Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›MCP surface·41 in this wave

Approve: MCP surfaceTo do · blocker 13 production secrets overdue for rotation — the gate cannot be green until this is resolvedTo do · blocker Deploy step 2 — verify/rotate production MCP Worker secretsTo do Deploy step 4 — fix the stale "NOT DEPLOYED" banner and deploy docsDone Add action.* and bluetooth.* op groups to the MCP catalogDone Build real handlers for group.* (9 ops)Done Build real handlers for family.* (7 ops)Done Build settings.* MCP tools including custom domain managementTo do Verify/build the Connected Apps management UI for MCP OAuth clientsTo do Add rate limiting, quota, and cost controls to the hosted MCP serverDone Honesty check — reconcile investor deck MCP claims against what shipsTo do Verify "everything a human can do, an agent can do over MCP" end to endTo do staging-api is a day behind main — and writes to the production SupabaseTo do MCP GAP INVENTORY — every unwired op, with the decision attached to eachDone Demo account for screenshots + QA — seeder is live, shape is frozenTo do Build the full medialink.* MCP tool set (3 ops)To do Build the payment.* connector MCP tool set (3 ops)To do Build the full webhook.* MCP tool set (4 ops)Done Build zap.* MCP tools or explicitly cut Zapier from v1.0 MCP scopeTo do Build link.schedule.repoint, link.compound, wizard.suggest or cut themTo do Deploy step 1 — verify DB migration + RLS on OAuth tablesTo do Deploy step 3 — confirm CF route/DNS for mcp.tactile.to is production-gradeTo do Deploy step 5 — formalize the MCP smoke testTo do Build nfc.lock and nfc.unlock MCP toolsTo do Build contact.vcard.export and contact.delete MCP toolsTo do Build linkhub.create and linkhub.delete MCP toolsDone Build videoaudio.create and videoaudio.replace MCP toolsTo do Build document.create and document.replace MCP toolsTo do Build the full social.* MCP tool set (6 ops)To do Build the full paylink.* MCP tool set (4 ops)Done Build wifi.edit MCP toolTo do Build the full form.* MCP tool set (7 ops)Done Build the analytics automation layer MCP tools (6 ops)To do Wire inbox.list and inbox.mcp_approval to real handlersDone Add architecture test guarding against a second tool-handler implementationTo do Publish a public MCP tool manifest / discovery docsTo do Webhook signing secret: add the one surface that can reveal itDone A Website destination's URL cannot be edited through the agent surface at allDone SPEC → backend: webhook secret reveal/rotate endpoints + secret_fingerprint on the listDone NEEDS MATTHEW: decide whether resolve_trigger_destination keeps anon EXECUTEBlocked 5 proposal-only MCP ops are advertised with no task row building themTo do

Wave

MCP surface

Thesis pillar 3 — "Agentic AI + MCP." The investor deck claims first-in-category MCP-native. Audit (2026-07-26) found the hosted server IS live at mcp.tactile.to with real OAuth production traffic (14 clients, 11 tokens) — but the code's own deploy banner still says "NOT DEPLOYED" (stale), and tool coverage is genuinely incomplete: roughly half the 147-op catalog are proposer stubs that never mutate state, and 2 of 14 destination types (Action, Bluetooth) have zero MCP presence at all. Not cuttable: this is a stated structural moat.

TacTile › Launch TacTile › MCP surface

14/41 done27 open2 open blockers

Selected taskclear

Approve: MCP surface

To doOwner · met_672f817fBlocker

Waiting on 31 · 21 still openDeploy step 1 — verify DB migration + RLS on OAuth tables Deploy step 2 — verify/rotate production MCP Worker secrets Deploy step 3 — confirm CF route/DNS for mcp.tactile.to is production-grade Deploy step 4 — fix the stale "NOT DEPLOYED" banner and deploy docs Deploy step 5 — formalize the MCP smoke test Add action.* and bluetooth.* op groups to the MCP catalog Build real handlers for group.* (9 ops)Build real handlers for family.* (7 ops)Build nfc.lock and nfc.unlock MCP tools Build contact.vcard.export and contact.delete MCP tools Build linkhub.create and linkhub.delete MCP tools Build videoaudio.create and videoaudio.replace MCP tools Build document.create and document.replace MCP tools Build the full social.* MCP tool set (6 ops)Build the full paylink.* MCP tool set (4 ops)Build the full medialink.* MCP tool set (3 ops)Build wifi.edit MCP tool Build the payment.* connector MCP tool set (3 ops)Build the full form.* MCP tool set (7 ops)Build the full webhook.* MCP tool set (4 ops)Build zap.* MCP tools or explicitly cut Zapier from v1.0 MCP scope Build the analytics automation layer MCP tools (6 ops)Build settings.* MCP tools including custom domain management Wire inbox.list and inbox.mcp_approval to real handlers Build link.schedule.repoint, link.compound, wizard.suggest or cut them Verify/build the Connected Apps management UI for MCP OAuth clients Add architecture test guarding against a second tool-handler implementation Add rate limiting, quota, and cost controls to the hosted MCP server Publish a public MCP tool manifest / discovery docs Honesty check — reconcile investor deck MCP claims against what ships Verify "everything a human can do, an agent can do over MCP" end to end

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**Approve: MCP surface** · to do · blocker

Where it sits: TacTile › Launch TacTile › MCP surface

## Waiting on 31

- Deploy step 1 — verify DB migration + RLS on OAuth tables — to do
- Deploy step 2 — verify/rotate production MCP Worker secrets — to do
- Deploy step 3 — confirm CF route/DNS for mcp.tactile.to is production-grade — to do
- Deploy step 4 — fix the stale "NOT DEPLOYED" banner and deploy docs — done
- Deploy step 5 — formalize the MCP smoke test — to do
- Add action.* and bluetooth.* op groups to the MCP catalog — done
- Build real handlers for group.* (9 ops) — done
- Build real handlers for family.* (7 ops) — done
- Build nfc.lock and nfc.unlock MCP tools — to do
- Build contact.vcard.export and contact.delete MCP tools — to do
- Build linkhub.create and linkhub.delete MCP tools — done
- Build videoaudio.create and videoaudio.replace MCP tools — to do
- Build document.create and document.replace MCP tools — to do
- Build the full social.* MCP tool set (6 ops) — to do
- Build the full paylink.* MCP tool set (4 ops) — done
- Build the full medialink.* MCP tool set (3 ops) — to do
- Build wifi.edit MCP tool — to do
- Build the payment.* connector MCP tool set (3 ops) — to do
- Build the full form.* MCP tool set (7 ops) — done
- Build the full webhook.* MCP tool set (4 ops) — done
- Build zap.* MCP tools or explicitly cut Zapier from v1.0 MCP scope — to do
- Build the analytics automation layer MCP tools (6 ops) — to do
- Build settings.* MCP tools including custom domain management — to do
- Wire inbox.list and inbox.mcp_approval to real handlers — done
- Build link.schedule.repoint, link.compound, wizard.suggest or cut them — to do
- Verify/build the Connected Apps management UI for MCP OAuth clients — to do
- Add architecture test guarding against a second tool-handler implementation — to do
- Add rate limiting, quota, and cost controls to the hosted MCP server — done
- Publish a public MCP tool manifest / discovery docs — to do
- Honesty check — reconcile investor deck MCP claims against what ships — to do
- Verify "everything a human can do, an agent can do over MCP" end to end — to do

21 of those are still open. If one genuinely blocks this, say so and stop rather than working around it.

## The brief on file

Matthew — review the finished MCP surface package (deploy verification, tool coverage gaps closed or explicitly descoped, OAuth connected-apps UI, rate limiting, tool manifest docs, honesty reconciliation with the investor deck, and Caitlin's end-to-end capability verification) and approve.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

MCP surface

Approve: MCP surface