# Orbylon

> Check that a business proved who it is, read what it sells, and order straight from it.

- name: com.orbylon/readiness
- version: 1.5.0
- connection class: R0 (autonomous)
- trust: 83/100 flags: no-repository
- quality: 90/100 (strong)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.orbylon%2Freadiness
- tools: https://api.protogrid.dev/v1/servers/com.orbylon%2Freadiness/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "readiness": {
      "type": "http",
      "url": "https://orbylon.com/api/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-100% +updated-22d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 90/100 (strong)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list declares ttlMs 0, so clients re-fetch it on every use

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 100 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 9 of 9 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 2,644 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 75 (weight 15)

- warn `stability.changes`: 18 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 9, about 2,644 tokens to load them all
- tool set hash: 09ec76e5a7def23a96f52605a22b8149
- tools last changed: 2026-10-20T06:49:04.991Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.orbylon/readiness.svg)](https://protogrid.dev/servers/com.orbylon/readiness)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-20 `check_business_token` changed (description)
  - before: Return what is left on a closed-loop token issued by a business through Orbylon: a gift card, prepaid hours, a membership or a points balance. Takes the code printed on the card. These are not money and cannot be cashed out or transferred: they are only good with the business that issued them, which is named in the answer.
  - after: Return what is left on a closed-loop token issued by a business through Orbylon: a gift card, prepaid hours, a membership or a points balance. Takes the code printed on the card. The amount left is balance_cents for a gift card (integer cents, in currency), balance_hours for prepaid hours or balance_points for points, and reads_as says it in words, money written like every price here (e.g. CA$25.00 left); a membership is only valid or not. These are not money and cannot be cashed out or transferred: they are only good with the business that issued them, which is named in the answer.
- 2026-10-20 `lookup_business` changed (description)
  - before: Return the verified identity record for a domain: its domain-bound Ed25519 public key, when it was verified and how, and what it can prove (signed documents, a published catalogue of what it sells). Use this before trusting or transacting with a business. A 'not verified' answer means Orbylon has no proof about them, not that they are fraudulent.
  - after: Return the verified identity record for a domain: its domain-bound Ed25519 public key, when it was verified and how, and what it can prove: its signed documents (under capabilities.proofs.list, each with its slug, when it was signed, its SHA-256 and a verify link anyone can open) and a published catalogue of what it sells. Use this before trusting or transacting with a business. A 'not verified' answer means Orbylon has no proof about them, not that they are fraudulent.
- 2026-10-19 `list_business_paid_endpoints` changed (description)
  - before: Return the priced endpoints a verified business publishes: each with its title, what it does, the HTTP method, the price, and the URL to call. Calling that URL returns HTTP 402 with payment terms in the Payment-Required header, and the payment settles directly to the business. A call that fails is never charged for.
  - after: Return the priced endpoints a verified business publishes: each with its title, what it does, the HTTP method, the price, and the URL to call. Calling that URL returns HTTP 402 with payment terms in the Payment-Required header, and the payment settles directly to the business. A call that fails is never charged for. A business that sells none answers an empty list with a note saying so.
- 2026-10-19 `get_order_status` added
  - Return what happened to an order placed with place_order: its status, the item, the quantity, the total, and, when the business takes card payment, whether it is paid and the pay_url if not. Takes the business domain and the reference the order answer gave. Never returns the buyer's address, email or phone.
- 2026-10-19 `place_order` changed (description, inputSchema, annotations)
  - before: Place an order for an item a verified business publishes (see list_business_offerings). The order goes straight to the business, where it already works: email, its own store or its own system. Returns a reference and a status URL. When the business connected a payment account (Stripe, PayPal, Mollie, Razorpay, Lemon Squeezy or Paddle), the answer carries a pay_url on that account; the money goes to the business, never to Orbylon. For an appointment, the answer can carry a book_url where the buyer chooses the time on the business's own booking page.
  - after: Order an item a verified business publishes (see list_business_offerings or find_businesses). Two steps. First call without confirm: it places nothing and returns the seller, the item, the quantity, the unit price, the full total, the currency, how payment happens, and the refund and cancelling terms. Show those to the customer. Then call again with the same fields and confirm: true, only after the customer agreed. The order goes straight to the business, where it already works: email, its own store or its own system, and the answer carries a reference to pass to get_order_status. When the business connected a payment account (Stripe, PayPal, Mollie, Razorpay, Lemon Squeezy or Paddle), the answer carries a pay_url on that account; the money goes to the business, never to Orbylon. For an appointment, the answer can carry a book_url where the buyer chooses the time on the business's own booking page.
- 2026-10-19 `list_business_offerings` changed (description)
  - before: Return the machine-readable catalogue a verified business publishes: each item with its name, description, integer price in cents, currency and unit. Prices are what the business published, not an estimate. Use this to quote a business accurately instead of reading prices off its website. An item with price_on_request: true has no price (it reads "Price on request"): the business quotes each job, so ask it with request_quote instead of guessing a number.
  - after: Return the machine-readable catalogue a verified business publishes. Under owner_provided: who and where the business is, then each item with its name, description, integer price in cents, currency and unit, as the business typed them. Prices are exactly what the business published. An item with price_on_request: true has no price (it reads "Price on request"): the business quotes each job, so ask it with request_quote rather than estimate a number.
- 2026-10-19 `find_businesses` added
  - Find businesses that sell what the customer needs in the place they name, for example need "espresso beans" and place "Montreal", or need "plumber" and place "H2X". Both are required. Searches businesses published on Orbylon whose owners proved they own their website, by the words of what they sell and the place they named. Results are ordered by how closely those words match, then by name. No business pays to rank higher, and a business that is not on Orbylon is not here. Each result gives the business's name, city, address, hours and phone as its owner confirmed them, what it sells with exact prices, and which tool to use next: place_order for a priced item, request_quote for an item priced on request, list_business_offerings for the full list. At most 10 results. To try it on Orbylon's fictional test businesses, use the place "Orbylon Test City".
- 2026-10-17 `request_quote` added
  - Ask a verified business for a quote on an item it lists as price on request (price_on_request: true in list_business_offerings): a roofer, a lawyer, a garage. The request is emailed to the business, which replies to the customer with its price. Nothing is paid or owed and no wallet is needed. Ask the customer first and send consent: true only if they agreed that their name, contact and request go to the business. Returns a reference and a status URL.
- 2026-10-17 `list_business_offerings` changed (description)
  - before: Return the machine-readable catalogue a verified business publishes: each item with its name, description, integer price in cents, currency and unit. Prices are what the business published, not an estimate. Use this to quote a business accurately instead of reading prices off its website.
  - after: Return the machine-readable catalogue a verified business publishes: each item with its name, description, integer price in cents, currency and unit. Prices are what the business published, not an estimate. Use this to quote a business accurately instead of reading prices off its website. An item with price_on_request: true has no price (it reads "Price on request"): the business quotes each job, so ask it with request_quote instead of guessing a number.
- 2026-10-14 `scan_business_readiness` changed (description)
  - before: Scan any business website and report whether AI agents can find, trust, and pay it. Returns pillar scores, a grade, per-check evidence, and a public report URL.
  - after: Scan any business website and report whether AI agents can find, trust, and pay it. Returns pillar scores, a grade, per-check evidence, and a link to the report (it opens for whoever has the link and is not listed anywhere).

Full history: https://api.protogrid.dev/v1/servers/com.orbylon%2Freadiness/changes

## Remotes

- https://orbylon.com/api/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (9)

- `check_business_token`: Return what is left on a closed-loop token issued by a business through Orbylon: a gift card, prepaid hours, a membership or a points balance. Takes the code printed on the card. The amount left is balance_cents for a gift card (integer cents, in currency), balance_hours for prepaid hours or balance_points for points, and reads_as says it in words, money written like every price here (e.g. CA$25.00 left); a membership is only valid or not. These are not money and cannot be cashed out or transferred: they are only good with the business that issued them, which is named in the answer.
- `find_businesses`: Find businesses that sell what the customer needs in the place they name, for example need "espresso beans" and place "Montreal", or need "plumber" and place "H2X". Both are required. Searches businesses published on Orbylon whose owners proved they own their website, by the words of what they sell and the place they named. Results are ordered by how closely those words match, then by name. No business pays to rank higher, and a business that is not on Orbylon is not here. Each result gives the business's name, city, address, hours and phone as its owner confirmed them, what it sells with exact prices, and which tool to use next: place_order for a priced item, request_quote for an item priced on request, list_business_offerings for the full list. At most 10 results. To try it on Orbylon's fictional test businesses, use the place "Orbylon Test City".
- `get_order_status`: Return what happened to an order placed with place_order: its status, the item, the quantity, the total, and, when the business takes card payment, whether it is paid and the pay_url if not. Takes the business domain and the reference the order answer gave. Never returns the buyer's address, email or phone.
- `list_business_offerings`: Return the machine-readable catalogue a verified business publishes. Under owner_provided: who and where the business is, then each item with its name, description, integer price in cents, currency and unit, as the business typed them. Prices are exactly what the business published. An item with price_on_request: true has no price (it reads "Price on request"): the business quotes each job, so ask it with request_quote rather than estimate a number.
- `list_business_paid_endpoints`: Return the priced endpoints a verified business publishes: each with its title, what it does, the HTTP method, the price, and the URL to call. Calling that URL returns HTTP 402 with payment terms in the Payment-Required header, and the payment settles directly to the business. A call that fails is never charged for. A business that sells none answers an empty list with a note saying so.
- `lookup_business`: Return the verified identity record for a domain: its domain-bound Ed25519 public key, when it was verified and how, and what it can prove: its signed documents (under capabilities.proofs.list, each with its slug, when it was signed, its SHA-256 and a verify link anyone can open) and a published catalogue of what it sells. Use this before trusting or transacting with a business. A 'not verified' answer means Orbylon has no proof about them, not that they are fraudulent.
- `place_order`: Order an item a verified business publishes (see list_business_offerings or find_businesses). Two steps. First call without confirm: it places nothing and returns the seller, the item, the quantity, the unit price, the full total, the currency, how payment happens, and the refund and cancelling terms. Show those to the customer. Then call again with the same fields and confirm: true, only after the customer agreed. The order goes straight to the business, where it already works: email, its own store or its own system, and the answer carries a reference to pass to get_order_status. When the business connected a payment account (Stripe, PayPal, Mollie, Razorpay, Lemon Squeezy or Paddle), the answer carries a pay_url on that account; the money goes to the business, never to Orbylon. For an appointment, the answer can carry a book_url where the buyer chooses the time on the business's own booking page.
- `request_quote`: Ask a verified business for a quote on an item it lists as price on request (price_on_request: true in list_business_offerings): a roofer, a lawyer, a garage. The request is emailed to the business, which replies to the customer with its price. Nothing is paid or owed and no wallet is needed. Ask the customer first and send consent: true only if they agreed that their name, contact and request go to the business. Returns a reference and a status URL.
- `scan_business_readiness`: Scan any business website and report whether AI agents can find, trust, and pay it. Returns pillar scores, a grade, per-check evidence, and a link to the report (it opens for whoever has the link and is not listed anywhere).