Skip to main content
Glama
Sign In

Wever Labs Agent Products

by io.github.CodeWever
OverviewDiscussionsAdmin

Wever Labs Delegated Authority

wever_delegated-authority
Destructive

Paid URL: 2.00 USDC per mandate on Base; 10 signed-wallet free calls shared over rolling 30 days. Only issue_mandate is billed; GET, contract reads, drafts and all other modes have no x402 fee. Credentials and grants remain required for their existing operations. Read the backend 402 body for x402 terms. Issue signed mandates and approve an exact action. The named agent uses its grant to create an immutable work-order record. Operating boundary: The operator issues a mandate, then approves an action grant lasting up to 300 seconds. The credentialed agent consumes the grant once to create one work-order record. Inspect the same grant until its result is final. Mandate issuance costs 2 USDC after the free calls are used, except that Wever absorbs the issuance cost of a mandate whose every scope is money_back_case during the money-back operator launch. Reads, drafts, the public read-only inspect_mandate status check and other authority modes use their existing credentials at no access fee. Work execution, delivery and payment each use their own service. POST /api/delegated-authority. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a credentialed authority control plane for immutable work-order record creation. It does not execute the recorded work, deliver results, or authorize payment. Operator issuance and grant approval require X-Wever-Operator-Key and Idempotency-Key; consumption requires the target agent's X-Wever-Agent-Key. Usage and attribution come from validated credentials and durable authority records. AP2 issuance also accepts issue_mandate with mandate.profile com.weverlabs.ap2.direct-checkout.1, the holder public key, signed checkout challenge, consent digest and bounded expiry. It requires a dedicated AP2 issuer credential in X-Wever-Operator-Key, Idempotency-Key and a fresh holder wallet proof. Issuance costs 2.00 USDC per issued mandate; verification at /api/ap2-mandate-gateway costs 0.10 USDC per call, subject to the same shared free allowance. The AP2 mandate records checkout intent and grants no tool access, execution authority or spending authority.

Input Schema

NameRequiredDescriptionDefault
modeYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed2 schema fields changed
    • changedInput schema / oneOf
      Previous value: -[
-  {
-    "additionalProperties": false,
-    "description": "Read the public contract. This performs no authority issuance or downstream write.",
-    "properties": {
-      "mode": {
-        "const": "read_control_plane"
-      }
-    },
-    "required": [
-      "mode"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Validate a public unsigned_dev draft. It is not signed, persisted or executable. Expiry must follow not_before by no more than 30 days.",
-    "properties": {
-      "mandate": {
-        "$ref": "#/$defs/mandateInput"
-      },
-      "mode": {
-        "const": "draft_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires X-Wever-Operator-Key and Idempotency-Key. Issue one durable signed mandate for a configured agent. The active time window is limited to 30 days from issuance.",
-    "properties": {
-      "mandate": {
-        "$ref": "#/$defs/mandateInput"
-      },
-      "mode": {
-        "const": "issue_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the issuing operator X-Wever-Operator-Key and Idempotency-Key. Reserve one work_order unit and approve this exact action for at most 300 seconds. The issuing operator approves the grant.",
-    "properties": {
-      "mode": {
-        "const": "issue_action_grant"
-      },
-      "request": {
-        "$ref": "#/$defs/grantRequest"
-      },
-      "signed_mandate": {
-        "$ref": "#/$defs/signedMandate"
-      }
-    },
-    "required": [
-      "mode",
-      "signed_mandate",
-      "request"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the target agent X-Wever-Agent-Key. Consume the signed grant once to create its immutable work-order record. Inspect or retry the same grant until record creation is final. Work execution, delivery and payment follow through their own services.",
-    "properties": {
-      "action": {
-        "$ref": "#/$defs/workOrderAction"
-      },
-      "mode": {
-        "const": "execute_delegated_action"
-      },
-      "signed_action_grant": {
-        "$ref": "#/$defs/signedActionGrant"
-      }
-    },
-    "required": [
-      "mode",
-      "signed_action_grant",
-      "action"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the bound agent X-Wever-Agent-Key. Read durable grant state and any finalized result.",
-    "properties": {
-      "grant_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "inspect_action_grant"
-      }
-    },
-    "required": [
-      "mode",
-      "grant_id"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the issuing operator X-Wever-Operator-Key. Revoke future authority. Committed records remain in history; in-flight effects keep their existing recovery process.",
-    "properties": {
-      "mandate_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "revoke_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate_id"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the bound agent X-Wever-Agent-Key. Read this mandate audit after the supplied cursor, default 0, with a default limit of 50.",
-    "properties": {
-      "after": {
-        "maximum": 9007199254740991,
-        "minimum": 0,
-        "type": "integer"
-      },
-      "limit": {
-        "maximum": 100,
-        "minimum": 1,
-        "type": "integer"
-      },
-      "mandate_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "read_audit"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate_id"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "properties": {
-      "mandate": {
-        "additionalProperties": false,
-        "properties": {
-          "challenge_token": {
-            "maxLength": 16384,
-            "minLength": 1,
-            "type": "string"
-          },
-          "consent_digest": {
-            "pattern": "^[a-f0-9]{64}(?![\\s\\S])",
-            "type": "string"
-          },
-          "expires_at": {
-            "maximum": 9007199254740991,
-            "minimum": 0,
-            "type": "integer"
-          },
-          "holder_jwk": {
-            "additionalProperties": false,
-            "properties": {
-              "crv": {
-                "const": "secp256k1"
-              },
-              "kty": {
-                "const": "EC"
-              },
-              "x": {
-                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
-                "type": "string"
-              },
-              "y": {
-                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
-                "type": "string"
-              }
-            },
-            "required": [
-              "kty",
-              "crv",
-              "x",
-              "y"
-            ],
-            "type": "object"
-          },
-          "profile": {
-            "const": "com.weverlabs.ap2.direct-checkout.1"
-          }
-        },
-        "required": [
-          "profile",
-          "challenge_token",
-          "holder_jwk",
-          "consent_digest",
-          "expires_at"
-        ],
-        "type": "object"
-      },
-      "mode": {
-        "const": "issue_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate"
-    ],
-    "type": "object"
-  }
-]New value: +[
+  {
+    "additionalProperties": false,
+    "description": "Read the public contract. This performs no authority issuance or downstream write.",
+    "properties": {
+      "mode": {
+        "const": "read_control_plane"
+      }
+    },
+    "required": [
+      "mode"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Validate a public unsigned_dev draft. It is not signed, persisted or executable. Expiry must follow not_before by no more than 30 days.",
+    "properties": {
+      "mandate": {
+        "$ref": "#/$defs/mandateInput"
+      },
+      "mode": {
+        "const": "draft_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires X-Wever-Operator-Key and Idempotency-Key. Issue one durable signed mandate for a configured agent. The active time window is limited to 30 days from issuance.",
+    "properties": {
+      "mandate": {
+        "$ref": "#/$defs/mandateInput"
+      },
+      "mode": {
+        "const": "issue_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Public and read-only: no credential, fee or write. Send the key the mandate was issued under in Idempotency-Key. When the signed mandate is exactly the one stored at issuance, returns only mandate_id, state (active or revoked), version and expired; any other request returns 404 mandate_not_found.",
+    "properties": {
+      "mode": {
+        "const": "inspect_mandate"
+      },
+      "signed_mandate": {
+        "$ref": "#/$defs/signedMandate"
+      }
+    },
+    "required": [
+      "mode",
+      "signed_mandate"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the issuing operator X-Wever-Operator-Key and Idempotency-Key. Reserve one work_order unit and approve this exact action for at most 300 seconds. The issuing operator approves the grant.",
+    "properties": {
+      "mode": {
+        "const": "issue_action_grant"
+      },
+      "request": {
+        "$ref": "#/$defs/grantRequest"
+      },
+      "signed_mandate": {
+        "$ref": "#/$defs/signedMandate"
+      }
+    },
+    "required": [
+      "mode",
+      "signed_mandate",
+      "request"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the target agent X-Wever-Agent-Key. Consume the signed grant once to create its immutable work-order record. Inspect or retry the same grant until record creation is final. Work execution, delivery and payment follow through their own services.",
+    "properties": {
+      "action": {
+        "$ref": "#/$defs/workOrderAction"
+      },
+      "mode": {
+        "const": "execute_delegated_action"
+      },
+      "signed_action_grant": {
+        "$ref": "#/$defs/signedActionGrant"
+      }
+    },
+    "required": [
+      "mode",
+      "signed_action_grant",
+      "action"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the bound agent X-Wever-Agent-Key. Read durable grant state and any finalized result.",
+    "properties": {
+      "grant_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "inspect_action_grant"
+      }
+    },
+    "required": [
+      "mode",
+      "grant_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the issuing operator X-Wever-Operator-Key. Revoke future authority. Committed records remain in history; in-flight effects keep their existing recovery process.",
+    "properties": {
+      "mandate_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "revoke_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the bound agent X-Wever-Agent-Key. Read this mandate audit after the supplied cursor, default 0, with a default limit of 50.",
+    "properties": {
+      "after": {
+        "maximum": 9007199254740991,
+        "minimum": 0,
+        "type": "integer"
+      },
+      "limit": {
+        "maximum": 100,
+        "minimum": 1,
+        "type": "integer"
+      },
+      "mandate_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "read_audit"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "properties": {
+      "mandate": {
+        "additionalProperties": false,
+        "properties": {
+          "challenge_token": {
+            "maxLength": 16384,
+            "minLength": 1,
+            "type": "string"
+          },
+          "consent_digest": {
+            "pattern": "^[a-f0-9]{64}(?![\\s\\S])",
+            "type": "string"
+          },
+          "expires_at": {
+            "maximum": 9007199254740991,
+            "minimum": 0,
+            "type": "integer"
+          },
+          "holder_jwk": {
+            "additionalProperties": false,
+            "properties": {
+              "crv": {
+                "const": "secp256k1"
+              },
+              "kty": {
+                "const": "EC"
+              },
+              "x": {
+                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
+                "type": "string"
+              },
+              "y": {
+                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
+                "type": "string"
+              }
+            },
+            "required": [
+              "kty",
+              "crv",
+              "x",
+              "y"
+            ],
+            "type": "object"
+          },
+          "profile": {
+            "const": "com.weverlabs.ap2.direct-checkout.1"
+          }
+        },
+        "required": [
+          "profile",
+          "challenge_token",
+          "holder_jwk",
+          "consent_digest",
+          "expires_at"
+        ],
+        "type": "object"
+      },
+      "mode": {
+        "const": "issue_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  }
+]
    • changedInput schema / properties / mode / enum
      Previous value: -[
-  "read_control_plane",
-  "draft_mandate",
-  "issue_mandate",
-  "issue_action_grant",
-  "execute_delegated_action",
-  "inspect_action_grant",
-  "revoke_mandate",
-  "read_audit"
-]New value: +[
+  "read_control_plane",
+  "draft_mandate",
+  "issue_mandate",
+  "inspect_mandate",
+  "issue_action_grant",
+  "execute_delegated_action",
+  "inspect_action_grant",
+  "revoke_mandate",
+  "read_audit"
+]
  2. Changed9 schema fields changed
    • changedInput schema / $defs / actionGrantClaims / properties / usage / description
      Previous value: -"Must match the target agent usage configured on the server. Caller input cannot change credential-bound usage or attribution."New value: +"Must match the target agent usage configured on the server. Usage and attribution come from the agent credential."
    • changedInput schema / $defs / grantRequest / description
      Previous value: -"The server sets amount_units to 1 and unit to work_order. approval_reference is operator-attested and bound into the grant; it does not independently verify consent."New value: +"The server sets amount_units to 1 and unit to work_order. approval_reference is operator-attested and bound into the grant; the operator supplies this consent record."
    • changedInput schema / $defs / grantRequest / properties / usage / description
      Previous value: -"Must match the target agent usage configured on the server. Caller input cannot change credential-bound usage or attribution."New value: +"Must match the target agent usage configured on the server. Usage and attribution come from the agent credential."
    • changedInput schema / $defs / mandateClaims / properties / usage / description
      Previous value: -"Must match the target agent usage configured on the server. Caller input cannot change credential-bound usage or attribution."New value: +"Must match the target agent usage configured on the server. Usage and attribution come from the agent credential."
    • changedInput schema / $defs / mandateInput / properties / usage / description
      Previous value: -"Must match the target agent usage configured on the server. Caller input cannot change credential-bound usage or attribution."New value: +"Must match the target agent usage configured on the server. Usage and attribution come from the agent credential."
    • changedInput schema / $defs / signedActionGrant / description
      Previous value: -"Use the unmodified envelope returned by the authority API. The backend verifies its signature, active time window, durable record, credentials and claim bindings. Passing this schema does not establish authority."New value: +"Use the unmodified envelope returned by the authority API. The backend verifies its signature, active time window, durable record, credentials and claim bindings. Successful runtime verification establishes the accepted authority."
    • changedInput schema / $defs / signedMandate / description
      Previous value: -"Use the unmodified envelope returned by the authority API. The backend verifies its signature, active time window, durable record, credentials and claim bindings. Passing this schema does not establish authority."New value: +"Use the unmodified envelope returned by the authority API. The backend verifies its signature, active time window, durable record, credentials and claim bindings. Successful runtime verification establishes the accepted authority."
    • changedInput schema / $defs / workOrderAction / properties / target_product_key / description
      Previous value: -"A maintained computation reference or null. Recording it does not execute or assign that computation."New value: +"A maintained computation reference or null. Use its service endpoint to run the computation."
    • changedInput schema / oneOf
      Previous value: -[
-  {
-    "additionalProperties": false,
-    "description": "Read the public contract. This performs no authority issuance or downstream write.",
-    "properties": {
-      "mode": {
-        "const": "read_control_plane"
-      }
-    },
-    "required": [
-      "mode"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Validate a public unsigned_dev draft. It is not signed, persisted or executable. Expiry must follow not_before by no more than 30 days.",
-    "properties": {
-      "mandate": {
-        "$ref": "#/$defs/mandateInput"
-      },
-      "mode": {
-        "const": "draft_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires X-Wever-Operator-Key and Idempotency-Key. Issue one durable signed mandate for a configured agent. The active time window is limited to 30 days from issuance.",
-    "properties": {
-      "mandate": {
-        "$ref": "#/$defs/mandateInput"
-      },
-      "mode": {
-        "const": "issue_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the issuing operator X-Wever-Operator-Key and Idempotency-Key. Reserve one work_order unit and approve this exact action for at most 300 seconds. An agent cannot issue its own grant.",
-    "properties": {
-      "mode": {
-        "const": "issue_action_grant"
-      },
-      "request": {
-        "$ref": "#/$defs/grantRequest"
-      },
-      "signed_mandate": {
-        "$ref": "#/$defs/signedMandate"
-      }
-    },
-    "required": [
-      "mode",
-      "signed_mandate",
-      "request"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the target agent X-Wever-Agent-Key. Consume the signed grant once to create its immutable work-order record. This does not execute the recorded work, deliver results or authorize payment. A pending or unknown result is not success; retry the same grant or inspect it, never substitute new authority.",
-    "properties": {
-      "action": {
-        "$ref": "#/$defs/workOrderAction"
-      },
-      "mode": {
-        "const": "execute_delegated_action"
-      },
-      "signed_action_grant": {
-        "$ref": "#/$defs/signedActionGrant"
-      }
-    },
-    "required": [
-      "mode",
-      "signed_action_grant",
-      "action"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the bound agent X-Wever-Agent-Key. Read durable grant state and any finalized result.",
-    "properties": {
-      "grant_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "inspect_action_grant"
-      }
-    },
-    "required": [
-      "mode",
-      "grant_id"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the issuing operator X-Wever-Operator-Key. Revoke future authority. Revocation does not undo a committed work-order record or release an uncertain in-flight effect.",
-    "properties": {
-      "mandate_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "revoke_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate_id"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the bound agent X-Wever-Agent-Key. Read this mandate audit after the supplied cursor, default 0, with a default limit of 50.",
-    "properties": {
-      "after": {
-        "maximum": 9007199254740991,
-        "minimum": 0,
-        "type": "integer"
-      },
-      "limit": {
-        "maximum": 100,
-        "minimum": 1,
-        "type": "integer"
-      },
-      "mandate_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "read_audit"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate_id"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "properties": {
-      "mandate": {
-        "additionalProperties": false,
-        "properties": {
-          "challenge_token": {
-            "maxLength": 16384,
-            "minLength": 1,
-            "type": "string"
-          },
-          "consent_digest": {
-            "pattern": "^[a-f0-9]{64}(?![\\s\\S])",
-            "type": "string"
-          },
-          "expires_at": {
-            "maximum": 9007199254740991,
-            "minimum": 0,
-            "type": "integer"
-          },
-          "holder_jwk": {
-            "additionalProperties": false,
-            "properties": {
-              "crv": {
-                "const": "secp256k1"
-              },
-              "kty": {
-                "const": "EC"
-              },
-              "x": {
-                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
-                "type": "string"
-              },
-              "y": {
-                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
-                "type": "string"
-              }
-            },
-            "required": [
-              "kty",
-              "crv",
-              "x",
-              "y"
-            ],
-            "type": "object"
-          },
-          "profile": {
-            "const": "com.weverlabs.ap2.direct-checkout.1"
-          }
-        },
-        "required": [
-          "profile",
-          "challenge_token",
-          "holder_jwk",
-          "consent_digest",
-          "expires_at"
-        ],
-        "type": "object"
-      },
-      "mode": {
-        "const": "issue_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate"
-    ],
-    "type": "object"
-  }
-]New value: +[
+  {
+    "additionalProperties": false,
+    "description": "Read the public contract. This performs no authority issuance or downstream write.",
+    "properties": {
+      "mode": {
+        "const": "read_control_plane"
+      }
+    },
+    "required": [
+      "mode"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Validate a public unsigned_dev draft. It is not signed, persisted or executable. Expiry must follow not_before by no more than 30 days.",
+    "properties": {
+      "mandate": {
+        "$ref": "#/$defs/mandateInput"
+      },
+      "mode": {
+        "const": "draft_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires X-Wever-Operator-Key and Idempotency-Key. Issue one durable signed mandate for a configured agent. The active time window is limited to 30 days from issuance.",
+    "properties": {
+      "mandate": {
+        "$ref": "#/$defs/mandateInput"
+      },
+      "mode": {
+        "const": "issue_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the issuing operator X-Wever-Operator-Key and Idempotency-Key. Reserve one work_order unit and approve this exact action for at most 300 seconds. The issuing operator approves the grant.",
+    "properties": {
+      "mode": {
+        "const": "issue_action_grant"
+      },
+      "request": {
+        "$ref": "#/$defs/grantRequest"
+      },
+      "signed_mandate": {
+        "$ref": "#/$defs/signedMandate"
+      }
+    },
+    "required": [
+      "mode",
+      "signed_mandate",
+      "request"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the target agent X-Wever-Agent-Key. Consume the signed grant once to create its immutable work-order record. Inspect or retry the same grant until record creation is final. Work execution, delivery and payment follow through their own services.",
+    "properties": {
+      "action": {
+        "$ref": "#/$defs/workOrderAction"
+      },
+      "mode": {
+        "const": "execute_delegated_action"
+      },
+      "signed_action_grant": {
+        "$ref": "#/$defs/signedActionGrant"
+      }
+    },
+    "required": [
+      "mode",
+      "signed_action_grant",
+      "action"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the bound agent X-Wever-Agent-Key. Read durable grant state and any finalized result.",
+    "properties": {
+      "grant_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "inspect_action_grant"
+      }
+    },
+    "required": [
+      "mode",
+      "grant_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the issuing operator X-Wever-Operator-Key. Revoke future authority. Committed records remain in history; in-flight effects keep their existing recovery process.",
+    "properties": {
+      "mandate_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "revoke_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the bound agent X-Wever-Agent-Key. Read this mandate audit after the supplied cursor, default 0, with a default limit of 50.",
+    "properties": {
+      "after": {
+        "maximum": 9007199254740991,
+        "minimum": 0,
+        "type": "integer"
+      },
+      "limit": {
+        "maximum": 100,
+        "minimum": 1,
+        "type": "integer"
+      },
+      "mandate_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "read_audit"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "properties": {
+      "mandate": {
+        "additionalProperties": false,
+        "properties": {
+          "challenge_token": {
+            "maxLength": 16384,
+            "minLength": 1,
+            "type": "string"
+          },
+          "consent_digest": {
+            "pattern": "^[a-f0-9]{64}(?![\\s\\S])",
+            "type": "string"
+          },
+          "expires_at": {
+            "maximum": 9007199254740991,
+            "minimum": 0,
+            "type": "integer"
+          },
+          "holder_jwk": {
+            "additionalProperties": false,
+            "properties": {
+              "crv": {
+                "const": "secp256k1"
+              },
+              "kty": {
+                "const": "EC"
+              },
+              "x": {
+                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
+                "type": "string"
+              },
+              "y": {
+                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
+                "type": "string"
+              }
+            },
+            "required": [
+              "kty",
+              "crv",
+              "x",
+              "y"
+            ],
+            "type": "object"
+          },
+          "profile": {
+            "const": "com.weverlabs.ap2.direct-checkout.1"
+          }
+        },
+        "required": [
+          "profile",
+          "challenge_token",
+          "holder_jwk",
+          "consent_digest",
+          "expires_at"
+        ],
+        "type": "object"
+      },
+      "mode": {
+        "const": "issue_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  }
+]
  3. Changed1 schema field changed
    • changedInput schema / oneOf
      Previous value: -[
-  {
-    "additionalProperties": false,
-    "description": "Read the public contract. This performs no authority issuance or downstream write.",
-    "properties": {
-      "mode": {
-        "const": "read_control_plane"
-      }
-    },
-    "required": [
-      "mode"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Validate a public unsigned_dev draft. It is not signed, persisted or executable. Expiry must follow not_before by no more than 30 days.",
-    "properties": {
-      "mandate": {
-        "$ref": "#/$defs/mandateInput"
-      },
-      "mode": {
-        "const": "draft_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires X-Wever-Operator-Key and Idempotency-Key. Issue one durable signed mandate for a configured agent. The active time window is limited to 30 days from issuance.",
-    "properties": {
-      "mandate": {
-        "$ref": "#/$defs/mandateInput"
-      },
-      "mode": {
-        "const": "issue_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the issuing operator X-Wever-Operator-Key and Idempotency-Key. Reserve one work_order unit and approve this exact action for at most 300 seconds. An agent cannot issue its own grant.",
-    "properties": {
-      "mode": {
-        "const": "issue_action_grant"
-      },
-      "request": {
-        "$ref": "#/$defs/grantRequest"
-      },
-      "signed_mandate": {
-        "$ref": "#/$defs/signedMandate"
-      }
-    },
-    "required": [
-      "mode",
-      "signed_mandate",
-      "request"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the target agent X-Wever-Agent-Key. Consume the signed grant once to create its immutable work-order record. This does not execute the recorded work, deliver results or authorize payment. A pending or unknown result is not success; retry the same grant or inspect it, never substitute new authority.",
-    "properties": {
-      "action": {
-        "$ref": "#/$defs/workOrderAction"
-      },
-      "mode": {
-        "const": "execute_delegated_action"
-      },
-      "signed_action_grant": {
-        "$ref": "#/$defs/signedActionGrant"
-      }
-    },
-    "required": [
-      "mode",
-      "signed_action_grant",
-      "action"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the bound agent X-Wever-Agent-Key. Read durable grant state and any finalized result.",
-    "properties": {
-      "grant_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "inspect_action_grant"
-      }
-    },
-    "required": [
-      "mode",
-      "grant_id"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the issuing operator X-Wever-Operator-Key. Revoke future authority. Revocation does not undo a committed work-order record or release an uncertain in-flight effect.",
-    "properties": {
-      "mandate_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "revoke_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate_id"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the bound agent X-Wever-Agent-Key. Read this mandate audit after the supplied cursor, default 0, with a default limit of 50.",
-    "properties": {
-      "after": {
-        "maximum": 9007199254740991,
-        "minimum": 0,
-        "type": "integer"
-      },
-      "limit": {
-        "maximum": 100,
-        "minimum": 1,
-        "type": "integer"
-      },
-      "mandate_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "read_audit"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate_id"
-    ],
-    "type": "object"
-  }
-]New value: +[
+  {
+    "additionalProperties": false,
+    "description": "Read the public contract. This performs no authority issuance or downstream write.",
+    "properties": {
+      "mode": {
+        "const": "read_control_plane"
+      }
+    },
+    "required": [
+      "mode"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Validate a public unsigned_dev draft. It is not signed, persisted or executable. Expiry must follow not_before by no more than 30 days.",
+    "properties": {
+      "mandate": {
+        "$ref": "#/$defs/mandateInput"
+      },
+      "mode": {
+        "const": "draft_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires X-Wever-Operator-Key and Idempotency-Key. Issue one durable signed mandate for a configured agent. The active time window is limited to 30 days from issuance.",
+    "properties": {
+      "mandate": {
+        "$ref": "#/$defs/mandateInput"
+      },
+      "mode": {
+        "const": "issue_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the issuing operator X-Wever-Operator-Key and Idempotency-Key. Reserve one work_order unit and approve this exact action for at most 300 seconds. An agent cannot issue its own grant.",
+    "properties": {
+      "mode": {
+        "const": "issue_action_grant"
+      },
+      "request": {
+        "$ref": "#/$defs/grantRequest"
+      },
+      "signed_mandate": {
+        "$ref": "#/$defs/signedMandate"
+      }
+    },
+    "required": [
+      "mode",
+      "signed_mandate",
+      "request"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the target agent X-Wever-Agent-Key. Consume the signed grant once to create its immutable work-order record. This does not execute the recorded work, deliver results or authorize payment. A pending or unknown result is not success; retry the same grant or inspect it, never substitute new authority.",
+    "properties": {
+      "action": {
+        "$ref": "#/$defs/workOrderAction"
+      },
+      "mode": {
+        "const": "execute_delegated_action"
+      },
+      "signed_action_grant": {
+        "$ref": "#/$defs/signedActionGrant"
+      }
+    },
+    "required": [
+      "mode",
+      "signed_action_grant",
+      "action"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the bound agent X-Wever-Agent-Key. Read durable grant state and any finalized result.",
+    "properties": {
+      "grant_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "inspect_action_grant"
+      }
+    },
+    "required": [
+      "mode",
+      "grant_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the issuing operator X-Wever-Operator-Key. Revoke future authority. Revocation does not undo a committed work-order record or release an uncertain in-flight effect.",
+    "properties": {
+      "mandate_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "revoke_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the bound agent X-Wever-Agent-Key. Read this mandate audit after the supplied cursor, default 0, with a default limit of 50.",
+    "properties": {
+      "after": {
+        "maximum": 9007199254740991,
+        "minimum": 0,
+        "type": "integer"
+      },
+      "limit": {
+        "maximum": 100,
+        "minimum": 1,
+        "type": "integer"
+      },
+      "mandate_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "read_audit"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "properties": {
+      "mandate": {
+        "additionalProperties": false,
+        "properties": {
+          "challenge_token": {
+            "maxLength": 16384,
+            "minLength": 1,
+            "type": "string"
+          },
+          "consent_digest": {
+            "pattern": "^[a-f0-9]{64}(?![\\s\\S])",
+            "type": "string"
+          },
+          "expires_at": {
+            "maximum": 9007199254740991,
+            "minimum": 0,
+            "type": "integer"
+          },
+          "holder_jwk": {
+            "additionalProperties": false,
+            "properties": {
+              "crv": {
+                "const": "secp256k1"
+              },
+              "kty": {
+                "const": "EC"
+              },
+              "x": {
+                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
+                "type": "string"
+              },
+              "y": {
+                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
+                "type": "string"
+              }
+            },
+            "required": [
+              "kty",
+              "crv",
+              "x",
+              "y"
+            ],
+            "type": "object"
+          },
+          "profile": {
+            "const": "com.weverlabs.ap2.direct-checkout.1"
+          }
+        },
+        "required": [
+          "profile",
+          "challenge_token",
+          "holder_jwk",
+          "consent_digest",
+          "expires_at"
+        ],
+        "type": "object"
+      },
+      "mode": {
+        "const": "issue_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  }
+]
  4. First observed

TDQS

A4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations (destructive=true, non-idempotent, openWorld) by disclosing pricing (2.00 USDC per mandate, 10 free signed-wallet calls over a rolling 30 days, only issue_mandate billed), the money-back-launch waiver, per-mode credentials (X-Wever-Operator-Key vs X-Wever-Agent-Key, Idempotency-Key), single-use grant semantics with a 300s ceiling, and that revocation preserves committed records. Consistent with the annotations: writes and grant consumption are durably recorded, which matches destructive/non-idempotent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Key facts (price, then purpose) are front-loaded and no sentence is purely filler, but the text restates the same pricing and credential facts three or four times ('Only issue_mandate is billed', 'Mandate issuance costs 2 USDC', 'Issuance costs 2.00 USDC per issued mandate'), and repeats the 'no execution/delivery/payment' disclaimer in two places. At roughly 350 words for a one-parameter tool, tightening would materially help.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given a single mode parameter with a large nested oneOf schema and no output schema, the description covers the pieces an agent must know before calling: cost, credentials per stage, idempotency keys, grant TTL, immutability, and the AP2 special case. Return shapes are delegated to the per-mode schema branch descriptions, which is acceptable, though a one-line note on what inspect modes return would close the loop.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is a single `mode` parameter with 9 enum values and no top-level property description, so the schema coverage is effectively 0% at that level, though each oneOf branch carries its own per-mode description. The prose describes the lifecycle stages and their credential requirements but never enumerates or maps to the mode names (read_control_plane, draft_mandate, inspect_mandate, read_audit, ...). It compensates partially, leaving the caller to reconcile flow stages against enum values.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource pair: 'Issue signed mandates and approve an exact action... create an immutable work-order record,' and explicitly delineates what it does not do ('does not execute the recorded work, deliver results, or authorize payment'). That boundary implicitly separates it from the wever_workorder-* and payout siblings, but no sibling is ever named, so differentiation is by description of scope rather than by routing.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The 'Operating boundary' paragraph lays out the actual call sequence (operator issues mandate -> approves grant <=300s -> agent consumes once -> inspect until final), which tells an agent the order of operations. It also redirects execution/delivery/payment to 'their own service.' It never names an alternative tool or an explicit case in which a caller should prefer a different Wever tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Wever Labs Agent Products toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources