Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›MCP surface·47 in this wave

Approve: MCP surfaceTo do · blocker 13 production secrets overdue for rotation — the gate cannot be green until this is resolvedTo do · blocker Deploy step 2 — verify/rotate production MCP Worker secretsTo do Deploy step 4 — fix the stale "NOT DEPLOYED" banner and deploy docsDone Add action.* and bluetooth.* op groups to the MCP catalogDone Build real handlers for group.* (9 ops)Done Build real handlers for family.* (7 ops)Done Build settings.* MCP tools including custom domain managementTo do Verify/build the Connected Apps management UI for MCP OAuth clientsDone Add rate limiting, quota, and cost controls to the hosted MCP serverDone Honesty check — reconcile investor deck MCP claims against what shipsTo do Verify "everything a human can do, an agent can do over MCP" end to endTo do staging-api is a day behind main — and writes to the production SupabaseDone MCP GAP INVENTORY — every unwired op, with the decision attached to eachDone Demo account for screenshots + QA — seeder is live, shape is frozenTo do SECURITY: hosted MCP tool agent.approval.resolve may let the model approve its own proposalsDone Approvals: resume re-executes approved rows, REST resolveApproval is non-atomic, inbox.ts selects a missing expires_atTo do Build the full medialink.* MCP tool set (3 ops)Done Build the payment.* connector MCP tool set (3 ops)To do Build the full webhook.* MCP tool set (4 ops)Done Build zap.* MCP tools or explicitly cut Zapier from v1.0 MCP scopeTo do Build link.schedule.repoint, link.compound, wizard.suggest or cut themTo do QA: the public MCP tools page opens without sign-in and lists the tools (desktop web and phone)Blocked Deploy step 1 — verify DB migration + RLS on OAuth tablesDone Deploy step 3 — confirm CF route/DNS for mcp.tactile.to is production-gradeTo do Deploy step 5 — formalize the MCP smoke testTo do Build nfc.lock and nfc.unlock MCP toolsTo do Build contact.vcard.export and contact.delete MCP toolsDone Build linkhub.create and linkhub.delete MCP toolsDone Build videoaudio.create and videoaudio.replace MCP toolsTo do Build document.create and document.replace MCP toolsTo do Build the full social.* MCP tool set (6 ops)To do Build the full paylink.* MCP tool set (4 ops)Done Build wifi.edit MCP toolDone Build the full form.* MCP tool set (7 ops)Done Build the analytics automation layer MCP tools (6 ops)Blocked Wire inbox.list and inbox.mcp_approval to real handlersDone Add architecture test guarding against a second tool-handler implementationDone Publish a public MCP tool manifest / discovery docsDone Webhook signing secret: add the one surface that can reveal itDone A Website destination's URL cannot be edited through the agent surface at allDone SPEC → backend: webhook secret reveal/rotate endpoints + secret_fingerprint on the listDone NEEDS MATTHEW: decide whether resolve_trigger_destination keeps anon EXECUTEDone 5 proposal-only MCP ops are advertised with no task row building themTo do contact.delete MCP tool has no destination-type guard: any hash the caller owns is hard-deletedDone Add rule E to the single-tool-handler-path test: a handler map keyed by tool name must go red (follow-up to #698, t_27dbb775)Done notes.delete, document.delete, menu.delete and videoaudio.delete soft-delete any destination type the caller owns, and report success for a hash that matched nothingDone

Wave

MCP surface

Thesis pillar 3 — "Agentic AI + MCP." The investor deck claims first-in-category MCP-native. Audit (2026-07-26) found the hosted server IS live at mcp.tactile.to with real OAuth production traffic (14 clients, 11 tokens) — but the code's own deploy banner still says "NOT DEPLOYED" (stale), and tool coverage is genuinely incomplete: roughly half the 147-op catalog are proposer stubs that never mutate state, and 2 of 14 destination types (Action, Bluetooth) have zero MCP presence at all. Not cuttable: this is a stated structural moat.

TacTile › Launch TacTile › MCP surface

27/47 done20 open2 open blockers

Selected taskclear

QA: the public MCP tools page opens without sign-in and lists the tools (desktop web and phone)

BlockedOwner · Kaitlynnt_766f87f6

Kaitlynn check for t_1ba711d3 (draft PR #798, r41/web-mcp-docs): new public page https://tactile.to/docs/mcp. Blocked until #798 is merged and deployed to tactile.to.

Waiting on 1 · all clearPublish a public MCP tool manifest / discovery docs

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**QA: the public MCP tools page opens without sign-in and lists the tools (desktop web and phone)** · blocked

Kaitlynn check for t_1ba711d3 (draft PR #798, r41/web-mcp-docs): new public page https://tactile.to/docs/mcp. Blocked until #798 is merged and deployed to tactile.to.

Where it sits: TacTile › Launch TacTile › MCP surface

## Waiting on 1

- Publish a public MCP tool manifest / discovery docs — done

## The brief on file

[2026-10-23 · Viv] FILED by r41, status blocked. BLOCKED until draft PR #798 (r41/web-mcp-docs, the t_1ba711d3 build) is merged AND deployed to tactile.to. Flip with python3 ~/TacTile-dev/tools/hubnote.py status <this id> todo only then.

[FOR KAITLYNN]
TEST ON: a computer browser and your phone's browser, both signed OUT: open a private (incognito) tab. Live website, after Matthew tells you the MCP tools page is live. Reload the page first.

WHAT THIS IS: A new public page for developers that lists every tool an AI assistant can use with TacTile, what permission each one needs, and an example.

WHERE: https://tactile.to/docs/mcp

DO:
1. Open the address in a private tab on the computer, then on the phone.
2. Scroll to the bottom.
3. Open one "Example" under any tool.

PASS IF:
- The page opens without asking you to sign in.
- The heading says "TacTile MCP tools" and a long list of tools follows.
- Some tools carry a "Proposer stub" label.
- The example opens and shows a short block of text.
- Nothing is cut off or sticking out sideways on the phone.

NOT PART OF THIS CHECK: Whether the tools themselves work. Other pages.
[/FOR KAITLYNN]

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

MCP surface

QA: the public MCP tools page opens without sign-in and lists the tools (desktop web and phone)