Two tool bands, one URL
The server serves two disjoint tool bands, selected by the credential you connect with:The bands never overlap. An agent-key connection cannot see a management tool, and an
organization-key connection cannot see a spend tool — the server registers one band per
connection, so this is structural rather than a per-call permission check. An agent can therefore
never create, reconfigure, or unpause itself.
Server URL
Configuration
Available tools — agent band
Card-rail tools (
request_card_payment, request_spt) ship with the card launch, expanding
this band to 15 tools. A 16th, request_budget_increase, is deferred separately. Neither
affects the management band.Requirements
- Every tool call requires a valid API key.
- Every tool call requires a
purposefield (3–500 characters) explaining why the agent is acting — recorded for audit and scoring. - All calls are written to an immutable audit log.
Go deeper
Payment Workflow
The request → poll → learn loop, idempotency, and status semantics.
Tool Reference
Exact parameters and limits for every tool.
Management Band
The 21 tools an organization key sees — provisioning and reconfiguring agents.
Organization Keys
Scopes, container bindings, and quotas for machine principals.