agentbroker

Agent Broker is an MCP server aimed at the long tail of small and mid-sized businesses that have no API surface. AI agents call the server, and it routes the request to the relevant business through whichever channel is fastest: Cal.com first, then WhatsApp, SMS, voice AI, and email. A compliance gate covering TCPA, GDPR, CASL and 10DLC sits in front of every outbound communication and is described as non-bypassable. Status, as stated in the README: the streamable-http MCP endpoint at https://hatchloop.dev/mcp/agent-broker is live, along with 23 tools, the compliance gate, REST, A2A and OpenAI/Anthropic tool surfaces. The SMB supply network is explicitly demo-only (20+ seed businesses; demo bookings return demo_smb_no_live_booking), and production SMB onboarding is listed as planned. Some bookings can therefore fail honestly rather than being faked. Tool surface (23 tools, callable over MCP, REST, OpenAI function calling, Anthropic tool_use or A2A): discovery and verification (find_business, verify_business, check_booking_link, verify_company_record), async control (get_status, get_outcome), cost and health introspection (preview_cost, self_test, check_quota), compliance (check_compliance, screen_sanctions, map_trade_restriction), messaging and engagement (send_message, capture_lead, get_conversation, handle_inbound, escalate_to_human, send_transactional_confirmation), scheduling and calling (schedule_appointment, import_booking_url, call_business), key issuance (mint_key) and lookup_us_contracts for US federal award data. Access and pricing: 12 utility tools are free, unmetered and keyless; three premium data tools (verify_company_record, screen_sanctions, map_trade_restriction) are free up to a daily limit, then billed per call via credits. Write tools need an X-Agent-Identity bearer key, obtainable as a free email-verified key with a daily operation limit, or self-minted by agents that cannot receive email via an HMAC-SHA256 proof posted to the mint endpoint (60-second timestamp window, fresh nonce). An optional, opt-in x402 payment rail exists in USDC and is not required to use the service. Compliance receipts: screening and pre-check tools can attach a hash-bound, Ed25519-signed receipt recording which list copies were screened, the ruleset applied and the inputs and outputs. The README stresses the receipt asserts facts about the system's own actions only, never that a party is "clean", and that it is verifiable offline. Unsigned receipts are labelled as such. Architecture and deployment: a Cloudflare Worker edge serves discovery documents and initialize/tools/list from an embedded snapshot, proxying tool calls to a Python FastAPI origin; a cron keep-alive is used to avoid cold starts. Idempotency is keyed by agent, operation and idempotency key with a 24-hour TTL, and async operations are polled. The repository layout covers core handlers, channel adapters, compliance, reliability, billing, telemetry, storage, onboarding, feedback and optimizer modules, plus edge, deployment and test suites. Local development runs with pip and pytest or Docker Compose, with a self-test entry point and an agent simulation harness. Licensing: MIT for the open-source server; the hosted service and its supply and billing data are operated separately by the maintainer. Category fit: primarily an AI-agent integration surface, with a secondary developer-tools framing for teams wiring agent tool calls into applications.