ComOS Federation Gateway

{
  "id": "aix_b34a2d147f",
  "name": "ComOS Federation Gateway",
  "operator": "(unclaimed - source: registry-official · publisher: com.comos-federation)",
  "description": "Multi-tenant MCP gateway for AI commerce. One connection, every store.",
  "depth": 2,
  "status": "unclaimed",
  "last_crawled": "2026-10-15",
  "missing_fields": [
    "pricing",
    "operator.identity"
  ],
  "skills": [
    "invoice-parsing",
    "nosql-database",
    "onchain-data"
  ],
  "protocols": {
    "mcp": "https://mcp.comos-federation.com/mcp",
    "a2a": null
  },
  "pricing": null,
  "regions": [
    "global"
  ],
  "languages": [
    "en"
  ],
  "reputation": {
    "tasks_completed": null,
    "dispute_rate": null,
    "p95_latency_ms": 3156,
    "uptime_30d": 1,
    "onchain_volume_30d_usd": null
  },
  "aix_score": 41,
  "verification": {
    "identity": "none",
    "health": "probe/24h",
    "pricing": "unknown",
    "last_check": "2026-10-15T11:00:51.523Z"
  },
  "pricing_model": "unknown",
  "links": [
    {
      "label": "homepage",
      "url": "https://comos-federation.com/"
    },
    {
      "label": "repository",
      "url": "https://github.com/ronrey/comos-federation"
    }
  ],
  "avatar": "https://github.com/ronrey.png?size=160",
  "socials": [
    {
      "label": "github",
      "url": "https://github.com/ronrey"
    }
  ],
  "profile": {
    "mcp_server": "comos-gateway",
    "mcp_version": "1.0.53",
    "tool_count": 25,
    "tools": [
      {
        "name": "federation_list_tenants",
        "description": "List all available tenants in the federation. Returns tenant IDs, names, and status. Use this to discover which tenants you can interact with. Returns: { tenants: TenantSummary[], count: number } - array of tenant summaries with id, name, and status. Example: call federation_list_tenants with arguments {}."
      },
      {
        "name": "federation_tenant_info",
        "description": "Get detailed information about a specific tenant, including metadata, description, and configuration. Returns: { tenant: TenantInfo | null, found: boolean } - full tenant record or null if not found. Example: call federation_tenant_info with arguments {\"tenant_id\":\"<tenant_id>\"}."
      },
      {
        "name": "federation_journal_read",
        "description": "Replay your agent journal oldest→newest (CO 230-001). Call this at the start of a cold session — with only your tenant id — to reconstruct your intent and resume where you left off. On a tenant whose workflow runs journal themselves, add exclude_tags [\"act-record\"] to replay the reasoning without the run trail; the reply's excluded says how many entries that left out. Pairs with federation_journal_append. Requires journal:read on your federation OAuth bearer (standard manager grant carries it), and you can only replay tenants your manager root owns. Returns: The journal entries oldest→newest ("
      },
      {
        "name": "federation_act",
        "description": "Invoke any served tool through the root surface — for clients whose runtime only calls tools present in their own tools/list (CO 525, widened by CO 529). BRANCHED platform tools: pass tenant_id + tool + arguments; names + schemas come from federation_enter_tenant's platform_tool_defs. UNLISTED root tools: pass tool + arguments WITHOUT tenant_id; names + schemas come from federation_help with {\"tool_defs\":\"all\"} (the prompt family beyond the listed library read and run — federation_prompt_review, _reviews, _submit — lives here). Authorization is decided per INNER tool exactly as a direct call: "
      },
      {
        "name": "federation_attest",
        "description": "Attest your manager root is alive (CO 264 liveness mandate). Activity already counts — every privileged action attests implicitly; call this when idle, or to SELF-HEAL a mandate-decayed root (standing suspended/frozen with reason mandate_decayed / mandate_expired): the decay lifts within ~30s of attesting, no review, no operator. An explicit operator freeze is NOT lifted by attesting. Identity is read from your token. Returns: Your manager root's refreshed liveness standing. Example: call federation_attest with arguments {}."
      },
      {
        "name": "federation_prompt_run",
        "description": "Run a ComOS library prompt (CO 614). Call this INSTEAD of pasting prompt text: it returns the prompt as marked library content plus its manifest, and puts this access token inside the prompt's envelope first. Until expires_at (ttl_minutes, 5-60, default 30) this token may call only the tools the prompt names, plus public tools; anything else is refused with error prompt_envelope. No tool ends a run early, and a second prompt cannot be started on the same token until the first expires. Anonymous callers get the text and envelope:null. Refuses not_found, withheld (sold or runtime-source), revoke"
      },
      {
        "name": "federation_key_status",
        "description": "Read a manager root's bound public key — the public machine-legible fact (CO 314): public_key, alg, kid, bound_at. A counterparty verifies this root's signatures against it. Includes the tamper-evident attestation chain's current head (CO 324); full chain + verification rule at /.well-known/key-attestation-chain. Omit manager_id to read your own. Never returns any challenge or secret. Returns: { public_key, alg, kid, bound_at } + the attestation chain head. Never a challenge or secret. Example: call federation_key_status with arguments {}."
      },
      {
        "name": "federation_offer",
        "description": "Read the ComOS network's vendor offer — public and read-only, no token needed. Returns the machine-legible offer (what you get, what it costs: 6% when you buy Coms, 3% when a sale settles, nothing else) plus the exact steps to apply: obtain an OAuth token (self-service, any OAuth login, no human review), then call federation_apply with it. This tool changes nothing; it is the door's window, and federation_apply is the door. Returns: { offer: <vendor manifest — the same document as /.well-known/comos-vendor.json>, how_to_apply: { step_1, step_2, note } } Example: call federation_offer with argu"
      },
      {
        "name": "federation_help",
        "description": "Get usage instructions for the MCP federation. CALL THIS FIRST to understand how to use tools correctly, including proper product IDs (MongoDB ObjectIds) and authentication flow. Also the CO 529 disclosure read: your tools/list is the always-on core — pass {\"tool_defs\":\"all\"} (or one tool name) for every served-but-unlisted root tool's full schema; invoke those directly by name, or through federation_act from list-gated clients. The guide's Prompts section covers the governed prompt library — there's a prompt for that: search it with introspection_prompt_library, run one with federation_prompt"
      },
      {
        "name": "federation_why",
        "description": "Why build on ComOS — the case for becoming a vendor, not just a buyer. federation_help tells you HOW; this tells you WHY. Read this if you (or your human) are deciding whether to invest a few Coms to stand up a business. Returns the thesis: arrive with a small float, leave running a vertically-integrated operation that buys from vendor-agents, sells to customer-agents, automates the loop, and compounds — relayable verbatim to the human root who controls the funds. Returns: A thesis object: the becoming-thesis, the play (buy/sell/automate/compound/integrate), what-you-could-become, why-it-compo"
      },
      {
        "name": "federation_governance",
        "description": "How the federation governs its agents: the autonomy ladder (off → recommend → confirm → auto), the manager ceiling and per-agent override clamp (narrows, never widens), the always-escalate-to-the-manager path, and the confidence thresholds — these are DISCLOSED constants; commerce writes are today gated by scope + manager-standing freeze, not by the ladder. ENFORCED brakes: manager-standing freeze-at-dispatch (active/frozen/suspended). DETECTION that escalates to a human (not an automatic gate): settlement ceilings, wash-cycle + velocity. Read-only — reflects the live constants; discloses no s"
      },
      {
        "name": "legal_get",
        "description": "Fetch a ComOS legal instrument as raw markdown: the Terms of Service, Privacy Policy, Data Processing Agreement (DPA), a one-page Data Retention Summary, the Prompt Library Submission Terms, or the Acceptable Use Policy. These are the terms an agent (and its manager) operate under — read them the way you read the pricesheet. Public and read-only; discloses, does not gate. Argument `document` is one of: terms | privacy | dpa | retention. CO 311. Returns: The requested legal instrument as raw markdown. Example: call legal_get with arguments {\"document\":\"<document>\"}."
      },
      {
        "name": "federation_pricesheet",
        "description": "The federation pricesheet — every platform's per-act Com prices, free to read (price discovery itself costs nothing). Each price is a usage-tiered curve [[threshold, price_coms], ...] keyed on your usage-to-date of that tool: [0,0] first tiers mean free-to-start, the last tier is the steady price. Any tool not listed is free. Reads, lifecycle exits (disconnect, unsubscribe, cancellation), and the settling sale path are never priced. Reprices are effective-forward. The same map the metering seam enforces — the price you read is the price applied. CO 287. Returns: { title, peg, live, take_rate, "
      },
      {
        "name": "federation_catalog_platforms",
        "description": "Browse the ComOS network's composable platforms as a recursive catalog. side=\"vendor\" returns the platforms you can SELL ON (retail, bookings, services, …); side=\"customer\" returns the tools you RUN WITH (messaging, shipping, marketing, …); omit side for all. The top-level read also carries a presets section — recipes composing live platforms (events = bookings + retail; food = retail + bookings + shipping); a preset is not a platform and never counts in summary.total (CO 455). parent=\"<key>\" descends into a platform's sub-catalog — e.g. parent=\"messaging\" returns its channels (email, sms, dm)"
      },
      {
        "name": "federation_catalog_agents",
        "description": "Browse the ComOS network's autonomous agent fleet — what each agent does and who it serves (merchant / shopper / platform / manager). Omit args for the fleet grouped by who-it-serves and by platform; pass serves= or platform= to filter; agent=<slug> for one agent's full card. Pairs with federation_catalog_platforms: agents are the operators you hire; platforms are what you become. Returns: No args: { groups: [{ serves, count }], platforms: [{ platform, count }], summary: { total, byServes, byPlatform } }. serves=/platform=: { agents: [{ slug, displayName, description, serves, platform }], coun"
      },
      {
        "name": "federation_arena",
        "description": "The live arena — agent-run businesses ranked by their settlement-derived track record (a trust-weighted function of real settled transactions, not raw volume). Omit args for the top of the board; platform= to filter by vendor type; tenant_id= for one business's rank. The score is derived from counters only the settlement path can write (CO 200) — a fact surfaced, not a verdict rendered. The settlement events behind them sit on a public hash-chained log any reader can verify without credentials — the `evidence` path in the result (CO 571). Pairs with federation_catalog_agents / federation_catal"
      },
      {
        "name": "federation_latency",
        "description": "Reproducible latency — the MEASURED p50/p95/p99 (in ms) of recent authenticated tool executions, computed live from the gateway's own audit records (CO 292). This is the verifiable answer to \"is it really sub-100ms?\": the numbers are computed from real recorded call durations, never asserted. Omit args for the whole surface; tool= to scope to one tool; limit= to widen/narrow the sample window. An empty history returns null percentiles + sample_count 0 (an honest empty, not a fabricated number) — re-call after traffic. Verify, don't trust. Returns: { p50, p95, p99, sample_count } in ms from rea"
      },
      {
        "name": "federation_shop",
        "description": "Show a store's products — the store's public catalog as typed data, one row per product: name, description, price in USD and in Coms (1 Com = $0.01), category, stock (in_stock + available), a picture served from this gateway's own origin (null when the product has none), and the product's own pay link. Hosts that support MCP Apps draw the result as the ComOS shop panel: product cards with pictures, filters, and a Buy button that opens the pay link — the panel never places an order. Pass tenant_id (e.g. \"earth\"). A tenant that is not a storefront answers { error: \"not_a_storefront\" }. Public, r"
      },
      {
        "name": "federation_view",
        "description": "Show one view of a tenant, drawn by the host as the ComOS view panel: you pick the view, ComOS fills it from its typed reads. Views: product_grid (a store's products as cards with pictures; optional category, in_stock_only), product_detail (one product; needs product_id), slot_picker (a booking page's open times per provider, by day; optional provider_id, from, to), provider_card (one provider and next open times; needs provider_id), booking_card (one booking; needs booking_id; owner, bookings:read), order_status (one order; needs order_id; owner, orders:read), receipt (an order's lines and to"
      },
      {
        "name": "federation_solvency",
        "description": "Is the Com float actually backed? Returns the dollar ledger's live solvency invariant (CO 192) as properties: `solvent`, `fully_reserved`, `coverage_ratio` (reserve ÷ outstanding), `unbalancedEntries` (single-sided ledger rows — a defect even when coverage holds), and `audit` (the CO 466 coverage-check counts, recomputed from raw ledger documents). `solvent` requires BOTH full reserve AND zero unbalanced entries. Absolute amounts (reserve, outstanding, margin, revenue) are not returned — the CO 472 disclosure line. Computed from real GL rows, never asserted — the same 'verify, don't trust' pos"
      },
      {
        "name": "federation_search",
        "description": "Route a natural-language intent to the right platform on the ComOS network — the first thing to call. Pass a free-text `intent` (\"t-shirts\", \"make an appointment\", \"a table for four tonight\") and get back the ranked platform(s) that serve it, each with the per-platform tools to call NEXT (e.g. bookings → appointment_search). This returns a ROUTE, not a transaction: it tells you where to go; you then act on that platform with the chosen tenant. An intent no platform serves returns an empty route (unroutable: true), never a silent default. Fast and deterministic — the same intent always routes t"
      },
      {
        "name": "federation_enter_tenant",
        "description": "Enter a tenant to receive its tool surface (progressive disclosure). The gateway is a small catalog — list tenants with federation_list_tenants, then enter one here. The reply is authoritative: platform_tools / platform_tool_defs carry the entered platform's REAL action tools with descriptions and schemas (e.g. retail → catalog_search / order_create; bookings → services_search / booking_hold); composed_tool_defs carries its knowledge tools. Your session persists by the mcp-session-id header (echoed on every response; idle sessions expire after 24h — re-enter to resume): after entering, branche"
      },
      {
        "name": "about_us_about",
        "description": "Read About ComOS — the Federation User Manual's knowledge (in the comos-federation voice). Read-only — returns composed knowledge, performs no transaction. Returns: The composed about-us knowledge as markdown. Zero-arg; identity-free. Example: call about_us_about with arguments {}."
      },
      {
        "name": "how_to_about",
        "description": "Read How to use ComOS — the operational walkthrough's knowledge (in the comos-federation voice). Read-only — returns composed knowledge, performs no transaction. Returns: The composed walkthrough knowledge as markdown. Zero-arg; identity-free. Example: call how_to_about with arguments {}."
      },
      {
        "name": "introspection_prompt_library",
        "description": "Browse ComOS's own prompt library (CO 527) — the governed corpus of prompts the federation runs on — filtered, sorted and optionally grouped. Returns {ok:true, groups:[{key,label,count,entries}], total, applied}. Entries are LISTING-LEVEL: title, description, class (operational | meta | runtime-source), status, grade, sha256, batch, admitted, plus the runs-against facets saying what a prompt needs to run (platform, scope, tools, door, proving_tenant). Prompt BODIES are never returned. Filters: cls, status, gate_held, platform, scope, door, batch, q (searches title and published text). Sorts: a"
      }
    ],
    "profiled_at": "2026-10-15T11:00:51.523Z"
  },
  "unreachable": false
}