OpenAI reviewer walkthrough · v1.0.2

Bounded business work for authorized agents

An agent can find an exact fixed-price service, inspect the purchase contract and acceptance tests, and continue to an authority-gated payment route.

Live MCP endpointzinvyl.com/marketplace/agent-mcp

Safety boundaryNo secrets, raw card data, invented authority, or work before verified funding.

Live non-mutating verification completed 2026-10-28. No purchase intent or charge was created.

G.B. Industry LLC

01 / 08

Test case 1 · list_offers

List the published fixed-price services

User prompt: “List Zinvyl’s currently published services and prices.”

Observed17 published offers returned from catalog version 1.21.0.

Commerce semanticsEach offer separates discovery from purchase and states availability, price, and bounded quantity.

list_offers returned the public catalog without claiming that discovery or selection was a purchase.

live MCP result

02 / 08

Test case 2 · qualify_task

Match a sanitized workflow failure

User prompt: “A sanitized webhook trace times out repeatedly. Find the smallest matching Zinvyl service.”

Matched offerWorkflow Health Check
zinvyl.api.failure-triage.v1

Exact price$49 USD fixed price · one unit · funding required before work.

The router returned a published offer match and the next buy_service continuation template.

live MCP result

03 / 08

Test case 3 · get_purchase_requirements

Inspect the exact contract before buying

The service exposes one machine-readable five-field purchase contract.

Required fieldsoffer_id, buyer, task_summary, purchase_authority, safe_scope_confirmed

Authority ceiling4,900 minor units · USD · terms version 2026-10-27.1

The contract rejects raw secrets and card data and requires explicit delegated authority for this exact offer.

live MCP result

04 / 08

Test case 4 · get_acceptance_tests

Review completion criteria before payment

The Workflow Health Check exposes three structured acceptance checks before an agent creates any purchase intent.

api-triage.change-boundary — changes remain outside the purchased scope.
api-triage.classification — the supplied failure is classified with evidence.
api-triage.input-boundary — only sanitized, bounded input is accepted.

Acceptance inspection is read-only: no checkout, order, or work was created.

live MCP result

05 / 08

Test case 5 · buy_service

Fail closed when delegated authority is incomplete

User prompt: “Buy the $49 service, but I do not have an offer allowlist or delegated spending ceiling.”

Purchase resultNo checkout is created and no authority value is invented.

Safe continuationReturn the missing fields plus a forwardable, exact human-approval request.

Authority gate: missing confirmation → stop purchase → request exact approval. Funding remains unverified.

bounded commerce

06 / 08

Negative cases · invocation safety

Requests the plugin must not complete

Self-asserted authority to buy anything.
An offer outside the principal’s delegated allowlist or spending ceiling.
Matching or purchasing with production keys, full card data, or customer secrets.

Expected behavior: refuse, request bounded clarification, or provide the safe approval fallback—never proceed by assumption.

safety boundaries

07 / 08

Verified review state

What the reviewer can verify

PackageBusiness & Operations · identity verified · skill checks passed.

MCPDomain verified · 10 tools discovered · latest scan has no findings.

Discovery, matching, price, capacity, contract, and acceptance tests are agent-readable. Stripe-verified funding remains authoritative.

No customer dataNo credentialsNo live charge

zinvyl.com

08 / 08