@reclaimprotocol/agent 0.1.1-dev.1 → 0.1.2

package/src/mcp/api/operations.gen.ts

@@ -4,7 +4,7 @@
 // to regenerate. Do not edit by hand.
 // @ts-nocheck
 
-import { convertJsonSchemaToZod as toZod } from 'zod-from-json-schema'
+import { toZod } from './to-zod.ts'
 
 export const MCP_TOOLS = {
 	"AddOrgMember": {
@@ -172,6 +172,48 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"AdminSessions": {
+		description: "Explore verification sessions (admin-only)\n\nAdmin only. Search verification sessions across all organizations — paste a session id, provider id, or consumer ETH address into `q`, optionally filter by `status`. Rows link to the org-scoped session detail page (admins can open any org's pages). Capped at 100, newest first.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+						"q": {
+							"type": "string",
+							"maxLength": 100
+						},
+						"status": {
+							"type": "string",
+							"description": "Status of a verification session, derived from its events. New values\nmay be added over time; clients MUST tolerate unknown values in\nresponses.\n\n- `pending`: Created, not yet finished; completable until `expiresAt`.\n\n- `success`: Terminal — `verification_success` recorded.\n\n- `rejected`: Terminal — `verification_rejected` recorded.\n\n- `error`: Terminal — `verification_error` recorded.\n\n- `expired`: `expiresAt` passed before a terminal event; the end-user\n  can no longer complete it.",
+							"enum": [
+								"pending",
+								"success",
+								"rejected",
+								"error",
+								"expired"
+							]
+						}
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"CancelPublicListingRequest": {
 		description: "Cancel a pending public listing review request\n\nCancels a pending public listing request by moving the version from `in_review` back to `draft`. Only org members can cancel their own review requests. This allows users to withdraw a request before admin review if they change their mind.",
 		inputSchema: toZod({
@@ -251,6 +293,72 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"CreateCallbackSubscription": {
+		description: "Register a callback subscription\n\nRegisters a destination for verification results on the organization\nthe presented `OrgToken` resolves to. The body is just `callbackUrl`\nand `events`. At least one subscription must exist for the org before a\nverification session can be created. Delivery is scoped by org: terminal\nresults are ECIES-encrypted to the org's eth public key when its\n`canEncryptResult` is enabled (see `PUT /orgs/{orgId}/keypair`), else\ndelivered as plaintext.\n",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object",
+					"additionalProperties": false,
+					"description": "Body for `POST /verifications/callback-subscriptions`. The owning organization is resolved from the presented `OrgToken`; delivery is scoped to that org and encrypted to its credential when set.",
+					"required": [
+						"callbackUrl",
+						"events"
+					],
+					"properties": {
+						"callbackUrl": {
+							"type": "string",
+							"format": "uri",
+							"maxLength": 2000
+						},
+						"events": {
+							"type": "array",
+							"minItems": 1,
+							"maxItems": 12,
+							"items": {
+								"type": "string",
+								"description": "Lifecycle event reported for a verification session. A healthy run\nproceeds through these in order; reading the gaps locates where a\nsession stalled. Session-level terminal events trigger callback\ndelivery; provider-/request-level events are progress pings carrying a\n`provider_id` (and `request_id` for request-level ones) in their event\ndata. New values may be added over time; clients MUST tolerate unknown\nvalues in responses.\n\n- `session_pending`: Session created; awaiting the end-user.\n\n- `verification_client_opened`: The end-user opened the link. Absent ⇒\n  the link was never opened.\n\n- `verification_client_ready`: The client initialized.\n\n- `verification_provider_started`: The client began verifying a provider\n  (`provider_id`/`resolved_version`/`ordinal` in `eventData`). One per\n  provider, in run order, for multi-provider sessions.\n\n- `request_matched`: The target request was captured on the provider\n  site. Absent (after opened) ⇒ the user didn't complete the journey.\n\n- `request_claim_created`: A proof claim was started.\n\n- `request_claim_completed`: A proof claim finished.\n\n- `request_claim_rejected`: A claim was rejected (detail in `eventData`).\n\n- `request_claim_failed`: A claim errored (detail in `eventData`).\n\n- `verification_success`: Terminal — verified. Triggers callback delivery.\n\n- `verification_rejected`: Terminal — rejected (detail in `eventData`).\n\n- `verification_error`: Terminal — errored (detail in `eventData`).\n\n- `session_expired`: `expiresAt` passed before a terminal event.",
+								"enum": [
+									"session_pending",
+									"verification_client_opened",
+									"verification_client_ready",
+									"verification_provider_started",
+									"request_matched",
+									"request_claim_created",
+									"request_claim_completed",
+									"request_claim_rejected",
+									"request_claim_failed",
+									"verification_success",
+									"verification_rejected",
+									"verification_error",
+									"session_expired"
+								]
+							}
+						}
+					}
+				}
+			},
+			"required": [
+				"params",
+				"query",
+				"body"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"CreateOrg": {
 		description: "Create an organization\n\nCreates a new `ORG`-kind organization with the caller as its first `OWNER`. The personal org is created automatically at user signup and is not created via this endpoint.",
 		inputSchema: toZod({
@@ -271,14 +379,99 @@ export const MCP_TOOLS = {
 				"body": {
 					"type": "object",
 					"additionalProperties": false,
+					"description": "Body for `POST /orgs`. Explicitly-created orgs must declare their Ethereum (secp256k1) encryption public key — it identifies the org and, when `canEncryptResult` is enabled, encrypts delivered results.",
 					"required": [
-						"name"
+						"name",
+						"publicKey"
 					],
 					"properties": {
 						"name": {
 							"type": "string",
 							"minLength": 1,
 							"maxLength": 200
+						},
+						"publicKey": {
+							"type": "string",
+							"description": "The org's eth public key, uncompressed hex (`0x04` + 128 hex) — the eth-native form wallets/ethers emit. The matching private key never leaves the consumer.",
+							"pattern": "^0x04[0-9a-fA-F]{128}$"
+						},
+						"canEncryptResult": {
+							"type": "boolean",
+							"description": "When true, terminal results are ECIES-encrypted to this key; when false (the default), they are delivered as plaintext.",
+							"default": false
+						}
+					}
+				}
+			},
+			"required": [
+				"params",
+				"query",
+				"body"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"CreateOrgCallbackSubscription": {
+		description: "Register a callback subscription on an organization\n\nRegisters a destination for verification results on the organization. Caller must be an active member of the org. The body is just `callbackUrl` and `events`; delivery is scoped to the org and encrypted as a compact JWE to the org's encryption credential when set, else delivered as plaintext.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object",
+					"additionalProperties": false,
+					"description": "Body for `POST /orgs/{orgId}/callback-subscriptions`. The owning organization comes from the path; bearer-authenticated and gated on org membership. Delivery is scoped to the org and encrypted to its credential when set.",
+					"required": [
+						"callbackUrl",
+						"events"
+					],
+					"properties": {
+						"callbackUrl": {
+							"type": "string",
+							"format": "uri",
+							"maxLength": 2000
+						},
+						"events": {
+							"type": "array",
+							"minItems": 1,
+							"maxItems": 12,
+							"items": {
+								"type": "string",
+								"description": "Lifecycle event reported for a verification session. A healthy run\nproceeds through these in order; reading the gaps locates where a\nsession stalled. Session-level terminal events trigger callback\ndelivery; provider-/request-level events are progress pings carrying a\n`provider_id` (and `request_id` for request-level ones) in their event\ndata. New values may be added over time; clients MUST tolerate unknown\nvalues in responses.\n\n- `session_pending`: Session created; awaiting the end-user.\n\n- `verification_client_opened`: The end-user opened the link. Absent ⇒\n  the link was never opened.\n\n- `verification_client_ready`: The client initialized.\n\n- `verification_provider_started`: The client began verifying a provider\n  (`provider_id`/`resolved_version`/`ordinal` in `eventData`). One per\n  provider, in run order, for multi-provider sessions.\n\n- `request_matched`: The target request was captured on the provider\n  site. Absent (after opened) ⇒ the user didn't complete the journey.\n\n- `request_claim_created`: A proof claim was started.\n\n- `request_claim_completed`: A proof claim finished.\n\n- `request_claim_rejected`: A claim was rejected (detail in `eventData`).\n\n- `request_claim_failed`: A claim errored (detail in `eventData`).\n\n- `verification_success`: Terminal — verified. Triggers callback delivery.\n\n- `verification_rejected`: Terminal — rejected (detail in `eventData`).\n\n- `verification_error`: Terminal — errored (detail in `eventData`).\n\n- `session_expired`: `expiresAt` passed before a terminal event.",
+								"enum": [
+									"session_pending",
+									"verification_client_opened",
+									"verification_client_ready",
+									"verification_provider_started",
+									"request_matched",
+									"request_claim_created",
+									"request_claim_completed",
+									"request_claim_rejected",
+									"request_claim_failed",
+									"verification_success",
+									"verification_rejected",
+									"verification_error",
+									"session_expired"
+								]
+							}
 						}
 					}
 				}
@@ -574,9 +767,9 @@ export const MCP_TOOLS = {
 											}
 										}
 									},
-									"matches": {
+									"responseMatches": {
 										"type": "array",
-										"description": "A list of match conditions for the response.",
+										"description": "Conditions the (redacted) response must satisfy for the proof to be valid. Each runs against the union of the portions revealed by `responseRedactions` (or the whole response when there are none). Mirrors attestor-core `responseMatches`.",
 										"minItems": 1,
 										"items": {
 											"type": "object",
@@ -614,9 +807,172 @@ export const MCP_TOOLS = {
 												"value": {
 													"type": "string",
 													"description": "The pattern or value to look for in the response. When `type` is 'contains', supports template variable declaration using `{{variable}}` syntax. When `type` is 'regex', can be used to extract variables using regex named groups."
+												}
+											}
+										}
+									},
+									"responseRedactions": {
+										"type": "array",
+										"description": "Portions to select/reveal from the response, applied in order (xPath => jsonPath => regex). Done client-side; only the selected portions (plus the first response line) are sent to the attestor. An independent ordered list — NOT paired 1:1 with `responseMatches`. Mirrors attestor-core `responseRedactions`.",
+										"items": {
+											"type": "object",
+											"additionalProperties": false,
+											"description": "Which portions to select from a response. These are selected in order, xpath => jsonPath => regex * These redactions are done client side and only the selected portions are sent to the attestor. The attestor will only be able to see the selected portions alongside the first line of the HTTP response (i.e. \"HTTP/1.1 200 OK\")",
+											"properties": {
+												"xPath": {
+													"type": "string",
+													"description": "expect an HTML response, and to contain a certain xpath for eg. \"/html/body/div.a1/div.a2/span.a5\""
+												},
+												"jsonPath": {
+													"type": "string",
+													"description": "expect a JSON response, retrieve the item at this path using dot notation for e.g. 'email.addresses.0'"
 												},
-												"extract": {
+												"regex": {
+													"type": "string",
+													"description": "select a regex match from the response"
+												},
+												"hash": {
+													"type": "string",
+													"description": "If provided, the value inside will be hashed instead of being redacted. Useful for cases where the data inside is an identifiying piece of information that you don't want to reveal to the attestor, eg. an email address.\nIf the hash function produces more bytes than the original value, the hash will be truncated.\nEg. if hash is enabled, the original value is \"hello\", and hashed is \"a1b2c\", then the attestor will only see \"a1b2c\".\nNote: if a regex with named groups is provided, only the named groups will be hashed.",
+													"enum": [
+														"oprf",
+														"oprf-mpc",
+														"oprf-raw"
+													]
+												}
+											}
+										}
+									}
+								}
+							}
+						},
+						"allowedJsRequests": {
+							"type": "array",
+							"minItems": 0,
+							"default": [
+
+							],
+							"items": {
+								"type": "object",
+								"additionalProperties": false,
+								"description": "A template for selecting request",
+								"allOf": [
+									{
+										"type": "object",
+										"additionalProperties": false,
+										"description": "A matcher for one HTTP request in observed traffic, together with the response constraints that must hold for a Reclaim proof over that request to be valid. Used by interceptors, in-page injections, and LLM agents.",
+										"required": [
+											"url",
+											"method"
+										],
+										"properties": {
+											"url": {
+												"type": "string",
+												"description": "The URL or generic path of the HTTP request."
+											},
+											"method": {
+												"type": "string",
+												"description": "The HTTP method used for the request.",
+												"enum": [
+													"GET",
+													"POST",
+													"PUT",
+													"PATCH",
+													"DELETE"
+												]
+											},
+											"requestBodyTemplate": {
+												"type": "string",
+												"description": "Template used to match or capture an outgoing request body. Template can use regex templates as placeholders. For example, to match an outgoing request body that contains a request ID, you can use the following template: `(?<requestId>.*)`.",
+												"maxLength": 100000
+											},
+											"credentials": {
+												"type": "string",
+												"description": "Mirrors the Fetch API `RequestCredentials` value used when issuing the request — controls whether cookies and auth headers are sent.",
+												"enum": [
+													"omit",
+													"same-origin",
+													"include"
+												]
+											},
+											"writeRedactionMode": {
+												"type": "string",
+												"description": "How the matched portion of the response should be redacted before the transcript is handed to the attestor.\n- `zk`: redact using a zero-knowledge proof over the original\n  bytes.\n\n- `key-update`: redact by performing a TLS key update so the\n  attestor never observes the matched bytes in cleartext.",
+												"enum": [
+													"zk",
+													"key-update"
+												]
+											},
+											"additionalClientOptions": {
+												"type": "object",
+												"additionalProperties": false,
+												"description": "Apply TLS configuration when creating the tunnel to the attestor.",
+												"properties": {
+													"supportedProtocolVersions": {
+														"type": "array",
+														"description": "TLS protocol versions the client is allowed to negotiate.",
+														"minItems": 1,
+														"uniqueItems": true,
+														"items": {
+															"type": "string",
+															"enum": [
+																"TLS1_2",
+																"TLS1_3"
+															]
+														}
+													}
+												}
+											},
+											"responseMatches": {
+												"type": "array",
+												"description": "Conditions the (redacted) response must satisfy for the proof to be valid. Each runs against the union of the portions revealed by `responseRedactions` (or the whole response when there are none). Mirrors attestor-core `responseMatches`.",
+												"minItems": 1,
+												"items": {
+													"type": "object",
+													"additionalProperties": false,
+													"description": "Specifies a rule to match against a string in response to validate proof content.",
+													"required": [
+														"type",
+														"value"
+													],
+													"properties": {
+														"isOptional": {
+															"type": "boolean",
+															"description": "If true, the match condition is optional and won't fail if absent",
+															"default": false
+														},
+														"description": {
+															"type": "string",
+															"description": "The description of the field that is extracted using this match rule",
+															"minLength": 1,
+															"maxLength": 1000
+														},
+														"order": {
+															"type": "integer",
+															"description": "The order in which the field should be displayed to user in UI",
+															"minimum": 0
+														},
+														"type": {
+															"type": "string",
+															"description": "The matching mechanism to use value as against response. Typically regex or simple string containment",
+															"enum": [
+																"regex",
+																"contains"
+															]
+														},
+														"value": {
+															"type": "string",
+															"description": "The pattern or value to look for in the response. When `type` is 'contains', supports template variable declaration using `{{variable}}` syntax. When `type` is 'regex', can be used to extract variables using regex named groups."
+														}
+													}
+												}
+											},
+											"responseRedactions": {
+												"type": "array",
+												"description": "Portions to select/reveal from the response, applied in order (xPath => jsonPath => regex). Done client-side; only the selected portions (plus the first response line) are sent to the attestor. An independent ordered list — NOT paired 1:1 with `responseMatches`. Mirrors attestor-core `responseRedactions`.",
+												"items": {
 													"type": "object",
+													"additionalProperties": false,
 													"description": "Which portions to select from a response. These are selected in order, xpath => jsonPath => regex * These redactions are done client side and only the selected portions are sent to the attestor. The attestor will only be able to see the selected portions alongside the first line of the HTTP response (i.e. \"HTTP/1.1 200 OK\")",
 													"properties": {
 														"xPath": {
@@ -644,23 +1000,6 @@ export const MCP_TOOLS = {
 												}
 											}
 										}
-									}
-								}
-							}
-						},
-						"allowedJsRequests": {
-							"type": "array",
-							"minItems": 0,
-							"default": [
-
-							],
-							"items": {
-								"type": "object",
-								"additionalProperties": false,
-								"description": "A template for selecting request",
-								"allOf": [
-									{
-										"$ref": "#/components/schemas/RequestSelection"
 									},
 									{
 										"type": "object",
@@ -692,7 +1031,8 @@ export const MCP_TOOLS = {
 								"geoLocation": {
 									"type": "string",
 									"description": "Geographic location (e.g. ISO country code or {{DYNAMIC_GEO}} to use user's geo location) the verification should appear to originate from.",
-									"maxLength": 15
+									"maxLength": 15,
+									"default": "{{DYNAMIC_GEO}}"
 								},
 								"clientOptions": {
 									"type": "object",
@@ -707,7 +1047,7 @@ export const MCP_TOOLS = {
 												"useProxy": {
 													"type": "boolean",
 													"description": "When true, network traffic from the portal client and attestation is routed through a proxy.",
-													"default": false
+													"default": true
 												},
 												"userAgent": {
 													"type": "string",
@@ -777,14 +1117,10 @@ export const MCP_TOOLS = {
 								}
 							}
 						},
-						"requiredParameters": {
+						"requiredContext": {
 							"type": "object",
-							"description": "Map of parameter names needed (optional or required) to use this provider to their human-readable descriptions/labels. Values are plain strings shown alongside the field in dashboards and prompts.",
-							"maxProperties": 50,
-							"additionalProperties": {
-								"type": "string",
-								"maxLength": 500
-							}
+							"description": "Optional JSON Schema describing the `context` a Consumer must supply when creating a verification session for this provider version. Only needed when the recipe expects Consumer-supplied values: those are referenced as `{{context.<key>}}` in recipe requests. Bare `{{parameterName}}` placeholders are provider parameters (extracted / not Consumer-supplied) and need no declaration here. The Builder validates `CreateVerificationSessionRequest.context` against this schema and rejects the request (400) on mismatch. Extra context fields are always allowed regardless of the schema (a root-level `additionalProperties: false` is ignored). Empty/absent accepts any context.",
+							"additionalProperties": true
 						},
 						"notes": {
 							"type": "string",
@@ -802,29 +1138,16 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"DecideProviderVersionReview": {
-		description: "Record a decision on a verification version review\n\nAdmin only (Reclaim staff). Approves or rejects a verification version currently on the `in_review` branch. `APPROVED` clears the branch tag and promotes the version to the live channel; `REJECTED` moves it to the `rejected` branch where the author can address feedback and resubmit. A rejected version stays rejected — the author either fixes and resubmits, or abandons it.\nUntil RBAC is designed, \"admin\" is detected via the user's email domain (`@reclaimprotocol.org`). Non-admin callers receive a 403.",
+	"CreateVerificationSession": {
+		description: "Create a verification session\n\nCreates a verification session for an end-user to complete.\nAuthenticated by the consumer's `OrgToken`; the session is scoped to\nthe resolved organization. The request carries no callback URLs —\nresults are delivered to the org's pre-registered callback\nsubscriptions.\n\n    curl -X POST $BASE/verifications/sessions \\\n      -H \"Authorization: Bearer $ORG_TOKEN\" \\\n      -H 'Content-Type: application/json' \\\n      -d '{\"providerId\":\"…\",\"context\":{},\n           \"verificationClientUrl\":\"'$BASE'/v/{sessionId}\"}'\n\nFails with `409 Conflict` if the organization has no callback\nsubscription (there would be nowhere to deliver the result).\n",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"providerId": {
-							"type": "string",
-							"format": "uuid"
-						},
-						"version": {
-							"type": "string",
-							"pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:-[a-zA-Z0-9_-]+(?:\\.[0-9]+)?)?$",
-							"maxLength": 32
-						}
-					},
-					"required": [
-						"providerId",
-						"version"
-					],
-					"additionalProperties": false
+
+					}
 				},
 				"query": {
 					"type": "object",
@@ -835,20 +1158,105 @@ export const MCP_TOOLS = {
 				"body": {
 					"type": "object",
 					"additionalProperties": false,
-					"description": "Body for recording a decision on a provider version in `in_review`. On `APPROVED` the branch tag is cleared and the version is promoted to the live channel (becomes public). On `REJECTED` the branch becomes `rejected`.",
+					"description": "Body for `POST /verifications/sessions`. Authenticated by the consumer's `OrgToken`. Carries no callback URLs — they come from the org's callback subscriptions. The one shared `context` is validated against every provider's `requiredContext`.",
 					"required": [
-						"decision"
+						"providers",
+						"context",
+						"verificationClientUrl"
 					],
 					"properties": {
-						"decision": {
-							"type": "string",
-							"enum": [
-								"APPROVED",
-								"REJECTED"
-							]
-						},
-						"notes": {
-							"type": "string",
+						"providers": {
+							"type": "array",
+							"minItems": 1,
+							"description": "Providers to verify, in run order. The Verification Client runs each sequentially in one browser session and submits one combined result; all are required.",
+							"items": {
+								"type": "object",
+								"additionalProperties": false,
+								"description": "A provider (+ optional version) to verify in a session.",
+								"required": [
+									"providerId"
+								],
+								"properties": {
+									"providerId": {
+										"type": "string",
+										"format": "uuid"
+									},
+									"version": {
+										"type": "string",
+										"description": "Semver constraint; empty resolves to the latest trunk version.",
+										"maxLength": 64
+									}
+								}
+							}
+						},
+						"context": {
+							"type": "object",
+							"additionalProperties": true,
+							"description": "Consumer context, shared by all providers. Validated against EACH resolved provider version's `requiredContext` JSON Schema (a 400 is returned on mismatch); extra fields are always allowed. Recipe requests reference these values as `{{context.<key>}}`. Echoed back (plus `reclaimSessionId`) in the result."
+						},
+						"verificationClientUrl": {
+							"type": "string",
+							"description": "Must contain a `{sessionId}` placeholder. Must be an http(s) URL.",
+							"maxLength": 2000
+						}
+					}
+				}
+			},
+			"required": [
+				"params",
+				"query",
+				"body"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"DecideProviderVersionReview": {
+		description: "Record a decision on a verification version review\n\nAdmin only (Reclaim staff). Approves or rejects a verification version currently on the `in_review` branch. `APPROVED` clears the branch tag and promotes the version to the live channel; `REJECTED` moves it to the `rejected` branch where the author can address feedback and resubmit. A rejected version stays rejected — the author either fixes and resubmits, or abandons it.\nUntil RBAC is designed, \"admin\" is detected via the user's email domain (`@reclaimprotocol.org`). Non-admin callers receive a 403.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"providerId": {
+							"type": "string",
+							"format": "uuid"
+						},
+						"version": {
+							"type": "string",
+							"pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:-[a-zA-Z0-9_-]+(?:\\.[0-9]+)?)?$",
+							"maxLength": 32
+						}
+					},
+					"required": [
+						"providerId",
+						"version"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object",
+					"additionalProperties": false,
+					"description": "Body for recording a decision on a provider version in `in_review`. On `APPROVED` the branch tag is cleared and the version is promoted to the live channel (becomes public). On `REJECTED` the branch becomes `rejected`.",
+					"required": [
+						"decision"
+					],
+					"properties": {
+						"decision": {
+							"type": "string",
+							"enum": [
+								"APPROVED",
+								"REJECTED"
+							]
+						},
+						"notes": {
+							"type": "string",
 							"description": "Free-form rationale shown to the author.",
 							"maxLength": 10000
 						}
@@ -863,6 +1271,118 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"DeleteCallbackSubscription": {
+		description: "Delete a callback subscription\n\nRemoves a callback subscription. Authenticated by the org's `OrgToken`; the subscription must belong to that organization.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"subscriptionId": {
+							"type": "string",
+							"format": "uuid",
+							"description": "Stable id for a callback subscription."
+						}
+					},
+					"required": [
+						"subscriptionId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"DeleteOrgCallbackSubscription": {
+		description: "Delete an organization's callback subscription\n\nRemoves a callback subscription. Caller must be an active member of the owning org.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						},
+						"subscriptionId": {
+							"type": "string",
+							"format": "uuid",
+							"description": "Stable id for a callback subscription."
+						}
+					},
+					"required": [
+						"orgId",
+						"subscriptionId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"DeleteOrgKeypair": {
+		description: "Clear the organization's encryption keypair\n\nRemoves the organization's encryption keypair (the org reverts to keyless ⇒ plaintext delivery, and loses its eth identity address) until a new keypair is set. Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"DeleteProvider": {
 		description: "Delete a verification\n\nOwner of the verification's organization only. Soft-archives the verification (sets `status` to `ARCHIVED`) so historical references remain resolvable. Supports optimistic concurrency via `If-Match`.",
 		inputSchema: toZod({
@@ -997,24 +1517,16 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetCredential": {
-		description: "Get a credential\n\nReturns the credential row. Visibility: anyone can fetch an anonymous (`orgId` null) credential by id; linked credentials are visible only to active members of the owning org.",
+	"GetMe": {
+		description: "Get the authenticated user",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"credentialId": {
-							"type": "string",
-							"format": "uuid",
-							"description": "Stable id for a `Credential` row."
-						}
-					},
-					"required": [
-						"credentialId"
-					],
-					"additionalProperties": false
+
+					}
 				},
 				"query": {
 					"type": "object",
@@ -1033,31 +1545,38 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetCredentialByAddress": {
-		description: "Look up a credential by its lowercase ETH address\n\nCompanion to `GET /credentials/{credentialId}`. The MCP / CLI knows the credential by its address (the public handle the user actually types) rather than by its UUID id, so this shortcut returns the same `Credential` shape keyed on the address. Visibility rules mirror `GetCredential`: anonymous credentials are world-readable; linked credentials are visible only to active members of the owning org. Bumps `lastUsedAt` so the dashboard shows liveness.",
+	"GetOrg": {
+		description: "Get an organization",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"address": {
+						"orgId": {
 							"type": "string",
-							"description": "Lowercase Ethereum address (no EIP-55 mixed-case checksum). The client derives this from the public key via keccak-256 of the uncompressed pubkey minus the `0x04` prefix, taking the last 20 bytes. The server re-validates the format on insert but does not re-derive from the public key — that match is the client's responsibility.",
-							"pattern": "^0x[0-9a-f]{40}$",
-							"minLength": 42,
-							"maxLength": 42
+							"format": "uuid"
 						}
 					},
 					"required": [
-						"address"
+						"orgId"
 					],
 					"additionalProperties": false
 				},
 				"query": {
 					"type": "object",
 					"properties": {
-
+						"tab": {
+							"type": "string",
+							"enum": [
+								"connect",
+								"providers",
+								"members",
+								"themes",
+								"sessions",
+								"billing"
+							]
+						}
 					}
 				},
 				"body": {
@@ -1071,16 +1590,23 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetMe": {
-		description: "Get the authenticated user",
+	"GetOrgBilling": {
+		description: "Get the billing record for an organization\n\nOwner only. Returns `404` when no billing has been set; presence of the row is what promotes the org's credentials out of sandbox mode (see `Credential.mode`).",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-
-					}
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
 				},
 				"query": {
 					"type": "object",
@@ -1099,8 +1625,8 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetOrg": {
-		description: "Get an organization",
+	"GetOrgKeypair": {
+		description: "Get the organization's encryption keypair\n\nReturns the organization's single Ethereum (secp256k1) encryption keypair — its public JWK, derived eth address, and `canEncryptResult` flag — or `404` when none is set (the org is keyless ⇒ plaintext delivery). Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1134,8 +1660,8 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"GetOrgBilling": {
-		description: "Get the billing record for an organization\n\nOwner only. Returns `404` when no billing has been set; presence of the row is what promotes the org's credentials out of sandbox mode (see `Credential.mode`).",
+	"GetOrgToken": {
+		description: "Get the organization's API token metadata\n\nReturns metadata about the organization's current API token — its last four characters, when it was created, and when it was last used — never the token itself. The caller must be an active **OWNER** of the organization. Returns `404` when no token has been issued.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1280,17 +1806,60 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"LinkCredential": {
-		description: "Link a credential to an organization\n\nLinks an ETH credential to an organization — registering it directly, or attaching an already-known one (matched by `address`). The private key MUST NOT leave the client — only the derived address and uncompressed public key are sent. `orgId` is required and the caller must be allowed to edit it. Idempotent for the same `(address, orgId)`. (Anonymous credentials live client-side; they are only stored here once linked.)",
+	"GetVerificationSession": {
+		description: "Get a verification session\n\nReturns the session. Authenticated by the consumer's `OrgToken` (or the\nVC service token); the resolved org must match the session's.\n\nReading `status`:\n- `pending` — created, not yet finished; the end-user can still\n  complete it until `expiresAt`.\n- `success` / `rejected` / `error` — terminal outcomes (the matching\n  `verification_*` event was recorded). Only after a terminal status is\n  a result delivered to callbacks.\n- `expired` — `expiresAt` passed before a terminal event. A `pending`\n  session whose `expiresAt` is in the past has effectively expired and\n  flips to `expired` on the next sweep; the end-user can no longer\n  complete it — issue a fresh session/link.\n\n`callbackDeliveryStatus` aggregates the session's callback deliveries\nand is only meaningful once the session is terminal. To investigate a\nstuck or failed session, pair this with `list_verification_events` (the\nper-stage lifecycle log) and `list_verification_deliveries` (callback\nhealth).\n",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
+					"type": "object",
+					"properties": {
+						"sessionId": {
+							"type": "string",
+							"format": "uuid",
+							"description": "Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`."
+						}
+					},
+					"required": [
+						"sessionId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
 					"type": "object",
 					"properties": {
 
 					}
 				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"IssueOrgToken": {
+		description: "Issue (or regenerate) the organization's API token\n\nIssues a fresh per-organization API token (`rorg_…`). The caller must be an active **OWNER** of the organization. A successful call invalidates any previously issued token for the org. The plaintext token is returned **only once** in this response (the server stores only its HMAC); treat it like a password and store it securely.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
+				},
 				"query": {
 					"type": "object",
 					"properties": {
@@ -1298,64 +1867,232 @@ export const MCP_TOOLS = {
 					}
 				},
 				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"ListCallbackDlq": {
+		description: "List dead-lettered callbacks (admin-only)\n\nAdmin only. Lists callback deliveries whose retries were exhausted and moved to the DLQ for manual recovery.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
 					"type": "object",
-					"additionalProperties": false,
-					"description": "Body for `POST /credentials`. Only the lowercase ETH `address` is sent — the private key MUST NOT leave the client, and the public key is not sent (the client derives the address from the key: keccak-256 of the uncompressed pubkey minus its `0x04` prefix, last 20 bytes, lowercase hex).",
+					"properties": {
+
+					}
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"ListCallbackSubscriptions": {
+		description: "List callback subscriptions for the organization\n\nReturns every callback subscription owned by the organization the presented `OrgToken` resolves to.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"ListOrgCallbackSubscriptions": {
+		description: "List an organization's callback subscriptions\n\nReturns every callback subscription owned by the organization. Caller must be an active member of the org.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"ListOrgs": {
+		description: "List organizations the caller belongs to",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+						"cursor": {
+							"type": "string",
+							"maxLength": 500
+						}
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
+	"ListOrgVerificationSessions": {
+		description: "List an organization's verification sessions\n\nReturns verification sessions created under the organization, newest first. Optionally filter by `providerId`, `status`, `resolvedVersion`, `claimantClientId`, and a `createdAfter`/`createdBefore` time range. Caller must be an active member of the org. Opaque cursor pagination.\n\nNote: `status` filters on the stored column. A session that has passed `expiresAt` but has not yet been swept is reported as `expired` in its body while still stored as `pending`, so `status=expired` may not match such sessions until the sweep runs.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
 					"required": [
-						"address",
 						"orgId"
 					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
 					"properties": {
-						"address": {
+						"providerId": {
 							"type": "string",
-							"description": "Lowercase Ethereum address (no EIP-55 mixed-case checksum). The client derives this from the public key via keccak-256 of the uncompressed pubkey minus the `0x04` prefix, taking the last 20 bytes. The server re-validates the format on insert but does not re-derive from the public key — that match is the client's responsibility.",
-							"pattern": "^0x[0-9a-f]{40}$",
-							"minLength": 42,
-							"maxLength": 42
+							"format": "uuid"
 						},
-						"orgId": {
+						"status": {
+							"type": "string",
+							"description": "Status of a verification session, derived from its events. New values\nmay be added over time; clients MUST tolerate unknown values in\nresponses.\n\n- `pending`: Created, not yet finished; completable until `expiresAt`.\n\n- `success`: Terminal — `verification_success` recorded.\n\n- `rejected`: Terminal — `verification_rejected` recorded.\n\n- `error`: Terminal — `verification_error` recorded.\n\n- `expired`: `expiresAt` passed before a terminal event; the end-user\n  can no longer complete it.",
+							"enum": [
+								"pending",
+								"success",
+								"rejected",
+								"error",
+								"expired"
+							]
+						},
+						"resolvedVersion": {
+							"type": "string",
+							"maxLength": 64
+						},
+						"claimantClientId": {
 							"type": "string",
 							"format": "uuid"
 						},
-						"label": {
+						"createdAfter": {
 							"type": "string",
-							"description": "Optional human-readable label.",
-							"minLength": 1,
-							"maxLength": 100
+							"format": "date-time"
+						},
+						"createdBefore": {
+							"type": "string",
+							"format": "date-time"
+						},
+						"cursor": {
+							"type": "string",
+							"maxLength": 500
 						}
 					}
+				},
+				"body": {
+					"type": "object"
 				}
 			},
 			"required": [
 				"params",
-				"query",
-				"body"
+				"query"
 			],
 			"additionalProperties": false
 		}),
 	},
-	"ListOrgCredentials": {
-		description: "List credentials linked to an organization\n\nReturns every credential whose `orgId` equals the path parameter. Caller must be an active member of the org.",
+	"ListProviderVersions": {
+		description: "List a verification's versions\n\nLists versions visible to the caller. Non-public branches (`ai`, `draft`, `in_review`, `rejected`) are only visible to members of the verification's owning organization.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"orgId": {
+						"providerId": {
 							"type": "string",
 							"format": "uuid"
 						}
 					},
 					"required": [
-						"orgId"
+						"providerId"
 					],
 					"additionalProperties": false
 				},
 				"query": {
 					"type": "object",
 					"properties": {
-
+						"cursor": {
+							"type": "string",
+							"maxLength": 500
+						}
 					}
 				},
 				"body": {
@@ -1369,24 +2106,29 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"ListOrgs": {
-		description: "List organizations the caller belongs to",
+	"ListVerificationDeliveries": {
+		description: "Get the callback delivery status for a session\n\nDiagnostic view of the session's callback deliveries: one entry per\n(subscription, terminal event) with its delivery state, attempt\ncount, last error, and whether it was dead-lettered. Lets a consumer\n(or the agent) answer \"did my callback arrive, and if not, why?\"\nwithout org-dashboard access. Only meaningful after the session\nreaches a terminal status (no deliveries exist before then). Auth\nmirrors the events GET: the Verification Client service token, or the\nconsumer's `OrgToken` (the resolved org must match the session).\n\nReading `deliveryStatus` per entry:\n- `delivered` — the callback POST succeeded; nothing to do.\n- `pending` — queued, not yet attempted (or between retries).\n- `attempt_failed` — a delivery attempt failed but retries remain;\n  `lastError` holds the reason and `attempts` the count so far.\n- `failed` — all retries exhausted. When `deadLettered` is also true\n  the delivery sits in the DLQ.\n\nTo recover a failed/dead-lettered delivery: confirm the `callbackUrl`\nis reachable and answers 2xx, then call `retry_verification_callback`\nto re-enqueue it (an org admin can also retry from the Callback DLQ).\n",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-
-					}
+						"sessionId": {
+							"type": "string",
+							"format": "uuid",
+							"description": "Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`."
+						}
+					},
+					"required": [
+						"sessionId"
+					],
+					"additionalProperties": false
 				},
 				"query": {
 					"type": "object",
 					"properties": {
-						"cursor": {
-							"type": "string",
-							"maxLength": 500
-						}
+
 					}
 				},
 				"body": {
@@ -1400,31 +2142,29 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"ListProviderVersions": {
-		description: "List a verification's versions\n\nLists versions visible to the caller. Non-public branches (`ai`, `draft`, `in_review`, `rejected`) are only visible to members of the verification's owning organization.",
+	"ListVerificationEvents": {
+		description: "Get the event log for a session\n\nReturns the append-only event log. Readable by the Verification Client\n(`X-VC-Token`) or the session creator (authenticated by the consumer's\n`OrgToken`; the resolved org must match the session).\n\nThis log is the primary tool for diagnosing a stuck or failed session.\nA healthy run proceeds through this lifecycle (in order):\n\n`session_pending` → `verification_client_opened` →\n`verification_client_ready` → `request_matched` →\n`request_claim_created` → `request_claim_completed` → terminal\n(`verification_success` | `verification_rejected` | `verification_error`),\nor `session_expired` if `expiresAt` passes first.\n\nRead the gaps to locate where the flow stalled:\n- no `verification_client_opened` → the end-user never opened the link.\n- opened but no `request_matched` → the user opened the page but didn't\n  complete the login/journey on the provider site, so the target\n  request was never captured.\n- `request_matched` but no terminal event → the proof run is still in\n  progress (or stalled mid-claim).\n\nFailure detail lives in `eventData` on `request_claim_failed`,\n`request_claim_rejected`, `verification_error`, and\n`verification_rejected` — inspect it for the reason. Request-level\nevents also carry a `request_id` in `eventData`. Pair with\n`get_verification_session` (status/expiry) and\n`list_verification_deliveries` (callback health) for the full picture.\n",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"providerId": {
+						"sessionId": {
 							"type": "string",
-							"format": "uuid"
+							"format": "uuid",
+							"description": "Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`."
 						}
 					},
 					"required": [
-						"providerId"
+						"sessionId"
 					],
 					"additionalProperties": false
 				},
 				"query": {
 					"type": "object",
 					"properties": {
-						"cursor": {
-							"type": "string",
-							"maxLength": 500
-						}
+
 					}
 				},
 				"body": {
@@ -1499,7 +2239,6 @@ export const MCP_TOOLS = {
 					"properties": {
 						"q": {
 							"type": "string",
-							"minLength": 1,
 							"maxLength": 200
 						},
 						"tag": {
@@ -1626,22 +2365,22 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"RevokeCredential": {
-		description: "Revoke a credential\n\nSoft-revokes the credential (sets `revokedAt`). Allowed for the creating user (anonymous credentials), an active OWNER of the owning org (linked credentials), or a Reclaim admin. Revoked credentials cannot be used for verification and cannot be re-linked.",
+	"RetryVerificationCallback": {
+		description: "Re-enqueue callback delivery for a session\n\nRe-enqueues delivery of a session's stored result to its callback subscriptions. Use this after `list_verification_deliveries` shows a `failed` or dead-lettered delivery, once the consumer's callback endpoint is reachable again and answers 2xx — it re-attempts every not-yet-delivered callback for the session. Usable by the session creator (authenticated by the consumer's `OrgToken`) to recover from a transient consumer-side outage.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"credentialId": {
+						"sessionId": {
 							"type": "string",
 							"format": "uuid",
-							"description": "Stable id for a `Credential` row."
+							"description": "Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`."
 						}
 					},
 					"required": [
-						"credentialId"
+						"sessionId"
 					],
 					"additionalProperties": false
 				},
@@ -1662,27 +2401,21 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"SubmitProviderVersionForReview": {
-		description: "Submit a verification version for review\n\nSubmits a verification version (currently on the `draft` or `rejected` branch) for admin review. On success the version's branch transitions to `in_review`. Callable by any authenticated member of the verification's owning org. Meaningful only on `PUBLIC` verifications — on `PRIVATE` verifications new versions go to the live channel directly and never need review.",
+	"SetOrgKeypair": {
+		description: "Set (or rotate) the organization's encryption keypair\n\nUpserts the organization's single Ethereum (secp256k1) encryption keypair. The body carries the org's **eth public key** — as an uncompressed hex string (`0x04`+128 hex) or a secp256k1 public JWK (`{kty:'EC', crv:'secp256k1', x, y}`) — and `canEncryptResult`. The matching private key never leaves the consumer. Setting overwrites the single row (and creates it for a keyless org). When `canEncryptResult` is true, terminal results are delivered as an ECIES ciphertext encrypted to this key; otherwise plaintext. Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-						"providerId": {
+						"orgId": {
 							"type": "string",
 							"format": "uuid"
-						},
-						"version": {
-							"type": "string",
-							"pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:-[a-zA-Z0-9_-]+(?:\\.[0-9]+)?)?$",
-							"maxLength": 32
 						}
 					},
 					"required": [
-						"providerId",
-						"version"
+						"orgId"
 					],
 					"additionalProperties": false
 				},
@@ -1693,16 +2426,88 @@ export const MCP_TOOLS = {
 					}
 				},
 				"body": {
-					"type": "object",
-					"additionalProperties": false,
-					"description": "Body for submitting a provider version for review. Transitions the version's branch from `draft` (or `rejected`) to `in_review`.",
-					"properties": {
-						"notes": {
-							"type": "string",
-							"description": "Optional note from the author to reviewers (changelog, areas to focus on, etc.).",
-							"maxLength": 10000
+					"oneOf": [
+						{
+							"type": "object",
+							"additionalProperties": false,
+							"description": "Body for `PUT /orgs/{orgId}/keypair`. Carries the org's eth public key as an uncompressed hex string (`0x04` + 128 hex) — the eth-native form wallets/ethers emit. The matching private key never leaves the consumer.",
+							"required": [
+								"publicKey"
+							],
+							"properties": {
+								"publicKey": {
+									"type": "string",
+									"description": "Uncompressed secp256k1 public key, `0x04` + 128 hex.",
+									"pattern": "^0x04[0-9a-fA-F]{128}$"
+								},
+								"canEncryptResult": {
+									"type": "boolean",
+									"default": false
+								},
+								"label": {
+									"type": "string",
+									"minLength": 1,
+									"maxLength": 100
+								}
+							}
+						},
+						{
+							"type": "object",
+							"additionalProperties": false,
+							"description": "Body for `PUT /orgs/{orgId}/keypair`. Carries the org's eth public key as a secp256k1 public JWK.",
+							"required": [
+								"publicKeyJwk"
+							],
+							"properties": {
+								"publicKeyJwk": {
+									"type": "object",
+									"additionalProperties": false,
+									"description": "A secp256k1 (Ethereum) public key in JWK form (`{kty:'EC', crv:'secp256k1', x, y}`), used to ECIES-encrypt delivered verification results and to identify the org. The matching private key never leaves the consumer. Same shape published by the signing JWKS.",
+									"required": [
+										"kty",
+										"crv",
+										"x",
+										"y"
+									],
+									"properties": {
+										"kty": {
+											"type": "string",
+											"enum": [
+												"EC"
+											]
+										},
+										"crv": {
+											"type": "string",
+											"enum": [
+												"secp256k1"
+											]
+										},
+										"x": {
+											"type": "string",
+											"description": "base64url-encoded X coordinate (32 bytes).",
+											"minLength": 1,
+											"maxLength": 64
+										},
+										"y": {
+											"type": "string",
+											"description": "base64url-encoded Y coordinate (32 bytes).",
+											"minLength": 1,
+											"maxLength": 64
+										}
+									}
+								},
+								"canEncryptResult": {
+									"type": "boolean",
+									"default": false
+								},
+								"label": {
+									"type": "string",
+									"minLength": 1,
+									"maxLength": 100
+								}
+							}
 						}
-					}
+					]
 				}
 			},
 			"required": [
@@ -1713,8 +2518,8 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"TransferProvider": {
-		description: "Transfer a verification to a different workspace\n\nAdmin-only. Moves the verification's `orgId` to the supplied workspace; preserves slug, versions, members. SQL function `builder.transfer_provider` enforces the admin gate and target existence atomically.",
+	"SubmitProviderVersionForReview": {
+		description: "Submit a verification version for review\n\nSubmits a verification version (currently on the `draft` or `rejected` branch) for admin review. On success the version's branch transitions to `in_review`. Callable by any authenticated member of the verification's owning org. Meaningful only on `PUBLIC` verifications — on `PRIVATE` verifications new versions go to the live channel directly and never need review.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1724,10 +2529,16 @@ export const MCP_TOOLS = {
 						"providerId": {
 							"type": "string",
 							"format": "uuid"
+						},
+						"version": {
+							"type": "string",
+							"pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:-[a-zA-Z0-9_-]+(?:\\.[0-9]+)?)?$",
+							"maxLength": 32
 						}
 					},
 					"required": [
-						"providerId"
+						"providerId",
+						"version"
 					],
 					"additionalProperties": false
 				},
@@ -1740,13 +2551,12 @@ export const MCP_TOOLS = {
 				"body": {
 					"type": "object",
 					"additionalProperties": false,
-					"required": [
-						"orgId"
-					],
+					"description": "Body for submitting a provider version for review. Transitions the version's branch from `draft` (or `rejected`) to `in_review`.",
 					"properties": {
-						"orgId": {
+						"notes": {
 							"type": "string",
-							"format": "uuid"
+							"description": "Optional note from the author to reviewers (changelog, areas to focus on, etc.).",
+							"maxLength": 10000
 						}
 					}
 				}
@@ -1759,16 +2569,23 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
-	"UpdateMe": {
-		description: "Update the authenticated user's profile",
+	"TransferProvider": {
+		description: "Transfer a verification to a different workspace\n\nAdmin-only. Moves the verification's `orgId` to the supplied workspace; preserves slug, versions, members. SQL function `builder.transfer_provider` enforces the admin gate and target existence atomically.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
 				"params": {
 					"type": "object",
 					"properties": {
-
-					}
+						"providerId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"providerId"
+					],
+					"additionalProperties": false
 				},
 				"query": {
 					"type": "object",
@@ -1779,12 +2596,13 @@ export const MCP_TOOLS = {
 				"body": {
 					"type": "object",
 					"additionalProperties": false,
-					"description": "Caller-editable fields on the authenticated user.",
+					"required": [
+						"orgId"
+					],
 					"properties": {
-						"name": {
+						"orgId": {
 							"type": "string",
-							"minLength": 1,
-							"maxLength": 200
+							"format": "uuid"
 						}
 					}
 				}
@@ -2166,9 +2984,9 @@ export const MCP_TOOLS = {
 											}
 										}
 									},
-									"matches": {
+									"responseMatches": {
 										"type": "array",
-										"description": "A list of match conditions for the response.",
+										"description": "Conditions the (redacted) response must satisfy for the proof to be valid. Each runs against the union of the portions revealed by `responseRedactions` (or the whole response when there are none). Mirrors attestor-core `responseMatches`.",
 										"minItems": 1,
 										"items": {
 											"type": "object",
@@ -2206,9 +3024,169 @@ export const MCP_TOOLS = {
 												"value": {
 													"type": "string",
 													"description": "The pattern or value to look for in the response. When `type` is 'contains', supports template variable declaration using `{{variable}}` syntax. When `type` is 'regex', can be used to extract variables using regex named groups."
+												}
+											}
+										}
+									},
+									"responseRedactions": {
+										"type": "array",
+										"description": "Portions to select/reveal from the response, applied in order (xPath => jsonPath => regex). Done client-side; only the selected portions (plus the first response line) are sent to the attestor. An independent ordered list — NOT paired 1:1 with `responseMatches`. Mirrors attestor-core `responseRedactions`.",
+										"items": {
+											"type": "object",
+											"additionalProperties": false,
+											"description": "Which portions to select from a response. These are selected in order, xpath => jsonPath => regex * These redactions are done client side and only the selected portions are sent to the attestor. The attestor will only be able to see the selected portions alongside the first line of the HTTP response (i.e. \"HTTP/1.1 200 OK\")",
+											"properties": {
+												"xPath": {
+													"type": "string",
+													"description": "expect an HTML response, and to contain a certain xpath for eg. \"/html/body/div.a1/div.a2/span.a5\""
+												},
+												"jsonPath": {
+													"type": "string",
+													"description": "expect a JSON response, retrieve the item at this path using dot notation for e.g. 'email.addresses.0'"
 												},
-												"extract": {
+												"regex": {
+													"type": "string",
+													"description": "select a regex match from the response"
+												},
+												"hash": {
+													"type": "string",
+													"description": "If provided, the value inside will be hashed instead of being redacted. Useful for cases where the data inside is an identifiying piece of information that you don't want to reveal to the attestor, eg. an email address.\nIf the hash function produces more bytes than the original value, the hash will be truncated.\nEg. if hash is enabled, the original value is \"hello\", and hashed is \"a1b2c\", then the attestor will only see \"a1b2c\".\nNote: if a regex with named groups is provided, only the named groups will be hashed.",
+													"enum": [
+														"oprf",
+														"oprf-mpc",
+														"oprf-raw"
+													]
+												}
+											}
+										}
+									}
+								}
+							}
+						},
+						"allowedJsRequests": {
+							"type": "array",
+							"minItems": 0,
+							"items": {
+								"type": "object",
+								"additionalProperties": false,
+								"description": "A template for selecting request",
+								"allOf": [
+									{
+										"type": "object",
+										"additionalProperties": false,
+										"description": "A matcher for one HTTP request in observed traffic, together with the response constraints that must hold for a Reclaim proof over that request to be valid. Used by interceptors, in-page injections, and LLM agents.",
+										"required": [
+											"url",
+											"method"
+										],
+										"properties": {
+											"url": {
+												"type": "string",
+												"description": "The URL or generic path of the HTTP request."
+											},
+											"method": {
+												"type": "string",
+												"description": "The HTTP method used for the request.",
+												"enum": [
+													"GET",
+													"POST",
+													"PUT",
+													"PATCH",
+													"DELETE"
+												]
+											},
+											"requestBodyTemplate": {
+												"type": "string",
+												"description": "Template used to match or capture an outgoing request body. Template can use regex templates as placeholders. For example, to match an outgoing request body that contains a request ID, you can use the following template: `(?<requestId>.*)`.",
+												"maxLength": 100000
+											},
+											"credentials": {
+												"type": "string",
+												"description": "Mirrors the Fetch API `RequestCredentials` value used when issuing the request — controls whether cookies and auth headers are sent.",
+												"enum": [
+													"omit",
+													"same-origin",
+													"include"
+												]
+											},
+											"writeRedactionMode": {
+												"type": "string",
+												"description": "How the matched portion of the response should be redacted before the transcript is handed to the attestor.\n- `zk`: redact using a zero-knowledge proof over the original\n  bytes.\n\n- `key-update`: redact by performing a TLS key update so the\n  attestor never observes the matched bytes in cleartext.",
+												"enum": [
+													"zk",
+													"key-update"
+												]
+											},
+											"additionalClientOptions": {
+												"type": "object",
+												"additionalProperties": false,
+												"description": "Apply TLS configuration when creating the tunnel to the attestor.",
+												"properties": {
+													"supportedProtocolVersions": {
+														"type": "array",
+														"description": "TLS protocol versions the client is allowed to negotiate.",
+														"minItems": 1,
+														"uniqueItems": true,
+														"items": {
+															"type": "string",
+															"enum": [
+																"TLS1_2",
+																"TLS1_3"
+															]
+														}
+													}
+												}
+											},
+											"responseMatches": {
+												"type": "array",
+												"description": "Conditions the (redacted) response must satisfy for the proof to be valid. Each runs against the union of the portions revealed by `responseRedactions` (or the whole response when there are none). Mirrors attestor-core `responseMatches`.",
+												"minItems": 1,
+												"items": {
+													"type": "object",
+													"additionalProperties": false,
+													"description": "Specifies a rule to match against a string in response to validate proof content.",
+													"required": [
+														"type",
+														"value"
+													],
+													"properties": {
+														"isOptional": {
+															"type": "boolean",
+															"description": "If true, the match condition is optional and won't fail if absent",
+															"default": false
+														},
+														"description": {
+															"type": "string",
+															"description": "The description of the field that is extracted using this match rule",
+															"minLength": 1,
+															"maxLength": 1000
+														},
+														"order": {
+															"type": "integer",
+															"description": "The order in which the field should be displayed to user in UI",
+															"minimum": 0
+														},
+														"type": {
+															"type": "string",
+															"description": "The matching mechanism to use value as against response. Typically regex or simple string containment",
+															"enum": [
+																"regex",
+																"contains"
+															]
+														},
+														"value": {
+															"type": "string",
+															"description": "The pattern or value to look for in the response. When `type` is 'contains', supports template variable declaration using `{{variable}}` syntax. When `type` is 'regex', can be used to extract variables using regex named groups."
+														}
+													}
+												}
+											},
+											"responseRedactions": {
+												"type": "array",
+												"description": "Portions to select/reveal from the response, applied in order (xPath => jsonPath => regex). Done client-side; only the selected portions (plus the first response line) are sent to the attestor. An independent ordered list — NOT paired 1:1 with `responseMatches`. Mirrors attestor-core `responseRedactions`.",
+												"items": {
 													"type": "object",
+													"additionalProperties": false,
 													"description": "Which portions to select from a response. These are selected in order, xpath => jsonPath => regex * These redactions are done client side and only the selected portions are sent to the attestor. The attestor will only be able to see the selected portions alongside the first line of the HTTP response (i.e. \"HTTP/1.1 200 OK\")",
 													"properties": {
 														"xPath": {
@@ -2236,20 +3214,6 @@ export const MCP_TOOLS = {
 												}
 											}
 										}
-									}
-								}
-							}
-						},
-						"allowedJsRequests": {
-							"type": "array",
-							"minItems": 0,
-							"items": {
-								"type": "object",
-								"additionalProperties": false,
-								"description": "A template for selecting request",
-								"allOf": [
-									{
-										"$ref": "#/components/schemas/RequestSelection"
 									},
 									{
 										"type": "object",
@@ -2281,7 +3245,8 @@ export const MCP_TOOLS = {
 								"geoLocation": {
 									"type": "string",
 									"description": "Geographic location (e.g. ISO country code or {{DYNAMIC_GEO}} to use user's geo location) the verification should appear to originate from.",
-									"maxLength": 15
+									"maxLength": 15,
+									"default": "{{DYNAMIC_GEO}}"
 								},
 								"clientOptions": {
 									"type": "object",
@@ -2296,7 +3261,7 @@ export const MCP_TOOLS = {
 												"useProxy": {
 													"type": "boolean",
 													"description": "When true, network traffic from the portal client and attestation is routed through a proxy.",
-													"default": false
+													"default": true
 												},
 												"userAgent": {
 													"type": "string",
@@ -2366,14 +3331,10 @@ export const MCP_TOOLS = {
 								}
 							}
 						},
-						"requiredParameters": {
+						"requiredContext": {
 							"type": "object",
-							"description": "Map of parameter names needed (optional or required) to use this provider to their human-readable descriptions/labels. Values are plain strings shown alongside the field in dashboards and prompts.",
-							"maxProperties": 50,
-							"additionalProperties": {
-								"type": "string",
-								"maxLength": 500
-							}
+							"description": "Optional JSON Schema describing the `context` a Consumer must supply when creating a verification session for this provider version. Only needed when the recipe expects Consumer-supplied values: those are referenced as `{{context.<key>}}` in recipe requests. Bare `{{parameterName}}` placeholders are provider parameters (extracted / not Consumer-supplied) and need no declaration here. The Builder validates `CreateVerificationSessionRequest.context` against this schema and rejects the request (400) on mismatch. Extra context fields are always allowed regardless of the schema (a root-level `additionalProperties: false` is ignored). Empty/absent accepts any context.",
+							"additionalProperties": true
 						},
 						"notes": {
 							"type": "string",