Changelog

Added

• check_quota - read-only view of your remaining daily quota, tier and credit balance; free, no key, never consumes quota.
• screen_sanctions and check_compliance now attach an Ed25519-signed compliance receipt, verifiable OFFLINE against the public key published at https://hatchloop.dev/agents.md. When no signing key is configured the receipt says 'unsigned' rather than pretending.

Improved

• Total tool count is 23: 12 always-free with no key, 3 premium data tools free within a daily quota (15 usable keyless), 8 write tools requiring a key. (The 0.2.11 entry said 22 total with 6 write tools - the write-tool count was wrong at publication: it was 8.)
• capture_lead now performs a real durable write to the leads store; the lead_id is the actual inserted row id, deduplicated on (smb_id, phone-or-email), and a duplicate replay is free.

Added

• lookup_us_contracts - query USASpending.gov FPDS for a company's US federal contract awards: award amounts, awarding agency, NAICS code, and contract period. Free, no API key required.
• mint_key is now fully callable via MCP: an agent can issue its own free API key by signing an HMAC-SHA256 challenge with a shared MACHINE_MINT_SECRET, with no human in the loop.

Improved

• Total tool count raised to 22 (13 free with no key, 3 premium data tools free within a daily quota, 6 write tools requiring a key).
• MCP discovery descriptor now derives the tool count from the manifest so it cannot drift from the actual tool list.

Added

• screen_sanctions now screens the EU Consolidated financial sanctions list (European Commission) and the UK Sanctions List (FCDO) alongside OFAC SDN - roughly 39,000 additional names, from the authorities that publish them, with no API key and no per-query cost.
• Every screen states how old its EU/UK data is, and refuses to answer from a copy older than seven days rather than returning a stale clean.
• Matches now carry the country recorded on the listing, and a country_match flag when you pass one. It ranks results; it never removes them - our country data is the address on a listing, not everywhere a party operates.
• entity_type on EU and UK matches is now real (individual vs entity), read from each authority's own type column.
• x402 is documented as a self-serve option: attach a payment in params._meta['x402/payment'] and a paid tool runs with no key and no signup. It was already implemented and we were not telling anyone.
• A signup form on the docs page. Getting a free key no longer requires a terminal.

Improved

• preview_cost now reports whether its success-probability figure is a measurement or our own prior, and says which in words. Below 20 real calls it will tell you it is a prior.
• verify_company_record matches SEC records regardless of punctuation, so 'Apple Inc' resolves the same as 'Apple Inc.'.
• Tool and coverage counts across the site, the manifest and the registry are now derived from one source and gated in CI.

Added

• get_conversation - an agent can read back the full transcript of a thread it started, including who replied and when.
• WhatsApp as a delivery channel for send_message, with reply threading. Free during launch.
• Demand digest - when several agents queue requests for the same business, they arrive as ONE numbered message it can answer with '1 YES', instead of many separate threads.
• Sender-number pool - concurrent conversations with the same business can run on different numbers, so a plain 'yes' stays unambiguous.
• One-click unsubscribe endpoint with RFC 8058 support, linked from every commercial email.

Improved

• Free write quota raised from 50 to 100 operations/day.
• Premium data tools raised from 50 to 500 calls/day with a free key, and from 20 to 100/day anonymous.
• Tool descriptions now state cost per class: free tools say 'free', variable-price tools quote the ceiling as well as the floor, and premium data tools state the quota rule rather than claiming to be flatly free.
• Over-budget requests are now genuinely queued and later delivered, rather than only being described as queued.