@reclaimprotocol/agent 0.1.29 → 0.1.32

package/src/mcp/api/operations.gen.ts

@@ -1,7 +1,8 @@
 // AUTO-GENERATED by packages/app/scripts/mcp-tools-gen.ts
-// from packages/app/openapi.yaml.
-// Run `npm run openapi:gen --workspace=packages/app`
-// to regenerate. Do not edit by hand.
+// from packages/app/openapi.yaml (spec v0.1.0, source sha256:099a5bcf4fba).
+// The hash catches drift the version misses (a spec can change without a
+// version bump) — do not remove it as "redundant" with the version.
+// Run `npm run openapi:gen --workspace=packages/app` to regenerate. Do not edit by hand.
 // @ts-nocheck
 
 import { toZod } from './to-zod.ts'
@@ -66,6 +67,77 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"AdminAnalytics": {
+		description: "Usage, session, and revenue analytics (admin-only)\n\nAdmin only. Aggregates across every organization over a date window: session outcomes by UTC day, device category, and claimant country; demand per provider, money in by month, and per-org consumption against the plan allowance (including closed periods, which the org-scoped usage endpoint never returns). Defaults to the last 30 days; narrow to one org with `orgId`.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+
+					}
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 64,
+							"pattern": "^[0-9a-fA-F-]+$",
+							"description": "An organization id used as a filter. Hyphens are ignored, so it matches with or without them; an id that matches no organization returns nothing."
+						},
+						"providerSearch": {
+							"type": "string",
+							"maxLength": 100
+						},
+						"verificationClientId": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 64,
+							"pattern": "^[0-9a-fA-F-]+$",
+							"description": "A verification client id used as a filter. Hyphens are ignored."
+						},
+						"from": {
+							"type": "string",
+							"maxLength": 40,
+							"pattern": "^\\d{4}-\\d{2}-\\d{2}(T\\d{2}:\\d{2}(:\\d{2}(\\.\\d+)?)?(Z|[+-]\\d{2}:\\d{2})?)?$",
+							"description": "One end of a date window: either a calendar date (`2026-09-01`, read as UTC midnight) or a full ISO date-time. The date-only form is what a native `<input type=\"date\">` submits, so `format: date-time` alone would reject every filter the dashboard's own form sends."
+						},
+						"to": {
+							"type": "string",
+							"maxLength": 40,
+							"pattern": "^\\d{4}-\\d{2}-\\d{2}(T\\d{2}:\\d{2}(:\\d{2}(\\.\\d+)?)?(Z|[+-]\\d{2}:\\d{2})?)?$",
+							"description": "One end of a date window: either a calendar date (`2026-09-01`, read as UTC midnight) or a full ISO date-time. The date-only form is what a native `<input type=\"date\">` submits, so `format: date-time` alone would reject every filter the dashboard's own form sends."
+						},
+						"format": {
+							"type": "string",
+							"enum": [
+								"csv"
+							]
+						},
+						"section": {
+							"type": "string",
+							"enum": [
+								"providers",
+								"revenue",
+								"usage"
+							]
+						}
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"AdminOrgs": {
 		description: "All workspaces (admin-only)\n\nAdmin only. Lists all organizations. Search matches workspace name or any member's email address.",
 		inputSchema: toZod({
@@ -83,6 +155,10 @@ export const MCP_TOOLS = {
 						"q": {
 							"type": "string",
 							"maxLength": 200
+						},
+						"cursor": {
+							"type": "string",
+							"maxLength": 500
 						}
 					}
 				},
@@ -145,7 +221,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"AdminReviews": {
-		description: "Pending review queue (admin-only)\n\nAdmin only. Lists all provider versions currently awaiting review (branch = 'in_review'). Use DecideProviderVersionReview to approve or reject each version.",
+		description: "Pending review queue (admin-only)\n\nAdmin only. Lists all provider versions currently awaiting review (branch = 'in_review'). Use decide_provider_version_review to approve or reject each version.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -173,7 +249,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"AdminSessions": {
-		description: "Explore verification sessions (admin-only)\n\nAdmin only. Search verification sessions across all organizations — filter by `sessionId` (prefix match, at least 5 characters), `providerId`, `claimantClientId`, `orgId` (all exact match), `status`, and a `createdAfter`/`createdBefore` time range. Rows link to the org-scoped session detail page (admins can open any org's pages). Capped at 100, newest first.",
+		description: "Explore verification sessions (admin-only)\n\nAdmin only. Search verification sessions across all organizations — filter by `sessionId` (prefix match, at least 5 characters), `providerId` (id or slug), `claimantClientId`, `orgId` (all exact match), `status`, and a `createdAfter`/`createdBefore` time range. Rows link to the org-scoped session detail page (admins can open any org's pages). Newest first, 50 per page, with opaque cursor pagination.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -194,6 +270,17 @@ export const MCP_TOOLS = {
 							"type": "string",
 							"maxLength": 100
 						},
+						"verificationClientId": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 64,
+							"pattern": "^[0-9a-fA-F-]+$",
+							"description": "A verification client id used as a filter. Hyphens are ignored."
+						},
+						"providerSearch": {
+							"type": "string",
+							"maxLength": 100
+						},
 						"claimantClientId": {
 							"type": "string",
 							"maxLength": 100
@@ -221,6 +308,10 @@ export const MCP_TOOLS = {
 						"createdBefore": {
 							"type": "string",
 							"format": "date-time"
+						},
+						"cursor": {
+							"type": "string",
+							"maxLength": 500
 						}
 					}
 				},
@@ -430,7 +521,7 @@ export const MCP_TOOLS = {
 						"events": {
 							"type": "array",
 							"minItems": 1,
-							"maxItems": 50,
+							"maxItems": 51,
 							"items": {
 								"type": "string",
 								"description": "Canonical Builder lifecycle event. Names use lower snake case; metadata uses camel case. Provider events include providerId, resolvedVersion, and ordinal. Request events also include requestId. New values are additive, so clients must tolerate unknown response values. For field requirements and funnel semantics, see docs/verification-analytics-events.md.",
@@ -583,7 +674,7 @@ export const MCP_TOOLS = {
 						"events": {
 							"type": "array",
 							"minItems": 1,
-							"maxItems": 50,
+							"maxItems": 51,
 							"items": {
 								"type": "string",
 								"description": "Canonical Builder lifecycle event. Names use lower snake case; metadata uses camel case. Provider events include providerId, resolvedVersion, and ordinal. Request events also include requestId. New values are additive, so clients must tolerate unknown response values. For field requirements and funnel semantics, see docs/verification-analytics-events.md.",
@@ -654,7 +745,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"CreateProvider": {
-		description: "Create a provider\n\nCreate a new Reclaim provider. Use this only after `providers` returned nothing useful for the domain. The caller must be an active member of the target organization.\nCreates a new provider in the specified organization. `visibility` is coerced to `PRIVATE` at creation regardless of what's sent; the author may toggle to `PUBLIC` later via `PATCH /providers/{id}`. While `PRIVATE`, versions go live freely; once `PUBLIC`, non-admin versions need admin review. See `Provider.visibility`.\nThe server also seeds an initial `0.1.0` version on the `draft` branch in the same transaction so the provider is immediately editable. Its `initialUrl` defaults to `https://<domain>`; all other version fields fall back to their schema-declared defaults (a `structured` verificationType, empty requests, empty web settings). `Provider.latestVersion` stays `null` until the draft is promoted to the live channel.",
+		description: "Create a provider\n\nCreates a provider in an organization. Call providers first and only create when nothing existing covers the domain. Requires active membership of the target organization. A provider starts empty — add its recipe with create_provider_version.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -787,7 +878,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"CreateProviderVersion": {
-		description: "Create a new provider version\n\nCreates a new immutable semantic version of the provider. Provider\nauthoring clients must create another version for every content change;\nthey must not edit a previously created version in place. Use a patch\nbump by default, or use a major/minor bump or exact higher version when\nthe user directs it. The starting branch\ndepends on the provider's `visibility` and the caller's role:\n\n- `PRIVATE` provider (any caller): the live channel (no review).\n\n- `PUBLIC` provider, admin caller (Reclaim staff): the live channel\n  (no review).\n\n- `PUBLIC` provider, non-admin caller: `draft` (or `ai` if\n  authored by the AI assistant). Must pass review (see\n  `POST /providers/{id}/versions/{version}/review`) before\n  reaching the live channel.\n",
+		description: "Create a new provider version\n\nCreates a new immutable semantic version of a provider. Every recipe change needs its own version; existing versions are never edited in place. Defaults to a patch bump. Publish it with publish_provider_version, or submit it for review with submit_provider_version_for_review.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1326,6 +1417,144 @@ export const MCP_TOOLS = {
 									"type": "string",
 									"description": "JavaScript snippets injected into the page which runs before every page load. `window.Reclaim.` APIs are available to these scripts to request actions to the client like claim creation.",
 									"maxLength": 1000000
+								},
+								"browserRequestActions": {
+									"type": "array",
+									"description": "Portal-only authenticated browser actions available to `jsUserScripts` through `window.Reclaim.browserRequest`.",
+									"maxItems": 50,
+									"items": {
+										"type": "object",
+										"additionalProperties": false,
+										"description": "A portal-only, provider-declared HTTP action for `window.Reclaim.browserRequest`. The claimant page supplies only the action id and declared primitive inputs; the recipe controls the HTTPS origin, request template, and returned fields. Other Verification Clients currently ignore this field.",
+										"required": [
+											"id",
+											"origin",
+											"path",
+											"method"
+										],
+										"properties": {
+											"id": {
+												"type": "string",
+												"pattern": "^[A-Za-z][A-Za-z0-9_-]{0,99}$",
+												"minLength": 1,
+												"maxLength": 100
+											},
+											"origin": {
+												"type": "string",
+												"format": "uri",
+												"pattern": "^https://[^/?#]+$",
+												"maxLength": 2000
+											},
+											"path": {
+												"type": "string",
+												"description": "Origin-relative fallback path.",
+												"pattern": "^/(?:$|[^/\\\\][^\\\\]*)$",
+												"maxLength": 4000
+											},
+											"pathTemplate": {
+												"type": "string",
+												"description": "Optional origin-relative path/query template. Declared inputs use `{{name}}` and are URL-encoded.",
+												"pattern": "^/(?:$|[^/\\\\][^\\\\]*)$",
+												"maxLength": 4000
+											},
+											"method": {
+												"type": "string",
+												"enum": [
+													"GET",
+													"POST",
+													"PUT",
+													"PATCH",
+													"DELETE"
+												]
+											},
+											"transport": {
+												"type": "string",
+												"description": "`fetch` is the default. `navigate` supports GET only and performs a top-level navigation in the action's isolated browser page.",
+												"enum": [
+													"fetch",
+													"navigate"
+												]
+											},
+											"userAgent": {
+												"type": "string",
+												"description": "Browser User-Agent applied to the isolated action page before its first navigation. Use only when the target origin requires a specific browser identity.",
+												"minLength": 1,
+												"maxLength": 300,
+												"pattern": "^[^\\r\\n]+$"
+											},
+											"omitOriginHeader": {
+												"type": "boolean",
+												"description": "Remove Chromium's automatic Origin header from a fetch action. Unsupported for navigate actions."
+											},
+											"headers": {
+												"type": "object",
+												"maxProperties": 50,
+												"additionalProperties": {
+													"type": "string",
+													"maxLength": 8192
+												}
+											},
+											"headersTemplate": {
+												"type": "object",
+												"description": "Header values may interpolate declared `{{name}}` inputs.",
+												"maxProperties": 50,
+												"additionalProperties": {
+													"type": "string",
+													"maxLength": 8192
+												}
+											},
+											"bodyTemplate": {
+												"type": "string",
+												"description": "JSON template whose `{{name}}` inputs are inserted as JSON literals. The rendered body is limited again at execution time.",
+												"maxLength": 65536
+											},
+											"cookieValueHeader": {
+												"type": "object",
+												"additionalProperties": false,
+												"description": "Copies one same-origin, script-readable cookie into a request header. The cookie value stays inside the verification client's browser.",
+												"required": [
+													"name",
+													"cookieName"
+												],
+												"properties": {
+													"name": {
+														"type": "string",
+														"minLength": 1,
+														"maxLength": 256
+													},
+													"cookieName": {
+														"type": "string",
+														"minLength": 1,
+														"maxLength": 256
+													}
+												}
+											},
+											"includeBody": {
+												"type": "boolean",
+												"description": "Return the bounded raw response body."
+											},
+											"inputKeys": {
+												"type": "array",
+												"maxItems": 50,
+												"uniqueItems": true,
+												"items": {
+													"type": "string",
+													"pattern": "^[A-Za-z][A-Za-z0-9_]{0,99}$",
+													"maxLength": 100
+												}
+											},
+											"responseFields": {
+												"type": "array",
+												"maxItems": 50,
+												"uniqueItems": true,
+												"items": {
+													"type": "string",
+													"pattern": "^[A-Za-z][A-Za-z0-9_]{0,99}$",
+													"maxLength": 100
+												}
+											}
+										}
+									}
 								}
 							}
 						},
@@ -1351,7 +1580,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"CreateVerificationSession": {
-		description: "Create a verification session\n\nCreates an end-user verification session. Requires an OrgToken and a callback subscription; pass providers, context, and an optional registered verificationClientUrl. Billing refusal returns 402 or 429 with event billing_required and a terminal sessionId.",
+		description: "Create a verification session\n\nCreates an end-user verification session. Requires an OrgToken and a callback subscription; pass providers, context, and an optional registered verificationClientUrl (omitted: the Portal). Billing refusal returns 402 or 429 with event billing_required and a terminal sessionId.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1379,7 +1608,9 @@ export const MCP_TOOLS = {
 						"providers": {
 							"type": "array",
 							"minItems": 1,
-							"description": "Providers to verify, in run order. The Verification Client runs each sequentially in one browser session and submits one combined result; all are required.",
+							"maxItems": 20,
+							"uniqueItems": true,
+							"description": "Providers to verify, in run order. The Verification Client runs each sequentially in one browser session and submits one combined result; all are required. Provider version constraints are resolved only while this request is created; clients receive the exact immutable resolved versions and never resolve them again.",
 							"items": {
 								"type": "object",
 								"additionalProperties": false,
@@ -1403,11 +1634,11 @@ export const MCP_TOOLS = {
 						"context": {
 							"type": "object",
 							"additionalProperties": true,
-							"description": "Consumer context, shared by all providers. Validated against EACH resolved provider version's `requiredContext` JSON Schema (a 400 is returned on mismatch); extra fields are always allowed. Recipe requests reference these values as `{{context.<key>}}`. To support old DevTools recipes, Builder-mode Verification Clients also use a same-named scalar context value to seed a missing bare `{{key}}` when the recipe doesn't use `{{context.key}}`; an explicit parameter takes precedence. Echoed back (plus `reclaimSessionId`) in the result. Builder-owned `reclaimSessionId` and `attestationNonce` remain context-only."
+							"description": "Consumer context, shared by all providers. Validated against EACH resolved provider version's `requiredContext` JSON Schema (a 400 is returned on mismatch); extra fields are always allowed. Recipe requests resolve scalar values as `{{context.key}}`, then `{{context_key}}`, then `{{key}}`. A lower-priority alias is used only when the recipe doesn't use a higher-priority spelling; an explicit parameter takes precedence. Echoed back (plus `reclaimSessionId`) in the result. Builder-owned `reclaimSessionId` and `attestationNonce` remain context-only."
 						},
 						"verificationClientUrl": {
 							"type": "string",
-							"description": "Optional. Must exactly equal the base URL of a registered verification client (see the `verification_clients` registry / `/admin/verification-clients`). Omit to use the default (`builder`) client. The Builder resolves and stores the registered client UUID, then returns the ready-to-share `verificationUrl` with the session id and `api=2`. A URL that is not a registered client's base is rejected with 400. Consumers append any client-owned redirect parameters after receiving the URL; Builder does not manage them.",
+							"description": "Optional. Must exactly equal the base URL of a registered verification client (see the `verification_clients` registry / `/admin/verification-clients`). Omit to use the default (`portals`) client. The Builder resolves and stores the registered client UUID, then returns the ready-to-share `verificationUrl` with the session id and `api=2`. A URL that is not a registered client's base is rejected with 400. Consumers append any client-owned redirect parameters after receiving the URL; Builder does not manage them.",
 							"maxLength": 2000,
 							"pattern": "^https?://"
 						},
@@ -1425,6 +1656,103 @@ export const MCP_TOOLS = {
 						"preferAiAgent": {
 							"type": "boolean",
 							"description": "Legacy-only preference. Builder mode runs the structured recipe and does not enable AI or manual verification. Omit this field for Builder-mode sessions; dual-mode clients may continue to interpret it only on their legacy path."
+						},
+						"diagnostics": {
+							"type": "boolean",
+							"description": "Optional; omit or send false for a normal session. Opts this session into diagnostic mode. A diagnostic session records more event detail, including personal data such as the claimant's IP addresses (see ClaimantDetails.network). Builder appends `diag=1` to the returned `verificationUrl` for a diagnostic session and strips any `diag` value the Consumer's own `verificationClientUrl` carries, so this field — not the URL — is the only way to turn diagnostics on. Treat a diagnostic verification URL as sensitive, and don't hand it to a claimant by default."
+						},
+						"launchOptions": {
+							"type": "object",
+							"additionalProperties": false,
+							"description": "Where a Verification Client sends the claimant's browser at the end of a flow. Builder stores these on the session and returns them unchanged (see VerificationSession.launchOptions / BootstrapVerificationClient) — it never reads them itself, never redirects a claimant to them, and never executes them; only the Verification Client that renders the flow does. Vocabulary matches `reclaim-js-sdk`'s `VerificationRequest` and `reclaim-portal`'s `parseVerificationLaunch`: `redirectUrl`/`redirectUrlOptions` on success, `cancelRedirectUrl`/`cancelRedirectUrlOptions` on cancellation. `https:` only — `javascript:`, `data:`, and any other scheme are rejected with 400 at session creation.",
+							"properties": {
+								"redirectUrl": {
+									"type": "string",
+									"format": "uri",
+									"description": "Where to send the claimant after a successful verification.",
+									"maxLength": 2000,
+									"pattern": "^https://"
+								},
+								"redirectUrlOptions": {
+									"type": "object",
+									"additionalProperties": false,
+									"description": "How a Verification Client performs a launch-options redirect — a plain GET (default) or a form POST/GET carrying extra fields. Matches `reclaim-portal`'s `HttpRedirectionOptions`.",
+									"properties": {
+										"method": {
+											"type": "string",
+											"enum": [
+												"GET",
+												"POST"
+											]
+										},
+										"body": {
+											"type": "array",
+											"maxItems": 50,
+											"items": {
+												"type": "object",
+												"additionalProperties": false,
+												"required": [
+													"name",
+													"value"
+												],
+												"properties": {
+													"name": {
+														"type": "string",
+														"maxLength": 256
+													},
+													"value": {
+														"type": "string",
+														"maxLength": 2000
+													}
+												}
+											}
+										}
+									}
+								},
+								"cancelRedirectUrl": {
+									"type": "string",
+									"format": "uri",
+									"description": "Where to send the claimant after a cancelled verification.",
+									"maxLength": 2000,
+									"pattern": "^https://"
+								},
+								"cancelRedirectUrlOptions": {
+									"type": "object",
+									"additionalProperties": false,
+									"description": "How a Verification Client performs a launch-options redirect — a plain GET (default) or a form POST/GET carrying extra fields. Matches `reclaim-portal`'s `HttpRedirectionOptions`.",
+									"properties": {
+										"method": {
+											"type": "string",
+											"enum": [
+												"GET",
+												"POST"
+											]
+										},
+										"body": {
+											"type": "array",
+											"maxItems": 50,
+											"items": {
+												"type": "object",
+												"additionalProperties": false,
+												"required": [
+													"name",
+													"value"
+												],
+												"properties": {
+													"name": {
+														"type": "string",
+														"maxLength": 256
+													},
+													"value": {
+														"type": "string",
+														"maxLength": 2000
+													}
+												}
+											}
+										}
+									}
+								}
+							}
 						}
 					}
 				}
@@ -1438,7 +1766,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"DecideProviderVersionReview": {
-		description: "Record a decision on a provider version review\n\nAdmin only (Reclaim staff). Approves or rejects a provider version currently on the `in_review` branch. `APPROVED` clears the branch tag and promotes the version to the live channel; `REJECTED` moves it to the `rejected` branch where the author can address feedback and resubmit. A rejected version stays rejected — the author either fixes and resubmits, or abandons it.\nUntil RBAC is designed, \"admin\" is detected via the user's email domain (`@reclaimprotocol.org`). Non-admin callers receive a 403.",
+		description: "Record a decision on a provider version review\n\nApproves or rejects a provider version awaiting review. Admin only. Approval promotes the version to the live channel; rejection moves it to the rejected branch with a reason. Use admin_reviews to find versions waiting on a decision.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1656,7 +1984,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"DiscoverDataPoints": {
-		description: "List the verifiable data points on a website\n\nThe data points existing providers can prove on a website — the menu to pick from before `GET /discover/resolve`. Optionally filter by `q`.",
+		description: "List the verifiable data points on a website\n\nThe data points existing providers can prove on a website — the menu to pick from before discover_resolve. Optionally filter by `q`.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1697,7 +2025,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"DiscoverResolve": {
-		description: "Resolve a website + data points to providers\n\nProvider resolution: given a website and the data points the user wants their users to prove, return the smallest set of existing providers whose data points COVER the selection (greedy combine), the `requiredContext` inputs the consumer must supply, and any `uncovered` points no provider exposes yet (`needsCreation` is true then — author a provider with the agent tools). When the chosen providers can be fused into one (same start page, no clashing page scripts) `merge.mergeable` is true.\n\nAgent flow: pick a website (`GET /discover/data-points` lists what's verifiable there), confirm the data points with the user, call this to get the `providers` + `requiredContext`, collect those context values from the user, then `POST /verifications/sessions` with `providers` (pass every id) and `context` to mint a verification.",
+		description: "Resolve a website + data points to providers\n\nResolves a website plus the data points to prove into the smallest set of existing providers that covers them, with the context inputs each needs. Use after discover_data_points, and before deciding whether to build anything new.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1754,7 +2082,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"GetMe": {
-		description: "Get the authenticated user",
+		description: "Get the authenticated user\n\nGets the authenticated caller's own profile: id, email, and name. Requires a signed-in user session, not an OrgToken. Use it to confirm who the current credentials belong to.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1782,7 +2110,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"GetOrg": {
-		description: "Get an organization",
+		description: "Get an organization\n\nGets one organization: name, kind, status, and members. Requires membership or staff access. Use list_orgs when the id is unknown.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -1805,14 +2133,84 @@ export const MCP_TOOLS = {
 						"tab": {
 							"type": "string",
 							"enum": [
+								"overview",
 								"connect",
+								"integrate",
 								"providers",
 								"members",
 								"themes",
+								"settings",
 								"sessions",
 								"billing"
 							]
 						},
+						"track": {
+							"type": "string",
+							"enum": [
+								"agent",
+								"sdk",
+								"http"
+							]
+						},
+						"agent": {
+							"type": "string",
+							"enum": [
+								"claude",
+								"cursor",
+								"opencode",
+								"codex",
+								"others"
+							]
+						},
+						"providerId": {
+							"type": "string",
+							"format": "uuid"
+						},
+						"client": {
+							"type": "string",
+							"enum": [
+								"auto",
+								"portals",
+								"verifier-app",
+								"reclaim-browser-extension",
+								"builder",
+								"inapp-sdk"
+							]
+						},
+						"from": {
+							"type": "string",
+							"maxLength": 40,
+							"pattern": "^\\d{4}-\\d{2}-\\d{2}(T\\d{2}:\\d{2}(:\\d{2}(\\.\\d+)?)?(Z|[+-]\\d{2}:\\d{2})?)?$",
+							"description": "One end of a date window: either a calendar date (`2026-09-01`, read as UTC midnight) or a full ISO date-time. The date-only form is what a native `<input type=\"date\">` submits, so `format: date-time` alone would reject every filter the dashboard's own form sends."
+						},
+						"to": {
+							"type": "string",
+							"maxLength": 40,
+							"pattern": "^\\d{4}-\\d{2}-\\d{2}(T\\d{2}:\\d{2}(:\\d{2}(\\.\\d+)?)?(Z|[+-]\\d{2}:\\d{2})?)?$",
+							"description": "One end of a date window: either a calendar date (`2026-09-01`, read as UTC midnight) or a full ISO date-time. The date-only form is what a native `<input type=\"date\">` submits, so `format: date-time` alone would reject every filter the dashboard's own form sends."
+						},
+						"verificationClientId": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 64,
+							"pattern": "^[0-9a-fA-F-]+$",
+							"description": "A verification client id used as a filter. Hyphens are ignored."
+						},
+						"q": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 200
+						},
+						"visibility": {
+							"type": "string",
+							"enum": [
+								"PUBLIC",
+								"PRIVATE"
+							]
+						},
+						"newProvider": {
+							"type": "boolean"
+						},
 						"billing": {
 							"type": "string",
 							"enum": [
@@ -1905,8 +2303,65 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"GetOrgVerificationAnalytics": {
+		description: "Verification outcomes by day, device, and country\n\nShow an organization's verification counts and outcomes by UTC day, claimant device category, and claimant country. Missing telemetry appears in unknown buckets; filter with from and to.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+						"from": {
+							"type": "string",
+							"maxLength": 40,
+							"pattern": "^\\d{4}-\\d{2}-\\d{2}(T\\d{2}:\\d{2}(:\\d{2}(\\.\\d+)?)?(Z|[+-]\\d{2}:\\d{2})?)?$",
+							"description": "One end of a date window: either a calendar date (`2026-09-01`, read as UTC midnight) or a full ISO date-time. The date-only form is what a native `<input type=\"date\">` submits, so `format: date-time` alone would reject every filter the dashboard's own form sends."
+						},
+						"to": {
+							"type": "string",
+							"maxLength": 40,
+							"pattern": "^\\d{4}-\\d{2}-\\d{2}(T\\d{2}:\\d{2}(:\\d{2}(\\.\\d+)?)?(Z|[+-]\\d{2}:\\d{2})?)?$",
+							"description": "One end of a date window: either a calendar date (`2026-09-01`, read as UTC midnight) or a full ISO date-time. The date-only form is what a native `<input type=\"date\">` submits, so `format: date-time` alone would reject every filter the dashboard's own form sends."
+						},
+						"providerId": {
+							"type": "string",
+							"format": "uuid"
+						},
+						"verificationClientId": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 64,
+							"pattern": "^[0-9a-fA-F-]+$",
+							"description": "A verification client id used as a filter. Hyphens are ignored."
+						}
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"GetProvider": {
-		description: "Get a provider\n\nFetch a single Reclaim provider by id. Returns every field needed\nto integrate it into a flow: domain, the live version (initialUrl + requests),\nand the data points it can prove. Use `providers` first if you only\nhave a query string.\n\nReturns the provider record.\n\n**Canonical URL.** For SEO and stable sharing, the canonical\nHTML URL for a provider is `/providers/{providerId}/{slug}`\n(see `GetProviderBySlug`). HTML callers (`Accept: text/html`)\nthat hit this route — which omits the slug — receive a `301`\nredirect to the slugged URL. JSON callers\n(`Accept: application/json`) receive the body directly without\nredirect; the slug is on the response.\n",
+		description: "Get a provider\n\nGets one provider by id: its domain, live version (initialUrl and requests), and the data points it can prove. Use providers first when only a domain or search term is known.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -2090,7 +2545,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"GetVerificationSession": {
-		description: "Get a verification session\n\nGets one verification session. Use it to inspect status, resolved providers, context, Verification Client identity, and expiry. Present the owning organization token or the session's x-reclaim-vc-id.",
+		description: "Get a verification session\n\nGets one verification session. Use it to inspect status, resolved providers, context, Verification Client identity, and expiry. Requires the owning organization token.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -2114,15 +2569,6 @@ export const MCP_TOOLS = {
 
 					}
 				},
-				"headers": {
-					"type": "object",
-					"properties": {
-						"x-reclaim-vc-id": {
-							"type": "string",
-							"description": "UUID of the registered Verification Client selected when the session was created. The Builder binds it to the session's immutable verificationClientId. This header identifies the client; it is not a general bearer credential. Client-reported metadata remains untrusted, and Consumers must verify every signed result with verifyResultFull."
-						}
-					}
-				},
 				"body": {
 					"type": "object"
 				}
@@ -2305,7 +2751,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"ListOrgs": {
-		description: "List organizations the caller belongs to",
+		description: "List organizations the caller belongs to\n\nLists the organizations the caller belongs to, personal and shared. Use it first to find an organization id — most other tools take one.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -2318,9 +2764,17 @@ export const MCP_TOOLS = {
 				"query": {
 					"type": "object",
 					"properties": {
+						"q": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 200
+						},
 						"cursor": {
 							"type": "string",
 							"maxLength": 500
+						},
+						"newOrg": {
+							"type": "boolean"
 						}
 					}
 				},
@@ -2370,8 +2824,56 @@ export const MCP_TOOLS = {
 			"additionalProperties": false
 		}),
 	},
+	"ListOrgUsedProviders": {
+		description: "List the providers an organization uses\n\nLists the providers that have verification sessions in an organization, busiest first, with session count and last use. Use it to find a provider id to filter sessions or analytics.",
+		inputSchema: toZod({
+			"type": "object",
+			"properties": {
+				"params": {
+					"type": "object",
+					"properties": {
+						"orgId": {
+							"type": "string",
+							"format": "uuid"
+						}
+					},
+					"required": [
+						"orgId"
+					],
+					"additionalProperties": false
+				},
+				"query": {
+					"type": "object",
+					"properties": {
+						"q": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 200
+						},
+						"cursor": {
+							"type": "string",
+							"maxLength": 500
+						},
+						"limit": {
+							"type": "integer",
+							"minimum": 1,
+							"maximum": 1000
+						}
+					}
+				},
+				"body": {
+					"type": "object"
+				}
+			},
+			"required": [
+				"params",
+				"query"
+			],
+			"additionalProperties": false
+		}),
+	},
 	"ListOrgVerificationSessions": {
-		description: "List an organization's verification sessions\n\nReturns verification sessions created under the organization, newest first. Optionally filter by `sessionId` (prefix match, at least 5 characters), `providerId`, `status`, `resolvedVersion`, `claimantClientId`, and a `createdAfter`/`createdBefore` time range. Caller must be an active member of the org. Opaque cursor pagination.\n\nNote: `status` filters on the stored column. A session that has passed `expiresAt` but has not yet been swept is reported as `expired` in its body while still stored as `pending`, so `status=expired` may not match such sessions until the sweep runs.",
+		description: "List an organization's verification sessions\n\nLists an organization's verification sessions, newest first, filterable by session id prefix, provider, status, resolved version, claimant, and a created-at range. Use it to find a session id; use get_verification_session for one session in full.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -2399,6 +2901,13 @@ export const MCP_TOOLS = {
 							"type": "string",
 							"maxLength": 100
 						},
+						"verificationClientId": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 64,
+							"pattern": "^[0-9a-fA-F-]+$",
+							"description": "A verification client id used as a filter. Hyphens are ignored."
+						},
 						"status": {
 							"type": "string",
 							"description": "Status of a verification session, derived from its events. New values\nmay be added over time; clients MUST tolerate unknown values in\nresponses.\n\n- `pending`: Created, not yet finished; completable until `expiresAt`.\n\n- `success`: Terminal — `verification_success` recorded.\n\n- `rejected`: Terminal — `verification_rejected` recorded.\n\n- `error`: Terminal — `verification_error` recorded.\n\n- `cancelled`: Terminal — `verification_cancelled` recorded.\n\n- `expired`: `expiresAt` passed before a terminal event; the end-user\n  can no longer complete it.",
@@ -2483,7 +2992,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"ListVerificationDeliveries": {
-		description: "Get the callback delivery status for a session\n\nLists callback delivery attempts for a session. Requires an OrgToken or the session-bound x-reclaim-vc-id. Use after terminal status to diagnose pending, failed, or dead-lettered callbacks; retry failures with retry_verification_callback.",
+		description: "Get the callback delivery status for a session\n\nLists callback delivery attempts for a session. Requires the owning organization's token. Use after terminal status to diagnose pending, failed, or dead-lettered callbacks; retry failures with retry_verification_callback.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -2507,15 +3016,6 @@ export const MCP_TOOLS = {
 
 					}
 				},
-				"headers": {
-					"type": "object",
-					"properties": {
-						"x-reclaim-vc-id": {
-							"type": "string",
-							"description": "UUID of the registered Verification Client selected when the session was created. The Builder binds it to the session's immutable verificationClientId. This header identifies the client; it is not a general bearer credential. Client-reported metadata remains untrusted, and Consumers must verify every signed result with verifyResultFull."
-						}
-					}
-				},
 				"body": {
 					"type": "object"
 				}
@@ -2528,7 +3028,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"ListVerificationEvents": {
-		description: "Get the event log for a session\n\nLists append-only lifecycle events for a session. Requires an OrgToken or the session-bound x-reclaim-vc-id. Use after get_verification_session to find the first missing or failed milestone; inspect eventData for failure details.",
+		description: "Get the event log for a session\n\nLists append-only lifecycle events for a session. Requires the owning organization's token. Use after get_verification_session to find the first missing or failed milestone; inspect eventData for failure details.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -2552,15 +3052,6 @@ export const MCP_TOOLS = {
 
 					}
 				},
-				"headers": {
-					"type": "object",
-					"properties": {
-						"x-reclaim-vc-id": {
-							"type": "string",
-							"description": "UUID of the registered Verification Client selected when the session was created. The Builder binds it to the session's immutable verificationClientId. This header identifies the client; it is not a general bearer credential. Client-reported metadata remains untrusted, and Consumers must verify every signed result with verifyResultFull."
-						}
-					}
-				},
 				"body": {
 					"type": "object"
 				}
@@ -2618,7 +3109,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"Providers": {
-		description: "Search providers\n\nSearch Reclaim providers by domain or data point. A provider is the recipe an end-user follows to prove something about themselves, such as \"I have N followers on Twitter\".\nCall this BEFORE `create_provider` — most popular domains already have a public provider you can reuse, and creating another one just stacks duplicates.\nReturns a paginated list of the providers the caller can see: public providers to everyone, private providers only to members of the owning organization.",
+		description: "Search providers\n\nSearches existing Reclaim providers by domain or data point. A provider is the recipe an end-user follows to prove something about themselves, such as a follower count or an order history. Call this before create_provider — most popular domains already have one.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -2664,7 +3155,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"PublishProviderVersion": {
-		description: "Publish a draft version directly (PRIVATE providers only)\n\nPublishes a provider version on the `draft` branch directly to the live channel (trunk). Only allowed for PRIVATE providers — PUBLIC providers must use the review flow (`POST .../review` → admin decision). On success the version's branch transitions from `draft` to `null` (trunk/live).",
+		description: "Publish a draft version directly (PRIVATE providers only)\n\nPublishes a draft version straight to live. PRIVATE providers only — they need no review. For a PUBLIC provider use submit_provider_version_for_review instead.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -2715,7 +3206,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"RequestPublicListing": {
-		description: "Request public listing for a PRIVATE provider\n\nSubmits a PRIVATE provider's latest trunk version for admin review. When approved, the provider's visibility becomes PUBLIC and all future versions require review before going live. Fails if the provider is already PUBLIC or has no live versions.",
+		description: "Request public listing for a PRIVATE provider\n\nAsks Reclaim staff to list a PRIVATE provider publicly. This changes the PROVIDER's visibility, not one version: once approved, every future version needs review. To ship a single version, use publish_provider_version or submit_provider_version_for_review.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -2836,7 +3327,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"SetOrgKeypair": {
-		description: "Set (or rotate) the organization's encryption keypair\n\nUpserts the organization's single Ethereum (secp256k1) encryption keypair. The body carries the org's **eth public key** — as an uncompressed hex string (`0x04`+128 hex) or a secp256k1 public JWK (`{kty:'EC', crv:'secp256k1', x, y}`) — and `canEncryptResult`. The matching private key never leaves the consumer. Setting overwrites the single row (and creates it for a keyless org). When `canEncryptResult` is true, terminal results are delivered as an ECIES ciphertext encrypted to this key; otherwise plaintext. Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.",
+		description: "Set (or rotate) the organization's encryption keypair\n\nSets or rotates the organization's single secp256k1 encryption keypair from its public key, which turns on encrypted result delivery. The private key stays with the caller and is never sent. Rotating makes results encrypted to the previous key undecryptable.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -2953,7 +3444,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"SubmitProviderVersionForReview": {
-		description: "Submit a provider version for review\n\nSubmits a provider version (currently on the `draft` or `rejected` branch) for admin review. On success the version's branch transitions to `in_review`. Callable by any authenticated member of the provider's owning org. Meaningful only on `PUBLIC` providers — on `PRIVATE` providers new versions go to the live channel directly and never need review.",
+		description: "Submit a provider version for review\n\nSubmits a draft or rejected version for admin review, the way a PUBLIC provider's versions go live. On a PRIVATE provider use publish_provider_version instead — those need no review.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -3004,7 +3495,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"TransferProvider": {
-		description: "Transfer a provider to a different workspace\n\nAdmin-only. Moves the provider's `orgId` to the supplied workspace; preserves slug, versions, members. SQL function `builder.transfer_provider` enforces the admin gate and target existence atomically.",
+		description: "Transfer a provider to a different workspace\n\nAdmin-only. Moves a provider to a different organization, preserving its slug, versions, and members. Fails if the target organization does not exist.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -3050,7 +3541,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"UpdateOrg": {
-		description: "Update an organization\n\nOwner only.",
+		description: "Update an organization\n\nUpdates an organization's name, icon, or status. Owner only, and a partial update — pass only the fields to change. Archiving an organization is a status change, not a delete.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {
@@ -3108,7 +3599,7 @@ export const MCP_TOOLS = {
 		}),
 	},
 	"UpdateProvider": {
-		description: "Update a provider\n\nUpdate a Reclaim provider's metadata. Partial PATCH — pass only fields you want to change. The caller must be an active member of the owning organization. To change the provider's recipe (initialUrl, requests, …) cut a new version via the dashboard. Use `seo` to control how the provider appears in search results and social shares; omit a subfield to keep the server default.\nCaller must be a member of the provider's owning organization. `id`, `orgId`, and `slug` are immutable. Supports optimistic concurrency via `If-Match`.",
+		description: "Update a provider\n\nUpdates a provider's metadata, such as title, description, or tags. Partial update — pass only the fields to change. Requires active membership. To change the recipe (initialUrl or requests), cut a new version with create_provider_version instead.",
 		inputSchema: toZod({
 			"type": "object",
 			"properties": {