Tool Offer Agent

Working Security A

com.kinganlogic/tool-offer-agentv1.4.7 Domain verified

Source-attributed API/MCP offer drafting, revision, readiness assessment and export.

AI & Agents

Watch

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-06T23:58:38.950138Z",
      "publishedAt": "2026-11-06T23:58:38.950138Z",
      "statusChangedAt": "2026-11-06T23:58:38.950138Z"
    }
  },
  "server": {
    "name": "com.kinganlogic/tool-offer-agent",
    "title": "Tool Offer Agent",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://tooloffer.kinganlogic.com/mcp",
        "type": "streamable-http"
      }
    ],
    "version": "1.4.7",
    "description": "Source-attributed API/MCP offer drafting, revision, readiness assessment and export."
  }
}

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://tooloffer.kinganlogic.com/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

assess_offer_readiness

Read-only deterministic assessment of your retained session. No fetching, inference, FAHCE, approval or payment. Returns a job, not the report: poll get_result for signed readiness JSON plus full human_readable content, or a resumable report manifest. Not seller certification or commercial clearance.

request_idstring, required

session_idstring, required

This tool isn't marked read-only, so it may change something on the server or in an account you connected.

I understand, run it anyway

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM Studio Add to Goose

Run in a terminal

claude mcp add --transport http tool-offer-agent https://tooloffer.kinganlogic.com/mcp

Tools (7)

assess_offer_readiness

Argument	Type	Description
request_id*	string
session_id*	string

Input schema (JSON)

{
  "type": "object",
  "required": [
    "session_id",
    "request_id"
  ],
  "properties": {
    "request_id": {
      "type": "string",
      "format": "uuid"
    },
    "session_id": {
      "type": "string",
      "format": "uuid"
    }
  },
  "additionalProperties": false
}

export_offer

Export your session's saved offer, proposed plan or explicitly incomplete response without inference. Large responses use the agent's resumable manifest; retrieve each indexed part with get_export_part. An export is not publication or certification.

Argument	Type	Description
format*	string
request_id*	string
session_id*	string

Input schema (JSON)

{
  "type": "object",
  "required": [
    "session_id",
    "request_id",
    "format"
  ],
  "properties": {
    "format": {
      "enum": [
        "json",
        "readable",
        "buyer",
        "representation",
        "listing",
        "plan",
        "incomplete"
      ],
      "type": "string"
    },
    "request_id": {
      "type": "string",
      "format": "uuid"
    },
    "session_id": {
      "type": "string",
      "format": "uuid"
    }
  },
  "additionalProperties": false
}

get_export_part

Retrieve one existing resumable export part from your session, without inference. Preserve the manifest and verify its hashes; do not claim completion until all parts are received.

Argument	Type	Description
index*	integer
export_id*	string
request_id*	string
session_id*	string

Input schema (JSON)

{
  "type": "object",
  "required": [
    "session_id",
    "request_id",
    "export_id",
    "index"
  ],
  "properties": {
    "index": {
      "type": "integer",
      "maximum": 999999,
      "minimum": 1
    },
    "export_id": {
      "type": "string",
      "pattern": "^[a-f0-9]{64}$"
    },
    "request_id": {
      "type": "string",
      "format": "uuid"
    },
    "session_id": {
      "type": "string",
      "format": "uuid"
    }
  },
  "additionalProperties": false
}

get_result

Read a job owned by your authenticated client. pending/processing/uncertain is not completion. Poll this same job; do not duplicate an uncertain message. No inference.

Argument	Type	Description
job_id*	string

Input schema (JSON)

{
  "type": "object",
  "required": [
    "job_id"
  ],
  "properties": {
    "job_id": {
      "type": "string",
      "format": "uuid"
    }
  },
  "additionalProperties": false
}

get_status

Ask the existing agent for the current offer status without inference. Returns a job; poll get_result.

Argument	Type	Description
request_id*	string
session_id*	string

Input schema (JSON)

{
  "type": "object",
  "required": [
    "session_id",
    "request_id"
  ],
  "properties": {
    "request_id": {
      "type": "string",
      "format": "uuid"
    },
    "session_id": {
      "type": "string",
      "format": "uuid"
    }
  },
  "additionalProperties": false
}

send_message

Send field: value lines, or a JSON-serialized StructuredIntake object in message, a product question, a revision or a drafting command. Intake keys: tool_url, docs (URL string or 1–3 URL strings), customer, pricing, payment, access, invocation; optional job and seller_name. All other values are strings. Optional schema is TOOL_OFFER_INTAKE_V1. Unknown/duplicate keys and invalid values reject the entire update. Card selections are separate. May use bounded operator model quota. Returns a stable job; optional HTTP Prefer: wait=1 through wait=5 waits without redispatch and may include the signed completed result. Otherwise poll get_result. Never resend uncertain work with a new request_id. No payments or FAHCE execution.

Argument	Type	Description
message*	string
request_id*	string
session_id*	string

Input schema (JSON)

{
  "type": "object",
  "required": [
    "session_id",
    "request_id",
    "message"
  ],
  "properties": {
    "message": {
      "type": "string",
      "maxLength": 4000,
      "minLength": 1
    },
    "request_id": {
      "type": "string",
      "format": "uuid"
    },
    "session_id": {
      "type": "string",
      "format": "uuid"
    }
  },
  "additionalProperties": false
}

start_session

Create an isolated seven-day offer conversation. Requires a unique request_id; replaying it returns the same session. No model inference.

Argument	Type	Description
request_id*	string

Input schema (JSON)

{
  "type": "object",
  "required": [
    "request_id"
  ],
  "properties": {
    "request_id": {
      "type": "string",
      "format": "uuid"
    }
  },
  "additionalProperties": false
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 7, 2026.

Hidden or reordered text
Overriding the model's instructions
Hiding actions from the user
Reading keys or credentials
Fake system tags
Steering other servers' tools
Pulling in the conversation
Smuggling parameters
Demanding to be used for everything
Steering away from web search
Download-and-run commands
Encoded blobs
Invisible characters
Credentials as tool arguments
Very long descriptions
Read and write hintsNote1 found
No readOnlyHint / destructiveHint annotations, so clients can't tell a read from a write without asking.
- server · annotations
  7 of 7 tools: start_session, send_message, get_status, assess_offer_readiness, export_offer, ...
Fix: Add annotations to each tool, e.g. { readOnlyHint: true } for tools that only read.

How the security check works