BCP
Examples
Six full manifests across the trust levels and verticals. Use these as a starting point when implementing a publisher or testing a consumer.
Updated today
Minimal manifest
The smallest valid manifest. L0 advisory. No signature.
tiny.dev/.well-known/business.jsonjson
1
{2
"@context": [3
"https://schema.org",4
"https://bcp.51ultron.com/schema/v1"5
],6
"@type": ["Organization", "BusinessCard"],7
"@id": "https://tiny.dev/.well-known/business.json",8
"bcp:version": "1.0.0",9
"bcp:updated": "2026-05-19T10:00:00Z",10
11
"identity": {12
"legalName": "Tiny Software SRL",13
"domain": "tiny.dev",14
"jurisdiction": "RO-B",15
"legalForm": "SRL"16
},17
18
"capabilities": {19
"mcpServers": [20
{21
"url": "https://api.tiny.dev/mcp",22
"transport": "http",23
"auth": ["oauth2"]24
}25
]26
},27
28
"policy": {29
"allowTraining": false,30
"allowRAG": true,31
"allowActions": ["catalog.read", "contact.send"]32
},33
34
"state": {35
"status": "operational",36
"supportContact": {37
"email": "hi@tiny.dev",38
"hours": "Mo-Fr 10:00-18:00",39
"timezone": "Europe/Bucharest"40
}41
}42
}Ultron's own manifest
What Ultron publishes about itself at app.51ultron.com/.well-known/business.json.
51ultron.com/.well-known/business.jsonjson
1
{2
"@context": [3
"https://schema.org",4
"https://bcp.51ultron.com/schema/v1"5
],6
"@type": ["Organization", "BusinessCard"],7
"@id": "https://51ultron.com/.well-known/business.json",8
"bcp:version": "1.0.0",9
"bcp:updated": "2026-05-19T14:30:00Z",10
"bcp:expires": "2026-06-19T14:30:00Z",11
12
"identity": {13
"legalName": "NexityNetwork SRL",14
"domain": "51ultron.com",15
"lei": "5493000ULTRON0NET",16
"jurisdiction": "RO-B",17
"legalForm": "SRL",18
"incorporationDate": "2024-01-15",19
"registeredAddress": {20
"@type": "PostalAddress",21
"addressLocality": "Bucharest",22
"addressRegion": "B",23
"addressCountry": "RO"24
},25
"naics": ["518210"],26
"sameAs": [27
"https://www.linkedin.com/company/ultron-ai",28
"https://github.com/nexitynetwork"29
]30
},31
32
"capabilities": {33
"mcpServers": [34
{35
"url": "https://ultron.app/mcp",36
"transport": "http",37
"auth": ["oauth2"],38
"scopes": [39
"catalog.read", "pricing.read", "docs.read",40
"contact.send", "bookings.create"41
],42
"label": "Ultron public surface"43
}44
],45
"a2aAgentCards": [46
"https://ultron.app/.well-known/agent.json"47
],48
"openApi": "https://ultron.app/api/v1/openapi.json",49
"cli": {50
"install": "npm install -g @ultron/cli",51
"command": "ultron",52
"homepage": "https://51ultron.com/docs/bcp/portability"53
}54
},55
56
"commerce": {57
"catalog": "https://ultron.app/api/v1/plans",58
"pricing": "https://51ultron.com/contact",59
"currencies": ["USD", "EUR"],60
"paymentRails": [61
{62
"protocol": "ACP",63
"endpoint": "https://ultron.app/api/payments/acp",64
"instruments": ["card"]65
}66
],67
"termsOfSale": "https://51ultron.com/docs/legal/terms",68
"returnPolicy": "https://51ultron.com/docs/legal/refunds",69
"supportedJurisdictions": ["US", "EU", "UK", "CA", "AU"]70
},71
72
"policy": {73
"allowTraining": false,74
"allowRAG": true,75
"allowActions": [76
"catalog.read", "pricing.read", "docs.read",77
"contact.send", "bookings.create"78
],79
"denyActions": ["leads.delete", "billing.modify"],80
"rateLimit": {81
"anonymous": "60/hour",82
"authenticated": "6000/hour",83
"verified": "60000/hour"84
},85
"llmsTxt": "https://51ultron.com/llms.txt",86
"licenseUrl": "https://51ultron.com/docs/legal/ai-output"87
},88
89
"state": {90
"status": "operational",91
"statusPage": "https://status.51ultron.com",92
"incidentWebhook": "https://ultron.app/api/incidents/subscribe",93
"sla": {94
"uptime": "99.9",95
"responseTime": "PT24H"96
},97
"supportContact": {98
"email": "support@51ultron.com",99
"hours": "Mo-Fr 09:00-22:00",100
"timezone": "Europe/Bucharest"101
}102
},103
104
"signature": {105
"alg": "ES256",106
"kid": "dnskey:51ultron.com:7Z9d6c4f...",107
"signedAt": "2026-05-19T14:30:00Z",108
"value": "eyJhbGciOiJFUzI1NiIsImtpZCI6Im..."109
}110
}Note
Ultron's own manifest is the reference for downstream publishers. We dogfood the schema before customers adopt it. The actual live manifest at
https://51ultron.com/.well-known/business.jsontracks this file.SaaS company
Subscription product. No physical goods. Stripe checkout. L2 signed.
vector-saas.io/.well-known/business.jsonjson
1
{2
"@context": ["https://schema.org", "https://bcp.51ultron.com/schema/v1"],3
"@type": ["Organization", "BusinessCard"],4
"@id": "https://vector-saas.io/.well-known/business.json",5
"bcp:version": "1.0.0",6
"bcp:updated": "2026-05-15T09:00:00Z",7
8
"identity": {9
"legalName": "Vector Analytics, Inc.",10
"domain": "vector-saas.io",11
"lei": "549300VECTOR0LEI00",12
"jurisdiction": "US-DE",13
"legalForm": "Corporation",14
"sameAs": ["https://www.crunchbase.com/organization/vector-analytics"]15
},16
17
"capabilities": {18
"mcpServers": [19
{20
"url": "https://api.vector-saas.io/mcp",21
"transport": "http",22
"auth": ["oauth2"],23
"scopes": ["catalog.read", "docs.read", "bookings.create", "leads.create"]24
}25
],26
"openApi": "https://api.vector-saas.io/openapi.json"27
},28
29
"commerce": {30
"pricing": "https://vector-saas.io/pricing",31
"currencies": ["USD"],32
"paymentRails": [33
{34
"protocol": "ACP",35
"endpoint": "https://api.vector-saas.io/checkout/acp",36
"instruments": ["card"]37
}38
]39
},40
41
"policy": {42
"allowTraining": false,43
"allowRAG": true,44
"allowActions": ["catalog.read", "docs.read", "bookings.create", "leads.create"],45
"rateLimit": {46
"anonymous": "60/hour",47
"authenticated": "3600/hour"48
}49
},50
51
"state": {52
"status": "operational",53
"statusPage": "https://status.vector-saas.io",54
"supportContact": {55
"email": "hello@vector-saas.io",56
"hours": "Mo-Fr 09:00-17:00",57
"timezone": "America/Los_Angeles"58
}59
},60
61
"signature": {62
"alg": "ES256",63
"kid": "dnskey:vector-saas.io:9F3a...",64
"signedAt": "2026-05-15T09:00:00Z",65
"value": "eyJhbGciOi..."66
}67
}E-commerce store
UCP catalog. AP2 payments. Multi-currency. L2 signed.
goodleather.co/.well-known/business.jsonjson
1
{2
"@context": ["https://schema.org", "https://bcp.51ultron.com/schema/v1"],3
"@type": ["Organization", "BusinessCard"],4
"@id": "https://goodleather.co/.well-known/business.json",5
"bcp:version": "1.0.0",6
"bcp:updated": "2026-05-19T08:00:00Z",7
8
"identity": {9
"legalName": "Good Leather Goods Ltd.",10
"domain": "goodleather.co",11
"jurisdiction": "GB-ENG",12
"legalForm": "Limited",13
"naics": ["316110"]14
},15
16
"capabilities": {17
"mcpServers": [18
{19
"url": "https://api.goodleather.co/mcp",20
"transport": "http",21
"auth": ["none", "oauth2"],22
"scopes": ["catalog.read", "pricing.read", "bookings.create"]23
}24
],25
"nlwebEndpoint": "https://goodleather.co/api/ask"26
},27
28
"commerce": {29
"catalog": "https://api.goodleather.co/catalog",30
"pricing": "https://goodleather.co/collections",31
"currencies": ["GBP", "EUR", "USD"],32
"paymentRails": [33
{34
"protocol": "UCP",35
"endpoint": "https://api.goodleather.co/ucp",36
"instruments": ["card"]37
},38
{39
"protocol": "AP2",40
"endpoint": "https://api.goodleather.co/ap2",41
"instruments": ["card", "ach", "sepa"]42
}43
],44
"termsOfSale": "https://goodleather.co/policies/terms",45
"returnPolicy": "https://goodleather.co/policies/returns",46
"supportedJurisdictions": ["UK", "EU", "US", "CA", "AU"]47
},48
49
"policy": {50
"allowTraining": false,51
"allowRAG": true,52
"allowActions": ["catalog.read", "pricing.read", "contact.send"],53
"rateLimit": {54
"anonymous": "120/hour",55
"authenticated": "12000/hour"56
}57
},58
59
"state": {60
"status": "operational",61
"supportContact": {62
"email": "hello@goodleather.co",63
"hours": "Mo-Fr 09:00-18:00",64
"timezone": "Europe/London"65
}66
},67
68
"signature": { "alg": "ES256", "kid": "dnskey:goodleather.co:...", "signedAt": "2026-05-19T08:00:00Z", "value": "..." }69
}Agency / services
Custom services. Booking-driven. No catalog. L2 signed.
lateral-studio.com/.well-known/business.jsonjson
1
{2
"@context": ["https://schema.org", "https://bcp.51ultron.com/schema/v1"],3
"@type": ["Organization", "BusinessCard"],4
"@id": "https://lateral-studio.com/.well-known/business.json",5
"bcp:version": "1.0.0",6
"bcp:updated": "2026-05-12T12:00:00Z",7
8
"identity": {9
"legalName": "Lateral Studio LLC",10
"domain": "lateral-studio.com",11
"jurisdiction": "US-NY",12
"legalForm": "LLC",13
"naics": ["541512"]14
},15
16
"capabilities": {17
"mcpServers": [18
{19
"url": "https://api.lateral-studio.com/mcp",20
"transport": "http",21
"auth": ["oauth2"],22
"scopes": ["docs.read", "bookings.create", "leads.create"]23
}24
]25
},26
27
"policy": {28
"allowTraining": false,29
"allowRAG": true,30
"allowActions": ["docs.read", "bookings.create", "leads.create"],31
"rateLimit": {32
"anonymous": "30/hour"33
}34
},35
36
"state": {37
"status": "operational",38
"supportContact": {39
"email": "studio@lateral-studio.com",40
"hours": "Mo-Fr 10:00-19:00",41
"timezone": "America/New_York"42
}43
},44
45
"signature": { "alg": "ES256", "kid": "dnskey:lateral-studio.com:...", "signedAt": "2026-05-12T12:00:00Z", "value": "..." }46
}Tip
Agency manifests usually omit the commerce block entirely. Pricing is bespoke; "buying" happens through a booking → discovery call → proposal flow. The relevant scope is
bookings.create, which an agent uses to grab a discovery slot.vLEI-signed example
L3 manifest. Cryptographic chain to GLEIF. For regulated entities.
northwood-bank.com/.well-known/business.jsonjson
1
{2
"@context": ["https://schema.org", "https://bcp.51ultron.com/schema/v1"],3
"@type": ["Organization", "BusinessCard"],4
"@id": "https://northwood-bank.com/.well-known/business.json",5
"bcp:version": "1.0.0",6
"bcp:updated": "2026-05-19T06:00:00Z",7
"bcp:expires": "2026-05-26T06:00:00Z",8
9
"identity": {10
"legalName": "Northwood Trust Bank N.A.",11
"domain": "northwood-bank.com",12
"lei": "549300NORTHWOOD0BNK",13
"vleiCredential": "https://northwood-bank.com/.well-known/vlei.json",14
"jurisdiction": "US-NY",15
"legalForm": "National Bank",16
"incorporationDate": "1958-04-22",17
"naics": ["522110"],18
"taxIds": { "EIN": "13-1234567" }19
},20
21
"capabilities": {22
"mcpServers": [23
{24
"url": "https://api.northwood-bank.com/mcp",25
"transport": "http",26
"auth": ["mtls", "oauth2"],27
"scopes": ["catalog.read", "billing.read"]28
}29
],30
"a2aAgentCards": [31
"https://api.northwood-bank.com/.well-known/agent.json"32
]33
},34
35
"commerce": {36
"currencies": ["USD"],37
"paymentRails": [38
{39
"protocol": "AP2",40
"endpoint": "https://api.northwood-bank.com/ap2",41
"instruments": ["card", "ach", "wire"]42
}43
]44
},45
46
"policy": {47
"allowTraining": false,48
"allowRAG": false,49
"allowActions": ["catalog.read"],50
"denyActions": ["billing.write", "agreements.sign"],51
"licenseUrl": "https://northwood-bank.com/legal/ai"52
},53
54
"state": {55
"status": "operational",56
"statusPage": "https://status.northwood-bank.com",57
"supportContact": {58
"email": "agents@northwood-bank.com",59
"hours": "24/7",60
"timezone": "America/New_York"61
}62
},63
64
"signature": {65
"alg": "ES256",66
"kid": "vlei:549300NORTHWOOD0BNK:ofcr:CRO:2026-Q2",67
"signedAt": "2026-05-19T06:00:00Z",68
"value": "eyJhbGciOiJFUzI1NiIs..."69
}70
}Note
Notice the tighter policy. Banks should not auto-grant write scopes through a public manifest. The
allowActions is read-only and thedenyActions explicitly lists the actions that must require contractual auth, not just a verified manifest.