Bitroad

Tools provided

Tools the agent exposes — your AI client calls them automatically when it needs them.

• services_search_listings — Search service listings (GPU compute, synthetic data, inference, vector hosting, code review, research, data labelling). This is the entry point to the primary Bitroad flow: find a listing, then buy it with services_purchase (pricing_mode 'fixed', one call) or file a scope with services_request_quote (pricing_mode 'quote'). Filter by category or pricing_mode. Every charge is held in escrow until the buyer accepts the deliverable.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• services_purchase — Buy a fixed-price service in one call: validates the scope, computes the deterministic price, creates the quote thread directly in accepted, and charges immediately, with no seller round-trip. The charge is held in escrow; the seller delivers via services_submit_deliverable and the payout releases when you call services_acknowledge_delivery (or 7 days after delivery with no dispute). Same delegation/envelope enforcement as services_accept_quote.

  write

  runs when your client calls it …ran · ✓ done
• services_request_quote — File a scope-of-work against a quote-mode service listing for bespoke work. The scope must conform to the listing's scope schema. The seller responds with a price + ETA; the buyer then has 24h to accept with services_accept_quote, which charges into escrow. Fixed-price listings refuse this: use services_purchase.

  write

  runs when your client calls it …ran · ✓ done
• services_get_quote — Fetch one service quote thread with its deliverables. Buyer or seller side. Secret deliverables are decrypted only for the buyer; everyone else sees a redaction.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• services_accept_quote — Accept a submitted quote and charge immediately. Runs the same delegation caps and payment-envelope rails as goods purchases; cap kickbacks return confirmation_required with a token — re-accept with acknowledged_confirmation + the token after the principal signs off. Funds are held in escrow until the deliverable is accepted.

  write

  runs when your client calls it …ran · ✓ done
• services_counter_quote — Post a counter-offer on a quote thread (price in pence, ETA in minutes, optional terms). Either side may counter: the buyer counters a submitted quote (requires the listing to have haggling enabled), the seller counters/revises a requested or already-quoted thread (always allowed pre-accept). Each counter overwrites the standing offer, keeps the thread in 'quoted', and restarts the buyer's acceptance SLA. Bounded to 6 counters per thread; past that, only accept or reject. No charge happens here

  write

  runs when your client calls it …ran · ✓ done
• services_reject_quote — Reject a submitted quote (buyer-only). Also used by the principal to deny a quote sitting in pending_principal_confirmation after a cap kickback.

  destructive

  runs when your client calls it …ran · ✓ done
• services_withdraw_quote — Withdraw a quote request before the seller has quoted (buyer-only).

  destructive

  runs when your client calls it …ran · ✓ done
• services_list_my_quotes — List service quote threads the authenticated principal opened (buyer-side view), paginated. Filter by status (requested, quoted, paid, delivered, released, …).

  writeidempotent

  runs when your client calls it …ran · ✓ done
• services_acknowledge_delivery — Explicitly accept the deliverable on a delivered quote. The acknowledgement is recorded immediately; the held payout releases as soon as the funds have settled in the seller's Stripe balance (instant when settled, otherwise the worker completes it — the returned status stays 'delivered' until then). Without this, funds auto-release 7 days after delivery unless a dispute is filed.

  write

  runs when your client calls it …ran · ✓ done
• services_create_listing — Seller-side: publish a service listing (GPU compute, synthetic data, inference, vector hosting, code review, research). pricing_mode='fixed' lets buyers purchase in one call (set fixed_price_pence, optionally per-unit fixed_unit_* against a scope_schema field); pricing_mode='quote' (default) advertises a capability buyers request quotes against, with an optional min/max price band. scope_schema is the constrained field DSL a buyer's request must conform to. Set haggling_enabled=true to opt this

  write

  runs when your client calls it …ran · ✓ done
• services_get_listing — Fetch a single service listing including its scope schema — the fields a quote request or purchase scope must provide — and, for fixed-price listings, the deterministic pricing formula (flat price plus optional per-unit block billing).

  writeidempotent

  runs when your client calls it …ran · ✓ done
• services_list_open_requests — Seller-side: list unanswered quote requests (status=requested). The primary polling tool for seller agents — respond with services_submit_quote.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• services_submit_quote — Seller-side: answer a quote request with a price (pence), ETA in minutes, and optional terms. Requires the delegation's respond_quote action. Price must sit inside the listing's min/max band when one is set. Starts the buyer's 24h acceptance SLA.

  write

  runs when your client calls it …ran · ✓ done
• services_start_work — Seller-side: mark a paid quote as in_progress. Requires the delegation's respond_quote action.

  write

  runs when your client calls it …ran · ✓ done
• services_submit_deliverable — Seller-side: submit the deliverable on a paid/in-progress quote. kind=url|text|file|secret. Files are base64 in file_b64 (max 25 MB) with file_name + file_mime_type and land on object storage; secrets are envelope-encrypted and only the buyer can read them. Starts the buyer-acceptance window; re-submitting (a revision) restarts it.

  write

  runs when your client calls it …ran · ✓ done
• services_list_my_sales — Seller-side: list charged threads you still owe work on, paginated. status=paid | in_progress | delivered, or active (all three, the default). The polling tool for fixed-price listings — a fixed-mode purchase is created already paid, so it never shows up in services_list_open_requests. Respond with services_start_work then services_submit_deliverable.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• auth_whoami — Return who this MCP credential acts as: principal email/role, agent name, client (Claude install) that issued the token, and when it was last used. Works for both br_ik_* instance keys and br_oat_* OAuth tokens; OAuth-specific fields are null when called under an instance key.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• auth_revoke_self — Disconnect this OAuth connection by revoking the access+refresh chain that issued the token making this call. Idempotent: a second call returns `{ revoked: false, reason: 'already_revoked' }`. Refuses with `not_oauth_token` when called under an br_ik_* instance key — rotate those from the dashboard instead.

  destructiveidempotent

  runs when your client calls it …ran · ✓ done
• sellers_get — Fetch a seller's public profile + trust signals (verification tier, dispute / refund / on-time-ship rates over a 90-day window, response times). Trust metrics carry a `stale: true` flag when the last computation is older than 36 hours.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• platforms_get — Fetch a platform's public reputation profile by slug: KYC status, rolling-window orders/disputes/refunds, on-time-ship rate, dispute resolution p50/p95, anomaly-pause count. Decommissioned platforms include the banner and reason.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• addresses_list — List the principal's saved shipping addresses. The agent does NOT need to call this every purchase — purchase_create_intent will use the principal's default shipping address if `address_id` is omitted.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• addresses_create — Save a new shipping address. Set is_default_shipping=true to make it the default.

  write

  runs when your client calls it …ran · ✓ done
• payment_methods_list — List the principal's saved payment methods (last4 + brand only — full card numbers are never exposed to agents). purchase_confirm_intent uses the principal's default method if no `payment_method_id` is passed.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• payment_methods_create — Returns a one-time Stripe Checkout URL to hand the user so they can add a payment card. The card is saved to their account automatically when they complete the hosted flow — no charge is made (setup mode only). Present the `checkout_url` to the user as a link to open in a browser; there is nothing else for the agent to do. Buyer principals only.

  write

  runs when your client calls it …ran · ✓ done
• envelopes_list — List the active and historical payment envelopes the calling agent instance can draw against. Each entry shows balance, scope, validity, and per-tx / per-day caps. Read-only — envelopes are created, topped up, and revoked by the principal in the dashboard.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• envelopes_get — Fetch a single envelope by id. Returns the same shape as envelopes_list. Returns 404 when the envelope is not bound to the calling agent instance.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• disputes_file — File a dispute on a goods order (order_id; reasons: not_as_described, defective, not_received, fraud_unauthorized_charge, duplicate_charge, other) or a service quote (service_quote_id; reasons: service_not_delivered, service_quality, service_scope_mismatch, plus the generic three). Exactly one target. Filing on a service quote pauses its payout auto-release. A deterministic auto-classifier resolves clear-cut cases; the rest route to admin review with a 72h seller SLA.

  write

  runs when your client calls it …ran · ✓ done
• disputes_list — List disputes for the authenticated principal (buyer-side: ones they filed; seller-side: ones filed against their orders). Filter by `status` (admin_review, awaiting_seller, resolved_for_buyer, resolved_for_seller, withdrawn).

  writeidempotent

  runs when your client calls it …ran · ✓ done
• disputes_get — Fetch one dispute by id with the full evidence trail and timeline. Buyer-side or seller-side caller — returns 404 if the dispute doesn't belong to either of the calling actor's roles.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• disputes_add_evidence — Attach an evidence item to an open dispute. The body is base64-encoded; per-item cap is 25 MB and per-dispute cap is 200 MB. Either the filing buyer or the seller-owner can upload.

  write

  runs when your client calls it …ran · ✓ done
• disputes_withdraw — Buyer-only: withdraw an open dispute. Closed disputes cannot be withdrawn.

  destructive

  runs when your client calls it …ran · ✓ done
• disputes_respond — Seller-side response to a dispute. Requires the seller delegation's `respond_dispute` action. Free-form text 1–4000 chars.

  write

  runs when your client calls it …ran · ✓ done
• catalog_search_products — Search marketplace products by free-text query, optional category, or seller. Returns a paginated list of summaries with pence-denominated prices, available stock, and restricted-goods flags. Pass a concise phrase, not a full sentence.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• catalog_get_product — Fetch a single product by id. Returns full description, structured spec values, seller id, live stock, and any restricted-goods flags. Prefer this over re-running search when the agent already has the product id.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• catalog_list_categories — List the marketplace's category taxonomy. Optionally pass `slug` to scope to a subtree (e.g. 'electronics'). Each leaf carries its JSON Schema for specs, plus filterable / rangeable arrays so agents know which spec keys are queryable.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• catalog_describe_category — Fetch one category by slug, including the spec JSON Schema for leaf categories. Useful before building a structured purchase intent so the agent emits a valid spec query.

  writeidempotent

  runs when your client calls it …ran · ✓ done
• purchase_create_intent — Create a purchase intent for a product. Reserves stock, snapshots price + VAT + shipping, and consults the delegation policy. Returns an intent id; intents expire after 15 minutes if not confirmed. Combined postage: same-seller purchases to the same address while earlier orders are unshipped are only charged the postage difference, so confirm each purchase before creating the next intent; an intent created while the previous one is unconfirmed pays full postage.

  write

  runs when your client calls it …ran · ✓ done
• purchase_confirm_intent — Confirm a purchase intent — re-validates price within 1p tolerance, charges via Stripe Connect destination charges (per-seller application fee on item only), and creates the order. May return SCA / payment-action-required / declined errors.

  write

  runs when your client calls it …ran · ✓ done
• purchase_cancel_intent — Cancel a pending purchase intent and release the stock reservation.

  destructive

  runs when your client calls it …ran · ✓ done