Skip to main content
Glama

Wever Labs Agent Products

by io.github.CodeWever
OverviewDiscussionsAdmin

Wever Labs Delegated Authority

wever_delegated-authority
Destructive

Paid URL: 2.00 USDC per mandate on Base; 10 signed-wallet free calls shared over rolling 30 days. Only issue_mandate is billed; GET, contract reads, drafts and all other modes have no x402 fee. Credentials and grants remain required for their existing operations. Read the backend 402 body for x402 terms. Issue signed mandates and operator-approved action grants, then let credentialed agents consume them to create immutable work-order records. Records do not perform work, deliver results or authorize payment. Operating boundary: Operators issue mandates and approve each exact action grant with an issuance idempotency key. Only the bound credentialed agent may consume a grant; each action grant atomically reserves one nonfinancial work_order unit. Usage and attribution are credential-bound. Signed authority permits only immutable record creation, never work execution, delivery or payment. Public drafts remain unsigned_dev and cannot execute. The access fee applies only to issue_mandate and never authorizes downstream spending. GET, contract reads, drafts and all other authority modes have no x402 fee; their existing credential checks remain. POST /api/delegated-authority. Existing product credentials, signed mandates, and single-use action grants remain required where applicable. This adapter grants no authority and never supplies server credentials. This current operation is a credentialed authority control plane for immutable work-order record creation. It does not execute the recorded work, deliver results, or authorize payment. Operator issuance and grant approval require X-Wever-Operator-Key and Idempotency-Key; consumption requires the target agent's X-Wever-Agent-Key. Usage and attribution come from validated credentials and durable authority records. AP2 issuance also accepts issue_mandate with mandate.profile com.weverlabs.ap2.direct-checkout.1, the holder public key, signed checkout challenge, consent digest and bounded expiry. It requires a dedicated AP2 issuer credential in X-Wever-Operator-Key, Idempotency-Key and a fresh holder wallet proof. Issuance costs 2.00 USDC per issued mandate; verification at /api/ap2-mandate-gateway costs 0.10 USDC per call, subject to the same shared free allowance. The AP2 mandate records checkout intent and grants no tool access, execution authority or spending authority.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
modeYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedInput schema / oneOf
      Previous value: -[
-  {
-    "additionalProperties": false,
-    "description": "Read the public contract. This performs no authority issuance or downstream write.",
-    "properties": {
-      "mode": {
-        "const": "read_control_plane"
-      }
-    },
-    "required": [
-      "mode"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Validate a public unsigned_dev draft. It is not signed, persisted or executable. Expiry must follow not_before by no more than 30 days.",
-    "properties": {
-      "mandate": {
-        "$ref": "#/$defs/mandateInput"
-      },
-      "mode": {
-        "const": "draft_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires X-Wever-Operator-Key and Idempotency-Key. Issue one durable signed mandate for a configured agent. The active time window is limited to 30 days from issuance.",
-    "properties": {
-      "mandate": {
-        "$ref": "#/$defs/mandateInput"
-      },
-      "mode": {
-        "const": "issue_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the issuing operator X-Wever-Operator-Key and Idempotency-Key. Reserve one work_order unit and approve this exact action for at most 300 seconds. An agent cannot issue its own grant.",
-    "properties": {
-      "mode": {
-        "const": "issue_action_grant"
-      },
-      "request": {
-        "$ref": "#/$defs/grantRequest"
-      },
-      "signed_mandate": {
-        "$ref": "#/$defs/signedMandate"
-      }
-    },
-    "required": [
-      "mode",
-      "signed_mandate",
-      "request"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the target agent X-Wever-Agent-Key. Consume the signed grant once to create its immutable work-order record. This does not execute the recorded work, deliver results or authorize payment. A pending or unknown result is not success; retry the same grant or inspect it, never substitute new authority.",
-    "properties": {
-      "action": {
-        "$ref": "#/$defs/workOrderAction"
-      },
-      "mode": {
-        "const": "execute_delegated_action"
-      },
-      "signed_action_grant": {
-        "$ref": "#/$defs/signedActionGrant"
-      }
-    },
-    "required": [
-      "mode",
-      "signed_action_grant",
-      "action"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the bound agent X-Wever-Agent-Key. Read durable grant state and any finalized result.",
-    "properties": {
-      "grant_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "inspect_action_grant"
-      }
-    },
-    "required": [
-      "mode",
-      "grant_id"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the issuing operator X-Wever-Operator-Key. Revoke future authority. Revocation does not undo a committed work-order record or release an uncertain in-flight effect.",
-    "properties": {
-      "mandate_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "revoke_mandate"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate_id"
-    ],
-    "type": "object"
-  },
-  {
-    "additionalProperties": false,
-    "description": "Requires the bound agent X-Wever-Agent-Key. Read this mandate audit after the supplied cursor, default 0, with a default limit of 50.",
-    "properties": {
-      "after": {
-        "maximum": 9007199254740991,
-        "minimum": 0,
-        "type": "integer"
-      },
-      "limit": {
-        "maximum": 100,
-        "minimum": 1,
-        "type": "integer"
-      },
-      "mandate_id": {
-        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
-        "type": "string"
-      },
-      "mode": {
-        "const": "read_audit"
-      }
-    },
-    "required": [
-      "mode",
-      "mandate_id"
-    ],
-    "type": "object"
-  }
-]New value: +[
+  {
+    "additionalProperties": false,
+    "description": "Read the public contract. This performs no authority issuance or downstream write.",
+    "properties": {
+      "mode": {
+        "const": "read_control_plane"
+      }
+    },
+    "required": [
+      "mode"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Validate a public unsigned_dev draft. It is not signed, persisted or executable. Expiry must follow not_before by no more than 30 days.",
+    "properties": {
+      "mandate": {
+        "$ref": "#/$defs/mandateInput"
+      },
+      "mode": {
+        "const": "draft_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires X-Wever-Operator-Key and Idempotency-Key. Issue one durable signed mandate for a configured agent. The active time window is limited to 30 days from issuance.",
+    "properties": {
+      "mandate": {
+        "$ref": "#/$defs/mandateInput"
+      },
+      "mode": {
+        "const": "issue_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the issuing operator X-Wever-Operator-Key and Idempotency-Key. Reserve one work_order unit and approve this exact action for at most 300 seconds. An agent cannot issue its own grant.",
+    "properties": {
+      "mode": {
+        "const": "issue_action_grant"
+      },
+      "request": {
+        "$ref": "#/$defs/grantRequest"
+      },
+      "signed_mandate": {
+        "$ref": "#/$defs/signedMandate"
+      }
+    },
+    "required": [
+      "mode",
+      "signed_mandate",
+      "request"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the target agent X-Wever-Agent-Key. Consume the signed grant once to create its immutable work-order record. This does not execute the recorded work, deliver results or authorize payment. A pending or unknown result is not success; retry the same grant or inspect it, never substitute new authority.",
+    "properties": {
+      "action": {
+        "$ref": "#/$defs/workOrderAction"
+      },
+      "mode": {
+        "const": "execute_delegated_action"
+      },
+      "signed_action_grant": {
+        "$ref": "#/$defs/signedActionGrant"
+      }
+    },
+    "required": [
+      "mode",
+      "signed_action_grant",
+      "action"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the bound agent X-Wever-Agent-Key. Read durable grant state and any finalized result.",
+    "properties": {
+      "grant_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "inspect_action_grant"
+      }
+    },
+    "required": [
+      "mode",
+      "grant_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the issuing operator X-Wever-Operator-Key. Revoke future authority. Revocation does not undo a committed work-order record or release an uncertain in-flight effect.",
+    "properties": {
+      "mandate_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "revoke_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "description": "Requires the bound agent X-Wever-Agent-Key. Read this mandate audit after the supplied cursor, default 0, with a default limit of 50.",
+    "properties": {
+      "after": {
+        "maximum": 9007199254740991,
+        "minimum": 0,
+        "type": "integer"
+      },
+      "limit": {
+        "maximum": 100,
+        "minimum": 1,
+        "type": "integer"
+      },
+      "mandate_id": {
+        "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}(?![\\s\\S])",
+        "type": "string"
+      },
+      "mode": {
+        "const": "read_audit"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate_id"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": false,
+    "properties": {
+      "mandate": {
+        "additionalProperties": false,
+        "properties": {
+          "challenge_token": {
+            "maxLength": 16384,
+            "minLength": 1,
+            "type": "string"
+          },
+          "consent_digest": {
+            "pattern": "^[a-f0-9]{64}(?![\\s\\S])",
+            "type": "string"
+          },
+          "expires_at": {
+            "maximum": 9007199254740991,
+            "minimum": 0,
+            "type": "integer"
+          },
+          "holder_jwk": {
+            "additionalProperties": false,
+            "properties": {
+              "crv": {
+                "const": "secp256k1"
+              },
+              "kty": {
+                "const": "EC"
+              },
+              "x": {
+                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
+                "type": "string"
+              },
+              "y": {
+                "pattern": "^[A-Za-z0-9_-]{43}(?![\\s\\S])",
+                "type": "string"
+              }
+            },
+            "required": [
+              "kty",
+              "crv",
+              "x",
+              "y"
+            ],
+            "type": "object"
+          },
+          "profile": {
+            "const": "com.weverlabs.ap2.direct-checkout.1"
+          }
+        },
+        "required": [
+          "profile",
+          "challenge_token",
+          "holder_jwk",
+          "consent_digest",
+          "expires_at"
+        ],
+        "type": "object"
+      },
+      "mode": {
+        "const": "issue_mandate"
+      }
+    },
+    "required": [
+      "mode",
+      "mandate"
+    ],
+    "type": "object"
+  }
+]
  2. First observed

TDQS

B3.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true, readOnlyHint=false, openWorldHint=true and idempotentHint=false, so the safety profile is partly covered. The description nonetheless adds substantial context the annotations cannot: atomic one-unit reservation, idempotency keys on issuance, credential-bound usage/attribution, the hard line that records never execute work or authorize payment, and that revocation does not undo a committed record. The repeated assertion of non-execution is the main behavioral value here.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The text is a dense wall of repeated claims: the 'does not execute work, deliver results, or authorize payment' caveat appears at least three times, and the 'GET, contract reads, drafts and all other modes have no x402 fee' point is stated twice verbatim. Billing terms are front-loaded ahead of the tool's actual function, and the structure provides no scannable separation between modes, actors and constraints.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex, multi-mode, credential-driven control plane with no output schema, the description covers the essential behavioral frame: pricing scope, per-mode credential requirements, idempotency, approval binding, atomic reservation, and the immutability/non-execution boundary. It is missing only a concise mode enumeration and any hint about result/inspection semantics, which is a modest gap given the schema already documents per-mode return expectations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Top-level schema description coverage is 0% for the lone 'mode' parameter, but the schema compensates with detailed oneOf branch descriptions for each mode, so the description only needs to add meaning. It does supply useful header semantics ('Operator issuance and grant approval require X-Wever-Operator-Key and Idempotency-Key; consumption requires the target agent's X-Wever-Agent-Key') and AP2 profile details, but it never maps its guidance cleanly onto the mode enum, leaving the agent to reconcile prose with the oneOf branches itself.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description does state a core function ('Issue signed mandates and operator-approved action grants, then let credentialed agents consume them to create immutable work-order records'), but this is buried under pricing and liability boilerplate. It never enumerates the eight modes that actually define the tool (read_control_plane, draft_mandate, issue_mandate, issue_action_grant, execute_delegated_action, inspect_action_grant, revoke_mandate, read_audit), and it does no work to distinguish itself from the many similarly named wever_* siblings beyond a passing reference to the AP2 gateway.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is real guidance on which actor uses which operation (operator issues/approves with X-Wever-Operator-Key; the bound agent consumes with X-Wever-Agent-Key) and on billing scope (only issue_mandate is charged). However, there is no explicit when-to-use-this-vs-a-sibling statement, no description of prerequisites for choosing a mode, and no exclusions relative to tools like wever_agent-work-order-rail or wever_ap2-mandate-gateway.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Wever Labs Agent Products toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources