Skip to main content

​
MCP

Intro

​
Intro

Each public operation becomes one MCP tool or a documented exclusion. The executor speaks /api/v1 over HTTP. It does not import domain or database packages. Continue with webhooks and the CLI.

​
Approval

Read tools run with the grant. Financial or destructive tools create a canonical intent hash of operation_id, tenant, environment, and input. A short single-use human approval authorizes exactly that hash. Changing amount, currency, target, or idempotency key invalidates it.