BCP

Examples

Six full manifests across the trust levels and verticals. Use these as a starting point when implementing a publisher or testing a consumer.

Updated today

Minimal manifest

The smallest valid manifest. L0 advisory. No signature.

tiny.dev/.well-known/business.jsonjson
1{
2 "@context": [
3 "https://schema.org",
4 "https://bcp.51ultron.com/schema/v1"
5 ],
6 "@type": ["Organization", "BusinessCard"],
7 "@id": "https://tiny.dev/.well-known/business.json",
8 "bcp:version": "1.0.0",
9 "bcp:updated": "2026-05-19T10:00:00Z",
10
11 "identity": {
12 "legalName": "Tiny Software SRL",
13 "domain": "tiny.dev",
14 "jurisdiction": "RO-B",
15 "legalForm": "SRL"
16 },
17
18 "capabilities": {
19 "mcpServers": [
20 {
21 "url": "https://api.tiny.dev/mcp",
22 "transport": "http",
23 "auth": ["oauth2"]
24 }
25 ]
26 },
27
28 "policy": {
29 "allowTraining": false,
30 "allowRAG": true,
31 "allowActions": ["catalog.read", "contact.send"]
32 },
33
34 "state": {
35 "status": "operational",
36 "supportContact": {
37 "email": "hi@tiny.dev",
38 "hours": "Mo-Fr 10:00-18:00",
39 "timezone": "Europe/Bucharest"
40 }
41 }
42}

Ultron's own manifest

What Ultron publishes about itself at app.51ultron.com/.well-known/business.json.

51ultron.com/.well-known/business.jsonjson
1{
2 "@context": [
3 "https://schema.org",
4 "https://bcp.51ultron.com/schema/v1"
5 ],
6 "@type": ["Organization", "BusinessCard"],
7 "@id": "https://51ultron.com/.well-known/business.json",
8 "bcp:version": "1.0.0",
9 "bcp:updated": "2026-05-19T14:30:00Z",
10 "bcp:expires": "2026-06-19T14:30:00Z",
11
12 "identity": {
13 "legalName": "NexityNetwork SRL",
14 "domain": "51ultron.com",
15 "lei": "5493000ULTRON0NET",
16 "jurisdiction": "RO-B",
17 "legalForm": "SRL",
18 "incorporationDate": "2024-01-15",
19 "registeredAddress": {
20 "@type": "PostalAddress",
21 "addressLocality": "Bucharest",
22 "addressRegion": "B",
23 "addressCountry": "RO"
24 },
25 "naics": ["518210"],
26 "sameAs": [
27 "https://www.linkedin.com/company/ultron-ai",
28 "https://github.com/nexitynetwork"
29 ]
30 },
31
32 "capabilities": {
33 "mcpServers": [
34 {
35 "url": "https://ultron.app/mcp",
36 "transport": "http",
37 "auth": ["oauth2"],
38 "scopes": [
39 "catalog.read", "pricing.read", "docs.read",
40 "contact.send", "bookings.create"
41 ],
42 "label": "Ultron public surface"
43 }
44 ],
45 "a2aAgentCards": [
46 "https://ultron.app/.well-known/agent.json"
47 ],
48 "openApi": "https://ultron.app/api/v1/openapi.json",
49 "cli": {
50 "install": "npm install -g @ultron/cli",
51 "command": "ultron",
52 "homepage": "https://51ultron.com/docs/bcp/portability"
53 }
54 },
55
56 "commerce": {
57 "catalog": "https://ultron.app/api/v1/plans",
58 "pricing": "https://51ultron.com/contact",
59 "currencies": ["USD", "EUR"],
60 "paymentRails": [
61 {
62 "protocol": "ACP",
63 "endpoint": "https://ultron.app/api/payments/acp",
64 "instruments": ["card"]
65 }
66 ],
67 "termsOfSale": "https://51ultron.com/docs/legal/terms",
68 "returnPolicy": "https://51ultron.com/docs/legal/refunds",
69 "supportedJurisdictions": ["US", "EU", "UK", "CA", "AU"]
70 },
71
72 "policy": {
73 "allowTraining": false,
74 "allowRAG": true,
75 "allowActions": [
76 "catalog.read", "pricing.read", "docs.read",
77 "contact.send", "bookings.create"
78 ],
79 "denyActions": ["leads.delete", "billing.modify"],
80 "rateLimit": {
81 "anonymous": "60/hour",
82 "authenticated": "6000/hour",
83 "verified": "60000/hour"
84 },
85 "llmsTxt": "https://51ultron.com/llms.txt",
86 "licenseUrl": "https://51ultron.com/docs/legal/ai-output"
87 },
88
89 "state": {
90 "status": "operational",
91 "statusPage": "https://status.51ultron.com",
92 "incidentWebhook": "https://ultron.app/api/incidents/subscribe",
93 "sla": {
94 "uptime": "99.9",
95 "responseTime": "PT24H"
96 },
97 "supportContact": {
98 "email": "support@51ultron.com",
99 "hours": "Mo-Fr 09:00-22:00",
100 "timezone": "Europe/Bucharest"
101 }
102 },
103
104 "signature": {
105 "alg": "ES256",
106 "kid": "dnskey:51ultron.com:7Z9d6c4f...",
107 "signedAt": "2026-05-19T14:30:00Z",
108 "value": "eyJhbGciOiJFUzI1NiIsImtpZCI6Im..."
109 }
110}
Note
Ultron's own manifest is the reference for downstream publishers. We dogfood the schema before customers adopt it. The actual live manifest athttps://51ultron.com/.well-known/business.jsontracks this file.

SaaS company

Subscription product. No physical goods. Stripe checkout. L2 signed.

vector-saas.io/.well-known/business.jsonjson
1{
2 "@context": ["https://schema.org", "https://bcp.51ultron.com/schema/v1"],
3 "@type": ["Organization", "BusinessCard"],
4 "@id": "https://vector-saas.io/.well-known/business.json",
5 "bcp:version": "1.0.0",
6 "bcp:updated": "2026-05-15T09:00:00Z",
7
8 "identity": {
9 "legalName": "Vector Analytics, Inc.",
10 "domain": "vector-saas.io",
11 "lei": "549300VECTOR0LEI00",
12 "jurisdiction": "US-DE",
13 "legalForm": "Corporation",
14 "sameAs": ["https://www.crunchbase.com/organization/vector-analytics"]
15 },
16
17 "capabilities": {
18 "mcpServers": [
19 {
20 "url": "https://api.vector-saas.io/mcp",
21 "transport": "http",
22 "auth": ["oauth2"],
23 "scopes": ["catalog.read", "docs.read", "bookings.create", "leads.create"]
24 }
25 ],
26 "openApi": "https://api.vector-saas.io/openapi.json"
27 },
28
29 "commerce": {
30 "pricing": "https://vector-saas.io/pricing",
31 "currencies": ["USD"],
32 "paymentRails": [
33 {
34 "protocol": "ACP",
35 "endpoint": "https://api.vector-saas.io/checkout/acp",
36 "instruments": ["card"]
37 }
38 ]
39 },
40
41 "policy": {
42 "allowTraining": false,
43 "allowRAG": true,
44 "allowActions": ["catalog.read", "docs.read", "bookings.create", "leads.create"],
45 "rateLimit": {
46 "anonymous": "60/hour",
47 "authenticated": "3600/hour"
48 }
49 },
50
51 "state": {
52 "status": "operational",
53 "statusPage": "https://status.vector-saas.io",
54 "supportContact": {
55 "email": "hello@vector-saas.io",
56 "hours": "Mo-Fr 09:00-17:00",
57 "timezone": "America/Los_Angeles"
58 }
59 },
60
61 "signature": {
62 "alg": "ES256",
63 "kid": "dnskey:vector-saas.io:9F3a...",
64 "signedAt": "2026-05-15T09:00:00Z",
65 "value": "eyJhbGciOi..."
66 }
67}

E-commerce store

UCP catalog. AP2 payments. Multi-currency. L2 signed.

goodleather.co/.well-known/business.jsonjson
1{
2 "@context": ["https://schema.org", "https://bcp.51ultron.com/schema/v1"],
3 "@type": ["Organization", "BusinessCard"],
4 "@id": "https://goodleather.co/.well-known/business.json",
5 "bcp:version": "1.0.0",
6 "bcp:updated": "2026-05-19T08:00:00Z",
7
8 "identity": {
9 "legalName": "Good Leather Goods Ltd.",
10 "domain": "goodleather.co",
11 "jurisdiction": "GB-ENG",
12 "legalForm": "Limited",
13 "naics": ["316110"]
14 },
15
16 "capabilities": {
17 "mcpServers": [
18 {
19 "url": "https://api.goodleather.co/mcp",
20 "transport": "http",
21 "auth": ["none", "oauth2"],
22 "scopes": ["catalog.read", "pricing.read", "bookings.create"]
23 }
24 ],
25 "nlwebEndpoint": "https://goodleather.co/api/ask"
26 },
27
28 "commerce": {
29 "catalog": "https://api.goodleather.co/catalog",
30 "pricing": "https://goodleather.co/collections",
31 "currencies": ["GBP", "EUR", "USD"],
32 "paymentRails": [
33 {
34 "protocol": "UCP",
35 "endpoint": "https://api.goodleather.co/ucp",
36 "instruments": ["card"]
37 },
38 {
39 "protocol": "AP2",
40 "endpoint": "https://api.goodleather.co/ap2",
41 "instruments": ["card", "ach", "sepa"]
42 }
43 ],
44 "termsOfSale": "https://goodleather.co/policies/terms",
45 "returnPolicy": "https://goodleather.co/policies/returns",
46 "supportedJurisdictions": ["UK", "EU", "US", "CA", "AU"]
47 },
48
49 "policy": {
50 "allowTraining": false,
51 "allowRAG": true,
52 "allowActions": ["catalog.read", "pricing.read", "contact.send"],
53 "rateLimit": {
54 "anonymous": "120/hour",
55 "authenticated": "12000/hour"
56 }
57 },
58
59 "state": {
60 "status": "operational",
61 "supportContact": {
62 "email": "hello@goodleather.co",
63 "hours": "Mo-Fr 09:00-18:00",
64 "timezone": "Europe/London"
65 }
66 },
67
68 "signature": { "alg": "ES256", "kid": "dnskey:goodleather.co:...", "signedAt": "2026-05-19T08:00:00Z", "value": "..." }
69}

Agency / services

Custom services. Booking-driven. No catalog. L2 signed.

lateral-studio.com/.well-known/business.jsonjson
1{
2 "@context": ["https://schema.org", "https://bcp.51ultron.com/schema/v1"],
3 "@type": ["Organization", "BusinessCard"],
4 "@id": "https://lateral-studio.com/.well-known/business.json",
5 "bcp:version": "1.0.0",
6 "bcp:updated": "2026-05-12T12:00:00Z",
7
8 "identity": {
9 "legalName": "Lateral Studio LLC",
10 "domain": "lateral-studio.com",
11 "jurisdiction": "US-NY",
12 "legalForm": "LLC",
13 "naics": ["541512"]
14 },
15
16 "capabilities": {
17 "mcpServers": [
18 {
19 "url": "https://api.lateral-studio.com/mcp",
20 "transport": "http",
21 "auth": ["oauth2"],
22 "scopes": ["docs.read", "bookings.create", "leads.create"]
23 }
24 ]
25 },
26
27 "policy": {
28 "allowTraining": false,
29 "allowRAG": true,
30 "allowActions": ["docs.read", "bookings.create", "leads.create"],
31 "rateLimit": {
32 "anonymous": "30/hour"
33 }
34 },
35
36 "state": {
37 "status": "operational",
38 "supportContact": {
39 "email": "studio@lateral-studio.com",
40 "hours": "Mo-Fr 10:00-19:00",
41 "timezone": "America/New_York"
42 }
43 },
44
45 "signature": { "alg": "ES256", "kid": "dnskey:lateral-studio.com:...", "signedAt": "2026-05-12T12:00:00Z", "value": "..." }
46}
Tip
Agency manifests usually omit the commerce block entirely. Pricing is bespoke; "buying" happens through a booking → discovery call → proposal flow. The relevant scope isbookings.create, which an agent uses to grab a discovery slot.

vLEI-signed example

L3 manifest. Cryptographic chain to GLEIF. For regulated entities.

northwood-bank.com/.well-known/business.jsonjson
1{
2 "@context": ["https://schema.org", "https://bcp.51ultron.com/schema/v1"],
3 "@type": ["Organization", "BusinessCard"],
4 "@id": "https://northwood-bank.com/.well-known/business.json",
5 "bcp:version": "1.0.0",
6 "bcp:updated": "2026-05-19T06:00:00Z",
7 "bcp:expires": "2026-05-26T06:00:00Z",
8
9 "identity": {
10 "legalName": "Northwood Trust Bank N.A.",
11 "domain": "northwood-bank.com",
12 "lei": "549300NORTHWOOD0BNK",
13 "vleiCredential": "https://northwood-bank.com/.well-known/vlei.json",
14 "jurisdiction": "US-NY",
15 "legalForm": "National Bank",
16 "incorporationDate": "1958-04-22",
17 "naics": ["522110"],
18 "taxIds": { "EIN": "13-1234567" }
19 },
20
21 "capabilities": {
22 "mcpServers": [
23 {
24 "url": "https://api.northwood-bank.com/mcp",
25 "transport": "http",
26 "auth": ["mtls", "oauth2"],
27 "scopes": ["catalog.read", "billing.read"]
28 }
29 ],
30 "a2aAgentCards": [
31 "https://api.northwood-bank.com/.well-known/agent.json"
32 ]
33 },
34
35 "commerce": {
36 "currencies": ["USD"],
37 "paymentRails": [
38 {
39 "protocol": "AP2",
40 "endpoint": "https://api.northwood-bank.com/ap2",
41 "instruments": ["card", "ach", "wire"]
42 }
43 ]
44 },
45
46 "policy": {
47 "allowTraining": false,
48 "allowRAG": false,
49 "allowActions": ["catalog.read"],
50 "denyActions": ["billing.write", "agreements.sign"],
51 "licenseUrl": "https://northwood-bank.com/legal/ai"
52 },
53
54 "state": {
55 "status": "operational",
56 "statusPage": "https://status.northwood-bank.com",
57 "supportContact": {
58 "email": "agents@northwood-bank.com",
59 "hours": "24/7",
60 "timezone": "America/New_York"
61 }
62 },
63
64 "signature": {
65 "alg": "ES256",
66 "kid": "vlei:549300NORTHWOOD0BNK:ofcr:CRO:2026-Q2",
67 "signedAt": "2026-05-19T06:00:00Z",
68 "value": "eyJhbGciOiJFUzI1NiIs..."
69 }
70}
Note
Notice the tighter policy. Banks should not auto-grant write scopes through a public manifest. TheallowActions is read-only and thedenyActions explicitly lists the actions that must require contractual auth, not just a verified manifest.