Self-authenticating booking-request receipt anchored to the Knox chain; never represents a person.
Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.
https://bonissystems.com/api/knox/agents/booking-request/mcp3 tools · 228msrequest_bookingAnchor a booking request for a represented Bonis Concierge agent. Returns a self-authenticating booking bundle: Knox anchor record + C2PA-aligned envelope (subset of C2PA 1.4 — adapted for booking events) + FRE 902(13)/(14)-shape representation affidavit. The agency does not adjudicate the merits o…Anchor a booking request for a represented Bonis Concierge agent. Returns a self-authenticating booking bundle: Knox anchor record + C2PA-aligned envelope (subset of C2PA 1.4 — adapted for booking events) + FRE 902(13)/(14)-shape representation affidavit. The agency does not adjudicate the merits o…
| Parameter | Type | Description |
|---|---|---|
| agentSlug* | string | Roster slug of the listed agent (e.g., 'ofac-sdn-screening', 'content-provenance'). Must match the published Bonis Concierge roster — call list_represented_age… |
| brief* | string | Plain-language description of the booking (10–4000 chars). |
| archetype | string | Optional requested presentation archetype if the listed agent supports multiple. |
| startBy | string | Optional ISO-8601 date or date-time when the booking should begin. |
| contactEmail | string | Optional contact email (hashed before anchoring). Provide at least one of contactEmail or contactKnoxKeyId. |
| contactKnoxKeyId | string | Optional Knox API key ID. Provide at least one of contactEmail or contactKnoxKeyId. |
| budgetUsdMax | number | Optional maximum USD budget signal. Discovery field — no payment is collected under this primitive. |
| notes | string | Optional free-form notes (≤ 2000 chars). |
verify_bookingVerify an anchored booking-request record. Given a SHA-256 anchor hash (the payload_hash from a prior request_booking call), return the anchor record, predecessor hash, sequence number, and timestamp. Public — no authentication required. The verification path is also accessible at GET /api/knox/ver…Verify an anchored booking-request record. Given a SHA-256 anchor hash (the payload_hash from a prior request_booking call), return the anchor record, predecessor hash, sequence number, and timestamp. Public — no authentication required. The verification path is also accessible at GET /api/knox/ver…
| Parameter | Type | Description |
|---|---|---|
| hash* | string | SHA-256 anchor hash (64 lowercase hex chars). |
list_represented_agentsEnumerate the Bonis Concierge represented-agent roster. Returns slug, name, charter, bureau, archetype, liveness ('live' = verifiable POST endpoint and Knox event-chain integration today / 'charter' = description filed, integration in progress), and capability-page URL for each agent.Enumerate the Bonis Concierge represented-agent roster. Returns slug, name, charter, bureau, archetype, liveness ('live' = verifiable POST endpoint and Knox event-chain integration today / 'charter' = description filed, integration in progress), and capability-page URL for each agent.
| Parameter | Type | Description |
|---|---|---|
| livenessFilter | string | Optional filter on liveness. Default: 'all'. |
3 of 3 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Self-authenticating booking-request receipt anchored to the Knox chain; never represents a person.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.