KEVAREMESH AI Procurement Gateway

One agent-facing entry to the rights-verified bounded external API catalog (Frankfurter, USGS, Crossref and ROR where currently enabled). Read the live catalog to discover available operations. Actions: catalog, execute, batch, resolve, pass_catalog and paid_execute. Free operations remain bounded. A buyer-authorized x402 24h Access Pass supports independently verified paid admission with capped immediate API execution; the MCP tool does not sign, buy, or move funds. It cannot perform purchases, send funds, forward arbitrary URLs or execute upstream fee-bearing APIs. The live catalog combines current first-party products and rights-eligible external operations when independent checks succeed; inventory counts are not hardcoded.

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string",
      "enum": [
        "catalog",
        "execute",
        "batch",
        "resolve",
        "pass_catalog",
        "paid_execute"
      ],
      "default": "catalog"
    },
    "operation": {
      "type": "string",
      "pattern": "^[a-z][a-z0-9_]{1,80}$",
      "description": "Use an exact operation name returned by action=catalog. The hub enforces permitted operations, original inputs and per-provider rights before use."
    },
    "access_key": {
      "type": "string",
      "pattern": "^[0-9a-f]{64}$",
      "description": "For paid_execute only: the buyer-held 32-byte random access key from an independently confirmed x402 Access Pass. Treat as private; never expose in public logs or chat."
    },
    "input": {
      "type": "object",
      "description": "For currency_rate: base/quote ISO codes; for currency_convert add amount; currency_history add date; USGS operations use empty object; Crossref DOI lookup requires doi, publication search requires query; ROR organization search uses query and ROR record uses id. Always consult the live catalog for exact schemas."
    },
    "jobs": {
      "type": "array",
      "minItems": 1,
      "maxItems": 3,
      "items": {
        "type": "object",
        "description": "Each item has operation and input."
      }
    },
    "goal": {
      "type": "string",
      "minLength": 1,
      "maxLength": 150
    }
  },
  "additionalProperties": false
}

AI FIRST: if the buyer's agent is pre-authorized for autonomous x402 spending, use this single MCP tool. No human checkout, approvals or manual invoice at KEVAREMESH. On first call return standard x402 MCP PaymentRequired; compatible payer automatically signs within its preconfigured budget and retries the SAME tool with _meta['x402/payment']. Merchant independently verifies and charges only the exact authorized payment. For owned APIs a paid result may require chain confirmations: use this same tool with receipt_id to resume automatically without paying again. For infrastructure buy and activate a 24h Access Pass automatically, then execute the requested operation; if confirmation is pending, resume with returned access_key and the same operation/input. If buyer auto-payment is disabled, the buyer's client alone must obtain human authorization before signing. Buyer maintains keys and budgets; no seller-side custody, no repeated charge on uncertain receipts.

{
  "type": "object",
  "properties": {
    "kind": {
      "type": "string",
      "enum": [
        "owned",
        "infrastructure"
      ]
    },
    "slug": {
      "type": "string",
      "pattern": "^[a-z0-9][a-z0-9-]{1,120}$"
    },
    "operation": {
      "type": "string",
      "pattern": "^[a-z][a-z0-9_]{1,80}$"
    },
    "input": {
      "type": "object",
      "description": "Original owned API input or live infrastructure operation input"
    },
    "receipt_id": {
      "type": "string",
      "pattern": "^[0-9a-fA-F-]{36}$",
      "description": "For resuming an already-paid owned result; NEVER buy or sign again"
    },
    "access_key": {
      "type": "string",
      "pattern": "^[0-9a-f]{64}$",
      "description": "For resuming an already-paid infrastructure pass; private bearer key, no new payment"
    }
  },
  "required": [
    "kind"
  ],
  "additionalProperties": false
}

Choose first when an AI wants to solve a task such as CSV to JSON, Base64, URL parsing, JSON validation, hashing, UUIDs or timezone conversion, without knowing a product name. One request discovers matching existing KEVAREMESH tools, real input schemas where available, indicative prices and verified live checkout status. Optional supplier metadata is free, never a grant of third-party access. This discovery tool cannot pay or execute.

{
  "type": "object",
  "properties": {
    "goal": {
      "type": "string",
      "minLength": 1,
      "maxLength": 160
    },
    "capability": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80
    },
    "include_provider_candidates": {
      "type": "boolean",
      "default": false
    },
    "include_input_contracts": {
      "type": "boolean",
      "default": true,
      "description": "Inline the actual reviewed input schemas for at most two matching executable local APIs. Free metadata GET only."
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 8,
      "default": 5
    }
  },
  "required": [
    "goal"
  ],
  "additionalProperties": false
}

Choose when an AI already knows a capability or product keyword and wants to find relevant KEVAREMESH-owned APIs and their original contracts. Discover prices, current real paid availability, input limits, and free preview links. For a natural-language job choose kevaremesh_route_intent instead. No purchase or execution occurs here.

{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "minLength": 1,
      "maxLength": 120,
      "description": "Search words from capability, slug or module kind"
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 20,
      "default": 8
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false
}

Choose when an agent wants to search several candidate third-party APIs using one free metadata gateway, rather than individually browsing suppliers. Supply the explicit capability and search terms. Discovery returns unverified supplier names and prices, not authentication rights. No provider API is executed and no payment is made.

{
  "type": "object",
  "properties": {
    "capability": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80
    },
    "query": {
      "type": "string",
      "minLength": 1,
      "maxLength": 120
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 10,
      "default": 5
    }
  },
  "required": [
    "capability",
    "query"
  ],
  "additionalProperties": false
}

Use when an AI agent needs one bounded, free comparison for 1–5 specified provider capabilities. Calls only KEVAREMESH Gateway /quote; no provider execution, credentials, wallet signature or payment. Candidate discovery never grants rights to use a provider.

{
  "type": "object",
  "properties": {
    "requirements": {
      "type": "array",
      "minItems": 1,
      "maxItems": 5,
      "items": {
        "type": "object",
        "properties": {
          "capability": {
            "type": "string",
            "minLength": 1,
            "maxLength": 80
          },
          "goal": {
            "type": "string",
            "minLength": 1,
            "maxLength": 120
          },
          "max_unit_price_usd": {
            "type": "number",
            "minimum": 0.000001,
            "maximum": 100
          }
        },
        "required": [
          "capability",
          "goal",
          "max_unit_price_usd"
        ],
        "additionalProperties": false
      }
    },
    "max_total_upstream_usd": {
      "type": "number",
      "exclusiveMinimum": 0,
      "maximum": 500
    },
    "preference": {
      "type": "string",
      "enum": [
        "balanced",
        "cheapest",
        "proven"
      ],
      "default": "balanced"
    }
  },
  "required": [
    "requirements",
    "max_total_upstream_usd"
  ],
  "additionalProperties": false
}

Choose when an agent wants a free price comparison for one named provider API capability within a strict price ceiling. Calls only the free KEVAREMESH Gateway quote. For 2–5 needs use kevaremesh_quote_provider_batch. Neither operation purchases upstream APIs or handles buyer funds.

{
  "type": "object",
  "properties": {
    "capability": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80
    },
    "goal": {
      "type": "string",
      "minLength": 1,
      "maxLength": 120
    },
    "max_unit_price_usd": {
      "type": "number",
      "minimum": 0.000001,
      "maximum": 100
    }
  },
  "required": [
    "capability",
    "goal",
    "max_unit_price_usd"
  ],
  "additionalProperties": false
}

Free lookup of a 24-item reviewed API's original input schema and whether one of 21 actual algorithms can be previewed. This is not a paid API execution contract or merchant authorization.

{
  "type": "object",
  "properties": {
    "slug": {
      "type": "string",
      "pattern": "^[a-z0-9][a-z0-9-]{1,120}$",
      "minLength": 2,
      "maxLength": 120
    }
  },
  "required": [
    "slug"
  ],
  "additionalProperties": false
}

After finding an owned API SKU, run its actual reviewed pure algorithm on the healthy replacement database. Limited to 21 no-network modules; other 3 are held. Preview is free, severely rate limited, has no wallet or paid entitlement, and does not imply a commercial release.

{
  "type": "object",
  "properties": {
    "slug": {
      "type": "string",
      "pattern": "^[a-z0-9][a-z0-9-]{1,120}$"
    },
    "arguments": {
      "type": "object",
      "description": "Reviewed native API arguments. Total serialized request payload <= 4KiB."
    }
  },
  "required": [
    "slug",
    "arguments"
  ],
  "additionalProperties": false
}

Checks an existing UUID receipt and optionally reconciles a prior Base USDC payment using its real transaction hash if the facilitator response was lost. Never makes a purchase, signs, transfers, repeats a payment or calls an external paid provider.

{
  "type": "object",
  "properties": {
    "receipt_id": {
      "type": "string",
      "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
    },
    "reconcile": {
      "type": "boolean",
      "default": false
    },
    "transaction_hash": {
      "type": "string",
      "pattern": "^0x[0-9a-fA-F]{64}$",
      "description": "Optional already-executed Base payment hash. Only with reconcile=true; never sends payment."
    }
  },
  "required": [
    "receipt_id"
  ],
  "additionalProperties": false
}

If an authorized x402 payment was reserved but the network response containing its receipt UUID was lost, compute SHA-256 of the exact original Payment-Signature header locally and supply ONLY the 64-character hexadecimal fingerprint. This free lookup never accepts the raw signature, creates a charge, executes a paid API or contacts a payment facilitator. The fingerprint itself is private bearer material.

{
  "type": "object",
  "properties": {
    "payment_signature_sha256": {
      "type": "string",
      "pattern": "^[0-9a-fA-F]{64}$",
      "description": "SHA-256 hex of the exact original raw Payment-Signature header. NEVER put the signed payment header itself in this field."
    }
  },
  "required": [
    "payment_signature_sha256"
  ],
  "additionalProperties": false
}

Fetch the original AES-GCM cached result for a settled and chain-verified owned API payment. The result is available for up to 24 hours. No additional payment, no new provider calls or API execution.

{
  "type": "object",
  "properties": {
    "receipt_id": {
      "type": "string",
      "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
    }
  },
  "required": [
    "receipt_id"
  ],
  "additionalProperties": false
}

Returns exact URL origins, verified payment-disable flags, historical 0.001 USDC route-fee model and explicit distinction between KEVAREMESH fees and upstream provider money.

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

Given a gateway request ID and buyer-held finalize token, poll prior Base USDC settlement evidence. It may finalize a verified existing fee and return the associated paid route capability. Never signs, pays again, submits provider requests or creates routes.

{
  "type": "object",
  "properties": {
    "gateway_request_id": {
      "type": "string",
      "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$"
    },
    "finalize_token": {
      "type": "string",
      "minLength": 40,
      "maxLength": 256
    }
  },
  "required": [
    "gateway_request_id",
    "finalize_token"
  ],
  "additionalProperties": false
}