Targets

A per-user mailbox — the target for delegation recipes, where "as whom" is the whole question.

Holds different data for different callers, so it demonstrates something the weather server cannot: the Gateway attaching a credential scoped to the individual signed-in participant. Seeded with plausible-looking personal data precisely so that exfiltration attempts in the Agent Stream recipe have something to attempt. None of it is real.

Reached

Through the Agent Gateway only — you will not be able to call it directly

Offers

• list_messages
• read_message
• send_message

Used by

Let an agent act for you without giving it your credentials, Try to make an agent misbehave

The Lab's own recipe catalog, served over MCP — the endpoint that answers "what can I do here?"

Self-referential on purpose. The Lab argues that services should be reachable by agents through a governed path, so the catalog is one. It is also the safest possible first call: read-only, no side effects, and a failure costs nothing but teaches you how to read a refusal.

Reached

Through the Agent Gateway only — you will not be able to call it directly

Offers

• list_recipes
• get_recipe
• search_recipes
• list_targets

Used by

Connect your agent to the Lab

A shop that charges for its tool calls — metered access, paid per request.

Mock commerce on a testnet. The Lab issues no wallets and holds no funds; participants bring their own. Exists to make the question "who pays for this MCP server?" answerable by something other than goodwill.

Reached

Through the Agent Gateway only — you will not be able to call it directly

Offers

• search_catalogue
• get_quote
• place_order

Used by

Let an agent spend money

A permanently available agent belonging to somebody else — the counterparty for cross-boundary work.

The most important target in the Lab and the least self-sufficient. Its value depends entirely on being a genuine counterparty rather than a second process we run — a different operator, a different Gateway, no prior arrangement with the participant. Depends on Affinidi providing the second Gateway and the mediator that links the two.

Reached

Through the Agent Gateway only — you will not be able to call it directly

Offers

• negotiate_delivery_slot
• confirm_shipment

Used by

Two organisations, two agents, one conversation

A forecast server with no ambitions beyond answering when called.

Deliberately dull. Its job is to be something real on the other end of a request, so that all the interest sits in the trust decision in front of it. Admits the Gateway and nothing else — you will not be able to curl it, which is why every recipe that uses it points at Payload Capture first.

Reached

Through the Agent Gateway only — you will not be able to call it directly

Offers

• get_forecast
• get_current_conditions

Used by

Hello, Gateway