shabaaspay-mcp-server 1.0.4 → 1.0.6

package/dist/api/client.d.ts

@@ -30,6 +30,11 @@ export declare class ShabaasApiClient {
         token: string;
         fetchedAt: string;
     }>;
+    getTodaysEarnings(options?: RequestAuthOptions): Promise<ApiResponse>;
+    listActivePaymentAgreements(params?: {
+        page?: number;
+        status?: string;
+    }, options?: RequestAuthOptions): Promise<ApiResponse>;
     getPaymentAgreement(id: string, options?: RequestAuthOptions): Promise<ApiResponse>;
     createPaymentAgreement(data: {
         name: string;
@@ -59,6 +64,38 @@ export declare class ShabaasApiClient {
         amount: string | number;
         description?: string;
     }, options?: RequestAuthOptions): Promise<ApiResponse>;
+    initiateDirectDebitPublic(data: {
+        amount: string | number;
+        name: string;
+        consent_received: boolean | string;
+        bsb: string | number;
+        account_number: string | number;
+        phone_number?: string;
+        notes?: string;
+        destination?: unknown;
+    }, options?: RequestAuthOptions): Promise<ApiResponse>;
+    updateBilateralAgreement(data: {
+        id?: string;
+        phone_number?: string;
+        maximum_amount: string | number;
+        frequency: string;
+        agreement_type?: string;
+        number_of_transactions_permitted: number;
+    }, options?: RequestAuthOptions): Promise<ApiResponse>;
+    generateInvoice(data: {
+        phone_number?: string;
+        invoice: {
+            amount: string | number;
+            description?: string;
+            bill_to?: string;
+            address?: string;
+            receiver_abn?: string;
+            ref_no?: string;
+            gst_included?: boolean;
+            gst_does_not_apply?: boolean;
+            email?: string;
+        };
+    }, options?: RequestAuthOptions): Promise<ApiResponse>;
     getPaymentLink(data: {
         amount: string;
         reference?: string;

package/dist/api/client.js

@@ -119,6 +119,26 @@ class ShabaasApiClient {
         const token = await this.getTokenForRequest(options?.requestUuid);
         return { token, fetchedAt: new Date().toISOString() };
     }
+    async getTodaysEarnings(options) {
+        return await this.withAuthRetry(async (token) => {
+            const response = await this.client.get('/api/public/todays_earnings', {
+                headers: { Authorization: token },
+            });
+            return response.data;
+        }, options?.requestUuid);
+    }
+    async listActivePaymentAgreements(params = {}, options) {
+        return await this.withAuthRetry(async (token) => {
+            const query = new URLSearchParams();
+            if (params.page != null)
+                query.set('page', String(params.page));
+            if (params.status != null)
+                query.set('status', params.status);
+            const qs = query.toString();
+            const response = await this.client.get(`/api/public/payment_agreements${qs ? `?${qs}` : ''}`, { headers: { Authorization: token } });
+            return response.data;
+        }, options?.requestUuid);
+    }
     async getPaymentAgreement(id, options) {
         return await this.withAuthRetry(async (token) => {
             const response = await this.client.get(`/api/public/payment_agreement?id=${encodeURIComponent(id)}`, { headers: { Authorization: token } });
@@ -213,6 +233,55 @@ class ShabaasApiClient {
             return response.data;
         }, options?.requestUuid);
     }
+    async initiateDirectDebitPublic(data, options) {
+        return await this.withAuthRetry(async (token) => {
+            const amount = normalizeAmount(data.amount);
+            const response = await this.client.post('/api/public/payment_initiation/direct_debit', {
+                direct_debit: {
+                    name: data.name,
+                    amount,
+                    consent_received: data.consent_received,
+                    bsb: data.bsb,
+                    account_number: data.account_number,
+                    phone_number: data.phone_number,
+                    notes: data.notes,
+                },
+                destination: data.destination,
+            }, {
+                headers: {
+                    Authorization: token,
+                },
+            });
+            return response.data;
+        }, options?.requestUuid);
+    }
+    async updateBilateralAgreement(data, options) {
+        return await this.withAuthRetry(async (token) => {
+            const response = await this.client.patch('/api/public/payment_agreement/bilateral', {
+                payment_agreement: {
+                    id: data.id,
+                    phone_number: data.phone_number,
+                    maximum_amount: data.maximum_amount,
+                    frequency: data.frequency,
+                    agreement_type: data.agreement_type,
+                    number_of_transactions_permitted: data.number_of_transactions_permitted,
+                },
+            }, { headers: { Authorization: token } });
+            return response.data;
+        }, options?.requestUuid);
+    }
+    async generateInvoice(data, options) {
+        const apiKey = (options?.requestUuid ?? '').trim();
+        if (!apiKey) {
+            throw new Error('API key is required for generate_invoice.');
+        }
+        const response = await this.client.post('/api/public/generate_invoice', {
+            api_key: apiKey,
+            phone_number: data.phone_number,
+            invoice: data.invoice,
+        });
+        return response.data;
+    }
     async getPaymentLink(data, options) {
         return await this.withAuthRetry(async (token) => {
             const response = await this.client.post('/api/get_url', data, {

package/dist/mcp-handler/discovery.js

@@ -274,6 +274,121 @@ async function listTools(env) {
                 ],
             },
         },
+        {
+            name: 'initiate_direct_debit',
+            description: 'Initiate a direct debit payment with account details and consent.',
+            ...sharedExecution,
+            openapi_operation: { method: 'post', path: '/api/public/payment_initiation/direct_debit' },
+            output_openapi_schema_ref: '#/components/schemas/SuccessPaymentInitiationResponse',
+            required_arguments: ['name', 'amount', 'consent_received', 'bsb', 'account_number'],
+            optional_arguments: ['phone_number', 'notes', 'destination', 'include_raw'],
+            argument_hints: {
+                consent_received: 'Must be true / "true".',
+            },
+            argument_schema: {
+                name: { type: 'string' },
+                amount: { oneOf: [{ type: 'number', exclusiveMinimum: 0 }, { type: 'string', pattern: '^\\d+(\\.\\d{1,2})?$' }] },
+                consent_received: { oneOf: [{ type: 'boolean' }, { type: 'string', enum: ['true', 'false'] }] },
+                bsb: { oneOf: [{ type: 'string' }, { type: 'number' }] },
+                account_number: { oneOf: [{ type: 'string' }, { type: 'number' }] },
+            },
+            example: {
+                tool: 'initiate_direct_debit',
+                arguments: { name: 'John Citizen', amount: '10.00', consent_received: true, bsb: '062000', account_number: '12345678' },
+            },
+            decision_guidance: {
+                when_to_use: 'Use to create a direct debit payment initiation from account details.',
+                preconditions: ['name, amount, consent_received, bsb, account_number'],
+                retryable_errors: ['AUTH_MISSING_OR_INVALID'],
+                non_retryable_errors: ['INVALID_REQUEST', 'BUSINESS_RULE_FAILURE'],
+                next_best_tool_on_failure: 'get_payment_initiation',
+            },
+            idempotency_notes: 'Creates a new payment initiation and is non-idempotent without caller deduplication.',
+            error_contract: [
+                { status: 400, code: 'INVALID_REQUEST', when: 'Malformed direct_debit payload or missing required fields' },
+                { status: 401, code: 'AUTH_MISSING_OR_INVALID', when: 'Session/API key missing or invalid' },
+                { status: 422, code: 'BUSINESS_RULE_FAILURE', when: 'Consent/amount/cooldown or provider validation failed' },
+            ],
+        },
+        {
+            name: 'update_bilateral_agreement',
+            description: 'Update bilateral parameters for a payment agreement.',
+            ...sharedExecution,
+            openapi_operation: { method: 'patch', path: '/api/public/payment_agreement/bilateral' },
+            output_openapi_schema_ref: '#/components/schemas/SuccessPaymentAgreementResponse',
+            required_arguments: ['maximum_amount', 'frequency', 'number_of_transactions_permitted'],
+            optional_arguments: ['id', 'phone_number', 'agreement_type', 'include_raw'],
+            argument_hints: {
+                frequency: 'Use supported stored codes like ADHO, DAIL, FRTN, INDA, MIAN, MNTH, QURT, WEEK, YEAR.',
+            },
+            argument_schema: {
+                id: { type: 'string' },
+                phone_number: { type: 'string' },
+                maximum_amount: { oneOf: [{ type: 'string' }, { type: 'number' }] },
+                frequency: { type: 'string' },
+                number_of_transactions_permitted: { type: 'integer', minimum: 1 },
+            },
+            example: {
+                tool: 'update_bilateral_agreement',
+                arguments: { id: '2882PA20251227045450257', maximum_amount: '100.00', frequency: 'MNTH', number_of_transactions_permitted: 2 },
+            },
+            decision_guidance: {
+                when_to_use: 'Use to amend bilateral parameters on an existing payment agreement.',
+                preconditions: ['id or phone_number, maximum_amount, frequency, number_of_transactions_permitted'],
+                retryable_errors: ['AUTH_MISSING_OR_INVALID'],
+                non_retryable_errors: ['RESOURCE_NOT_FOUND', 'VALIDATION_OR_BUSINESS_RULE'],
+                next_best_tool_on_failure: 'get_payment_agreement',
+            },
+            idempotency_notes: 'Updates agreement settings and is non-idempotent under concurrent updates.',
+            error_contract: [
+                { status: 400, code: 'INVALID_REQUEST', when: 'Malformed bilateral amend payload' },
+                { status: 401, code: 'AUTH_MISSING_OR_INVALID', when: 'Session/API key missing or invalid' },
+                { status: 404, code: 'RESOURCE_NOT_FOUND', when: 'Payment agreement not found' },
+                { status: 422, code: 'VALIDATION_OR_BUSINESS_RULE', when: 'Amount/rule validation failed' },
+            ],
+        },
+        {
+            name: 'generate_invoice',
+            description: 'Generate checkout URL for invoice flow.',
+            ...sharedExecution,
+            openapi_operation: { method: 'post', path: '/api/public/generate_invoice' },
+            output_openapi_schema_ref: 'inline: { message, data: { checkout_url } }',
+            required_arguments: ['invoice'],
+            optional_arguments: [
+                'phone_number',
+                'include_raw',
+                'invoice.description',
+                'invoice.bill_to',
+                'invoice.address',
+                'invoice.receiver_abn',
+                'invoice.ref_no',
+                'invoice.gst_included',
+                'invoice.gst_does_not_apply',
+                'invoice.email',
+            ],
+            argument_hints: {
+                'invoice.amount': 'Invoice amount (AUD); max 1000',
+            },
+            example: {
+                tool: 'generate_invoice',
+                arguments: {
+                    invoice: { amount: '50.00', gst_included: true },
+                },
+            },
+            decision_guidance: {
+                when_to_use: 'Use to generate invoice checkout URL for external collection flow.',
+                preconditions: ['invoice payload'],
+                retryable_errors: ['AUTH_MISSING_OR_INVALID'],
+                non_retryable_errors: ['INVALID_REQUEST', 'VALIDATION_OR_BUSINESS_RULE'],
+                next_best_tool_on_failure: null,
+            },
+            idempotency_notes: 'Creates a new invoice checkout URL/session per call; treat as non-idempotent.',
+            error_contract: [
+                { status: 400, code: 'INVALID_REQUEST', when: 'Invalid invoice payload shape' },
+                { status: 401, code: 'AUTH_MISSING_OR_INVALID', when: 'Session/API key missing or invalid' },
+                { status: 422, code: 'VALIDATION_OR_BUSINESS_RULE', when: 'Invoice validation/business rule failure' },
+            ],
+        },
     ];
     if (!prod) {
         toolsList.push({

package/dist/mcp-handler/mcp.js

@@ -47,26 +47,51 @@ async function runWithMcpContextLock(fn) {
  */
 function buildAllowedToolsList(policy, env) {
     const allTools = [
+        {
+            name: 'list_active_payment_agreements',
+            description: 'List the merchant\'s active PayTo payment agreements. Use for requests like "list my active agreements".',
+            inputSchema: httpMcpToolSchema(index_js_2.ListActivePaymentAgreementsInputSchema),
+        },
+        {
+            name: 'get_todays_earnings',
+            description: 'Today\'s settled payment cash summary (AEST) for the merchant and branches. Use for "how much cash came in today?".',
+            inputSchema: httpMcpToolSchema(index_js_2.GetTodaysEarningsInputSchema),
+        },
         {
             name: 'get_payment_agreement',
-            description: `Retrieve payment agreement details with AI insights.${schema_helpers_js_1.HTTP_MCP_SESSION_AUTH_HINT}`,
+            description: 'Retrieve payment agreement details with AI insights.',
             inputSchema: httpMcpToolSchema(index_js_2.GetPaymentAgreementInputSchema),
         },
         {
             name: 'create_payment_agreement',
-            description: `Create a new payment agreement.${schema_helpers_js_1.HTTP_MCP_SESSION_AUTH_HINT}`,
+            description: 'Create a new payment agreement.',
             inputSchema: httpMcpToolSchema(index_js_2.CreatePaymentAgreementInputSchema),
         },
         {
             name: 'initiate_payment',
-            description: `Initiate a payment against an agreement.${schema_helpers_js_1.HTTP_MCP_SESSION_AUTH_HINT}`,
+            description: 'Initiate a payment against an agreement.',
             inputSchema: httpMcpToolSchema(index_js_2.InitiatePaymentInputSchema),
         },
         {
             name: 'get_payment_initiation',
-            description: `Retrieve payment initiation by ID.${schema_helpers_js_1.HTTP_MCP_SESSION_AUTH_HINT}`,
+            description: 'Retrieve payment initiation by ID.',
             inputSchema: httpMcpToolSchema(index_js_2.GetPaymentInitiationInputSchema),
         },
+        {
+            name: 'initiate_direct_debit',
+            description: 'Initiate direct debit using account details and consent.',
+            inputSchema: httpMcpToolSchema(index_js_2.InitiateDirectDebitInputSchema),
+        },
+        {
+            name: 'update_bilateral_agreement',
+            description: 'Update bilateral configuration of a payment agreement.',
+            inputSchema: httpMcpToolSchema(index_js_2.UpdateBilateralAgreementInputSchema),
+        },
+        {
+            name: 'generate_invoice',
+            description: 'Generate invoice checkout URL for external invoice flow.',
+            inputSchema: httpMcpToolSchema(index_js_2.GenerateInvoiceInputSchema),
+        },
         ...(env.SHABAAS_ENVIRONMENT === 'production'
             ? []
             : [{

package/dist/mcp-handler/schema-helpers.d.ts

@@ -3,6 +3,4 @@
  * Remote HTTP clients authenticate via the connection (OAuth / Authorization header);
  * omitting `authorization` from published inputSchema avoids agents prompting users for keys.
  */
-/** Appended to tool descriptions for streamable HTTP ListTools so agents do not prompt for API keys. */
-export declare const HTTP_MCP_SESSION_AUTH_HINT = " Remote MCP (HTTP): session is authenticated via OAuth or Authorization header\u2014do not ask the user for an API key.";
 export declare function stripAuthorizationFieldFromJsonSchema(schema: unknown): unknown;

package/dist/mcp-handler/schema-helpers.js

@@ -5,10 +5,7 @@
  * omitting `authorization` from published inputSchema avoids agents prompting users for keys.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.HTTP_MCP_SESSION_AUTH_HINT = void 0;
 exports.stripAuthorizationFieldFromJsonSchema = stripAuthorizationFieldFromJsonSchema;
-/** Appended to tool descriptions for streamable HTTP ListTools so agents do not prompt for API keys. */
-exports.HTTP_MCP_SESSION_AUTH_HINT = ' Remote MCP (HTTP): session is authenticated via OAuth or Authorization header—do not ask the user for an API key.';
 function stripAuthorizationFieldFromJsonSchema(schema) {
     if (!schema || typeof schema !== 'object')
         return schema;

package/dist/mcp-handler/server-card.js

@@ -30,9 +30,41 @@ function toStrictObjectSchema(schema) {
 }
 function buildServerCard(env) {
     const tools = [
+        {
+            name: 'list_active_payment_agreements',
+            description: 'List the merchant\'s active PayTo payment agreements. Use when the user asks to list or find their active agreements.',
+            inputSchema: toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.ListActivePaymentAgreementsInputSchema))),
+            metadata: {
+                schemaVersion: '2026-04-15',
+                requiredArguments: [],
+                optionalArguments: ['page', 'status', 'include_raw'],
+                openapiOperation: { method: 'get', path: '/api/public/payment_agreements' },
+                outputSchemaRef: 'inline: { payment_agreements: PaymentAgreement[], count, status_filter }',
+                errorContract: [
+                    { status: 401, code: 'AUTH_MISSING_OR_INVALID', when: 'Session/API key missing or invalid' },
+                ],
+            },
+            annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
+        },
+        {
+            name: 'get_todays_earnings',
+            description: 'Today\'s settled payment cash summary (AEST) for the authenticated merchant and branches. Use when asked how much cash came in today.',
+            inputSchema: toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.GetTodaysEarningsInputSchema))),
+            metadata: {
+                schemaVersion: '2026-04-15',
+                requiredArguments: [],
+                optionalArguments: ['include_raw'],
+                openapiOperation: { method: 'get', path: '/api/public/todays_earnings' },
+                outputSchemaRef: 'inline: { date, timezone, currency, count, total_amount }',
+                errorContract: [
+                    { status: 401, code: 'AUTH_MISSING_OR_INVALID', when: 'Session/API key missing or invalid' },
+                ],
+            },
+            annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
+        },
         {
             name: 'get_payment_agreement',
-            description: `Retrieve payment agreement details with AI insights.${schema_helpers_js_1.HTTP_MCP_SESSION_AUTH_HINT}`,
+            description: 'Retrieve payment agreement details with AI insights.',
             inputSchema: toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.GetPaymentAgreementInputSchema))),
             metadata: {
                 schemaVersion: '2026-04-15',
@@ -50,7 +82,7 @@ function buildServerCard(env) {
         },
         {
             name: 'create_payment_agreement',
-            description: `Create a new payment agreement.${schema_helpers_js_1.HTTP_MCP_SESSION_AUTH_HINT}`,
+            description: 'Create a new payment agreement.',
             inputSchema: withCreatePaymentAgreementConditionals(toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.CreatePaymentAgreementInputSchema)))),
             metadata: {
                 schemaVersion: '2026-04-15',
@@ -69,7 +101,7 @@ function buildServerCard(env) {
         },
         {
             name: 'initiate_payment',
-            description: `Initiate a payment against an agreement.${schema_helpers_js_1.HTTP_MCP_SESSION_AUTH_HINT}`,
+            description: 'Initiate a payment against an agreement.',
             inputSchema: toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.InitiatePaymentInputSchema))),
             metadata: {
                 schemaVersion: '2026-04-15',
@@ -88,7 +120,7 @@ function buildServerCard(env) {
         },
         {
             name: 'get_payment_initiation',
-            description: `Retrieve payment initiation by ID.${schema_helpers_js_1.HTTP_MCP_SESSION_AUTH_HINT}`,
+            description: 'Retrieve payment initiation by ID.',
             inputSchema: toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.GetPaymentInitiationInputSchema))),
             metadata: {
                 schemaVersion: '2026-04-15',
@@ -104,12 +136,62 @@ function buildServerCard(env) {
             },
             annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
         },
+        {
+            name: 'initiate_direct_debit',
+            description: 'Initiate direct debit using account details and explicit consent.',
+            inputSchema: toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.InitiateDirectDebitInputSchema))),
+            metadata: {
+                schemaVersion: '2026-04-15',
+                requiredArguments: ['name', 'amount', 'consent_received', 'bsb', 'account_number'],
+                optionalArguments: ['phone_number', 'notes', 'destination', 'include_raw'],
+                openapiOperation: { method: 'post', path: '/api/public/payment_initiation/direct_debit' },
+                outputSchemaRef: '#/components/schemas/SuccessPaymentInitiationResponse',
+            },
+            annotations: { readOnlyHint: false, idempotentHint: false, openWorldHint: false },
+        },
+        {
+            name: 'update_bilateral_agreement',
+            description: 'Update bilateral terms for an existing payment agreement.',
+            inputSchema: toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.UpdateBilateralAgreementInputSchema))),
+            metadata: {
+                schemaVersion: '2026-04-15',
+                requiredArguments: ['maximum_amount', 'frequency', 'number_of_transactions_permitted'],
+                optionalArguments: ['id', 'phone_number', 'agreement_type', 'include_raw'],
+                openapiOperation: { method: 'patch', path: '/api/public/payment_agreement/bilateral' },
+                outputSchemaRef: '#/components/schemas/SuccessPaymentAgreementResponse',
+            },
+            annotations: { readOnlyHint: false, idempotentHint: false, openWorldHint: false },
+        },
+        {
+            name: 'generate_invoice',
+            description: 'Generate external invoice checkout URL.',
+            inputSchema: toStrictObjectSchema((0, schema_helpers_js_1.stripAuthorizationFieldFromJsonSchema)((0, zod_to_json_schema_1.zodToJsonSchema)(index_js_1.GenerateInvoiceInputSchema))),
+            metadata: {
+                schemaVersion: '2026-04-15',
+                requiredArguments: ['invoice.amount'],
+                optionalArguments: [
+                    'phone_number',
+                    'include_raw',
+                    'invoice.description',
+                    'invoice.bill_to',
+                    'invoice.address',
+                    'invoice.receiver_abn',
+                    'invoice.ref_no',
+                    'invoice.gst_included',
+                    'invoice.gst_does_not_apply',
+                    'invoice.email',
+                ],
+                openapiOperation: { method: 'post', path: '/api/public/generate_invoice' },
+                outputSchemaRef: 'inline: { message, data: { checkout_url } }',
+            },
+            annotations: { readOnlyHint: false, idempotentHint: false, openWorldHint: false },
+        },
     ];
     const isProduction = env.SHABAAS_ENVIRONMENT === 'production';
     if (!isProduction) {
         tools.push({
             name: 'get_auth_token',
-            description: `Get ShaBaas API authorization token (non-production helper).${schema_helpers_js_1.HTTP_MCP_SESSION_AUTH_HINT}`,
+            description: 'Get ShaBaas API authorization token (non-production helper).',
             inputSchema: {
                 type: 'object',
                 additionalProperties: false,
@@ -152,6 +234,19 @@ function buildServerCard(env) {
         tools,
         resources: [],
         prompts: [
+            {
+                name: 'todays_earnings',
+                description: 'Answer how much settled cash came in today (AEST) by calling get_todays_earnings for the merchant and branches.',
+                arguments: [],
+            },
+            {
+                name: 'list_active_agreements',
+                description: 'List the merchant\'s active PayTo agreements, then use get_payment_agreement for details on a specific ID.',
+                arguments: [
+                    { name: 'page', description: 'Optional page number', required: false },
+                    { name: 'status', description: 'Optional status filter (default active; use all for every agreement)', required: false },
+                ],
+            },
             {
                 name: 'create_payto_agreement',
                 description: 'Draft parameters for a new PayTo agreement, then call create_payment_agreement with validated fields.',
@@ -170,6 +265,44 @@ function buildServerCard(env) {
                     { name: 'payment_initiation_id', description: 'Optional initiation ID', required: false },
                 ],
             },
+            {
+                name: 'initiate_direct_debit',
+                description: 'Draft direct debit parameters, then call initiate_direct_debit with validated account and consent fields.',
+                arguments: [
+                    { name: 'name', description: 'Account holder name', required: true },
+                    { name: 'amount', description: 'Debit amount (e.g. 10.00)', required: true },
+                    { name: 'consent_received', description: 'Must be true', required: true },
+                    { name: 'bsb', description: 'Payer BSB', required: true },
+                    { name: 'account_number', description: 'Payer account number', required: true },
+                ],
+            },
+            {
+                name: 'update_bilateral_agreement',
+                description: 'Prepare bilateral amendment fields and call update_bilateral_agreement for an existing payment agreement.',
+                arguments: [
+                    { name: 'id', description: 'Payment agreement id (or use phone_number)', required: false },
+                    { name: 'phone_number', description: 'Alternative payer lookup', required: false },
+                    { name: 'maximum_amount', description: 'Updated maximum amount', required: true },
+                    { name: 'frequency', description: 'Frequency code (e.g. WEEK, MNTH)', required: true },
+                    { name: 'number_of_transactions_permitted', description: 'Allowed transaction count', required: true },
+                ],
+            },
+            {
+                name: 'generate_invoice',
+                description: 'Draft invoice payload and call generate_invoice to get an external checkout URL.',
+                arguments: [
+                    { name: 'invoice.amount', description: 'Invoice amount (AUD); max 1000', required: true },
+                    { name: 'invoice.description', description: 'Invoice description', required: false },
+                    { name: 'invoice.bill_to', description: 'Bill to name', required: false },
+                    { name: 'invoice.address', description: 'Billing address', required: false },
+                    { name: 'invoice.receiver_abn', description: 'Receiver ABN', required: false },
+                    { name: 'invoice.ref_no', description: 'Invoice reference number', required: false },
+                    { name: 'invoice.gst_included', description: 'GST included in amount (default false)', required: false },
+                    { name: 'invoice.gst_does_not_apply', description: 'GST does not apply', required: false },
+                    { name: 'invoice.email', description: 'Customer email for invoice', required: false },
+                    { name: 'phone_number', description: 'Customer phone', required: false },
+                ],
+            },
         ],
         metadata: {
             schemaVersion: '2026-04-15',

package/dist/mcp-handler/tools/implementations.d.ts

@@ -7,6 +7,10 @@
 import type { Env } from '../types.js';
 /** get_auth_token: Fetch bearer token. Sandbox only. */
 export declare function getAuthToken(args: any, baseUrl: string, env: Env): Promise<Response>;
+/** get_todays_earnings: settled cash summary for today (AEST), merchant + branches. */
+export declare function getTodaysEarnings(args: any, baseUrl: string, env: Env, bearer: string): Promise<Response>;
+/** list_active_payment_agreements: GET merchant PayTo agreements (active by default). */
+export declare function listActivePaymentAgreements(args: any, baseUrl: string, env: Env, bearer: string): Promise<Response>;
 /** get_payment_agreement: GET agreement by ID. Enriches with insights and summary when enrich !== false. */
 export declare function getPaymentAgreement(args: any, baseUrl: string, env: Env, bearer: string): Promise<Response>;
 /** create_payment_agreement: POST new agreement to backend */
@@ -15,3 +19,6 @@ export declare function createPaymentAgreement(args: any, baseUrl: string, env:
 export declare function initiatePayment(args: any, baseUrl: string, env: Env, bearer: string, requestId: string): Promise<Response>;
 /** get_payment_initiation: GET initiation status by ID */
 export declare function getPaymentInitiation(args: any, baseUrl: string, env: Env, bearer: string): Promise<Response>;
+export declare function initiateDirectDebit(args: any, baseUrl: string, env: Env, bearer: string, requestId: string): Promise<Response>;
+export declare function updateBilateralAgreement(args: any, baseUrl: string, env: Env, bearer: string): Promise<Response>;
+export declare function generateInvoice(args: any, baseUrl: string, env: Env, apiKey: string): Promise<Response>;