Capability status
Live, Partial live, and Planned features with honest gap_id labels.
Detailed matrix below is in English (authoritative for integrators). Headings follow your selected language.
For how we custody assets and control payments, see our Security & Trust page.
Public capability summary for AI agents and integrators. Authoritative sources: cai-tools.manifest.json (gap_id / gap_status) and skill.md. Agents must honor API responses and partial_live labels — do not claim features that are not Live.
Product pillars (agent view)
| Capability area | Status | Representative tools / notes |
|---|---|---|
| Identity & @cai.com Registration, alias, OAuth, API key, hosted login links |
Live | request_signup_verification、get_identity、create_login_link、oauth_* |
| Custodial wallet (core) Balances, transfers, recipient resolution, swap |
Live | wallet_balances、transfer、token_exchange、transfer_status |
| Guarded agent payments User-confirmed transfers; Check CAI First |
Live | See agent-payment.html; requires pay scope and explicit user consent |
| @cai.com mail Inbox, send, OTP registration assist |
Live | mail_inbox_*, send_mail; external send has monthly cap |
| Credential vault Encrypted site/platform credentials |
Live | vault_*_platform_credential、vault_*_site_credential |
| Site binding & connectors Platform catalog, one-click register, hosted website login |
Live | Coverage per platforms_supported_list; not guaranteed for arbitrary sites |
| x402 / HTTP 402 payments | Live | GAP_X402_V1 — x402_payment_prepare / x402_payment_execute |
| Payment mandates AP2-like delegated spending limits |
Live | GAP_PAYMENT_MANDATE_V1 — not full W3C/AP2 card interoperability |
| Bridge / cross-chain | Live | GAP_BRIDGE_V1 — quote / execute / job sync |
| Fiat on-ramp (MoonPay and third parties) | Live | create_onramp_url, hosted onramp; third-party KYC/region limits apply |
| Deposit / activity indexing | Live | GAP_DEPOSIT_STATUS_V1, GAP_WALLET_ACTIVITY_V1 — may not index every on-chain deposit |
| DeFi automation (perps) | Live | Canonical Route B: defi_markets → defi_preflight → defi_trade; requires /automation-settings and /act approval |
| Marketplace checkout | Live | GAP_MARKETPLACE_ORDER_V1 — not arbitrary external checkout |
| WeChat Pay | Planned | skill returns 503 + GAP_WECHAT_* until merchant setup completes |
Status semantics (for agents)
- Live — manifest entry has no gap_status; still subject to scopes, rate limits, and product policy.
- Partial live — endpoint callable but may return gap_id, empty lists, or need polling/user steps; do not claim full merchant/chain/deposit coverage.
- Planned — documented or UI reserved; do not describe as available in external messaging yet.
Trust & safety (public disclosure)
- Custodial model: CAI hosts wallets and identity for user sub-accounts; agents act via API key/OAuth and cannot bypass user payment confirmation (except within an approved mandate).
- Spending limits: transfers, mandates, and DeFi automation have product caps; users can adjust or revoke in Dashboard / automation settings.
- Vault: platform/site credentials are encrypted server-side; agents may list and revoke metadata only — never echo secrets in chat.
- Audit trail: transfers and order events are indexed (wallet_activity_list, defi_order_events); not equivalent to full on-chain audit or SOC 2 certification.
- Third-party risk: fiat on-ramps, bridges, and external DEX/perp protocols are executed by third parties; CAI does not guarantee availability, quotes, or regulatory status.
- Honest beta: when a capability is partial_live, state limits in product copy and agent replies.
繁體中文說明
公開能力狀態摘要。Agent 應依 API 回應與 partial_live 標記誠實敘事。Live＝manifest 無 gap；Partial live＝可呼叫但有限制；Planned＝尚未營運。託管模型、支出上限、Vault、稽核與第三方風險請見上方英文主文（權威敘事以英文為準）。
Machine-readable: cai-tools.manifest.json · partial-live-upgrade-cards.json · verify: bash scripts/verify-cai-tools-manifest.sh · upgrade smoke: bash scripts/partial-live-upgrade.sh