sh.agentcard/agentcard

Est-ce que sh.agentcard/agentcard est sûr ?

Au dernier audit MCP Hub, le serveur MCP « sh.agentcard/agentcard » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 55 outils

• add_funds≈ 465 tokens

  Generate a secure checkout link the user opens to add cash to their own balance (the money that funds new cards) via Apple Pay or Google Pay, in USD. Calling this tool moves NO money and initiates NO transfer: it only prepares a single-use hosted payment page — the exact equivalent of the user clicking 'Add funds' in the dashboard. The user personally reviews, authorizes, and completes (or abandons) the payment in their own browser with their own payment method; you never see or handle payment credentials. If a one-time phone verification is needed first, this tool automatically sends the user a code and tells you where it went: ask the user for the code, call verify_phone with it, then call add_funds again.

  Paramètres, retour & exemple (2)

  Paramètres

  • amount_cents · number · requis
    Amount to add in cents (e.g. 5000 = $50.00). Typical range: $20.00 to $10,000.00 (2000 to 1000000 cents); the exact range depends on the active funding provider and is returned by the API when the amount is invalid.
  • payment_method · string · optionnel · apple_pay | google_pay
    Payment method for the checkout: apple_pay or google_pay. Ask the user which one their device has; apple_pay only when unknown.

  Exemple d'appel

  {"name": "add_funds", "arguments": {"amount_cents": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "amountUsd": "texte", "checkoutUrl": "texte"}}

• allow_card_merchant≈ 302 tokens

  Remember a merchant on a card so the next matching charge is allowed even when the card's category or merchant rules would otherwise deny it. One tool call — does not replace the rest of the preset.

  Paramètres, retour & exemple (2)

  Paramètres

  • card_id · string · optionnel
    Card id (from list_cards).
  • pattern · string · requis
    Merchant name pattern to remember, e.g. "STARBUCKS" or "ODD CAFE".

  Exemple d'appel

  {"name": "allow_card_merchant", "arguments": {"pattern": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"scope": "texte", "preset": {}, "message": "texte", "pattern": "texte", "summary": "texte", "messages": [], "needsNewCard": true, "policyVersion": 1}}

• approve_request≈ 676 tokens

  Resolve a pending approval request (approve or deny) once the USER has decided. Use this after get_card_details or create_card returns a 202 requiring approval, or for a row from list_pending_approvals. For card_details and transaction, approval automatically completes the follow-up action and returns the result. For cross_app actions (asks from another app: close/pause/resume a card, change a limit, view details), approval records the user's consent and the REQUESTING app completes the action from its side when it retries with the approval id.

  Paramètres, retour & exemple (4)

  Paramètres

  • action · string · requis · card_details | transaction | cross_app:details | cross_app:close | cross_app:pause | cross_app:resume | cross_app:update
    The original action type from the approval prompt (list_pending_approvals rows carry it as action).
  • decision · string · requis · approved | denied
    Whether to approve or deny the request
  • approval_id · string · requis
    The approval request ID
  • resource_id · string · requis
    Card ID (for card_details and cross_app actions) or approval ID (for transaction)

  Exemple d'appel

  {"name": "approve_request", "arguments": {"action": "card_details", "decision": "approved", "approval_id": "texte", "resource_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"card": {}, "action": "texte", "status": "texte", "message": "texte", "decision": "texte"}}

• buy≈ 917 tokens

  Shop and check out, in natural language, across the merchants the user has linked (DoorDash, etc.). Pass the whole ask as `request` — e.g. "order a caesar salad from Zuni on DoorDash" — and this tool runs the shopping flow for you. It is CONVERSATIONAL: this tool RETURNS a `conversation_id`; pass that SAME `conversation_id` back on every follow-up (your reply to a question, "add a coke", "yes, check out") so it continues the SAME order. Omit it (or set new_order=true) only to start a fresh order. It will ask for the delivery address and have you confirm the cart and total. CHECKOUT (which charges a one-time card) happens ONLY after the user explicitly confirms in a later message — relay the confirmation through `request` ("yes, place the order") on the SAME conversation_id. RELAY REPLIES VERBATIM: when the user answers a question from this tool ("yes", "the 16 oz one", "use my other card"), pass their reply through `request` as-is on the same conversation_id — do NOT rewrite it into a fresh full order command; a rewritten command reads as a NEW ask and the confirmation never lands. NEVER use new_order (or drop the conversation_id) to recover from an error or a refused checkout — that discards the cart and any pending confirmation. Stay on the same conversation_id and follow the error's instruction instead; new_order is ONLY for the user starting an unrelated order. If it hands out a merchant login link (hosted connect), just reply on the SAME conversation_id once the user finishes (e.g. "done — I logged in") and it verifies the link itself. Logins started here have no pending_id, so the buy_connect / buy_connect_status pair does not apply to them. Call get_instructions FIRST for the current usage guide before your first buy.

  Paramètres, retour & exemple (3)

  Paramètres

  • request · string · requis
    The natural-language ask or follow-up, e.g. "order a caesar salad from Zuni on DoorDash", "deliver to 123 Main St", or "yes, place the order".
  • new_order · boolean · optionnel
    Start a fresh shopping conversation instead of continuing the current one. Use when beginning an unrelated order (ignores any conversation_id).
  • conversation_id · string · optionnel
    The conversation_id returned by a previous buy call. Pass it to continue the SAME order (keeps the cart + confirmation). Omit to start a new order.

  Exemple d'appel

  {"name": "buy", "arguments": {"request": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "assistant_turn", "message": "texte", "messages": [], "conversation_id": "texte"}}

• buy_connect≈ 427 tokens

  Connect a merchant for shopping. For merchants that need a real login (e.g. DoorDash) this opens a secure hosted browser session and returns a URL the user opens to log in; after they finish, call buy_connect_status with the pending_id to confirm. Merchants that need no login (e.g. Agentcard Flights) come back ready immediately. Use this instead of buy_link_merchant for hosted-login merchants. This tool pairs only with buy_connect_status and only tracks logins it started itself; a login link handed out by the conversational `buy` tool has no pending_id and is verified inside that same buy conversation (the user replies there, e.g. "done — I logged in").

  Paramètres, retour & exemple (1)

  Paramètres

  • merchant · string · requis
    merchant slug (e.g. doordash)

  Exemple d'appel

  {"name": "buy_connect", "arguments": {"merchant": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "message": "texte", "loginUrl": "texte", "merchant": "texte", "pendingId": "texte"}}

• buy_connect_status≈ 377 tokens

  Check the status of a hosted merchant login started with buy_connect. Returns linking (still in progress — call again in a few seconds), linked (success — the merchant is ready to shop), expired, or error. Pass the merchant and the pending_id from buy_connect. ONLY for logins started by the buy_connect tool: a login link handed out by the conversational `buy` tool has no pending_id — for those, reply to the same `buy` conversation ("done — I logged in") instead of calling this.

  Paramètres, retour & exemple (2)

  Paramètres

  • merchant · string · requis
    merchant slug (e.g. doordash)
  • pending_id · string · requis
    The pending_id returned by buy_connect.

  Exemple d'appel

  {"name": "buy_connect_status", "arguments": {"merchant": "texte", "pending_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "message": "texte", "merchant": "texte", "cart_carried_over": true}}

• buy_list_merchants≈ 697 tokens

  List where Agentcard shops. With no arguments: the merchants that use an account (DoorDash, Good Eggs, flights, the retail stores) and whether this user has linked each, plus how many online stores Agentcard buys from with no account. To check one store, pass `query` with its name or domain (Nike, nordstrom.com): the search covers both kinds. An online store needs no link: ask buy for the product and name the store.

  Paramètres, retour & exemple (3)

  Paramètres

  • kind · string · optionnel · direct | catalog | all
    Which merchants to list: `direct` (merchants that use an account), `catalog` (online stores with no account) or `all`. Without it, `direct`, or `all` with a `query`.
  • query · string · optionnel
    A store's name or domain, e.g. 'Nike' or 'nordstrom.com'.
  • cursor · string · optionnel
    The `next_cursor` an earlier call returned. Pass the same `query` and `kind` with it.

  Exemple d'appel

  {"name": "buy_list_merchants", "arguments": {"kind": "direct", "query": "texte", "cursor": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"count": 1, "counts": {}, "status": "texte", "message": "texte", "merchants": [], "next_cursor": "texte"}}

• buy_unlink_merchant≈ 210 tokens

  Disconnect a merchant — drops the saved session + link. The user must re-link (e.g. hosted connect) before shopping it again.

  Paramètres, retour & exemple (1)

  Paramètres

  • merchant · string · requis
    Merchant slug to disconnect (e.g. doordash).

  Exemple d'appel

  {"name": "buy_unlink_merchant", "arguments": {"merchant": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "message": "texte", "merchant": "texte"}}

• check_kyc_document≈ 189 tokens

  Check the conversational verification state — use after the user uploads their ID via the browser upload link (or any time you need to re-orient). Returns the current step and the fields still missing.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "check_kyc_document", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "nextStep": "texte", "uploadUrl": "texte", "missingFields": [], "verificationUrl": "texte"}}

• close_card≈ 430 tokens

  Permanently close a virtual card. This is irreversible — the card cannot be reopened. Safe to call on an already-closed card (idempotent). The user's rewards card (the card their tokenback redeems onto) is close-protected: closing it returns its balance to the wallet but retires the card number the user may have on file at AI labs, so it requires confirm_rewards_card — set it ONLY after the user explicitly confirms they want the rewards card closed.

  Paramètres, retour & exemple (3)

  Paramètres

  • card_id · string · requis
    The card ID to close
  • approval_id · string · optionnel
    Approval id from a prior approval_required response, once the user has approved. Only for cards created through ANOTHER app: first call without it (the user is emailed an approve link), then retry with it.
  • confirm_rewards_card · boolean · optionnel
    Required to close the rewards card. Only set after the user explicitly confirms; never set it preemptively.

  Exemple d'appel

  {"name": "close_card", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cardId": "texte", "status": "texte", "message": "texte", "approvalId": "texte"}}

• create_card≈ 2664 tokens

  The one card tool: get the user a virtual debit card for a purchase. Cards are live and charged for real when used. For a FIRST-TIME user it starts by putting the user's OWN card in their Agentcard vault (any Visa, Mastercard, Amex, or Discover from any country, no identity verification (KYC), no balance funding): the call returns a secure link (vault_started); send it to the user (they type the card once and lock it with their passkey or master password; Agentcard never sees the number). A vaulted card pays through the buy tool, where the user approves each purchase on their device with their passkey or master password; it never becomes a card number you type, so after vault_started (or vault_ready, when a card is already in the vault) use buy for purchases instead of calling create_card again. If the user specifically needs a card NUMBER, that is an Agentcard funded from their cash balance, which requires KYC the first time: only after the user agrees, call create_card with source "issued". Established users: the saved default decides (get_settings default_payment: their chosen added card, or the wallet balance); with no saved default, an active ADDED card wins, otherwise the cash balance. Per-call overrides: connected_card_id issues against a specific added card, source "issued" forces the cash balance, restart_setup mints a fresh vault link. If the balance is short on the issued path, top up with add_funds. Connections through a company OAuth client have NO card count or amount limits; only first-party personal accounts have per-plan caps. Call get_plan for the limits in effect.

  Paramètres, retour & exemple (11)

  Paramètres

  • type · string · optionnel · single_use | multi_use
    Card behavior. 'single_use' (default) closes after its first approved charge — right for one-off purchases. 'multi_use' stays open across charges until its total limit is spent — right for subscriptions and recurring merchants. Multi-use cards can be paused (pause_card), resumed (resume_card), and resized (update_card_limit).
  • preset · ? · optionnel
    Preset for this card: a template name (ai_labs, weekday_meals, cli_only, daily), comma-separated templates, a saved preset name/id, inline JSON privileges, or { name?, privileges }. Adds restrictions only — omit for a normal unrestricted card.
  • source · string · optionnel · issued
    Force the card to be funded from the user's cash balance (the issued path: KYC + wallet funding) even when they have an added or vaulted card or would otherwise be offered the vault. Use it only after the user explicitly picks the balance option. Omit for the default (an active added card wins; first-time users get the vault link).
  • expires_at · string · optionnel
    Optional hard expiry for a multi-use card (ISO-8601 with timezone, e.g. "2027-01-01T00:00:00Z"). Must be in the future, at most 365 days out. The card closes automatically when it passes.
  • amount_cents · number · requis
    Card funding amount in CENTS, not dollars (minimum 100). 100 = $1.00 and 2500 = $25.00 — a value like 25 would be $0.25. Company-governed connections have no maximum; personal accounts are capped by their plan — call get_plan for the limits in effect.
  • funds_source · string · optionnel · onramp_flow | company_flow
    Where the card funds come from. OMIT unless instructed: the server applies the right default (company-connected accounts use the company wallet automatically when the company enables it). company_flow = the company's wallet funds the card; onramp_flow = the user's own wallet.
  • purchase_key · string · optionnel
    The purchaseKey from the same approval_pending answer as pending_card_id; the pair proves the retry is for that purchase.
  • scope_preset · string · optionnel · ai_labs
    Silent alias for preset 'ai_labs': a multi-use card restricted to AI-lab merchants (OpenAI, Anthropic, Gemini); charges anywhere else are declined at authorization. AI cards earn boosted tokenback on eligible spend. Implies type 'multi_use'. Prefer `preset`.
  • restart_setup · boolean · optionnel
    Set true ONLY when the user lost or never received a vault link, it expired (about 15 minutes), or they want to add ANOTHER card. Never needed on the first call or for normal retries. amount_cents is still required on this call (the link itself carries no amount).
  • pending_card_id · string · optionnel
    Only when retrying an approval_pending purchase whose preset has since changed: the cardId from that earlier answer, together with purchase_key. The older approval link is retired once the replacement is minted. Never pass it for a different purchase.
  • connected_card_id · string · optionnel
    Multi-card: issue against a SPECIFIC added card (an id from the user's added cards, see list_added_cards) instead of the newest active one. Omit for the default.

  Exemple d'appel

  {"name": "create_card", "arguments": {"amount_cents": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"last4": "texte", "cardId": "texte", "expiry": "texte", "preset": {}, "reason": "texte", "source": "texte", "status": "texte", "message": "texte", "vaultUrl": "texte", "attachUrl": "texte", "expiresAt": "texte", "approvalId": "texte"}}

• delete_preset≈ 153 tokens

  Delete a preset you saved (from save_preset). Refuses built-in template names — there's nothing to delete there. Cards already issued keep whatever rules they have; this only retires the name for future use. Refused while a card still inherits the name as a standing default.

  Paramètres, retour & exemple (1)

  Paramètres

  • name · string · requis
    The saved preset name to delete.

  Exemple d'appel

  {"name": "delete_preset", "arguments": {"name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"deleted": true, "message": "texte"}}

• get_balance≈ 238 tokens

  The user's cash balance: the money that funds new cards. Provisions the balance account on first use. Users add cash with Apple Pay or Google Pay in USD; funds are held as USDC. (Their wallet, meaning the cards themselves, is list_cards.)

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_balance", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "message": "texte", "balanceUsd": "texte", "confirmingUsd": "texte"}}

• get_card_balance≈ 260 tokens

  The live balance of ONE virtual card (the user's overall cash balance is get_balance). Prefer this over get_card_details when you only need to verify available funds: it is faster and does not expose sensitive card credentials.

  Paramètres, retour & exemple (1)

  Paramètres

  • card_id · string · requis
    The card ID

  Exemple d'appel

  {"name": "get_card_balance", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cached": true, "message": "texte", "balanceCents": 1, "balanceDollars": "texte"}}

• get_card_details≈ 604 tokens

  Get decrypted PAN, CVV, expiry, and current balance for a specific card. Use this only when you need to fill in a payment form; prefer get_card_balance if you only need the balance. May require human approval before returning credentials. If approval is required, prompt the user and then call approve_request. Agentcard never stores an issued card's number or CVV; each call fetches them again.

  Paramètres, retour & exemple (2)

  Paramètres

  • card_id · string · requis
    The card ID
  • approval_id · string · optionnel
    Approval id from a prior approval_required response, once the user has approved. Only for cards created through ANOTHER app: first call without it (the user is emailed an approve link), then retry with it.

  Exemple d'appel

  {"name": "get_card_details", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"last4": "texte", "cardId": "texte", "expiry": "texte", "status": "texte", "message": "texte", "approvalId": "texte", "cardStatus": "texte", "balanceCents": 1, "balanceDollars": "texte"}}

• get_card_preset≈ 190 tokens

  Read a card's preset (spend limits, rate limits, allowed categories/merchants, time windows, and surfaces) as a plain-English summary. A card without a preset is unrestricted.

  Paramètres, retour & exemple (1)

  Paramètres

  • card_id · string · requis
    The card id (from list_cards).

  Exemple d'appel

  {"name": "get_card_preset", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cardId": "texte", "preset": {}, "message": "texte"}}

• get_instructions≈ 150 tokens

  Call this FIRST; returns the latest usage guide for shopping with `buy` AND for operating the Agentcard account tools (cards, funding, your own card, KYC, support).

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_instructions", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte"}}

• get_kyc_status≈ 321 tokens

  Check the user's identity verification (KYC) status. Returns whether they are verified and, if not, the current state plus the conversational next step. Use this to poll after the user does the face scan, or any time create_card reports kyc_required.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_kyc_status", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"reason": "texte", "status": "texte", "message": "texte", "nextStep": "texte", "verified": true, "missingFields": [], "verificationUrl": "texte"}}

• get_plan≈ 891 tokens

  Show the user's current subscription plan, card limits, and this month's usage. Call this before create_card when you need the per-card amount cap or remaining monthly quota, and ALWAYS before creating a multi-use card: multi-use cards are a paid-plan feature, so maxActiveMultiUseCards is 0 on Free and the mint is refused. Also call it whenever the user asks about their plan, limits, billing, or upgrading. To cancel a paid plan, the gated tool cancel_plan also exists; call it by name even though it isn't in the tools list.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_plan", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"plan": "texte", "message": "texte", "planName": "texte", "ordersPlaced": 1, "cardsRemaining": 1, "cardsThisMonth": 1, "currentPeriodEnd": "texte", "maxCardsPerMonth": 1, "cancelAtPeriodEnd": true, "maxLifetimeOrders": 1, "maxCardAmountCents": 1, "subscriptionStatus": "texte"}}

• get_rewards≈ 270 tokens

  Show the user's tokenback: balance, lifetime earned, and recent activity. Tokenback pays tokens (1 token = 1¢ of credit value) on settled card spend. AI cards (create_card scope_preset: 'ai_labs') earn a boosted rate on AI-lab purchases, and companies can route a share of their earnings to their users as tokenback. Redeem with redeem_rewards.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_rewards", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "balanceTokens": 1, "redeemedTokens": 1, "minRedeemTokens": 1, "lifetimeEarnedTokens": 1}}

• get_settings≈ 410 tokens

  View the user's notification preferences (which email alerts they receive), their default payment source (which card or balance agents charge — check it before picking a funding source for them), their default delivery address (the wallet-level shipping address to use when buying physical goods for them — check it before asking them to dictate an address), and authorization settings (whether viewing card details or making transactions requires explicit approval). Authorization settings are read-only here; change the rest with the gated tool update_settings, calling it by name even though it isn't in the tools list.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_settings", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "authorization": {}, "notifications": {}, "default_payment": {}, "delivery_address": {}}}

• get_wallet_link≈ 588 tokens

  The user's hosted wallet, as one shareable URL. Opens their Agentcard wallet in the browser: every card in one place, apply for an Agentcard card (identity verification runs right in the page). Mint it whenever the user needs a browser step (seeing cards, finishing verification when in-chat photos fail) and send them the URL. To ADD the user's own card, pass purpose "add_card": the link then opens their Agentcard vault card form directly (any card, typed once, locked with their passkey or master password, never seen by Agentcard) and works on personal logins too. Pass merchant + amount_cents to open the wallet ON the payment-approval sheet (the user picks a card and approves that exact charge) instead of the card list. Multi-use but short-lived (about 15 minutes — the exact moment is in expiresAt); mint a fresh one when it expires. The wallet link only works for app connections (OAuth).

  Paramètres, retour & exemple (3)

  Paramètres

  • purpose · string · optionnel · wallet | add_card
    "wallet" (default) opens the hosted wallet. "add_card" opens the vault card form so the user can put their own card on file; single-use, about 15 minutes.
  • merchant · string · optionnel
    Merchant name shown on the payment-approval sheet (with amount_cents).
  • amount_cents · integer · optionnel
    Amount in cents. When present, the link opens on the payment-approval sheet for this charge.

  Exemple d'appel

  {"name": "get_wallet_link", "arguments": {"purpose": "wallet", "merchant": "texte", "amount_cents": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"url": "texte", "kind": "texte", "message": "texte", "sandbox": true, "expiresAt": "texte"}}

• link_account≈ 387 tokens

  Link or merge another Agentcard account that belongs to the same person. Use when the user says they already have an account under a DIFFERENT email or phone number — most often after identity verification (KYC) is rejected as a duplicate, which means that person already verified on another account. Two steps: (1) call with { type, identifier } to send a one-time code to that email/phone; (2) call again with the { ticket, code } to verify. If the identifier belongs to a different account, the two accounts are MERGED (the identity-verified account survives and gains the other's email/phone, so both sign in to one account); if no account has it, it is simply added to the current account.

  Paramètres, retour & exemple (4)

  Paramètres

  • code · string · optionnel
    Step 2: the one-time code the user received.
  • type · string · optionnel · email | phone
    Step 1: which kind of identifier the OTHER account uses.
  • ticket · string · optionnel
    Step 2: the ticket returned by step 1.
  • identifier · string · optionnel
    Step 1: the email address or phone number of the other account to verify.

  Exemple d'appel

  {"name": "link_account", "arguments": {"code": "texte", "type": "email", "ticket": "texte", "identifier": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte"}}

• list_added_cards≈ 556 tokens

  List the user's ADDED cards (their own Visa/Mastercard cards enrolled via create_card's add-card flow — the funding source that charges their own card), with ids, brand, last4, expiry, and status. The row marked isDefault is what create_card charges when no connected_card_id is given — the user's chosen default card (set with update_settings default_payment), falling back to the newest active one. Not the same as list_cards (the virtual cards Agentcard issues).

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_added_cards", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"count": 1, "message": "texte", "attachedCards": []}}

• list_cards≈ 1592 tokens

  The user's wallet: every live card they hold, with IDs, last four digits, expiry, balance, and status, plus `vaultCards`: the user's OWN cards stored in their Agentcard vault (display fields only; a vaulted card pays through buy with an approval on the user's device (their passkey or master password) and never exposes a number). Start here to find available cards; if none are returned, call create_card. When the shared wallet is enabled, `wallet` lists every card across all connected apps and companies, each tagged with its source (kind personal/company, the issuing app, and the company where applicable); cards created by another app or company are read-only from this session: get_card_details and close_card will not work on them.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_cards", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cards": [], "count": 1, "wallet": [], "message": "texte", "vaultCards": [], "connectedAccounts": []}}

• list_connections≈ 413 tokens

  List the third-party apps the user has connected to their Agentcard account via OAuth (e.g. Kilo), including when each was connected and whether it is still active. Read-only. To revoke an app, call revoke_connection with its clientId.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_connections", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"count": 1, "status": "texte", "message": "texte", "connections": []}}

• list_payment_methods≈ 432 tokens

  List the saved payment methods (used only to pay for flight bookings, not for cards or adding funds). Returns each method with its id, brand, last 4 digits, and expiry, and marks the default one. Use setup_payment_method to add a new one. The gated tools set_default_payment_method and remove_payment_method also exist; call them by name even though they aren't in the tools list.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_payment_methods", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"count": 1, "status": "listed", "message": "texte", "defaultId": "texte", "paymentMethods": []}}

• list_pending_approvals≈ 667 tokens

  List the user's PENDING approval requests: asks from connected apps (create a card, view full card details, close/pause/resume a card, change a limit) waiting on the user's decision. Surface each one to the user and let THEM decide; after the user answers, resolve with approve_request. NEVER approve or deny on your own — an approval is the user's consent, not yours. Personal sessions only; company-connected sessions have no personal inbox.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_pending_approvals", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"count": 1, "status": "texte", "message": "texte", "approvals": []}}

• list_presets≈ 164 tokens

  List every preset you can use by name: the built-in templates (ai_labs, weekday_meals, cli_only, daily) plus any you've saved yourself, each with a plain-English summary of its rules.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_presets", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "presets": []}}

• list_transactions≈ 692 tokens

  Transactions with amount, merchant, status, and timestamps. Pass card_id for one card's transactions; OMIT it for every card in the account (newest first, each row tagged with its card). Use limit and status to filter. The gated views list_all_transactions and list_transactions_by_payment_method also exist; call them by name even though they aren't in the tools list.

  Paramètres, retour & exemple (4)

  Paramètres

  • limit · number · optionnel
    Max number of transactions to return (default 20)
  • offset · number · optionnel
    Skip this many (all-cards view pagination; ignored for a single card).
  • status · string · optionnel
    Filter by transaction status (e.g. PENDING, SETTLED, DECLINED, REVERSED, EXPIRED, REFUNDED)
  • card_id · string · optionnel
    A card ID for that card's transactions; omit for all cards in the account.

  Exemple d'appel

  {"name": "list_transactions", "arguments": {"limit": 1, "offset": 1, "status": "texte", "card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"count": 1, "message": "texte", "transactions": []}}

• manage_subscription≈ 516 tokens

  Manage a recurring meal/grocery SUBSCRIPTION (e.g. Locale) — NOT a one-time purchase, and no payment is taken (the subscription auto-bills the card on file at the merchant). action: 'menu_search' (browse the recurring menu; items flagged inPlan are covered by the plan), 'get_skip_dates' (list skipped/paused deliveries), 'skip'/'unskip' (one upcoming delivery date), 'set_skip_dates' (replace the full skip set; [] resumes all), 'update_setting' (change a setting). Locale settings: subscription_size (meals, e.g. 8), calorie_preference (low_calorie|both|moderate), diets (array), longevity_allergens (array), ingredient_allergies (array), default_window ('9am - 6pm'|'3pm - 7pm'|'9am - 12pm'), delivery_instructions (text). Link the merchant first.

  Paramètres, retour & exemple (8)

  Paramètres

  • date · string · optionnel
    skip/unskip: one ISO delivery date (YYYY-MM-DD)
  • dates · array · optionnel
    set_skip_dates: FULL set of ISO dates to skip ([] resumes all)
  • limit · number · optionnel
    menu_search: max items
  • query · string · optionnel
    menu_search: term over the recurring menu (e.g. 'salmon'); '' lists everything
  • value · ? · optionnel
    update_setting: the new value (number, string, or array of strings)
  • action · string · requis · menu_search | get_skip_dates | skip | unskip | set_skip_dates | update_setting
    the management action
  • setting · string · optionnel
    update_setting: the setting key (see description)
  • merchant · string · requis
    merchant slug (e.g. locale)

  Exemple d'appel

  {"name": "manage_subscription", "arguments": {"action": "menu_search", "merchant": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte"}}

• name_card≈ 468 tokens

  Tell the vault which card product one of the user's own stored cards is (e.g. "Chase Sapphire Preferred", "Amex Gold"), so smart purchases can rank it. Takes a vault card id (a `vaultCards` row from list_cards) and the product name as the user says it; the closest match is saved and echoed back. Confirm with the user when the match is not obviously right. Pass clear_product to forget the name, or smart_excluded to keep a card out of the ranking without removing it.

  Paramètres, retour & exemple (4)

  Paramètres

  • card_id · string · requis
    The vault card id (from list_cards → vaultCards).
  • product · string · optionnel
    The card product as the user says it, e.g. "Chase Sapphire Preferred" or "Amex Gold". Four characters minimum.
  • clear_product · boolean · optionnel
    true = forget the product name. Do not combine with product.
  • smart_excluded · boolean · optionnel
    true = leave this card out of smart purchases; false = include it again.

  Exemple d'appel

  {"name": "name_card", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "matches": [], "message": "texte", "product_key": "texte", "product_name": "texte"}}

• pause_card≈ 321 tokens

  Pause a multi-use card: temporarily blocks ALL new charges (reversible — use resume_card to unblock). Right for "stop this subscription for now" or a card the user suspects is compromised but is not sure. Only multi-use cards can be paused; single-use cards close after one charge and cannot be paused.

  Paramètres, retour & exemple (2)

  Paramètres

  • card_id · string · requis
    The card ID to pause (from list_cards or create_card).
  • approval_id · string · optionnel
    Approval id from a prior approval_required response, once the user has approved. Only for cards created through ANOTHER app: first call without it (the user is emailed an approve link), then retry with it.

  Exemple d'appel

  {"name": "pause_card", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cardId": "texte", "status": "texte", "message": "texte"}}

• read_support_chat≈ 321 tokens

  Read the message history of a support conversation

  Paramètres, retour & exemple (1)

  Paramètres

  • conversation_id · string · requis
    The conversation ID

  Exemple d'appel

  {"name": "read_support_chat", "arguments": {"conversation_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"count": 1, "status": "texte", "message": "texte", "messages": []}}

• recommend_card≈ 456 tokens

  Ask the vault which of the user's own stored cards earns the most for a purchase (smart purchases). Pass the merchant name, its website when you know it, and the amount. Returns the card id to use as card_id at checkout, the reason in plain words, and the runners-up. null when smart purchases is off for this account, no stored card has been named yet (see name_card), or nothing could be said; then pay as you would have. Never a card number.

  Paramètres, retour & exemple (4)

  Paramètres

  • currency · string · optionnel
    ISO currency code, default usd. Non-USD purchases account for foreign transaction fees.
  • merchant · string · requis
    The merchant as the user would see it, e.g. "DoorDash".
  • amount_cents · number · optionnel
    Order total in cents, when known.
  • merchant_url · string · optionnel
    The merchant's website or checkout origin, e.g. https://www.doordash.com. Improves the category match.

  Exemple d'appel

  {"name": "recommend_card", "arguments": {"merchant": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"reason": "texte", "card_id": "texte", "message": "texte", "category": "texte", "alternatives": []}}

• redeem_code≈ 260 tokens

  Redeem a promo code that adds money to the user's cash balance. Each code works once per user; the credit lands in the balance and becomes spendable within a minute or two. Some codes hold the money until the user verifies their identity — the claim still locks the code to this user instantly, and the credit lands automatically once KYC is approved (start_kyc begins verification). The gated tool list_codes shows the user's code history; call it by name even though it isn't in the tools list.

  Paramètres, retour & exemple (1)

  Paramètres

  • code · string · requis
    The promo code exactly as the user provided it (case and dashes are forgiven).

  Exemple d'appel

  {"name": "redeem_code", "arguments": {"code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte"}}

• redeem_rewards≈ 411 tokens

  Redeem tokenback: the tokens' cash value (1 token = 1¢) lands on the user's rewards card as spending power. The rewards card is permanent and locked to AI-lab merchants (OpenAI, Anthropic, Gemini) — created on first redemption, topped up after. Check get_rewards first for the balance and the minimum. Ask the user before redeeming.

  Paramètres, retour & exemple (1)

  Paramètres

  • tokens · number · requis
    How many tokens to redeem (1 token = 1 cent, so 500 tokens = $5.00 of wallet credit).

  Exemple d'appel

  {"name": "redeem_rewards", "arguments": {"tokens": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "message": "texte", "amountCents": 1, "redemptionId": "texte", "deliveredCardId": "texte", "deliveredCardLast4": "texte"}}

• remove_added_card≈ 288 tokens

  Remove (unenroll) one of the user's added cards. Irreversible for that enrollment: any virtual cards created against it are closed first, then the card is unenrolled at the network. ALWAYS confirm with the user before calling. Get ids from list_added_cards. The user can add the same card again later (create_card with restart_setup: true).

  Paramètres, retour & exemple (1)

  Paramètres

  • attached_card_id · string · requis
    The id of the added card to remove (from list_added_cards).

  Exemple d'appel

  {"name": "remove_added_card", "arguments": {"attached_card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "status": "texte", "message": "texte", "closedCards": 1}}

• resume_card≈ 256 tokens

  Resume a paused multi-use card so it accepts charges again. The inverse of pause_card.

  Paramètres, retour & exemple (2)

  Paramètres

  • card_id · string · requis
    The paused card ID to resume.
  • approval_id · string · optionnel
    Approval id from a prior approval_required response, once the user has approved. Only for cards created through ANOTHER app: first call without it (the user is emailed an approve link), then retry with it.

  Exemple d'appel

  {"name": "resume_card", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cardId": "texte", "status": "texte", "message": "texte"}}

• revoke_connection≈ 270 tokens

  Revoke a third-party app's access to the user's Agentcard account. Disconnects the app and invalidates its OAuth tokens; it must reconnect via OAuth to regain access. Pass the clientId shown by list_connections.

  Paramètres, retour & exemple (1)

  Paramètres

  • client_id · string · requis
    The OAuth client ID of the app to revoke (from list_connections).

  Exemple d'appel

  {"name": "revoke_connection", "arguments": {"client_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "message": "texte", "revoked": 1, "clientId": "texte"}}

• save_preset≈ 835 tokens

  Save your own preset — a named set of rules (spend caps, category/merchant/place/currency/day/hour/program restrictions) you can reuse by name in set_card_preset or create_card. Saving under a name you already used adds a new version: cards already using the old one keep it, new ones get the update. Pick a name other than the built-ins (ai_labs, weekday_meals, cli_only, daily). Pass either the rule fields below or a raw `privileges` array.

  Paramètres, retour & exemple (15)

  Paramètres

  • mode · string · optionnel · strict | watch
    What the preset does when a purchase breaks any of its rules: "strict" refuses it (the default), "watch" lets it through and tells the user once.
  • name · string · requis
    A name for this preset, e.g. "meals-only".
  • total · number · optionnel
    Lifetime spend cap, in US dollars.
  • only_in · string · optionnel
    Comma-separated places to allow charges from: a country ("US", "Canada"), a region ("europe", "eu", "north-america", "latin-america", "apac"), or a US state ("California", "US-CA"). A region expands to its countries; a state next to a region narrows only the US, e.g. "north-america,US-CA". Example: "europe,Canada".
  • per_day · number · optionnel
    Spend cap per rolling 24 hours, in US dollars.
  • per_week · number · optionnel
    Spend cap per rolling 7 days, in US dollars.
  • timezone · string · optionnel
    IANA timezone for only_days/only_hours (default UTC), e.g. "America/Los_Angeles". Always shown in summaries.
  • only_days · string · optionnel
    Comma-separated days to allow, e.g. "mon,tue,wed" or "weekdays"/"weekends".
  • only_from · string · optionnel
    Comma-separated callers to allow, e.g. "cli,mcp" (cli, mcp, api, browser).
  • per_month · number · optionnel
    Spend cap per rolling 30 days, in US dollars.
  • categories · string · optionnel
    Comma-separated spend categories to allow, e.g. "meals,groceries" (meals, groceries, travel, software, ai, wellness, retail).
  • currencies · string · optionnel
    Comma-separated purchase currencies to allow: ISO 4217 codes or common names, e.g. "usd,eur" or "dollars,euros,pounds,yen". In strict mode a purchase in another currency is refused at checkout and a settled charge in another currency pauses the card. Checked by Agentcard at checkout and settlement, not by the card network. Unknown currencies are refused.
  • only_hours · string · optionnel
    An hour range to allow, e.g. "9-17" (24-hour clock; defaults to UTC without timezone).
  • privileges · array · optionnel
    Advanced: raw privilege objects instead of the rule fields above.
  • only_merchants · string · optionnel
    Comma-separated merchant name patterns to allow, e.g. "openai,anthropic".

  Exemple d'appel

  {"name": "save_preset", "arguments": {"name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"preset": {}, "message": "texte"}}

• send_support_message≈ 193 tokens

  Send a message in an existing support conversation

  Paramètres, retour & exemple (2)

  Paramètres

  • message · string · requis
    Your message
  • conversation_id · string · requis
    The conversation ID

  Exemple d'appel

  {"name": "send_support_message", "arguments": {"message": "texte", "conversation_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "conversationId": "texte"}}

• set_card_preset≈ 430 tokens

  Update a card's preset. Pass a template name (ai_labs, weekday_meals, cli_only, daily), a saved preset name (from list_presets), a comma-separated template list, or inline JSON / { name, privileges }. Pass null or "" to clear the card's preset (Agentcard-side checks stop; any limit already on the card network stays). Edits create a new version. The response reports what was applied on Agentcard vs what was updated on the card's spend limit, and whether the change needs a new card.

  Paramètres, retour & exemple (2)

  Paramètres

  • preset · ? · requis
    Template name (ai_labs, weekday_meals, cli_only, daily), comma-separated templates, inline JSON privileges, or { name?, privileges }. Pass null or "" with card_id to clear that card's preset.
  • card_id · string · requis
    The card id (from list_cards).

  Exemple d'appel

  {"name": "set_card_preset", "arguments": {"preset": "texte", "card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"preset": {}, "pushed": [], "message": "texte", "summary": "texte", "messages": [], "policyId": "texte", "needsNewCard": true, "agentcardOnly": [], "policyVersion": 1}}

• setup_payment_method≈ 251 tokens

  Save a payment method used ONLY to pay for flight bookings (the fare is charged to it via a hold at booking; no virtual card is created for flights). It does NOT fund cards or the cash balance — cards are funded from the balance (see add_funds). Returns a secure checkout URL the user must open to save their card details.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "setup_payment_method", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "checkoutUrl": "texte", "stripeSessionId": "texte"}}

• start_kyc≈ 608 tokens

  Begin (or resume) identity verification. Verification is CONVERSATIONAL: it starts with a photo of the user's government ID — the backend reads the printed details automatically and the user confirms every value. Only fields the ID does not carry are asked (like the SSN for US documents, or the national ID number for non-US ones); occupation/income questions are never asked. The only browser step is a short face scan at the end. Relay each step to the user as ONE SHORT message (one or two sentences — the current ask only, never the whole flow, never an unrequested link). Returns the next step, ID-photo upload options, and (for legacy hosted-flow accounts) a hosted verification URL instead.

  Paramètres, retour & exemple (2)

  Paramètres

  • terms_accepted · boolean · optionnel
    DEPRECATED — use agreements_accepted. Pass true once the user has explicitly agreed to the card issuer's cardholder terms in the conversation.
  • agreements_accepted · array · optionnel
    Keys of the User Agreements the user explicitly accepted, one by one (the full required set from the agreements list — e.g. e_sign, account_opening_privacy, card_terms, accuracy, non_solicitation). Only pass after presenting each agreement verbatim and getting a yes covering all of them.

  Exemple d'appel

  {"name": "start_kyc", "arguments": {"terms_accepted": true, "agreements_accepted": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"reason": "texte", "status": "texte", "message": "texte", "nextStep": "texte", "uploadUrl": "texte", "missingFields": [], "verificationUrl": "texte"}}

• start_phone_verification≈ 247 tokens

  Send (or re-send) the user's one-time funding verification code (the provider verifies the phone on the user's Agentcard identity, valid 60 days). add_funds already sends this code automatically when verification is needed — call this tool only to RE-send when the code never arrived (any unexpired code still works; sends are rate-limited). Returns the masked destination (text or email) and whether a code was sent; if the phone is already verified it says so and you go straight to add_funds. After the user reads back the code, call verify_phone.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "start_phone_verification", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte"}}

• start_support_chat≈ 190 tokens

  Start a new support conversation and send the first message

  Paramètres, retour & exemple (1)

  Paramètres

  • message · string · requis
    Your initial support message

  Exemple d'appel

  {"name": "start_support_chat", "arguments": {"message": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "conversationId": "texte"}}

• submit_kyc_document≈ 884 tokens

  Submit the user's ID photo for identity verification. Ways in: (a) image data you hold programmatically (e.g. the user sent the photo in this chat and your platform exposes its bytes) — pass front_base64 (and back_base64 for a license back; its barcode reads most accurately); (b) local (stdio) mode — pass file_path/back_file_path and the file is read from disk; (c) neither — you get a secure upload link to hand the user. Do NOT ask the user what kind of document it is or where it was issued — the type and country are detected automatically from the photo; only relay a question if the result says the type could not be determined. Returns the fields read off the document — SHOW THEM TO THE USER for confirmation before continuing — plus whatever is still missing. If the result says NO identity details could be read, the image did not read as an ID at all: never insist to the user that it was their ID. Supported: JPEG/PNG/WebP up to 12MB (convert HEIC or HEIF photos first).

  Paramètres, retour & exemple (8)

  Paramètres

  • file_path · string · optionnel
    Local path to the ID photo (front of license, or passport photo page). Local/stdio connections only — remote connections without image data receive an upload link instead.
  • back_base64 · string · optionnel
    Base64 image bytes of the license back (optional, recommended — the barcode reads most accurately). Same rule: programmatically sourced only.
  • front_base64 · string · optionnel
    Base64 image bytes of the ID front (or passport photo page). ONLY pass base64 you received programmatically from your platform (e.g. an injected chat attachment) — never type or reconstruct image bytes yourself.
  • document_type · string · optionnel · drivers_license | state_id | passport
    ONLY pass this when the user themselves said what the document is ("here's my license") — otherwise omit it; the type is detected from the photo. Never ask up front.
  • back_file_path · string · optionnel
    Local path to the back of the license (optional, recommended). Local/stdio connections only.
  • back_mime_type · string · optionnel
    MIME type of back_base64. Defaults to image/jpeg.
  • front_mime_type · string · optionnel
    MIME type of front_base64 (image/jpeg, image/png, image/webp). Defaults to image/jpeg.
  • issuing_country · string · optionnel
    2-letter ISO country that issued the document (e.g. US, AR). ONLY when the user volunteered it — otherwise omit; it is detected from the photo. Never ask up front.

  Exemple d'appel

  {"name": "submit_kyc_document", "arguments": {"file_path": "texte", "back_base64": "texte", "front_base64": "texte", "document_type": "drivers_license", "back_file_path": "texte", "back_mime_type": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "message": "texte", "nextStep": "texte", "extracted": {}, "uploadUrl": "texte", "unreadable": true, "missingFields": [], "verificationUrl": "texte"}}

• submit_kyc_fields≈ 727 tokens

  Submit identity fields for verification: the ones the ID photo didn't carry (listed by missingFields — the tax/ID number always has to be asked since IDs don't print it; call it "SSN" only for US documents and "national ID number" otherwise), corrections to extracted values the user flagged, and the User Agreements acceptance (agreements_accepted, after presenting each agreement verbatim). That number is forwarded directly to the verification provider and never stored by Agentcard. NEVER ask about occupation, income, spending volume, or account purpose — those are filled automatically and must not be asked.

  Paramètres, retour & exemple (13)

  Paramètres

  • ssn · string · optionnel
    US documents: 9-digit SSN, dashes optional. Non-US documents: the national ID / tax number printed on the ID. Forward-only — never stored.
  • last_name · string · optionnel
    Legal last name, exactly as printed on the ID document.
  • first_name · string · optionnel
    Legal first name, exactly as printed on the ID document.
  • address_city · string · optionnel
    City of the residential address.
  • phone_number · string · optionnel
    E.164 with country code, e.g. +14155551234.
  • address_line1 · string · optionnel
    Residential street address, line 1 (e.g. 123 Main St).
  • address_line2 · string · optionnel
    Residential street address, line 2 — apartment, suite, or unit. Omit if none.
  • date_of_birth · string · optionnel
    YYYY-MM-DD
  • address_region · string · optionnel
    2-letter state code for US (e.g. CA).
  • terms_accepted · boolean · optionnel
    DEPRECATED — use agreements_accepted. true once the user explicitly accepted the card issuer's cardholder terms.
  • address_postal_code · string · optionnel
    Postal / ZIP code of the residential address.
  • agreements_accepted · array · optionnel
    Keys of the User Agreements the user explicitly accepted, one by one — the FULL required set from the agreements list in the previous step's result. Only pass after presenting each agreement verbatim and getting an explicit yes covering all of them.
  • address_country_code · string · optionnel
    2-letter ISO country code (e.g. US).

  Exemple d'appel

  {"name": "submit_kyc_fields", "arguments": {"ssn": "texte", "last_name": "texte", "first_name": "texte", "address_city": "texte", "phone_number": "texte", "address_line1": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte", "nextStep": "texte", "missingFields": [], "verificationUrl": "texte"}}

• submit_user_info≈ 348 tokens

  Submit the user's phone number and terms acceptance for a virtual card. Call this after create_card returns user_info_required. Do NOT ask the user for occupation, income, or account purpose — those are never asked. Identity fields (name, date of birth, SSN / national ID, address) belong to the KYC flow: create_card tells you whether it runs conversationally (start_kyc → ID photo → face scan) or via a hosted verification_url. After phone + terms are saved, retry create_card.

  Paramètres, retour & exemple (2)

  Paramètres

  • phone_number · string · requis
    User's phone number in international E.164 format with a country code (e.g. +1 555 123 4567, +44 7911 123456)
  • terms_accepted · boolean · requis
    Must be true — the user accepted the AgentCard cardholder terms of service

  Exemple d'appel

  {"name": "submit_user_info", "arguments": {"phone_number": "texte", "terms_accepted": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "message": "texte"}}

• surprise_me≈ 621 tokens

  Buy the user something totally unexpected and very silly/stupid-fun under a small dollar cap (default $10, hard max $25). Great when the user cannot decide what to order (from DoorDash etc.) or just wants a fun surprise. It kicks off a shopping conversation that FIRST brainstorms deliberately stupid ideas, picks ONE genuinely unexpected item, builds the cart, and shows the item + exact total. It NEVER checks out by itself: the reply includes a conversation_id — relay the user's explicit confirmation ("yes, place it") through the `buy` tool on that SAME conversation_id, exactly like a normal order. Each surprise_me call starts a fresh surprise; use `buy` for all follow-ups (answers, tweaks, the confirmation).

  Paramètres, retour & exemple (3)

  Paramètres

  • vibe · string · optionnel
    Optional notes/vibe from the user, e.g. "make it food", "something for my desk", "they love ducks".
  • merchant · string · optionnel
    Optional merchant hint the surprise should come from, e.g. 'doordash'. Omit to let the agent pick.
  • max_dollars · number · optionnel
    Hard spend cap in dollars, total including fees. Optional; default 10, values above 25 are clamped to 25.

  Exemple d'appel

  {"name": "surprise_me", "arguments": {"vibe": "texte", "merchant": "texte", "max_dollars": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "assistant_turn", "message": "texte", "messages": [], "conversation_id": "texte"}}

• update_card_limit≈ 460 tokens

  Change a multi-use card's total spending limit. Raising it reserves the extra amount from the user's cash balance (top up with add_funds if short); lowering it frees the difference, but the new limit can never go below what the card has already spent. Single-use cards cannot be resized.

  Paramètres, retour & exemple (4)

  Paramètres

  • card_id · string · requis
    The multi-use card ID to resize.
  • approval_id · string · optionnel
    Approval id from a prior approval_required response, once the user has approved. Only for cards created through ANOTHER app: first call without it (the user is emailed an approve link), then retry with it.
  • new_limit_cents · number · optionnel
    Deprecated alias for spend_limit_cents. Prefer spend_limit_cents (matches the docs and the REST API).
  • spend_limit_cents · number · optionnel
    The new TOTAL spending limit in cents (minimum 100). This is the lifetime cap, not a delta: a card that spent $20 of a $50 limit, resized to 8000, can spend $60 more.

  Exemple d'appel

  {"name": "update_card_limit", "arguments": {"card_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cardId": "texte", "status": "texte", "message": "texte", "balanceCents": 1, "spendLimitCents": 1}}

• upgrade_plan≈ 396 tokens

  Start a paid-plan upgrade. Choose the target plan: 'basic' ($15/mo — 15 cards/month, up to $500 per card) or 'pro' ($100/mo — 50 cards/month, up to $1,000 per card). Defaults to 'basic' if omitted. Returns a Stripe Checkout URL the user must open in their browser to complete payment. After they finish checkout, the plan updates automatically; verify with get_plan. Use only when the user explicitly wants to upgrade. To cancel a paid plan instead, the gated tool cancel_plan also exists; call it by name even though it isn't in the tools list.

  Paramètres, retour & exemple (1)

  Paramètres

  • plan · string · optionnel · basic | pro
    Which plan to upgrade to. Defaults to 'basic'.

  Exemple d'appel

  {"name": "upgrade_plan", "arguments": {"plan": "basic"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"plan": "texte", "status": "swapped", "message": "texte", "checkoutUrl": "texte"}}

• verify_phone≈ 222 tokens

  Check the one-time code the user received from start_phone_verification. On success the balance is unlocked for funding (the verification stays fresh for 60 days) — call add_funds next. A wrong or expired code returns a recoverable status so you can ask the user to re-check it, or call start_phone_verification to resend.

  Paramètres, retour & exemple (1)

  Paramètres

  • code · string · requis
    The one-time code the user received, as a string (keep any leading zeros — do not send it as a number).

  Exemple d'appel

  {"name": "verify_phone", "arguments": {"code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"message": "texte"}}

• whoami≈ 695 tokens

  Show who you are operating as: the authenticated AgentCard account's email, user id, name, plan, KYC + account status, member-since date, and how this session is connected (personal login vs a third-party OAuth app connection, with the app name). Call this when the user asks "who am I" / "which account is this", or before money-moving actions when you need to confirm the account. Read-only. KYC shown here is the stored snapshot — use get_kyc_status when you need the live, provider-checked state.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "whoami", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"name": "texte", "plan": "texte", "email": "texte", "userId": "texte", "message": "texte", "kycStatus": "texte", "kycVerified": true, "memberSince": "texte", "accountStatus": "texte", "connectionType": "oauth", "connectionClientId": "texte", "subscriptionStatus": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.agentcard.sh/mcp