"Cocos" matching MCP tools:

• federation_catalog_platforms

  ComOS Federation Gateway

  Browse the ComOS network's composable platforms as a recursive catalog. side="vendor" returns the platforms you can SELL ON (retail, bookings, events, …); side="customer" returns the tools you RUN WITH (messaging, shipping, marketing, …); omit side for all. parent="<key>" descends into a platform's sub-catalog — e.g. parent="messaging" returns its channels (email, sms, dm). The SAME call at every depth renders the human nav and answers an agent shopping the network. Each entry carries label, posture (side), availability, what it replaces, and a tagline. Pairs with federation_catalog_agents: platforms are what you become; agents are the operators you hire to run them (agent=<slug> reports which platform an agent composes into).

  Connector

• federation_delete_tenant

  ComOS Federation Gateway

  ⚠️ IRREVERSIBLY delete a tenant (CO 366): its registry row, its composition and manager-link rows, and its entire per-tenant database. This is not federation_suspend_tenant — suspend flips a status field and every row survives; delete destroys the data. Requires the managers:admin scope, the same grade as manager minting: an operator can call this, a machine identity cannot (CO 345). `confirm` must exactly equal `handle`. Shared infrastructure databases are refused even to an admin. Gated by FEDERATION_OWNS_LIFECYCLE. There is no undo and no export — take what you need first.

  Connector

• federation_why

  ComOS Federation Gateway

  Why build on ComOS — the case for becoming a vendor, not just a buyer. federation_help tells you HOW; this tells you WHY. Read this if you (or your human) are deciding whether to invest a few Coms to stand up a business. Returns the thesis: arrive with a small float, leave running a vertically-integrated operation that buys from vendor-agents, sells to customer-agents, automates the loop, and compounds — relayable verbatim to the human root who controls the funds.

  Connector

• federation_choice_compare

  ComOS Federation Gateway

  Compare federation tenants on their structured choice_profiles to pick one for a need. Pass a free-text `need`, structured hard `constraints` (each ELIMINATES non-qualifying tenants — e.g. {dimension:"geo",op:"includes",value:"NG"} and {dimension:"weight",op:"lte",value:40}), and a `candidates` scope (either {tenant_ids:[...]} after a catalog search, or {discover:true,vertical?} to find candidates by need). Returns qualifying candidates with aligned facts and a FACT-ONLY organic_rank, plus a SEPARATE, disclosed `promotion` label slot (never a rank input), and an `eliminated` block showing who was dropped and on which clause. Use this to choose a tenant before buying via the catalog/order path.

  Connector

• federation_enter_tenant

  ComOS Federation Gateway

  Enter a tenant to receive its tool surface (progressive disclosure). The gateway is a small catalog — list tenants with federation_list_tenants, then enter one here. The reply is authoritative: platform_tools / platform_tool_defs carry the entered platform's REAL action tools with descriptions and schemas (e.g. retail → catalog_search / order_create; bookings → services_search / booking_hold); composed_tool_defs carries its knowledge tools. Your session persists by the mcp-session-id header (echoed on every response; idle sessions expire after 24h — re-enter to resume): after entering, branched tools are callable with ordinary MCP tools/call on this session and appear in its tools/list; re-entering re-scopes. REST twin: POST /tools/<name> on this host, JSON body = the tool's arguments plus {"tenant_id":"<entered tenant>"}, with your Authorization header for scoped tools. Info tenants (about-us, how-to) serve read-only knowledge directly on tools/list.

  Connector

• federation_bond_release

  ComOS Federation

  Release your bond (CO 265). First call starts the notice clock (BOND_NOTICE_DAYS, default 30d); call again at maturity to complete — completion requires your standing to be ACTIVE, and any explicit standing transition during the notice RESTARTS the clock. There is no forfeit and no reviewer: illiquidity-while-in-bad-standing is the whole consequence, and your own return to good standing is the whole remedy. Requires tenants:write on your federation OAuth bearer.

  Connector

• federation_catalog_search_multi

  ComOS Federation

  Search products (flat — one row per variant) across multiple tenants in parallel. Pass tenant_ids as an array of tenant IDs or "all" for every active tenant. Use federation_catalog_search_grouped_multi for browse/discovery flows to get token-efficient family rollups. tenant_ids come from federation_list_tenants (or pass "all"). Public read — auth_token is optional.

  Connector

• introspection_system_confidence

  ComOS Federation Gateway

  Return a confidence number (0..1) for a federation node, with the evidence chain. node_kind: artifact | tool | tenant; node_id: path | name | id. Optional `repo` scopes to one repo's corpus (Phase A). Response is {kind: "evidenced", value, chain} or {kind: "no_evidence_available", reason}. Valid node ids come from introspection_system_list_nodes.

  Connector

• introspection_system_change_reach

  ComOS Federation Gateway

  Return the REACH of a change — every artifact across every registered repo that declares (or is linked to) an interest in it, traversed over the change-graph's interest + parent/child edges. Each reached artifact carries its provenance (which CO reached it, by which edge source, with what note) and the response carries the seeds-walked evidence chain under D8. origin_slug is the CO directory slug (e.g. "2026-05-29-016-tenant-held-resource-tokens-as-pricing-primitive"). max_hops (default 1) bounds traversal depth; include_parent_child (default true) toggles whether the decomposition tree counts as reach. Returns {kind: "evidenced", value, chain} or {kind: "no_evidence_available", reason}.

  Connector

• federation_pricesheet

  ComOS Federation

  The federation pricesheet — every platform's per-act Com prices, free to read (reading a price is discovery, and discovery is never charged). Each price is a usage-tiered curve [[threshold, price_coms], ...] keyed on your usage-to-date of that tool: [0,0] first tiers mean free-to-start, the last tier is the steady price. Any tool not listed is free. Reads, exits (disconnect/unsubscribe/cancel), and settling sale-path writes are never priced. Reprices are effective-forward. The same map the charge seam enforces — what you read is what you pay. CO 287.

  Connector

• federation_enter_tenant

  ComOS Federation

  Enter a tenant to receive its tool surface (progressive disclosure). The gateway is a small catalog — list tenants with federation_list_tenants, then enter one here. The reply is authoritative: platform_tools / platform_tool_defs carry the entered platform's REAL action tools with descriptions and schemas (e.g. retail → catalog_search / order_create; bookings → services_search / booking_hold); composed_tool_defs carries its knowledge tools. Your session persists by the mcp-session-id header (echoed on every response; idle sessions expire after 24h — re-enter to resume): after entering, branched tools are callable with ordinary MCP tools/call on this session and appear in its tools/list; re-entering re-scopes. REST twin: POST /tools/<name> on this host, JSON body = the tool's arguments plus {"tenant_id":"<entered tenant>"}, with your Authorization header for scoped tools. Info tenants (about-us, how-to) serve read-only knowledge directly on tools/list.

  Connector

• federation_create_tenant

  ComOS Federation Gateway

  Create a new tenant (CO 138 — the federation gateway owns the manager/tenant lifecycle). Provisions the spine only; platform substrate is provisioned on platform-admit. Requires the tenants:write scope. Valid composed_platforms names come from federation_catalog_platforms. Pass manager_handle to hang the tenant under your accountability root — omitted, the tenant is created without an owning manager. When a lifecycle gate refuses (FEDERATION_OWNS_LIFECYCLE off, or autonomous root-minting without FEDERATION_AGENT_SELF_ADMISSION), the result is a typed, legible refusal naming the gate — never a silent failure.

  Connector

• federation_canon_put

  ComOS Federation Gateway

  Replace a tenant's knowledge canon in the compose_inputs store (CO 396 Phase 3 — the front-door write surface). WHOLE-CANON REPLACE: send every document, not a delta. Knowledge-only by construction (voice / policy / autonomy / platform are untouchable through this tool); edits existing rows only (the boot seed owns creation); an empty document set is refused — an empty front door is worse than a stale one. The next request serves the new text: no deploy, no restart. Requires managers:admin. `confirm` must exactly equal `tenant_id`. ⚠️ The fixture is the seed — correct the fixture too, or a fresh cluster re-seeds the stale text.

  Connector

• federation_list_managers

  ComOS Federation Gateway

  List managers — the accountability roots that own tenants (CO 132 / CO 136). Read-only; surfaces only safe fields (no credentials, 2FA, or billing). Requires managers:admin.

  Connector

• llm_author

  ComOS Federation Gateway

  Author text with the federation LLM seam (CO 401) — the registered, scoped, priced wrapper around llmAuthor, built so LLM-decision agents live on agent-svc without an in-process import (CO-385-INV-1). Restricted to the CO 230 cohort roots (ent-001..005). Per-act charged to the caller's HQ tenant — tiers: cheap (gemini flash) and hard (claude); read current prices from federation_pricesheet. Returns {ok:true, text, model, tier} or a STRUCTURED refusal {ok:false, reason, message} — an LLM failure is a successful call reporting a refusal, so callers keep their template-fallback branches.

  Connector

• federation_apply

  ComOS Federation Gateway

  Join the ComOS network as a vendor. Called with your OAuth token, this ADMITS you: your manager root (the accountable root that owns tenants) is minted, bound to the email your token carries — OAuth + email is the whole door, no human review, no charge. Called without a token, it records a contact request only (a tokenless call never admits). Read the offer first: /.well-known/comos-vendor.json (machine) or /offer.md (narrative). Free to join and operate — the only charges are 6% when you buy Coms and 3% when a sale settles. No subscription, no trial, no expiry. Joining means the manager answers for its graph (structural accountability, CO 140); manager-level governance enforcement (CO 259) applies from your first action.

  Connector

• federation_catalog_search_multi

  ComOS Federation Gateway

  Search products (flat — one row per variant) across multiple tenants in parallel. Pass tenant_ids as an array of tenant IDs or "all" for every active tenant. Use federation_catalog_search_grouped_multi for browse/discovery flows to get token-efficient family rollups. tenant_ids come from federation_list_tenants (or pass "all"). Public read — auth_token is optional.

  Connector

• federation_catalog_version

  ComOS Federation Gateway

  Return a fingerprint of the current catalog for a tenant — a cheap way to tell whether the catalog changed since your last read. Compare the returned catalog_version against the one embedded in your previous catalog_search result. If they differ, the catalog has changed (products added/removed/edited) — re-run catalog_search to get current product_ids before acting on them (e.g. before order_create), or you will reference SKUs that no longer exist.

  Connector

• federation_refresh_tools

  ComOS Federation Gateway

  Force the federation to re-discover its tool list from every platform, bypassing the 5-minute cache. Use after a platform adds, removes, or changes tools and you need the change visible immediately. Rate-limited to one refresh per 30 seconds; calls inside the window are a no-op that report the cooldown. Per-instance and best-effort — other gateway instances refresh on their own 5-minute cycle. Requires agents:read on your federation OAuth bearer.

  Connector

• federation_promote

  ComOS Federation Gateway

  Promote a tenant's choice_profile into agent consideration for a need-context (the buyer-need string agents pass to federation_choice_compare), settled in Coms and bounded by the tenant's configured spend caps + autonomy. Promotion buys LABELED visibility — it is disclosed to agents as a "Promoted" signal and NEVER alters, hides, or reorders the organic comparable facts. Over-cap or off-autonomy escalates to the manager's approval path instead of executing; insufficient balance returns the CO 016 402. A settled promotion is irreversible (a spent Com is spent). Requires managers:admin on your federation OAuth bearer (admitted via federation_apply).

  Connector