP method used for the request.",
+												"enum": [
+													"GET",
+													"POST",
+													"PUT",
+													"PATCH",
+													"DELETE"
+												]
+											},
+											"requestBodyTemplate": {
+												"type": "string",
+												"description": "Template used to match or capture an outgoing request body. Template can use regex templates as placeholders. For example, to match an outgoing request body that contains a request ID, you can use the following template: `(?<requestId>.*)`.",
+												"maxLength": 100000
+											},
+											"credentials": {
+												"type": "string",
+												"description": "Mirrors the Fetch API `RequestCredentials` value used when issuing the request — controls whether cookies and auth headers are sent.",
+												"enum": [
+													"omit",
+													"same-origin",
+													"include"
+												]
+											},
+											"writeRedactionMode": {
+												"type": "string",
+												"description": "How the matched portion of the response should be redacted before the transcript is handed to the attestor.\n- `zk`: redact using a zero-knowledge proof over the original\n  bytes.\n\n- `key-update`: redact by performing a TLS key update so the\n  attestor never observes the matched bytes in cleartext.",
+												"enum": [
+													"zk",
+													"key-update"
+												]
+											},
+											"additionalClientOptions": {
+												"type": "object",
+												"additionalProperties": false,
+												"description": "Apply TLS configuration when creating the tunnel to the attestor.",
+												"properties": {
+													"supportedProtocolVersions": {
+														"type": "array",
+														"description": "TLS protocol versions the client is allowed to negotiate.",
+														"minItems": 1,
+														"uniqueItems": true,
+														"items": {
+															"type": "string",
+															"enum": [
+																"TLS1_2",
+																"TLS1_3"
+															]
+														}
+													}
+												}
+											},
+											"matches": {
+												"type": "array",
+												"description": "A list of match conditions for the response.",
+												"minItems": 1,
+												"items": {
+													"type": "object",
+													"additionalProperties": false,
+													"description": "Specifies a rule to match against a string in response to validate proof content.",
+													"required": [
+														"type",
+														"value"
+													],
+													"properties": {
+														"isOptional": {
+															"type": "boolean",
+															"description": "If true, the match condition is optional and won't fail if absent",
+															"default": false
+														},
+														"description": {
+															"type": "string",
+															"description": "The description of the field that is extracted using this match rule",
+															"minLength": 1,
+															"maxLength": 1000
+														},
+														"order": {
+															"type": "integer",
+															"description": "The order in which the field should be displayed to user in UI",
+															"minimum": 0
+														},
+														"type": {
+															"type": "string",
+															"description": "The matching mechanism to use value as against response. Typically regex or simple string containment",
+															"enum": [
+																"regex",
+																"contains"
+															]
+														},
+														"value": {
+															"type": "string",
+															"description": "The pattern or value to look for in the response. When `type` is 'contains', supports template variable declaration using `{{variable}}` syntax. When `type` is 'regex', can be used to extract variables using regex named groups."
+														},
+														"extract": {
+															"type": "object",
+															"description": "Which portions to select from a response. These are selected in order, xpath => jsonPath => regex * These redactions are done client side and only the selected portions are sent to the attestor. The attestor will only be able to see the selected portions alongside the first line of the HTTP response (i.e. \"HTTP/1.1 200 OK\")",
+															"properties": {
+																"xPath": {
+																	"type": "string",
+																	"description": "expect an HTML response, and to contain a certain xpath for eg. \"/html/body/div.a1/div.a2/span.a5\""
+																},
+																"jsonPath": {
+																	"type": "string",
+																	"description": "expect a JSON response, retrieve the item at this path using dot notation for e.g. 'email.addresses.0'"
+																},
+																"regex": {
+																	"type": "string",
+																	"description": "select a regex match from the response"
+																},
+																"hash": {
+																	"type": "string",
+																	"description": "If provided, the value inside will be hashed instead of being redacted. Useful for cases where the data inside is an identifiying piece of information that you don't want to reveal to the attestor, eg. an email address.\nIf the hash function produces more bytes than the original value, the hash will be truncated.\nEg. if hash is enabled, the original value is \"hello\", and hashed is \"a1b2c\", then the attestor will only see \"a1b2c\".\nNote: if a regex with named groups is provided, only the named groups will be hashed.",
+																	"enum": [
+																		"oprf",
+																		"oprf-mpc",
+																		"oprf-raw"
+																	]
+																}
+															}
+														}
+													}
+												}
+											}
+										}
 									},
 									{
 										"type": "object",
@@ -692,7 +1007,8 @@ export const MCP_TOOLS = {
 								"geoLocation": {
 									"type": "string",
 									"description": "Geographic location (e.g. ISO country code or {{DYNAMIC_GEO}} to use user's geo location) the verification should appear to originate from.",
-									"maxLength": 15
+									"maxLength": 15,
+									"default": "{{DYNAMIC_GEO}}"
 								},
 								"clientOptions": {
 									"type": "object",
@@ -707,7 +1023,7 @@ export const MCP_TOOLS = {
 												"useProxy": {
 													"type": "boolean",
 													"description": "When true, network traffic from the portal client and attestation is routed through a proxy.",
-													"default": false
+													"default": true
 												},
 												"userAgent": {
 													"type": "string",
@@ -777,14 +1093,10 @@ export const MCP_TOOLS = {
 								}
 							}
 						},
-						"requiredParameters": {
+						"requiredContext": {
 							"type": "object",
-							"description": "Map of parameter names needed (optional or required) to use this provider to their human-readable descriptions/labels. Values are plain strings shown alongside the field in dashboards and prompts.",
-							"maxProperties": 50,
-							"additionalProperties": {
-								"type": "string",
-								"maxLength": 500
-							}
+							"description": "Optional JSON Schema describing the `context` a Consumer must supply when creating a verification session for this provider version. Only needed when the recipe expects Consumer-supplied values: those are referenced as `{{context.<key>}}` in recipe requests. Bare `{{parameterName}}` placeholders are provider parameters (extracted / not Consumer-supplied) and need no declaration here. The Builder validates `CreateVerificationSessionRequest.context` against this schema and rejects the request (400) on mismatch. Extra context fields are always allowed regardless of the schema (a root-level `additionalProperties: false` is ignored). Empty/absent accepts any context.",
+							"additionalProperties": true
 						},
 						"notes": {
 							"type": "string",
@@ -802,6 +1114,63 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"CreateVerificationSession": {
+		description: "Create a verification session\n\nCreates a verification session for an end-user to complete.\nAuthenticated by the consumer's `OrgToken`; the session is scoped to\nthe resolved organization. The request carries no callback URLs —\nresults are delivered to the org's pre-registered callback\nsubscriptions.\n\n    curl -X POST $BASE/verifications/sessions \\\n      -H \"Authorization: Bearer $ORG_TOKEN\" \\\n      -H 'Content-Type: application/json' \\\n      -d '{\"providerId\":\"…\",\"context\":{},\n           \"verificationClientUrl\":\"'$BASE'/v/{sessionId}\"}'\n\nFails with `409 Conflict` if the organization has no callback\nsubscription (there would be nowhere to deliver the result).\n",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object",
+					"additionalProperties": false,
+					"description": "Body for `POST /verifications/sessions`. Authenticated by the consumer's `OrgToken`. Carries no callback URLs — they come from the org's callback subscriptions.",
+					"required": [
+						"providerId",
+						"context",
+						"verificationClientUrl"
+					],
+					"properties": {
+						"providerId": {
+							"type": "string",
+							"format": "uuid"
+						},
+						"version": {
+							"type": "string",
+							"description": "Semver constraint; empty resolves to the latest trunk version.",
+							"maxLength": 64
+						},
+						"context": {
+							"type": "object",
+							"additionalProperties": true,
+							"description": "Consumer context. Validated against the resolved provider version's `requiredContext` JSON Schema (a 400 is returned on mismatch); extra fields are always allowed. Recipe requests reference these values as `{{context.<key>}}`. Echoed back (plus `reclaimSessionId`) in the result."
+						},
+						"verificationClientUrl": {
+							"type": "string",
+							"description": "Must contain a `{sessionId}` placeholder.",
+							"maxLength": 2000
+						}
+					}
+				}
+			},
+			"required": [
+				"params",
+				"query",
+				"body"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"DecideProviderVersionReview": {
 		description: "Record a decision on a verification version review\n\nAdmin only (Reclaim staff). Approves or rejects a verification version currently on the `in_review` branch. `APPROVED` clears the branch tag and promotes the version to the live channel; `REJECTED` moves it to the `rejected` branch where the author can address feedback and resubmit. A rejected version stays rejected — the author either fixes and resubmits, or abandons it.\nUntil RBAC is designed, \"admin\" is detected via the user's email domain (`@reclaimprotocol.org`). Non-admin callers receive a 403.",
 		inputSchema: toZod({
@@ -863,6 +1232,118 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"DeleteCallbackSubscription": {
+		description: "Delete a callback subscription\n\nRemoves a callback subscription. Authenticated by the org's `OrgToken`; the subscription must belong to that organization.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"subscriptionId": {
+							"type": "string",
+							"format": "uuid",
+							"description": "Stable id for a callback subscription."
+						}
+					},
+					"required": [
+						"subscriptionId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"DeleteOrgCallbackSubscription": {
+		description: "Delete an organization's callback subscription\n\nRemoves a callback subscription. Caller must be an active member of the owning org.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						},
+						"subscriptionId": {
+							"type": "string",
+							"format": "uuid",
+							"description": "Stable id for a callback subscription."
+						}
+					},
+					"required": [
+						"orgId",
+						"subscriptionId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"DeleteOrgCredential": {
+		description: "Clear the organization's encryption credential\n\nRemoves the organization's encryption credential. After this, terminal results are delivered as plaintext until a new credential is set. Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"DeleteProvider": {
 		description: "Delete a verification\n\nOwner of the verification's organization only. Soft-archives the verification (sets `status` to `ARCHIVED`) so historical references remain resolvable. Supports optimistic concurrency via `If-Match`.",
 		inputSchema: toZod({
@@ -997,22 +1478,49 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetCredential": {
-		description: "Get a credential\n\nReturns the credential row. Visibility: anyone can fetch an anonymous (`orgId` null) credential by id; linked credentials are visible only to active members of the owning org.",
+	"GetMe": {
+		description: "Get the authenticated user",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"GetOrg": {
+		description: "Get an organization",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"credentialId": {
+						"orgId": {
 							"type": "string",
-							"format": "uuid",
-							"description": "Stable id for a `Credential` row."
+							"format": "uuid"
 						}
 					},
 					"required": [
-						"credentialId"
+						"orgId"
 					],
 					"additionalProperties": false
 				},
@@ -1033,24 +1541,21 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetCredentialByAddress": {
-		description: "Look up a credential by its lowercase ETH address\n\nCompanion to `GET /credentials/{credentialId}`. The MCP / CLI knows the credential by its address (the public handle the user actually types) rather than by its UUID id, so this shortcut returns the same `Credential` shape keyed on the address. Visibility rules mirror `GetCredential`: anonymous credentials are world-readable; linked credentials are visible only to active members of the owning org. Bumps `lastUsedAt` so the dashboard shows liveness.",
+	"GetOrgBilling": {
+		description: "Get the billing record for an organization\n\nOwner only. Returns `404` when no billing has been set; presence of the row is what promotes the org's credentials out of sandbox mode (see `Credential.mode`).",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"address": {
+						"orgId": {
 							"type": "string",
-							"description": "Lowercase Ethereum address (no EIP-55 mixed-case checksum). The client derives this from the public key via keccak-256 of the uncompressed pubkey minus the `0x04` prefix, taking the last 20 bytes. The server re-validates the format on insert but does not re-derive from the public key — that match is the client's responsibility.",
-							"pattern": "^0x[0-9a-f]{40}$",
-							"minLength": 42,
-							"maxLength": 42
+							"format": "uuid"
 						}
 					},
 					"required": [
-						"address"
+						"orgId"
 					],
 					"additionalProperties": false
 				},
@@ -1071,17 +1576,170 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetMe": {
-		description: "Get the authenticated user",
+	"GetOrgCredential": {
+		description: "Get the organization's encryption credential\n\nReturns the organization's single X25519 encryption credential — the public JWK the Builder uses to JWE-encrypt delivered results — or `404` when none is set (delivery is plaintext in that case). Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
 					"type": "object",
 					"properties": {
 
 					}
 				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"GetOrgToken": {
+		description: "Get the organization's API token metadata\n\nReturns metadata about the organization's current API token — its last four characters, when it was created, and when it was last used — never the token itself. The caller must be an active **OWNER** of the organization. Returns `404` when no token has been issued.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"GetProvider": {
+		description: "Get a verification\n\nFetch a single Reclaim verification by id. Returns every field needed\nto integrate it into a flow: domain, the live version (initialUrl + requests),\nand the data points it can prove. Use `providers` first if you only\nhave a query string.\n\nReturns the verification record.\n\n**Canonical URL.** For SEO and stable sharing, the canonical\nHTML URL for a verification is `/providers/{providerId}/{slug}`\n(see `GetProviderBySlug`). HTML callers (`Accept: text/html`)\nthat hit this route — which omits the slug — receive a `301`\nredirect to the slugged URL. JSON callers\n(`Accept: application/json`) receive the body directly without\nredirect; the slug is on the response.\n",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"providerId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"providerId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"GetProviderVersion": {
+		description: "Get a specific verification version",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"providerId": {
+							"type": "string",
+							"format": "uuid"
+						},
+						"version": {
+							"type": "string",
+							"pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:-[a-zA-Z0-9_-]+(?:\\.[0-9]+)?)?$",
+							"maxLength": 32
+						}
+					},
+					"required": [
+						"providerId",
+						"version"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"GetUser": {
+		description: "Get a user's profile\n\nReturns a user record. Visible to: the user themselves, or any member of an organization the subject also belongs to.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"userId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"userId"
+					],
+					"additionalProperties": false
+				},
 				"query": {
 					"type": "object",
 					"properties": {
@@ -1099,21 +1757,22 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetOrg": {
-		description: "Get an organization",
+	"GetVerificationSession": {
+		description: "Get a verification session\n\nReturns the session. Authenticated by the consumer's `OrgToken` (or the\nVC service token); the resolved org must match the session's.\n\nReading `status`:\n- `pending` — created, not yet finished; the end-user can still\n  complete it until `expiresAt`.\n- `success` / `rejected` / `error` — terminal outcomes (the matching\n  `verification_*` event was recorded). Only after a terminal status is\n  a result delivered to callbacks.\n- `expired` — `expiresAt` passed before a terminal event. A `pending`\n  session whose `expiresAt` is in the past has effectively expired and\n  flips to `expired` on the next sweep; the end-user can no longer\n  complete it — issue a fresh session/link.\n\n`callbackDeliveryStatus` aggregates the session's callback deliveries\nand is only meaningful once the session is terminal. To investigate a\nstuck or failed session, pair this with `list_verification_events` (the\nper-stage lifecycle log) and `list_verification_deliveries` (callback\nhealth).\n",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"orgId": {
+						"sessionId": {
 							"type": "string",
-							"format": "uuid"
+							"format": "uuid",
+							"description": "Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`."
 						}
 					},
 					"required": [
-						"orgId"
+						"sessionId"
 					],
 					"additionalProperties": false
 				},
@@ -1134,8 +1793,8 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetOrgBilling": {
-		description: "Get the billing record for an organization\n\nOwner only. Returns `404` when no billing has been set; presence of the row is what promotes the org's credentials out of sandbox mode (see `Credential.mode`).",
+	"IssueOrgToken": {
+		description: "Issue (or regenerate) the organization's API token\n\nIssues a fresh per-organization API token (`rorg_…`). The caller must be an active **OWNER** of the organization. A successful call invalidates any previously issued token for the org. The plaintext token is returned **only once** in this response (the server stores only its HMAC); treat it like a password and store it securely.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1169,23 +1828,16 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetProvider": {
-		description: "Get a verification\n\nFetch a single Reclaim verification by id. Returns every field needed\nto integrate it into a flow: domain, the live version (initialUrl + requests),\nand the data points it can prove. Use `providers` first if you only\nhave a query string.\n\nReturns the verification record.\n\n**Canonical URL.** For SEO and stable sharing, the canonical\nHTML URL for a verification is `/providers/{providerId}/{slug}`\n(see `GetProviderBySlug`). HTML callers (`Accept: text/html`)\nthat hit this route — which omits the slug — receive a `301`\nredirect to the slugged URL. JSON callers\n(`Accept: application/json`) receive the body directly without\nredirect; the slug is on the response.\n",
+	"ListCallbackDlq": {
+		description: "List dead-lettered callbacks (admin-only)\n\nAdmin only. Lists callback deliveries whose retries were exhausted and moved to the DLQ for manual recovery.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"providerId": {
-							"type": "string",
-							"format": "uuid"
-						}
-					},
-					"required": [
-						"providerId"
-					],
-					"additionalProperties": false
+
+					}
 				},
 				"query": {
 					"type": "object",
@@ -1204,29 +1856,16 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetProviderVersion": {
-		description: "Get a specific verification version",
+	"ListCallbackSubscriptions": {
+		description: "List callback subscriptions for the organization\n\nReturns every callback subscription owned by the organization the presented `OrgToken` resolves to.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"providerId": {
-							"type": "string",
-							"format": "uuid"
-						},
-						"version": {
-							"type": "string",
-							"pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:-[a-zA-Z0-9_-]+(?:\\.[0-9]+)?)?$",
-							"maxLength": 32
-						}
-					},
-					"required": [
-						"providerId",
-						"version"
-					],
-					"additionalProperties": false
+
+					}
 				},
 				"query": {
 					"type": "object",
@@ -1245,21 +1884,21 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetUser": {
-		description: "Get a user's profile\n\nReturns a user record. Visible to: the user themselves, or any member of an organization the subject also belongs to.",
+	"ListOrgCallbackSubscriptions": {
+		description: "List an organization's callback subscriptions\n\nReturns every callback subscription owned by the organization. Caller must be an active member of the org.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"userId": {
+						"orgId": {
 							"type": "string",
 							"format": "uuid"
 						}
 					},
 					"required": [
-						"userId"
+						"orgId"
 					],
 					"additionalProperties": false
 				},
@@ -1280,8 +1919,8 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"LinkCredential": {
-		description: "Link a credential to an organization\n\nLinks an ETH credential to an organization — registering it directly, or attaching an already-known one (matched by `address`). The private key MUST NOT leave the client — only the derived address and uncompressed public key are sent. `orgId` is required and the caller must be allowed to edit it. Idempotent for the same `(address, orgId)`. (Anonymous credentials live client-side; they are only stored here once linked.)",
+	"ListOrgs": {
+		description: "List organizations the caller belongs to",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1294,68 +1933,117 @@ export const MCP_TOOLS = {
 				"query": {
 					"type": "object",
 					"properties": {
-
+						"cursor": {
+							"type": "string",
+							"maxLength": 500
+						}
 					}
 				},
 				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"ListOrgVerificationSessions": {
+		description: "List an organization's verification sessions\n\nReturns verification sessions created under the organization, newest first. Optionally filter by `providerId`, `status`, `resolvedVersion`, `claimantClientId`, and a `createdAfter`/`createdBefore` time range. Caller must be an active member of the org. Opaque cursor pagination.\n\nNote: `status` filters on the stored column. A session that has passed `expiresAt` but has not yet been swept is reported as `expired` in its body while still stored as `pending`, so `status=expired` may not match such sessions until the sweep runs.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
 					"type": "object",
-					"additionalProperties": false,
-					"description": "Body for `POST /credentials`. Only the lowercase ETH `address` is sent — the private key MUST NOT leave the client, and the public key is not sent (the client derives the address from the key: keccak-256 of the uncompressed pubkey minus its `0x04` prefix, last 20 bytes, lowercase hex).",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
 					"required": [
-						"address",
 						"orgId"
 					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
 					"properties": {
-						"address": {
+						"providerId": {
 							"type": "string",
-							"description": "Lowercase Ethereum address (no EIP-55 mixed-case checksum). The client derives this from the public key via keccak-256 of the uncompressed pubkey minus the `0x04` prefix, taking the last 20 bytes. The server re-validates the format on insert but does not re-derive from the public key — that match is the client's responsibility.",
-							"pattern": "^0x[0-9a-f]{40}$",
-							"minLength": 42,
-							"maxLength": 42
+							"format": "uuid"
 						},
-						"orgId": {
+						"status": {
+							"type": "string",
+							"description": "Status of a verification session, derived from its events. New values\nmay be added over time; clients MUST tolerate unknown values in\nresponses.\n\n- `pending`: Created, not yet finished; completable until `expiresAt`.\n\n- `success`: Terminal — `verification_success` recorded.\n\n- `rejected`: Terminal — `verification_rejected` recorded.\n\n- `error`: Terminal — `verification_error` recorded.\n\n- `expired`: `expiresAt` passed before a terminal event; the end-user\n  can no longer complete it.",
+							"enum": [
+								"pending",
+								"success",
+								"rejected",
+								"error",
+								"expired"
+							]
+						},
+						"resolvedVersion": {
+							"type": "string",
+							"maxLength": 64
+						},
+						"claimantClientId": {
 							"type": "string",
 							"format": "uuid"
 						},
-						"label": {
+						"createdAfter": {
 							"type": "string",
-							"description": "Optional human-readable label.",
-							"minLength": 1,
-							"maxLength": 100
+							"format": "date-time"
+						},
+						"createdBefore": {
+							"type": "string",
+							"format": "date-time"
+						},
+						"cursor": {
+							"type": "string",
+							"maxLength": 500
 						}
 					}
+				},
+				"body": {
+					"type": "object"
 				}
 			},
 			"required": [
 				"params",
-				"query",
-				"body"
+				"query"
 			],
 			"additionalProperties": false
 		}),
 	},
-	"ListOrgCredentials": {
-		description: "List credentials linked to an organization\n\nReturns every credential whose `orgId` equals the path parameter. Caller must be an active member of the org.",
+	"ListProviderVersions": {
+		description: "List a verification's versions\n\nLists versions visible to the caller. Non-public branches (`ai`, `draft`, `in_review`, `rejected`) are only visible to members of the verification's owning organization.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"orgId": {
+						"providerId": {
 							"type": "string",
 							"format": "uuid"
 						}
 					},
 					"required": [
-						"orgId"
+						"providerId"
 					],
 					"additionalProperties": false
 				},
 				"query": {
 					"type": "object",
 					"properties": {
-
+						"cursor": {
+							"type": "string",
+							"maxLength": 500
+						}
 					}
 				},
 				"body": {
@@ -1369,24 +2057,29 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"ListOrgs": {
-		description: "List organizations the caller belongs to",
+	"ListVerificationDeliveries": {
+		description: "Get the callback delivery status for a session\n\nDiagnostic view of the session's callback deliveries: one entry per\n(subscription, terminal event) with its delivery state, attempt\ncount, last error, and whether it was dead-lettered. Lets a consumer\n(or the agent) answer \"did my callback arrive, and if not, why?\"\nwithout org-dashboard access. Only meaningful after the session\nreaches a terminal status (no deliveries exist before then). Auth\nmirrors the events GET: the Verification Client service token, or the\nconsumer's `OrgToken` (the resolved org must match the session).\n\nReading `deliveryStatus` per entry:\n- `delivered` — the callback POST succeeded; nothing to do.\n- `pending` — queued, not yet attempted (or between retries).\n- `attempt_failed` — a delivery attempt failed but retries remain;\n  `lastError` holds the reason and `attempts` the count so far.\n- `failed` — all retries exhausted. When `deadLettered` is also true\n  the delivery sits in the DLQ.\n\nTo recover a failed/dead-lettered delivery: confirm the `callbackUrl`\nis reachable and answers 2xx, then call `retry_verification_callback`\nto re-enqueue it (an org admin can also retry from the Callback DLQ).\n",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-
-					}
+						"sessionId": {
+							"type": "string",
+							"format": "uuid",
+							"description": "Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`."
+						}
+					},
+					"required": [
+						"sessionId"
+					],
+					"additionalProperties": false
 				},
 				"query": {
 					"type": "object",
 					"properties": {
-						"cursor": {
-							"type": "string",
-							"maxLength": 500
-						}
+
 					}
 				},
 				"body": {
@@ -1400,31 +2093,29 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"ListProviderVersions": {
-		description: "List a verification's versions\n\nLists versions visible to the caller. Non-public branches (`ai`, `draft`, `in_review`, `rejected`) are only visible to members of the verification's owning organization.",
+	"ListVerificationEvents": {
+		description: "Get the event log for a session\n\nReturns the append-only event log. Readable by the Verification Client\n(`X-VC-Token`) or the session creator (authenticated by the consumer's\n`OrgToken`; the resolved org must match the session).\n\nThis log is the primary tool for diagnosing a stuck or failed session.\nA healthy run proceeds through this lifecycle (in order):\n\n`session_pending` → `verification_client_opened` →\n`verification_client_ready` → `request_matched` →\n`request_claim_created` → `request_claim_completed` → terminal\n(`verification_success` | `verification_rejected` | `verification_error`),\nor `session_expired` if `expiresAt` passes first.\n\nRead the gaps to locate where the flow stalled:\n- no `verification_client_opened` → the end-user never opened the link.\n- opened but no `request_matched` → the user opened the page but didn't\n  complete the login/journey on the provider site, so the target\n  request was never captured.\n- `request_matched` but no terminal event → the proof run is still in\n  progress (or stalled mid-claim).\n\nFailure detail lives in `eventData` on `request_claim_failed`,\n`request_claim_rejected`, `verification_error`, and\n`verification_rejected` — inspect it for the reason. Request-level\nevents also carry a `request_id` in `eventData`. Pair with\n`get_verification_session` (status/expiry) and\n`list_verification_deliveries` (callback health) for the full picture.\n",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"providerId": {
+						"sessionId": {
 							"type": "string",
-							"format": "uuid"
+							"format": "uuid",
+							"description": "Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`."
 						}
 					},
 					"required": [
-						"providerId"
+						"sessionId"
 					],
 					"additionalProperties": false
 				},
 				"query": {
 					"type": "object",
 					"properties": {
-						"cursor": {
-							"type": "string",
-							"maxLength": 500
-						}
+
 					}
 				},
 				"body": {
@@ -1626,22 +2317,22 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"RevokeCredential": {
-		description: "Revoke a credential\n\nSoft-revokes the credential (sets `revokedAt`). Allowed for the creating user (anonymous credentials), an active OWNER of the owning org (linked credentials), or a Reclaim admin. Revoked credentials cannot be used for verification and cannot be re-linked.",
+	"RetryVerificationCallback": {
+		description: "Re-enqueue callback delivery for a session\n\nRe-enqueues delivery of a session's stored result to its callback subscriptions. Use this after `list_verification_deliveries` shows a `failed` or dead-lettered delivery, once the consumer's callback endpoint is reachable again and answers 2xx — it re-attempts every not-yet-delivered callback for the session. Usable by the session creator (authenticated by the consumer's `OrgToken`) to recover from a transient consumer-side outage.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"credentialId": {
+						"sessionId": {
 							"type": "string",
 							"format": "uuid",
-							"description": "Stable id for a `Credential` row."
+							"description": "Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`."
 						}
 					},
 					"required": [
-						"credentialId"
+						"sessionId"
 					],
 					"additionalProperties": false
 				},
@@ -1662,6 +2353,84 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"SetOrgCredential": {
+		description: "Set (or replace) the organization's encryption credential\n\nUpserts the organization's single X25519 encryption credential. The body carries the org's **encryption public JWK** (`{kty:'OKP', crv:'X25519', x}`); the matching private key never leaves the consumer. Replacing overwrites the single row. Once set, terminal results are delivered as a compact JWE encrypted to this key; clear it to revert to plaintext delivery. Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object",
+					"additionalProperties": false,
+					"description": "Body for `PUT /orgs/{orgId}/credential`.",
+					"required": [
+						"publicKeyJwk"
+					],
+					"properties": {
+						"publicKeyJwk": {
+							"type": "object",
+							"additionalProperties": false,
+							"description": "An X25519 public key in JWK form (RFC 8037 OKP), used to JWE-encrypt delivered verification results. The matching private key never leaves the consumer.",
+							"required": [
+								"kty",
+								"crv",
+								"x"
+							],
+							"properties": {
+								"kty": {
+									"type": "string",
+									"enum": [
+										"OKP"
+									]
+								},
+								"crv": {
+									"type": "string",
+									"enum": [
+										"X25519"
+									]
+								},
+								"x": {
+									"type": "string",
+									"description": "base64url-encoded public key bytes.",
+									"minLength": 1,
+									"maxLength": 128
+								}
+							}
+						},
+						"label": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 100
+						}
+					}
+				}
+			},
+			"required": [
+				"params",
+				"query",
+				"body"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"SubmitProviderVersionForReview": {
 		description: "Submit a verification version for review\n\nSubmits a verification version (currently on the `draft` or `rejected` branch) for admin review. On success the version's branch transitions to `in_review`. Callable by any authenticated member of the verification's owning org. Meaningful only on `PUBLIC` verifications — on `PRIVATE` verifications new versions go to the live channel directly and never need review.",
 		inputSchema: toZod({
@@ -2249,7 +3018,143 @@ export const MCP_TOOLS = {
 								"description": "A template for selecting request",
 								"allOf": [
 									{
-										"$ref": "#/components/schemas/RequestSelection"
+										"type": "object",
+										"additionalProperties": false,
+										"description": "A matcher for one HTTP request in observed traffic, together with the response constraints that must hold for a Reclaim proof over that request to be valid. Used by interceptors, in-page injections, and LLM agents.",
+										"required": [
+											"url",
+											"method"
+										],
+										"properties": {
+											"url": {
+												"type": "string",
+												"description": "The URL or generic path of the HTTP request."
+											},
+											"method": {
+												"type": "string",
+												"description": "The HTTP method used for the request.",
+												"enum": [
+													"GET",
+													"POST",
+													"PUT",
+													"PATCH",
+													"DELETE"
+												]
+											},
+											"requestBodyTemplate": {
+												"type": "string",
+												"description": "Template used to match or capture an outgoing request body. Template can use regex templates as placeholders. For example, to match an outgoing request body that contains a request ID, you can use the following template: `(?<requestId>.*)`.",
+												"maxLength": 100000
+											},
+											"credentials": {
+												"type": "string",
+												"description": "Mirrors the Fetch API `RequestCredentials` value used when issuing the request — controls whether cookies and auth headers are sent.",
+												"enum": [
+													"omit",
+													"same-origin",
+													"include"
+												]
+											},
+											"writeRedactionMode": {
+												"type": "string",
+												"description": "How the matched portion of the response should be redacted before the transcript is handed to the attestor.\n- `zk`: redact using a zero-knowledge proof over the original\n  bytes.\n\n- `key-update`: redact by performing a TLS key update so the\n  attestor never observes the matched bytes in cleartext.",
+												"enum": [
+													"zk",
+													"key-update"
+												]
+											},
+											"additionalClientOptions": {
+												"type": "object",
+												"additionalProperties": false,
+												"description": "Apply TLS configuration when creating the tunnel to the attestor.",
+												"properties": {
+													"supportedProtocolVersions": {
+														"type": "array",
+														"description": "TLS protocol versions the client is allowed to negotiate.",
+														"minItems": 1,
+														"uniqueItems": true,
+														"items": {
+															"type": "string",
+															"enum": [
+																"TLS1_2",
+																"TLS1_3"
+															]
+														}
+													}
+												}
+											},
+											"matches": {
+												"type": "array",
+												"description": "A list of match conditions for the response.",
+												"minItems": 1,
+												"items": {
+													"type": "object",
+													"additionalProperties": false,
+													"description": "Specifies a rule to match against a string in response to validate proof content.",
+													"required": [
+														"type",
+														"value"
+													],
+													"properties": {
+														"isOptional": {
+															"type": "boolean",
+															"description": "If true, the match condition is optional and won't fail if absent",
+															"default": false
+														},
+														"description": {
+															"type": "string",
+															"description": "The description of the field that is extracted using this match rule",
+															"minLength": 1,
+															"maxLength": 1000
+														},
+														"order": {
+															"type": "integer",
+															"description": "The order in which the field should be displayed to user in UI",
+															"minimum": 0
+														},
+														"type": {
+															"type": "string",
+															"description": "The matching mechanism to use value as against response. Typically regex or simple string containment",
+															"enum": [
+																"regex",
+																"contains"
+															]
+														},
+														"value": {
+															"type": "string",
+															"description": "The pattern or value to look for in the response. When `type` is 'contains', supports template variable declaration using `{{variable}}` syntax. When `type` is 'regex', can be used to extract variables using regex named groups."
+														},
+														"extract": {
+															"type": "object",
+															"description": "Which portions to select from a response. These are selected in order, xpath => jsonPath => regex * These redactions are done client side and only the selected portions are sent to the attestor. The attestor will only be able to see the selected portions alongside the first line of the HTTP response (i.e. \"HTTP/1.1 200 OK\")",
+															"properties": {
+																"xPath": {
+																	"type": "string",
+																	"description": "expect an HTML response, and to contain a certain xpath for eg. \"/html/body/div.a1/div.a2/span.a5\""
+																},
+																"jsonPath": {
+																	"type": "string",
+																	"description": "expect a JSON response, retrieve the item at this path using dot notation for e.g. 'email.addresses.0'"
+																},
+																"regex": {
+																	"type": "string",
+																	"description": "select a regex match from the response"
+																},
+																"hash": {
+																	"type": "string",
+																	"description": "If provided, the value inside will be hashed instead of being redacted. Useful for cases where the data inside is an identifiying piece of information that you don't want to reveal to the attestor, eg. an email address.\nIf the hash function produces more bytes than the original value, the hash will be truncated.\nEg. if hash is enabled, the original value is \"hello\", and hashed is \"a1b2c\", then the attestor will only see \"a1b2c\".\nNote: if a regex with named groups is provided, only the named groups will be hashed.",
+																	"enum": [
+																		"oprf",
+																		"oprf-mpc",
+																		"oprf-raw"
+																	]
+																}
+															}
+														}
+													}
+												}
+											}
+										}
 									},
 									{
 										"type": "object",
@@ -2281,7 +3186,8 @@ export const MCP_TOOLS = {
 								"geoLocation": {
 									"type": "string",
 									"description": "Geographic location (e.g. ISO country code or {{DYNAMIC_GEO}} to use user's geo location) the verification should appear to originate from.",
-									"maxLength": 15
+									"maxLength": 15,
+									"default": "{{DYNAMIC_GEO}}"
 								},
 								"clientOptions": {
 									"type": "object",
@@ -2296,7 +3202,7 @@ export const MCP_TOOLS = {
 												"useProxy": {
 													"type": "boolean",
 													"description": "When true, network traffic from the portal client and attestation is routed through a proxy.",
-													"default": false
+													"default": true
 												},
 												"userAgent": {
 													"type": "string",
@@ -2366,14 +3272,10 @@ export const MCP_TOOLS = {
 								}
 							}
 						},
-						"requiredParameters": {
+						"requiredContext": {
 							"type": "object",
-							"description": "Map of parameter names needed (optional or required) to use this provider to their human-readable descriptions/labels. Values are plain strings shown alongside the field in dashboards and prompts.",
-							"maxProperties": 50,
-							"additionalProperties": {
-								"type": "string",
-								"maxLength": 500
-							}
+							"description": "Optional JSON Schema describing the `context` a Consumer must supply when creating a verification session for this provider version. Only needed when the recipe expects Consumer-supplied values: those are referenced as `{{context.<key>}}` in recipe requests. Bare `{{parameterName}}` placeholders are provider parameters (extracted / not Consumer-supplied) and need no declaration here. The Builder validates `CreateVerificationSessionRequest.context` against this schema and rejects the request (400) on mismatch. Extra context fields are always allowed regardless of the schema (a root-level `additionalProperties: false` is ignored). Empty/absent accepts any context.",
+							"additionalProperties": true
 						},
 						"notes": {
 							"type": "string",