ExitProof MCP Server

Persist a privacy-minimized Exit Manifest for a commitment whose current, non-conflicting reversibility evidence passes preflight, then return its manifest_id and secret access_token. Use when durable exit evidence may matter later and check_reversibility says paidExitManifestAvailable=true; use check_reversibility for evaluation only, or get_exit_manifest when a manifest already exists. This is a state-changing $0.25 MPP operation: eligibility is checked before any payment challenge, a successful fresh authorization creates durable state, and the plaintext access token is returned to the caller but stored only as a SHA-256 hash. A fresh paid invocation can create a new manifest, while retrying an identical settled request with the same payment credential recovers the same manifest without a second settlement.

Retrieve one previously created Exit Manifest using both its manifest_id and secret access_token, without charging or changing stored state. Use when you need the preserved evidence and terms; use build_exit_pack instead when you need an actionable cancellation/refund plan, and create_exit_manifest when no manifest exists. This read is free, non-destructive, and repeatable; it does not refresh, re-evaluate, or extend the stored evidence. Missing, expired, or mismatched credentials fail without modifying the manifest.

Build a bounded cancellation/refund action pack from an existing actionable Exit Manifest after manifest access and actionability preflight succeed. Use when you already have manifest_id plus access_token and need next-step instructions, deadlines, an evidence checklist, a suggested request, sources, and limitations; use get_exit_manifest for retrieval only, or check_reversibility then create_exit_manifest when no manifest exists. This $1.00 MPP operation can charge but never contacts the merchant, executes a cancellation, files a chargeback, or guarantees success. Invalid credentials or a non-actionable manifest are rejected before payment; retrying with the same settled payment credential avoids a second settlement, but generatedAt and deadlineStatus can reflect the current time.

Evaluate one commitment’s cancellation/refund reversibility from transaction-specific checkout terms plus maintained policy evidence, without charging or creating durable state. Use before a purchase, booking, subscription, rental, service, ticket, digital purchase, or deposit when exit deadlines or loss matter; if you only need maintained-overlay coverage use list_supported_policies, and use create_exit_manifest only after this result says paidExitManifestAvailable=true. Do not use for purchase desirability, legal advice, chargeback decisions, or executing a cancellation. Transaction-specific checkout_terms control the transaction-specific assessment when supplied; missing or conflicting evidence can return assessment=unknown rather than inventing an exit right.

List the maintained merchant policy overlays and the snapshot version/date ExitProof can add to transaction-specific evidence, without charging or changing state. Use this only to inspect maintained policy coverage; use check_reversibility to evaluate an actual commitment, including merchants not listed here when transaction-specific checkout_terms are available. An absent merchant means no maintained overlay, not that no cancellation, refund, contractual, or legal right exists. The result is a read-only snapshot and does not fetch or verify a merchant’s live policy at call time.