Sample API

The sample app exposes JSON-RPC at POST /api/mcp. It is for the shared shop when that database is running. It is not a billed integration, and the public site does not hand out a production key.

Tools in this build

• list_vendors
• get_vendor
• upsert_vendor
• ingest_coi_pdf
• check_requirements
• list_expiring_cois
• request_updated_coi
• block_vendor_if_noncompliant
• set_gate_status
• run_morning_compliance_brief
• list_templates
• upsert_template
• export_compliance_pack
• sync_status_outbound
• create_customer_ask

ingest_coi_pdf stores the file. A model fills the extract when an Anthropic or OpenAI key is set; otherwise the extract stays empty for a person to review. request_updated_coi sends the magic-link email when Resend or SMTP is configured, and fails without marking the chase sent when it is not. check_requirements writes a document score, not a carrier confirmation. Packaging intent is read-only on Free and chase or block on Starter. The sample key is not limited that way.

Local setup, including the sample key printed by the seed script, is in the repository README. That key is not a credential for a customer tenant.