---
type: "CapabilityCatalog"
title: "Capability catalog — what is live vs planned"
description: "The honest, machine-readable list of what EcoCloud ships today versus what is on the roadmap. The single source of truth."
resource: "/data/capabilities.json"
tags: ["reference", "honesty"]
timestamp: "2026-06-25"
---

Read this first to know what you can actually call.

# Schema
## Live (14)
- **tasks_api** — Agent task read/write over REST + MCP (`/api/v1/agent/tasks`)
- **mcp_server** — MCP server (streamable-HTTP) (`/mcp`)
- **scoped_keys** — Scoped, per-key rate-limited, audited keys (`/api/v1/agent/tasks`)
- **constitution** — Machine-readable workspace constitution gate
- **oauth** — OAuth 2.1 for agents (`/.well-known/oauth-protected-resource`)
- **state_balance_proof** — Stateless signed state-balance proof (`/api/v1/agent/proof`)
- **conditional_delegation** — Time-boxed / aggregate-capped auto-approval
- **webhooks** — Signed outbound webhooks + deliveries
- **semantic_search** — Vector + hybrid task search
- **trust_kernels** — Deterministic policy kernels + Merkle audit (`/kernel/`)
- **readiness** — DB-probing readiness + health endpoints (`/api/v1/ready`)
- **metrics** — Prometheus metrics (availability + DB probe) (`/api/v1/metrics`)
- **openapi** — OpenAPI 3.1 contract + API reference (`/openapi.json`)
- **imports_csv** — Import via CSV — auto-detect source + column map + preview (ClickUp/Asana/Notion/Linear or any export)

## Planned (2)
- imports_api — Native one-click OAuth import (`/api/v1/imports`)
- stripe_checkout — Self-serve Stripe checkout (`/api/v1/checkout`)

# Citations
Source of truth: [/data/capabilities.json](/data/capabilities.json). What's live: [/whats-live/](/whats-live/).