{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"01708c1b-d0af-4279-9fba-aa3b862d7cfb","source_url":"https://zambo.dev/api/receipt/01708c1b-d0af-4279-9fba-aa3b862d7cfb","receipt":{"id":"01708c1b-d0af-4279-9fba-aa3b862d7cfb","created_at":"2026-10-26T18:14:52.149Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: capability_search","tools":["capability_search"],"steps":[{"tool":"capability_search","status":"success","started_at":"2026-10-26T18:14:52.101Z","completed_at":"2026-10-26T18:14:52.149Z"}],"output_hash":"sha256:73cbca4ff57bc0f4199868ad5e89d0c536f283d154e09856e68e79b3ab186d0d","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2464,"verification_status":"verified","session_trail":[{"tool":"live_price","status":"completed","args_hash":"sha256:49809a14a57ff9b2b9aa41442d1479f13bbfcfabc5af089a7c27ba6e0b0a0679","timestamp":"2026-10-26T18:12:47.508Z","receipt_uuid":"84c0eb1d-cbde-4eb9-b3de-d1513405b0ed"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:fbb1e5ac04795e62fa2da6deb209e5e3e182f72ad16ec33de4f717d9bad35c35","timestamp":"2026-10-26T18:14:27.777Z","receipt_uuid":"cdaad179-36bd-4b17-8ee7-43de9df77cda"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:bc3cbbe55fe9c21acc3f441948412e4a432e45b8e29635f60a838f02eeb4ff06","timestamp":"2026-10-26T18:14:40.132Z","receipt_uuid":"9af0de7e-66d7-4206-aa94-7ef1bc62dfb7"},{"tool":"capability_search","status":"completed","args_hash":"sha256:ccc286a3224138dee0886e5679165a724a69374a5a6498236294838f61ce2135","timestamp":"2026-10-26T18:14:51.244Z","receipt_uuid":"1cbaa957-6786-4b6f-b79e-c7b81ba01380"},{"tool":"capability_search","status":"completed","args_hash":"sha256:fc18e45d8115b75408d611e21e87bd797e8aaf9b0467fe3a5c1355e6b3226b5c","timestamp":"2026-10-26T18:14:52.149Z","receipt_uuid":"01708c1b-d0af-4279-9fba-aa3b862d7cfb"}],"result_preview":"{\"query\":\"fetch a URL and check it loads\",\"status\":\"execution_plan\",\"tools\":[{\"rank\":1,\"name\":\"ghost_audit_site\",\"description\":\"Run website ghost audit on any website. Returns SEO gaps, AI discoverability issues, conversion leaks, brand presence gaps, and competitor intelligence. 10 stages: RECON → INFRASTRUCTURE → SEO → PAGE COVERAGE → AI LAYER → CONVERSION → BRAND PRESENCE → COMPETITION → CREATIVE GAPS → SYNTHESIS. Score: 0-100 with CRITICAL/HIGH/MEDIUM/LOW findings per stage. Returns audit_id + stream_url (SSE for live stage-by-stage output) + download_url (full markdown report). Stream starts immediately; full report ready in about 90 seconds. Free policy: one audit start per caller per UTC day. The first successful start returns an audit ID; repeats that day return daily_limit. A transient engine failure releases the reservation so you can retry. The separate MCP quota is 20 free calls per metered tool each day; reaching it returns the standard HTTP 402 payment challenge. Zambo Pass or Day Pass provides unlimited audits.\",\"input_hints\":{\"type\":\"object\",\"properties\":{\"url\":{\"type\":\"string\",\"description\":\"Full website URL to audit (e.g., https://yoursite.com). Include https://.\"},\"email\":{\"type\":\"string\",\"description\":\"Optional email tied to an active Zambo Pass or Day Pass for unlimited audits.\"},\"_caller_label\":{\"type\":\"string\",\"maxLength\":80,\"description\":\"Optional self-reported caller label. It is recorded as a claim, not independently verified.\",\"default\":\"zambo-starter\"},\"_caller_handle\":{\"type\":\"string\",\"maxLength\":64,\"description\":\"Opaque anonymous continuity handle returned during initialize. Reuse it across MCP sessions; it is not payment authorization.\"},\"_ref\":{\"type\":\"string\",\"format\":\"uuid\",\"description\":\"Optional handover referral ID from your install link.\"}},\"required\":[\"url\"]},\"classification\":\"fully_executable_in_chat\"}],\"message\":\"Use ghost_audit_site with the website URL. Report the actual audit findings, not just a successful audit start.\"}","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:e4f14dadc348f345bea2ae3c76c3ed764e660278aa51b947336d6adda3ac7770","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"capability_search","version":"4.0.0","scope":"public"},"caller":{"type":"api_key","id":"sha256:c6fd5e8e68aa95600ba1074858a06982cfc99dc2a036edbd2fbb1eb22bb75f86"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:39d8b3fd1caf5c9fd52fed04f72356d28311f56cb09a99ad908898287d3de060","anchor":{"event_id":"ad3f521fffd1c3010c2dbbc8430fb0a20d3894514ee98c6b69adb8abf9a5cd86","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-26T18:14:52.806Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-26T18:14:52.149Z","evidence_url":null,"receipt_uuid":"01708c1b-d0af-4279-9fba-aa3b862d7cfb","output_sha256":"sha256:73cbca4ff57bc0f4199868ad5e89d0c536f283d154e09856e68e79b3ab186d0d","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-26T18:14:52.149Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:73cbca4ff57bc0f4199868ad5e89d0c536f283d154e09856e68e79b3ab186d0d\",\"receipt_uuid\":\"01708c1b-d0af-4279-9fba-aa3b862d7cfb\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-26T18:14:52.149Z","detail":"The receipt store reports 2026-10-26T18:14:52.149Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:73cbca4ff57bc0f4199868ad5e89d0c536f283d154e09856e68e79b3ab186d0d","computed_hash":"sha256:73cbca4ff57bc0f4199868ad5e89d0c536f283d154e09856e68e79b3ab186d0d","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}