{"name":"io.github.jweezy119/Pabandi","slug":"jweezy119-pabandi","title":"PabandiOS","description":"Trust and settlement for AI agents: portable attestations, escrow, x402/USDC payments on Solana.","url":"https://mcp.market/server/jweezy119-pabandi","rating":null,"grade":"B","score":81,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":23,"stars":1,"forks":0,"downloads_week":null,"last_push_at":"2026-11-01T17:19:05.000Z","license":"MIT"},"uptime":{"percent":100,"checks":28,"ok":28,"last_checked_at":"2026-11-04T10:15:41.587Z","last_ok_at":"2026-11-04T10:15:41.587Z","latency_ms":714},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/jweezy119/Pabandi","website":null,"version":"1.0.1","remotes":[{"type":"streamable-http","url":"https://pabandi.onrender.com/mcp"}],"packages":[],"tools":[{"name":"pabandi_book_stay","description":"Create a confirmed stay reservation for a property: links the existing Reservation model + a StayBooking, then holds the guest deposit in escrow (EscrowEvent + TreasuryPosition with kind:hospitality, Solana commitment, PTP attestation). The guest deposit is the trust anchor — released to the business on check-in, refunded on cancellation. This is the hospitality money rail. [verified] Gated to businesses with an attested open-finance settlement rail OR PTP Band A/B, so every booked stay has a real, verified payout path. This is what makes the hospitality vertical trustworthy to guests and exclusive to quality hosts. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"propertyId":{"type":"string","description":"property id"},"checkIn":{"type":"string","description":"ISO date"},"checkOut":{"type":"string","description":"ISO date"},"guests":{"type":"string","description":"number of guests (optional)"},"depositAmount":{"type":"string","description":"guest deposit to hold (optional, defaults to 1 night)"}},"required":["propertyId","checkIn","checkOut","guests","depositAmount"]}},{"name":"pabandi_cancel_booking","description":"Cancel a booking","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"bookingId":{"type":"string","description":"Booking ID"}},"required":["bookingId"]}},{"name":"pabandi_check_availability","description":"Check availability for a business on a specific date","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"businessId":{"type":"string","description":"Business ID"},"date":{"type":"string","description":"Date in YYYY-MM-DD format"}},"required":["businessId","date"]}},{"name":"pabandi_connect_finance","description":"Register a verifiable, masked settlement connection for a business: RAAST (Pakistan), Stripe Treasury, Open Banking, Solana wallet, or PayPal. The account reference is masked (never raw), and a PTP attestation is produced so the business can prove it has a real payout path without exposing the account. This is the open-finance connectivity primitive — the trust badge on a listing. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"provider":{"type":"string","description":"RAAST | STRIPE_TREASURY | OPEN_BANKING | SOL_WALLET | PAYPAL"},"accountRef":{"type":"string","description":"masked/opaque reference (e.g. wallet addr, IBAN tail, Stripe acct id)"}},"required":["provider","accountRef"]}},{"name":"pabandi_create_booking","description":"Create a booking for an agent/client. Supports ACP, x402, AP2, UCP protocols.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"businessId":{"type":"string","description":"Business ID"},"serviceId":{"type":"string","description":"Service ID"},"datetime":{"type":"string","description":"Booking datetime"},"clientPassportId":{"type":"string","description":"Client passport ID"},"protocol":{"type":"string","enum":["acp","x402","ap2","ucp"],"description":"Payment protocol"}},"required":["businessId","serviceId","datetime"]}},{"name":"pabandi_discover","description":"Get PTP discovery (public). Returns verify endpoint, public key, issue endpoint, risk bands, entity types. No auth required.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{}}},{"name":"pabandi_discover_platform","description":"Discover the full Pabandi Platform: every tool, OpenAPI/spec URL, MCP endpoint, PTP endpoints, SDK info, access tiers, and live status.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{}}},{"name":"pabandi_execute_transaction","description":"Spend against an open PabandiSession -- book a service, pay an invoice, or fund an escrow. REQUIRES a sessionId. Sessions are authorised once against a Trust-Score-derived limit and let you transact repeatedly without a wallet signature per call, which is the entire point. If you do not have a session, call pabandi_open_session first and use the sessionId it returns; this tool will refuse without one rather than fall back to a per-call signature. A booking action may return actionRequired 'deposit_required' plus a deposit object (amount, currency, checkoutUrl); fund the deposit at checkoutUrl before treating the booking as settled.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"sessionId":{"type":"string","description":"id of an active PabandiSession (from pabandi_open_session)"},"actionType":{"type":"string","enum":["booking","invoice_pay","escrow"],"description":"What kind of action this spend authorises"},"amount":{"type":"number","description":"Amount in USDC to deduct from the session limit"},"payload":{"type":"object","description":"Action-specific detail. For bookings this must include businessId, so the server can evaluate the business's deposit policy. Opaque to the engine otherwise; hashed into the receipt.","additionalProperties":true},"idempotencyKey":{"type":"string","description":"Optional. A retry with the same key returns the original receipt and does not spend again."}},"required":["sessionId","actionType","amount"]}},{"name":"pabandi_finance_quote","description":"Quote an offramp/payout from the platform rails (RAAST, Stripe, Solana). Returns estimated fees, execution window, and the rail to use. Feeds the hospitality payout flow. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"amountUsdc":{"type":"string","description":"payout amount in USDc"}},"required":["amountUsdc"]}},{"name":"pabandi_get_business","description":"Resolve a business profile by id (public). Returns the sanitized public view (name, category, address, rating, trustScore, phone, email, coverImageUrl). Owner PII is gated — use pabandi:verify_owner for full PII. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"id":{"type":"string","description":"business id (cuid) or googlePlaceId"}},"required":["id"]}},{"name":"pabandi_get_ledger","description":"Look up a passport issuance charge by idempotencyKey (public audit). Returns feePab, ownerUserId, agentId, riskBand, capabilities, chargedAt. Example: {\"idempotencyKey\": \"iss-3001\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"idempotencyKey":{"type":"string"}},"required":["idempotencyKey"]}},{"name":"pabandi_get_services","description":"Get services offered by a business for agent booking","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"businessId":{"type":"string","description":"Business ID"}},"required":["businessId"]}},{"name":"pabandi_issue_passport","description":"Issue a scoped Agent Capability Passport (auth required via Bearer token from the owner). Capabilities validated against trust band. Metered at PAB_FEE_PER_PASSPORT $PAB per issue; idempotent via idempotencyKey. Example: {\"agentId\": \"svc-agent-7\", \"capabilities\": [\"act:book\", \"read\"], \"idempotencyKey\": \"iss-3001\"}. Get API key at POST /api/v1/agents/register.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"agentId":{"type":"string","description":"Unique id of the agent this passport is for"},"capabilities":{"type":"array","items":{"type":"string"},"description":"e.g. [\"act:book\",\"read\"]"},"idempotencyKey":{"type":"string","description":"Optional; retries with same key are not double-charged"}},"required":["agentId","capabilities"]}},{"name":"pabandi_list_finance","description":"Return a business's connected open-finance connections (verified + pending). Used by third parties to confirm a business has a real payout path before booking or partnering. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"businessId":{"type":"string","description":"business id"}},"required":["businessId"]}},{"name":"pabandi_list_properties","description":"List open short-term rentals / stays (Airbnb-style) by city or category. Each property is tied to a business + its open-finance settlement rail if connected. This is the hospitality inventory surface. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"city":{"type":"string","description":"city to filter"},"category":{"type":"string","description":"PROPERTY_RENTAL / LIVE_SELLER / ..."}},"required":["city","category"]}},{"name":"pabandi_platform_access","description":"Check whether the caller can access a given Pabandi platform tool (by MCP tool name). Returns ok + note.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"toolName":{"type":"string","description":"MCP tool name, e.g. pabandi_search"}},"required":["toolName"]}},{"name":"pabandi_platform_discovery","description":"Return the Pabandi Platform discovery doc: every tool on the platform, the OpenAPI/spec URL, the PTP verification endpoint, the public key, and the SDK access info. This is the entry point any third-party app, LLM, or agent uses to learn what Pabandi can do and how to call it. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"required":[]}},{"name":"pabandi_predict_booking","description":"Forward-predict the no-show and completion probability for a PROSPECTIVE booking (before it is created). Blends real customer + business history (Beta-binomial shrinkage), lead-time, and day-of-week. Returns predictedNoShow, predictedCompletion, confidence, and the top factors. This is the predictive intelligence the trust rail uses. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"customerId":{"type":"string","description":"guest user id"},"businessId":{"type":"string","description":"business id"},"reservationTime":{"type":"string","description":"ISO date of the proposed stay/booking"}},"required":["customerId","businessId","reservationTime"]}},{"name":"pabandi_predict_demand","description":"Return 24 hourly demand buckets for a business (from completed reservation history). Used to surface busy windows and optimize pricing/staffing. Owner-gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"businessId":{"type":"string","description":"business id"}},"required":["businessId"]}},{"name":"pabandi_recommend_slots","description":"Recommend the best upcoming slots for a guest at a business: each candidate scored by predictedCompletion, lightly load-balanced away from peak hours. Returns top 3 slots with predicted completion + demand. Owner-gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"businessId":{"type":"string","description":"business id"},"customerId":{"type":"string","description":"guest user id (optional)"},"daysAhead":{"type":"string","description":"range to evaluate (default 7)"}},"required":["businessId","customerId","daysAhead"]}},{"name":"pabandi_search_services","description":"Search verified businesses and services by name, category, city, or location. Every listing is tied to a Pabandi Passport trust score. Uses Postgres contains + OpenStreetMap Nominatim (no paid geo API). Returns real, deduped results — never empty. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"search":{"type":"string","description":"free-text search term"},"category":{"type":"string","description":"business category (RESTAURANT, SALON, PROPERTY_RENTAL, ...)"},"latitude":{"type":"string","description":"optional geolocation"},"longitude":{"type":"string","description":"optional geolocation"}},"required":["search","category","latitude","longitude"]}},{"name":"pabandi_start_escrow","description":"Initialize a milestone-based or native SOL/BSC escrow for a booking: business deposits, guest/host holds collateral, release on completion. This is the real-chain escrow rail (Solana + BSC Hardhat contracts). GATED to exclusive platform access — real chain writes require verified ownership + settlement rail. [exclusive] Exclusive: real-chain escrow writes are gated behind a verified PTP trust band (A/B) or an exclusive platform grant, so only trusted counterparties open real money on chain. Verified-only stays use the simulated escrow path. This is the premium moat — the real rail, gated. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"reservationId":{"type":"string","description":"reservation id"},"businessAddress":{"type":"string","description":"business wallet address"},"payoutAddress":{"type":"string","description":"freelancer/guest payout address"},"amount":{"type":"string","description":"value in smallest unit"},"chain":{"type":"string","description":"SOL | BSC"}},"required":["reservationId","businessAddress","payoutAddress","amount","chain"]}},{"name":"pabandi_verify_passport","description":"Verify a Pabandi PTP attestation (agent/business/individual/trust rail). Input base64-encoded attestation token and optional need (e.g. \"act:book\"). Returns valid, grantedCapabilities, riskBand, expiresAt. Works offline. Example: {\"token\": \"...base64...\", \"need\": \"act:book\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"token":{"type":"string","description":"Base64-encoded PTPAttestation or PTPAgentAttestation"},"need":{"type":"string","description":"Optional capability the subject must hold, e.g. \"act:book\""}},"required":["token"]}},{"name":"pabandi_verify_trust_attestation","description":"Verify a Pabandi PTP attestation (business, individual, agent, or trust rail). Re-executes the HMAC-SHA512 signature over a fixed subset of fields and returns valid + the verified claims. Offline-verifiable: any party can check a signed attestation without calling Pabandi. This is the trust primitive every third-party action gates on. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"token":{"type":"string","description":"base64-encoded PTPAttestation (optional: need=capability to gate on)"}},"required":["token"]}},{"name":"pabandi_zk_realestate_proof","description":"Generate a zero-knowledge proof that an escrow split (deposit = price - commission, fee = deposit*rate, binding commitment to the valuation) is valid, WITHOUT revealing the private price/valuation/secret. Packs into a PTP attestation so the proof is verifiable offline by any third party. Real Noir circuit (compiled at startup); constraint-execution proof when no SNARK prover is available; upgrades to a succinct signature when the Barretenberg pipeline lands. [owner] Proves the escrow split is correct without revealing the valuation — the privacy + verifiability moat for real-estate/hospitality deals. Upgrades to a succinct on-chain-verifiable SNARK when Barretenberg is in the pipeline. This MCP tool makes a real HTTP call to the canonical Pabandi endpoint and returns the actual platform response.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"deposit":{"type":"string","description":"lamports (public)"},"consecutiveMonths":{"type":"string","description":"tenancy months (public)"},"rate":{"type":"string","description":"basis points platform fee (public)"},"deadline":{"type":"string","description":"unix ts (public)"},"price":{"type":"string","description":"property valuation (private)"},"commission":{"type":"string","description":"agent/facilitator cut (private)"},"valuation_hash":{"type":"string","description":"commitment to off-chain terms (private)"},"agent_secret":{"type":"string","description":"non-zero stake secret (private, anti-Sybil)"}},"required":["deposit","consecutiveMonths","rate","deadline","price","commission","valuation_hash","agent_secret"]}}],"scan":{"score":81,"grade":"B","scanned_at":"2026-11-01T18:08:10.627Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-11-01T18:08:10.572Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 1364ms"]},"poisoning":{"score":15,"max":15,"notes":["25 tool descriptions checked"]},"auth":{"score":3,"max":15,"notes":["open endpoint exposes 4 write-action tools with no auth"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"auth.open-write","severity":"high","component":"auth","title":"Write-action tools reachable without authentication"}],"inputs":{"probes":[{"url":"https://pabandi.onrender.com/mcp","reachable":true,"authRequired":false,"latencyMs":1364,"serverInfo":{"name":"pabandi-trust","version":"1.0.0"}}],"packages":[],"repo":{"found":true,"owner":"jweezy119","repo":"Pabandi","archived":false,"pushedAt":"2026-11-01T17:19:05Z","stars":1,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/66397815?v=4","ownerCreatedAt":"2020-06-04T01:59:57Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":1,"forks":0,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-11-01T17:19:05.000Z","score":23}}}},"grade_history":[{"kind":"downgrade","fromGrade":"A","toGrade":"B","reason":"score 81: Write-action tools reachable without authentication","createdAt":"2026-11-01T18:08:15.029Z"}],"reviews":[]}