Physical Capability Cloud

CALL THIS FIRST. Provisions an API key for the operator. Returns a pcc_live_* key that must be included as 'Authorization: Bearer <key>' on all subsequent requests. Accepts either email OR walletAddre…

List all active API keys for the authenticated operator. Returns key IDs, prefixes, scopes, rate limits, usage counts, and creation/expiry timestamps. Requires a valid API key or SIWE session.

Revoke an API key permanently. The key will immediately stop working. You must own the key. Use list_api_keys to find the key ID.

Auto-detect current setup state: env vars, database, adapters, chain connectivity, storage, identity. Use this to see what's configured and what's missing before onboarding.

Generate a KERNEL_CONFIG JSON from device descriptions. Tell it what machines you have and it produces the config ready to paste into your environment.

Validate a kernel config (20+ checks: JSON structure, device connectivity, adapter compatibility). Returns validation errors and warnings.

Register a device in the database with adapter config and capabilities. Part of Step 3 in the onboarding flow. Required: kernelId, deviceId, type and adapterType (400 missing_required_fields otherwise…

Submit a test job to verify the full pipeline works end-to-end (Step 4 of onboarding). Returns job ID and result.

Comprehensive setup status across 6 categories: gateway, database, adapters, chain, storage, identity. Use to confirm everything is green before going live.

List all capability types registered on the network (FDM, SLA, CNC, HPLC, etc.) with metadata.

Search capability templates by type or keyword. Returns templates with pricing, assurance tiers, and availability.

Get configuration options for a capability type (materials, dimensions, tolerances, assurance tiers). Use before calling calculate_price.

Calculate price for a capability configuration. Returns base price, tier premiums, and estimated total cost.

Build and submit a capability contract with on-chain milestone escrow. Returns job ID and escrow address.

List all Shop Kernels on the network with status and capability types. Optionally filter by status.

Get kernel details including full capability objects, devices, and queue.

List all devices registered under a specific kernel, including adapter configs and device types.

List all jobs submitted to a specific kernel, including job status and progress.

Register a new Shop Kernel (physical site) on the PCC network. Part of Step 2 in the onboarding flow.

List all jobs with status. Optionally filter by kernelId or status.

Get job details including progress, evidence bundles, and milestones.

Update a job's status and optional progress percentage. Used by kernels to report job progress.

List escrow contracts with milestones and bonds. Optionally filter by status.

Get escrow details. Pass a DB ID for database record (with milestones and disputes), or an EVM address (0x...) to read directly from the blockchain.

Read full on-chain escrow state with all milestone details from the blockchain. More detailed than get_escrow for on-chain contracts.

Get on-chain event history for an escrow contract. Returns funding, release, dispute, and bond events.

Read an ERC-20 token balance for an account address from the blockchain.

Read the ERC-20 token allowance granted by an owner to a spender from the blockchain.

Read dispute state for a specific milestone from the blockchain.

Check if on-chain write operations are enabled (requires PCC_GATEWAY_PRIVATE_KEY to be configured). Returns write status and signer address.

Fund a protocol-created escrow on-chain. Approval is handled INTERNALLY by the gateway for protocol-created escrows (audit C-03 removed the public approve step) — do NOT call a separate approve first;…

Release a milestone payment on-chain after the challenge window has expired. Returns transaction hash.

File a dispute against a milestone on-chain. Challenger must post a bond and provide evidence hash. Returns transaction hash.

Deposit an operator bond for a milestone on-chain. Required for Assurance Tier 3 jobs. Returns transaction hash.

Submit an evidence bundle hash for a milestone on-chain. Links the physical evidence to the on-chain settlement record. Returns transaction hash.

Submit a verifier attestation for a milestone on-chain. Used by third-party verifiers (Bittensor subnet) to confirm evidence quality. Returns transaction hash.

Archive an evidence bundle to IPFS/Storacha for permanent decentralized storage. Returns the content-addressed CID.

Get an encrypted evidence bundle by its bundle ID. Returns the encrypted payload and key capsules.

Grant a new recipient access to an encrypted evidence bundle. Creates a re-encrypted key capsule for the recipient.

List all evidence access grants for an address. Returns bundles the address has been granted access to.

Archive an encrypted evidence bundle to IPFS and store the resulting CID in the database. Idempotent — returns existing CID if already archived.

Get IPFS CIDs for a bundle — returns the primary CID, metadata CID, and Filecoin deal ID if available.

Retrieve raw data from IPFS by CID. Used to fetch archived evidence bundles from decentralized storage.

Get Lit Protocol access conditions for a Lit-encrypted evidence bundle. Returns the conditions that gate decryption.

Decrypt a Lit Protocol-encrypted evidence bundle using a Lit auth signature. Returns the decrypted bundle payload.

Verify a ZK proof by its proof ID. Checks the proof against its verification key and public inputs.

Create a Merkle commitment for an evidence bundle hash. Used as the first step in ZK proof generation for Tier 3 assurance.

Get aggregate pipeline telemetry statistics including phase timings, success rates, and throughput metrics across all jobs.

List currently active jobs with their current pipeline phase and telemetry status.

Get full event timeline for a specific job — all pipeline phase transitions with timings and metadata.

Query structured logs with filters for level, source, jobId, kernelId, time range, and full-text search.

Manually emit a telemetry event for a job pipeline phase. Used by kernels and agents to report execution progress.

Submit an evidence bundle for human verification. Selects a panel of verifiers from the network and returns assigned verifier IDs.

Get pending verification assignments for a verifier node. Returns requests this verifier has been assigned but not yet responded to.

Get verification status for a request. Returns vote tally, consensus state, dispute list, and pending response count.

Submit a verifier's verdict for a verification request. Returns consensus state after this vote.

File a dispute against the consensus verdict. Only verifiers who submitted a response can dispute. Requires additional evidence CID.

Register a capability as a Story Protocol IP Asset. Returns an ipId and NFT token. The designer earns royalties whenever this capability is used.

Register job evidence as a derivative IP asset on Story Protocol, linking it to the parent capability's IP. Operators earn royalties from derivative use.

Set revenue splits for an IP asset among stakeholders (designer, operator, verifier, assembler, curator). Splits must sum to 100.

Pay royalties to an IP asset vault. The payer sends tokens that flow to stakeholders via the royalty splits.

Claim earned revenue from an IP asset vault. Returns the claimed amount and transaction hash.

Get a revenue snapshot for an IP asset — total earned, pending claims, and recent payments.

Get the full IP lineage chain for an asset — parent capabilities and all derivative job registrations.

Get the Story Protocol IP registration for a capability by its capability ID.

Raise a Story Protocol IP dispute against an asset. Provide evidence hash and reason.

List protocol templates in the library. Filter by tags, required capabilities, search query, or status.

Get protocol template details by ID. Returns steps, transfers, parameters, and metadata.

Create a new protocol template draft. Returns the new template ID.

Update an existing protocol template (must be in draft status). Returns updated name and version.

Publish a draft protocol template, making it visible in the protocol library for others to discover and use.

Fork a protocol template to create your own version with parameter overrides. Returns the new fork ID.

List all forks of a protocol template. Shows who forked it and what parameters they changed.

Validate a protocol template against a specific kernel — checks capability availability, transfer compatibility, and automation level feasibility.

List protocol runs. Filter by status or kernelId.

Get protocol run status including step progress, transfer status, current phase, and evidence hashes.

Instantiate a protocol template as a run on a specific kernel with given parameter values.

Start execution of a protocol run that is in 'ready' or 'binding' state.

Pause a running protocol run. Use resume_protocol_run to continue.

Resume a paused protocol run from where it stopped.

Cancel a protocol run. Cannot be cancelled once completed or already cancelled.

List active instrument workflows in the orchestrator. Optionally filter by status.

Get detailed workflow information including steps, node assignments, and progress.

Get resource transfer graphs showing instrument topology, transfer edges, and mechanisms for all kernels.

List automation status for all instrument transfer pairs. Shows current automation level, episode count, and training readiness. Filter by kernelId.

Get automation status for a specific instrument-to-instrument transfer pair.

Record a transfer episode for a node pair. Increments episode count toward VLA training threshold.

Advance the automation level for a transfer pair (manual → teleoperated → pilot_operated → vla_assisted → fully_autonomous). Requires sufficient training episodes.

List all transfer agents (robots and human operators) available for instrument-to-instrument transfers.

Logistics hub overview: active shipments, pending installations, and upcoming bookings.

List equipment shipments with tracking status. Optionally filter by status.

Create a new equipment shipment with origin, destination, package details, and provider.

Get shipping quotes from logistics providers based on origin, destination, weight, and priority.

List equipment installation orders with step progress and status.

List space bookings for hosting equipment. Optionally filter by status or space.

Search for lab/workshop hosting spaces. Filter by size, access schedule, and other requirements.

Get detailed information about a hosting space including power, amenities, safety features, and pricing.

Find hosting spaces that match specific machine requirements (voltage, area, etc.). Returns scored matches.

Equipment marketplace overview with demand/supply metrics across all capability types.

List equipment classes (FDM printers, CNC mills, etc.) with market snapshot data including utilization, demand, and pricing.

Get network-wide demand vs supply timeline data for capacity planning and market analysis.

Calculate ROI projection for onboarding equipment. Returns month-by-month revenue, cost, and break-even analysis.

Not available: no route answers GET /api/operator on this gateway. The operator's real kernels, devices and in-flight jobs are at GET /api/agent/me.

Answers 501 not_available: operator machines with utilization and uptime are not recorded on this gateway. The operator's real kernels, devices and in-flight jobs are at GET /api/agent/me.

Answers 501 not_available: operator earnings history is not recorded on this gateway. Per-job payment state is at GET /api/jobs/:jobId/execution.

Answers 501 not_available: operator certifications are not recorded on this gateway (there is no certification store; certifications typed at registration are the operator's own claim and are not chec…

List all registered sensor channels across kernels. Returns channel descriptors with units and ranges.

Get sensor channels for a specific kernel. Returns live channel descriptors.

Get settlement pipeline status including pending operations count, total value queued, and smart account address.

Get settlement epoch history showing past batch settlements with timing and operation counts.

DePIN treasury, soulbound capability certificates, and current reward epoch stats.

Mint a soulbound capability certificate (cNFT via Metaplex Core) for a kernel. Proves a verified capability on-chain as an immutable credential. Step 5 of onboarding.

Register a new machine on the PCC network. Provide machine details to create a registration record. Include `operator` ({walletAddress, displayName, email}): without it the registration is recorded as…

AI analysis of machine documentation. Upload docs to get suggested capabilities, extracted specs, materials, and tolerances.

One-click agent onboarding with an invite code. Provisions wallet, identity, LLM access, and PCC tools in a single call.

Validate an invite code before redeeming it. Returns whether the code is valid and what it includes.

List active and completed settlement batches.

List encrypted evidence bundles stored in the gateway.

Signal that you want a capability that doesn't exist on the network yet. Creates a demand signal and may auto-create a bounty if enough demand accumulates.

List open bounties for capabilities the network needs. Operators can claim these to earn rewards by onboarding new capabilities.

Claim a bounty to onboard a new capability. The operator commits to registering the capability and completing verification.

Verify bounty completion by scoring the delivered capability against requirements.

Get top demand signals aggregated by capability type. Shows which capabilities are most wanted on the network.

Get the bounty hunter leaderboard showing top operators by bounties claimed and verified.

Create an investment pool for a capability bounty. Stakers earn future protocol fees when the capability goes live.

Stake USDC or credits into a capability investment pool.

Check earnings from capability investment pools for a staker address.

Get details of a specific investment pool including stakes, status, and revenue share terms.

List all investment pools. Optionally filter by status or capability type.

Close an investment pool to new stakes. Pool enters sunset phase.

Operator claims an investment pool reward after capability verification.

Convert an existing bounty into an investment pool. Allows community staking toward the bounty's capability.

Get Bittensor verification subnet health, agent bridge status, and network connectivity.

List verification subnet miners on the Bittensor network. Returns miner addresses, scores, and leaderboard positions.

List agent-to-agent conversations showing topic, participants, message count, and status.

Submit a bug report, suggestion, or general feedback about the PCC network.

Report a detected anomaly — protocol failure, evidence mismatch, stuck job, or suspicious behavior. All agents on the network are notified.

List all unresolved anomalies on the network. Filter by severity, category, or target agent.

Get anomalies involving a specific agent, plus their trust impact score.

Mark an anomaly as resolved with a resolution note.

Get aggregate anomaly statistics — total, unresolved, by severity, by category.

Report a protocol failure — when a step in the evidence/escrow/verification pipeline breaks. System may auto-recover.

Query the DHT for capabilities matching your requirements. Returns announcements from operators whose equipment matches the type, materials, and price range you specify.

Announce capabilities to the DHT network. Signs the announcement with your node's Ed25519 key and broadcasts to connected peers.

List known DHT peers and their connection status. Shows which nodes are currently connected to the gossip network.

Create an execution scope for a job. Scopes define exactly which tool calls are allowed on a kernel during a job, with command budgets, retry limits, and time-to-live. Required before issuing SCOPED W…

Revoke an execution scope immediately (emergency stop). All pending tool calls under this scope are rejected. The kernel enters a stopped state. A new scope must be created to resume.

Get the audit trail for an execution scope — every tool call made under this scope, with validation results, timestamps, and outcomes.

Relay a tool call to a device executor. The brain (LLM) posts tool calls here; the executor (on the device) polls for them and executes locally. Used for the brain/executor split architecture.

Get the result of a previously relayed tool call. Poll this endpoint until the executor has processed the call and posted results.

Get the latest camera frame from a kernel as a JSON snapshot (base64 JPEG + metadata). For raw JPEG image, use GET /api/ot2/camera/latest directly.

Send a chat message to a kernel's operator or agent. Used for human-in-the-loop communication during job execution, troubleshooting, and escalation.

Get chat history with a kernel. Returns messages between agents, operators, and users for a specific kernel.

Approve a submitted machine registration. Moves it from 'submitted' to 'approved' status, enabling the operator to activate and start accepting jobs.

Reject a machine registration with a reason. The operator can see the rejection reason and resubmit.

Activate an approved registration, making the operator's equipment live on the network and ready to accept jobs.

Fast-track: submit evidence that your device works and get auto-approved + activated immediately. No manual review needed. Submit a photo of test output, device health snapshot, or a full evidence bun…

List all machine registrations on the network. See pending, approved, active, and rejected registrations. Public endpoint — no auth required.

Get details of a specific machine registration by ID, including capabilities, pricing, operator info, and current status.

Get NEAR Protocol chain-abstraction integration status. Returns supported chains (near, eth, base, arbitrum, optimism, polygon), supported assets (USDC, USDT, NEAR, ETH, WBTC), and capability flags. U…

Get a cross-chain payment quote from the NEAR 1Click solver network (chaindefuser.com). Provides optimal routing and fee estimates for funding PCC escrow contracts using any source asset on any suppor…

Submit a cross-chain payment intent to the NEAR 1Click solver network. Creates a signed intent that routes the payment atomically across chains. Call near_quote first to obtain a quoteId. Intents typi…

Check the settlement status of a submitted NEAR 1Click cross-chain payment intent. Statuses progress: pending → submitted → settled | failed. Returns txHash and explorerUrl when settled.

Read the PCCProtocol root contract state: current fee rate, total protocol fees collected, total escrow count, and registry addresses. Requires PCC_PROTOCOL_ADDRESS to be configured on the gateway.

Calculate the protocol fee for a given USDC amount (6-decimal units). Returns the fee, the net amount after fee, and formatted versions of both. Use this before building escrow contracts to understand…

Get total protocol fees collected for a specific ERC-20 token address across all escrows. Returns raw wei amount and human-readable formatted value.

Get protocol fees collected from a specific escrow contract. Also returns whether the escrow was deployed via the protocol factory. Useful for auditing fee flows.

Create a new MilestoneEscrow contract via the PCCProtocol factory on-chain. Protocol-deployed escrows have fee collection and registry tracking built in. Requires PCC_GATEWAY_PRIVATE_KEY write access.

Get a snapshot of DHT telemetry counters and recent events. Returns message counts, peer connection stats, query/announce rates, and a list of the last 50 metric events. Use for monitoring network hea…

List all supplies and materials marketplace categories with the count of active listings in each. Categories cover the full spectrum of physical production inputs: raw metals, plastics, lab reagents, …

Search and filter supplies/materials marketplace listings. Operators buy raw materials here to fulfill capability contracts. Filter by category, in-stock status, location, or free-text query.

Get full details of a specific supplies/materials marketplace listing by ID. Returns pricing, availability, lead time, location, and tags.

Create a new supplies/materials listing in the marketplace. Suppliers post available raw materials, lab reagents, tooling, or consumables for other operators to purchase.

Update an existing supplies/materials listing (price, stock status, description, etc.). Pass only the fields you want to change.

Remove a supplies/materials listing from the marketplace. The listing is immediately hidden from search results.

Place a purchase order for supplies or materials. Calculates total price automatically (quantity × pricePerUnit). Returns an order with 'pending' status. Optionally links to an on-chain escrow for tru…

List marketplace supply orders. Filter by buyerId, sellerId, or status. Returns order history with pricing and status.

Get details of a specific supply order including the associated listing details, quantity, total price, status, and optional escrow address.

Raw system state dump — actual DB rows for kernels, devices, jobs, evidence, registrations, capabilities, agent conversations, audit log. No fake numbers, no summaries.

Operator polls jobs assigned to their kernel; status defaults to queued, and the route can filter any status. Requires operate authority for this kernel: its recorded operator identity (the caller tha…

Operator pushes evidence bundle from a completed job execution. Requires decide authority for the stored job's kernel: its proven operator wallet or the gateway admin authority. A matching claimed ope…

Operator sends heartbeat with capability re-announcement. Keeps the kernel alive on the network and updates its own capability rows. Requires operate authority for this kernel: its recorded operator i…

Operator reports a job's status (in_progress, completed, failed). Requires operate authority for the stored job's kernel: its recorded operator identity (the caller that registered it), its proven ope…

Fast-track paid job: one call from DHT discovery to funded escrow + active scope. Auto-negotiates, quotes, creates escrow with milestones, creates execution scope. Returns jobId, scopeId, escrowId, qu…

Complete a job: gathers tool call audit trail from execution scopes, builds evidence bundle with SHA-256 hash, stores evidence, revokes scopes, and settles escrow (mock or real). This is how a job run…

Get a job's settlement status from its own escrow records: status (settled only when a settlement read confirms the release; reported_released when the milestone record says released but nothing confi…

Get the tool manifest for a kernel's device type. Lists all available tools with their safety classification (read, safe_control, scoped_write, privileged) and input schemas. Use to understand what to…

Relay a tool call to any kernel's device executor via the generic relay (not OT-2 specific). Works with any device type. Safe tools (read/safe_control) don't need a scope. Scoped write tools require a…

Submit a high-level capability request in natural language. The system automatically decomposes it into a capability DAG with dependencies, timelines, and budget allocation across fabrication, design,…

List all capability requests with optional filtering. Shows status, decomposed DAG summary, estimated costs, and timelines.

Get a capability request by ID with the full decomposed DAG — all capability nodes, their dependencies, estimated costs/hours, assigned operators, and linked bounty IDs.

Re-trigger decomposition of an existing capability request. Overwrites the existing capability DAG with a fresh decomposition. Useful after updating the description or budget.

Publish all pending capability nodes in a request as bounties. Each node becomes a bidding opportunity for operators. Returns the list of created bounty IDs linked to each capability node.

Get the capability DAG (directed acyclic graph) for a request as adjacency data — nodes with all fields plus explicit edges showing dependency relationships. Useful for visualization or workflow plann…

Get the critical path (longest dependency chain) for a capability request. The critical path determines the minimum calendar time to complete the request. Returns node IDs in order, the full node deta…

Assign an operator to a specific capability node within a request. The node status changes to 'assigned'. Operators claim nodes to indicate they will execute that capability.

Update the status of a capability node within a request. Valid transitions: pending → bidding → assigned → in_progress → completed (or failed). When all nodes complete, the request automatically moves…

Update a capability request's title, description, budget, deadline, urgency, or contact info. Does not re-decompose — call pcc_decompose_request afterwards if you want a fresh DAG.

Cancel a capability request. Cancelled requests cannot be updated, decomposed, or published. This is a soft delete — the request remains visible with status 'cancelled'.

Not served by the PCC gateway: GET /api/oracle/health returns 404 there. PCC's verification oracle runs as a separate service, and this route answers only where a deployment fronts it. Agents never ca…

Not served by the PCC gateway: POST /api/oracle/verify returns 404 there. PCC's verification oracle runs as a separate service, and this route answers only where a deployment fronts it. Agents never c…

Get the current protocol fee rate (2.35%, immutable) and fee recipient address. The fee is hardcoded in the PCCProtocol smart contract — no admin, no governance, no upgrade can change it.

Register a capability instance for a kernel. Required before submitting jobs — the gateway needs at least one capability per kernel. Creates a liquid-handler, fdm, cnc-3axis, or other capability type.

Send a per-kernel heartbeat to keep the kernel marked online. Used by pcc-node daemons as an alternative to the operator relay heartbeat.

Announce capabilities for a kernel. NOTE: the gateway currently acknowledges this call but stores nothing, so it does not put any capability on the network. To publish a capability, use create_capabil…

Upload an encrypted diagnostic bundle when the operator's node has problems. The bundle is encrypted client-side with a retrieval code the operator must share with support before logs can be read. Use…

Send an operator support message to the PCC team. Creates a new support thread or appends to the operator's existing open thread. Can optionally attach a diagnostic retrieval code (from send_diagnosti…

Check for admin replies on the operator's support threads. Call this periodically or when the operator asks 'did they respond yet?'. Returns all threads for this kernel and a hasUnreadReplies boolean …

Reply to an existing support thread. Use when the operator wants to add information to a thread started earlier. Needs the threadId from check_support_replies or the original send_support_message resp…

Issue a fresh block-anchored CaptureNonceChallenge for a job. The operator's device must render this nonce into the captured media (QR code, audio tone, etc.) before calling pcc_capture_upload. The no…

Upload a capture (photo / video / audio / sensor clip) with its CaptureManifest for G1..G6 verification. Bytes are base64-encoded inline; optional base64 C2PA manifest bytes can be supplied for CC3+ c…

Anchor a PASS + anchor-candidate capture verdict to CaptureClassRegistry on-chain (Base Sepolia by default). Rejects FAIL/PARTIAL verdicts. Idempotent — re-submitting the same verdictId returns the ex…

Fetch the combined verdict + on-chain anchor view for a single capture. Mirrors the verifier's DB shape plus the anchor tx metadata (txHash, blockNumber, gasUsed, explorerUrl). Anchor is null if the v…

List recent capture verdicts, newest first. Optionally filter by jobId. Default limit is 50, capped at 200 server-side. Returns {verdicts, count, limit, jobId}.

Look up a capture's on-chain anchor record in CaptureClassRegistry by its 32-byte captureHash. Returns the registry address, captureHash, and decoded anchor tuple (declaredClass, verifiedClass, manife…

Report CaptureVerifier health: which adapters are loaded (c2pa, webauthn, appattest, playintegrity), their staleness status, in-memory challenge cache size, whether CaptureClassRegistry is deployed, a…

List the orchestrator templates the dashboard's chat console can drive. Each entry includes slug, display_name, description, produces_kind, capability_class (physical | digital), greeting, and api_bas…

Heuristic template matcher. Pass a free-text description of what you want to onboard (e.g. 'I run a CNC milling shop' or 'I have a Postgres database with a GraphQL endpoint') and the matcher returns a…

Start a new physical-operator onboarding session. Returns a session_id used by every subsequent /api/onboard/* call. Auth-required.

Scrape a URL into the running physical-operator onboarding session. Triggers a stealth fetch + structured extraction (machines, hours, services, certifications). Returns a small JSON summary; full ext…

Queue documents (datasheets, SOPs, MOPs, certifications) for ingestion into a physical-operator onboarding session. Document URLs may be local:// for files dropped in the chat console or full https://…

Finalise a physical-operator onboarding session: registers the operator on PCC, mints a wallet, writes the SEO mirror, returns the publication payload (capabilities, operator_id, discovery_url). Idemp…

Coarse status snapshot for a physical-operator onboarding session: current state, 0-100 progress, scraped_count, ingested_count, last_event, publication payload (if built). Cheap — designed for pollin…

Full event log for a physical-operator onboarding session — feeds the chat console's activity sidebar. Supports incremental polling via ?since=<unix-millis>. Returns the next cursor on every response.…

Register a contributor profile binding a wallet address to a role and a published RateSchedule. Body: address (0x40hex), role (10 ContributorRole values from ADR-12 §2.1 + legacy 'designer'), schedule…

List all contributor profiles for an address across roles. Returns an array of {id, address, role, scheduleHash, ipId, contributorNftTokenId, metadataUri, registeredAt}. Returns empty array when no pr…

Publish a sealed off-chain RateSchedule. Computes scheduleHash server-side via the canonical sha256-over-canonical-JSON algorithm (matching the on-chain RateScheduleRegistry.publish() invariant). Idem…

Fetch a published RateSchedule by its content hash. Returns {schedule, publishedBy} with segments re-validated via Zod, or 404 if not found.

Evaluate a published RateSchedule at a moment, returning the effective bps. Inputs: scheduleHash + now (unix seconds) + optional jobValueCents (piecewise-value) + optional jobsPerDay (adoption-indexed…

Set (insert-or-replace) the TrainingManifest for a model IP — the dataset weight map the LicensingEngine walks when distributing payouts to a 'model-author' entry in a CompositionManifest. Dataset wei…

Fetch the TrainingManifest for a model IP. Returns the parsed datasets array + manifestHash + createdAt, or 404 if no manifest has been set.

Generate a complete KERNEL_CONFIG JSON for a Trilobio (tcode-api) fleet controller. Wraps `buildTrilobioConfig()` from the @pcc/trilobio npm package. Returns a TrilobioKernelConfig with sensible defau…

Sanity-check operator-supplied Trilobio options before generating a KERNEL_CONFIG. Wraps `validateTrilobioOptions()` from @pcc/trilobio. Catches the common mistakes (malformed URL, missing creds, out-…

Quick lint of a tcode-api Python script before submission to a Trilobio fleet controller. Wraps `validateTcodeScript()` from @pcc/trilobio. Surface check only — NOT a sandbox or sanitizer. Looks for: …

Return the `TRILOBIO_CAPABILITY` constant from @pcc/trilobio — a default capability template for a Trilobio fleet controller. Pass to POST /api/capabilities to publish a baseline liquid-handling capab…

Attach a notification/dispatch channel to an operator so PCC knows how to ping them when a job lands. The operator's onboarding agent calls this AFTER the conversation that produced the channel record…

List every channel attached to an operator. Returns the full channel records (id, transport, direction, endpoint, describe, enabled flags). Useful for an operator's onboarding agent to confirm what is…

Update an existing channel — toggle enabled, rewrite the describe contract, change the endpoint payload, etc. Merges into the existing record. The operator slug, id, and createdAt are immutable.

Remove a channel from an operator. Future jobs will not dispatch to it. Use update_operator_channel with enabled=false to silence temporarily without losing the recipe in `describe`.

Fire a synthetic job at every enabled channel for an operator so the onboarding agent (and the human watching) can confirm the integration end-to-end before a real job lands. Returns per-channel dispa…

Bidirectional onboarding: the registry talks back. Describe in plain English what you are trying to set up — 'wood-fired pizza shop in SF', 'Opentrons OT-2 liquid handler', 'same-day SF courier' — and…

Return CSDs sorted by adoption (usage-count descending). Useful for first-time operators who want to see what kind of capabilities others are publishing. Each entry includes the CSD record plus usage …

Four-slot substrate view for an operator: kernels, capabilities (with sla + availability), notification channels, and the per-kernel A2A agent-card URLs. Returns totals and a `missing` list naming any…

Propose a composition — a sequenced DAG of capability instances to satisfy a multi-step outcome under a budget + assurance tier. Accepts either a flat `steps` list or an outcome chain. Returns a candi…

Retrieve a previously-proposed composition by id. Returns 404 if unknown, 410 if the 30-minute proposal window has expired. Use this to inspect a plan before executing, or to recover a plan id after a…

Commit a proposed composition: drives the DAG through the workflow engine, each step records a reputation outcome, the composition's reputation is finalized when the run ends. When `PCC_COMPOSE_EXECUT…

Report a bug, friction, or dead-end you hit while using PCC. Call this the moment you get stuck and cannot recover: a 5xx (its response carries a `report_hint` with pre-filled fields), a 4xx you canno…

Report one phase of an onboarding attempt, success or failure (attempt reporting contract v1). Send one report when each runbook phase ends, and a final report with phase "session" (with the `phases` …

Save a generated dashboard to the network so the user gets a live, shareable URL: https://capability.network/a/<slug>. Pass a `manifest` — a small declarative DashboardManifest (windows + live-data bi…

Recall a saved dashboard by its id or slug. Returns the full artifact (manifest + metadata). Use this to reload a dashboard the user asks for again ('open my pizza dashboard') instead of regenerating …

Discover existing public dashboards before you generate a new one (recall-first — the library accrues; adopt > extend > build for UIs too). Filter by `capabilityType` (e.g. 'pizza.order'), free-text `…

Fork an existing dashboard into a new artifact you own, preserving lineage back to the original (the social remix verb). Use this to adapt a popular dashboard rather than build from scratch — e.g. for…

Modify a dashboard you own (owner-only). Replace the manifest or any metadata field; the version increments. Use this to edit a saved surface meaningfully — 'raise budgetUSD to 40', 'add a receipt win…

Compose a live PCC dashboard for a physical-capability task — pass a DashboardManifest (windows + live data bindings + actions) and it renders as an interactive MCP App.

Compose a live PCC dashboard rendered through the closed, PCC-owned IR (read-only). Pass a DashboardManifest; it renders as an interactive MCP App via the audited closed-IR render path.

Price a configured PCC capability (typed operation). Returns the itemized quote for the given capability type + selections. Pure calculation — no funds move and nothing is created. Maps to POST /api/b…

Interactive MCP App view for render_pcc_dashboard. Renders the composed DashboardManifest delivered in the tool result's structuredContent, using the shipped On-Ramp pcc-ui kit.

Read-only closed-IR MCP App view. Renders the projected DashboardManifest from the tool result's structuredContent through the audited dashboard-ir adapter + validator + renderer (pcc-ir-kit.js, deter…

MCP App view for save/get/fork/update_dashboard. Renders the artifact's DashboardManifest delivered in the AUTHENTICATED tool result's structuredContent (never a second anonymous lookup).

MCP App view for search_dashboards. Renders the list of matching dashboards delivered in the tool result's structuredContent.