# dpanel.ai: public MCP and workflow guide

DPanel runs persistent AI teams and repeatable business workflows. An external assistant can design the process, choose a model per stage, install scoped instructions and skills, prepare dependent tasks, and inspect outputs and costs through supported MCP tools. DPanel workers perform the actual work in your Box when you authorize a run. Public guidance lets you evaluate the platform and design a workflow without login.

Repeat the same reviewed process with new inputs instead of rebuilding instructions each time. Use qualified cheaper models for routine stages, stronger models for consequential review, validated handoffs and retained checkpoints. Actual usage and settlement show what each run cost; neither model switching nor repeatability guarantees savings or perfect outputs.

## Start here — no login required

- [Authoring](https://dpanel.ai/workflow-guidance/workflow-authoring.md)
- [Design](https://dpanel.ai/workflow-guidance/workflow-design.md)
- [Configuration](https://dpanel.ai/workflow-guidance/workflow-configuration.md)
- [Endpoint Guide](https://dpanel.ai/mcp-guide)
- [Endpoint Schemas](https://dpanel.ai/mcp-guide.json)
- [Current Pricing](https://dpanel.ai/pricing.json)
- [Cost Validation And Reuse](https://dpanel.ai/workflow-guidance/workflow-costs.md)

## Connect an account for supported controls

Create a DPanel account or sign in, verify the account as required, and connect a supported MCP client with native OAuth consent. Website login alone is not MCP consent.
[Create an account](https://dpanel.ai/signup) · [Sign in](https://dpanel.ai/login)

Read access inspects owned state. Account write consent lasts until revoked for that account/client/resource and includes routine owned Save/Fork/Play/repeat. Access tokens refresh separately. Owner instructions, native readiness, ownership, entitlements, provider consent and spending policies still apply.

Configure a supported MCP client with https://dpanel.ai/mcp. It is a Streamable HTTP POST protocol endpoint; an ordinary web visit receives this public explanation. Do not interpret missing OAuth, a blocked protocol Origin, or an unsupported GET as missing public documentation.

Use authenticated tools/list and contract.read as callable authority. Client support, loaded bindings, roles and scopes may differ from this public registry catalog. Full control-plane parity and arbitrary industry execution are not claimed.

There are two directions: an external MCP-capable assistant controls supported owned DPanel operations through this URL; outbound MCP connectors inside a Box let DPanel workers use other services. They are separate connections. Public registered definitions include two administrator-only tools; an ordinary owner sees only its permitted tools/list subset.

## Current pricing and cost controls

[Current new-sales pricing](https://dpanel.ai/pricing) · [Live pricing JSON](https://dpanel.ai/pricing.json) · [Cost, validation and reuse guide](https://dpanel.ai/workflow-guidance/workflow-costs.md)

Public plans project the already activated versioned new-sales policy. Existing customers retain their recorded contracts and balances; authenticated billing is authoritative for their effective plan. Free receives its one-time starter allowance at onboarding; paid standard-plan allowances renew per eligible paid billing period. Enterprise requires a contractual quote, without standard checkout. Additional eligible seats and Boxes add capacity but no credits. Purchased top-ups retain their existing rules.

Separate the subscription/allowance, available wallet balance, proposed run estimate, native spending limit, reservation and settled charge. billing.balance and usage.summary inspect the supported state; security.project_policy reads effective guardrails. The current inbound catalog has no general MCP hard-cap setter. Configure limits through supported native controls and follow the owner’s actual spending instructions. Supported BYOK and external-service bills remain separate where the chosen integration permits them.

## What MCP can do, and where native setup remains

| Outcome | Supported MCP control | Native capability or limit |
| --- | --- | --- |
| Design an industry workflow | Public authoring/design/configuration, models.list and capability discovery | A design is not an executed industry proof |
| Install roles, stage models, SOULs, scoped skills and dependent tasks | workflows.prepare → workflows.prepared | Prepared graph stays paused; verify installed readiness and capacity |
| Run, pause, stop and inspect owned work | workflows.control, tasks.control, canonical task/session/artifact/usage tools | Owner authorization, dependencies and provider/spending policies apply |
| Update a worker’s model or documents | team.update, team.document_write | Verify actual runtime synchronization |
| Converse with workers | Canonical task conversations and authorized tasks.reply | Standalone Depai/general chat is a separate native surface |
| Create a Box | instances.ensure_default and provisioning.status; readiness/list tools | Additional/custom Boxes and hosting configuration use their actual adapter or native UI |
| Channels and integrations | Connection catalog and owned Box bindings | Pairing/setup/sends use the actual supported connector; no general inbound send adapter is claimed |
| Save/Fork reusable definitions | Eligible published templates; current private qualified speech-driven media definitions | Generic non-media graph capture/Save/Fork is not qualified by workflows.prepare |
| Schedule repeats or publish to gallery | Use only any actually exposed contracts | Broad scheduling/gallery-publication controls currently require native setup/review |
| Backup/download an owned Box | backups.* contracts | Private access-bound downloads and capacity/ownership checks |

The technical term qualified PCM means the supported speech-driven media workflow format. Its capture adapter does not export every arbitrary industry graph. Public copy cannot add a missing adapter; require the current contract and fresh-install proof before claiming general portability.

Byte/hash validation verifies artifact identity and availability. Source claims, calculations and audiovisual quality need their own validators and reviewer stages. A repaired run must be labeled repaired; a draft-only graph is not production evidence. Prove a fluent repeat with a new input, actual stage models/timing/settlement, no manual intervention and independent output review.

## Product capabilities and practical flows

- Teams and agent conversations: persistent native sessions, models, SOUL identities, documents, scoped skills and handoffs. MCP can inspect the team and task conversations, edit supported owned profiles/documents and deliver an explicitly authorized task reply. Standalone Depai/general-agent chat is a separate native surface; do not claim a task reply adapter covers every chat.
- Boxes: inspect owned Boxes, readiness and hosting observations; instances.ensure_default reuses or queues the default approved owner Box and Depai, and provisioning.status tracks its job. Custom/new additional Boxes and hosting configuration remain subject to the actual supported adapter or native UI; a stored hosting flag does not prove runtime readiness.
- Channels and integrations: DPanel supports connected communication channels and outbound MCP tools where installed. Read the connection catalog and Box bindings, verify the intended channel, use the channel skill and native connection flow. A listed connector is not proof of an available inbound send/pairing tool; missing adapters require native UI, never improvised credential/API access.
- Workflows: design a repeated business result; choose stage-specific models, supply skills and evidence; workflows.prepare creates a paused team/task graph and workflows.prepared verifies bindings. workflows.control supports eligible Play/Pause/Stop; tasks.control manages individual task lifecycle. Exact owned/published definition support is inspected before Save/Fork/repeat; authoring a graph is not proof all graph types can be exported or run successfully.
- Outputs, cost and recovery: inspect canonical sessions, decoded/hashed artifacts, recorded usage, reservations/settlement, retained provider operations, and private dashboard delivery. Use source-grounded validators and bounded same-checkpoint repair; respect existing owner spending instructions and do not invent a cap.
- Backups and organizations: supported owned Box/image backup, status and private download tools; organization roles/seats and guardrail observations. Backup download URLs contain private access and must not be publicly shared. Administrator operations require the actual administrator role and scope.

Example treatments include article-to-presenter video with qualified Hebrew speech and private Live Context delivery; social book/product recommendations with audience context, retained narration and source branding/CTA; manufacturing RFQ-to-reviewed quote; freight invoice exceptions; property maintenance-to-reviewed work order. These illustrate design and selected native production treatments. A fresh repeat, language/provider readiness and independent review are required for the specific workflow; the industry examples are not blanket execution certification.

[Channels](https://dpanel.ai/team-channels) · [MCP connectors](https://dpanel.ai/mcp-connectors) · [Knowledge center](https://dpanel.ai/knowledge-center) · [Published workflows](https://dpanel.ai/workflows)

## HTTP endpoints

| Method | Path | Purpose |
| --- | --- | --- |
| GET | `/mcp` | Public explanation for ordinary web/agent readers; requests carrying credentials or protocol headers retain protected MCP behavior. |
| POST | `/mcp` | Authenticated JSON-RPC MCP calls; origin, OAuth, scopes, ownership and native policy checks apply. |
| GET, DELETE | `/mcp` | Protected protocol requests: authenticated response405/Allow:POST; no SSE session or DELETE operation. |
| GET | `/mcp-guide` | Public Markdown guide, all registered tool summaries and connection requirements. |
| GET | `/mcp-guide.json` | Public input/output schemas from the same registered tool definitions; no account state or execution authority. |
| GET | `/.well-known/oauth-protected-resource/mcp` | OAuth protected resource metadata; canonical discovery. |
| GET | `/.well-known/oauth-protected-resource` | OAuth protected resource metadata alias. |
| GET | `/.well-known/oauth-authorization-server` | OAuth issuer, endpoints and supported registration/scopes metadata. |
| GET | `/mcp/oauth/authorize` | Supported registered-client authorization request; PKCE, redirect and requested scopes checked. |
| GET | `/mcp/oauth/consent` | Native owner consent page reached by the authorized client flow. |
| POST | `/mcp/oauth/token` | Authorized code exchange and access-token refresh; never paste tokens or secrets into chat. |
| POST | `/mcp/oauth/revoke` | Revoke the current supported token/grant through the native connection mechanism. |
| GET | `/mcp/approvals/{approval_id}` | Native bound review page when a real remaining approval gate returns this link; not required for every routine owned operation under durable write consent. |

## Registered MCP tool catalog

This is the current public definition catalog for application 7.153, guidance 1.1.1. Exact input and output JSON schemas are available at https://dpanel.ai/mcp-guide.json. A connected client tools/list returns only its permitted subset. No handler or account query runs when this guide is read.

| Tool | Scope | Mode | Purpose |
| --- | --- | --- | --- |
| `backups.create` | `dpanel:write` | Owned control | Create one private full Box/image/persistent-data recovery package on its actual host. Existing write consent; no provider calls, Box start/stop or restore. Same request ID recovers the same job. |
| `backups.list` | `dpanel:read` | Read | List private backup jobs for one currently owned Box, retention and capture limits. |
| `backups.status` | `dpanel:read` | Read | Read the actual backup job stage, checksum, size, failure and expiry. No dispatch or healing. |
| `backups.download` | `dpanel:read` | Read | Obtain a private single-use 90-second download link for a ready owned package. Includes private Box data; never publish or share the URL. |
| `workflows.capture_preflight` | `dpanel:read` | Read | Read owned Box and exact completed qualified source eligibility for private canonical capture. No private history, provider requests or writes. |
| `workflows.capture_preview` | `dpanel:read` | Read | Preview the exact current canonical qualified PCM definition from one completed owned source. No checkpoints, paid media, memories or credentials are copied. Nothing is saved or started. |
| `workflows.save_private` | `dpanel:write` | Owned control | Save one new private qualified PCM draft slug under account write consent with exact canonical manifest and source-bound preview validation. Request journal deduplicates replay; read back an uncertain outcome. No revision of an existing package, publication, fork, execution, purchase or schedule. |
| `workflows.private_definition` | `dpanel:read` | Read | Read one owned private qualified definition and exact pinned manifest/hash. No publication, installation, mutation, runtime or provider request. |
| `media.preflight` | `dpanel:read` | Read | Read current News Flash video pricing, a stated image estimate and this owned workflow billed budget. No generation, credit reservation, approval or worker start. Unknown prices stay unavailable. |
| `workflows.fork_configuration` | `dpanel:read` | Read | Read a free published workflow or an exact owned private qualified PCM draft revision and its declared variables for an owned existing Box. Private access is owner-only; staged/rejected revisions are unavailable. No fork, workers, schedules or purchase. |
| `workflows.fork` | `dpanel:write` | Owned control | Fork an exact reviewed free published execution flow or owned private qualified PCM draft into an owned existing Box through the native installer. Private drafts require the exact canonical allowlist and owner access. Leaves workflow paused, no task start, paid generation or scheduling. Account write consent and exact request journal required; no per-fork review under durable consent. |
| `workflows.install` | `dpanel:read` | Read | Read owned native fork installation steps, failed preparation stages and retained receipt. No repair or repeat fork. |
| `contract.read` | `dpanel:read` | Read | Read current server/native contract, baseline and candidate package versions, granted scopes and this server callable registry. Installed host package and cached registry require host readback. |
| `runtime.readiness` | `dpanel:read` | Read | Probe an owned Box installed baseline hashes, executable versions and readiness without installing or starting a worker. Missing prerequisites are platform setup failures. |
| `tasks.live` | `dpanel:read` | Read | Read canonical recorded task/session state separately from a bounded native card and worker process confirmation. No dispatch or healing. |
| `workflows.control` | `dpanel:write` | Owned control | Use native workflow Play/Pause/Stop on an owned prepared plan. Write includes Play under durable account consent; no separate execution scope or Play review. Native readiness, dependency and spending gates remain. Pause/Stop retain native ownership and worker acknowledgements. |
| `tasks.control` | `dpanel:write` | Owned control | Start, pause, resume, stop or unblock the owned canonical task through native lifecycle services. Account write consent covers start/resume/unblock without another MCP review; existing brief, dependency and spending gates remain. Pause/stop are routine owned controls. One retained worker; failed acknowledgement remains unconfirmed. |
| `tasks.conversation` | `dpanel:read` | Read | Read the canonical task conversation, worker thread and saved reply delivery/application/resume receipts. Task and worker session identities remain distinct. |
| `tasks.reply` | `dpanel:write` | Owned control | Deliver an explicitly authorized external assistant message to this owned task. Persist origin/message identity and current brief before eligible continuation. Existing native scope and approval gates remain enforced; saved does not imply delivered or running. Repeat request_id is deduplicated. |
| `artifacts.validate` | `dpanel:read` | Read | Decode and hash owned declared artifacts; compare accepted hashes and return authenticated owner preview links. Never accepts filenames or worker claims as byte evidence. |
| `dashboard.output` | `dpanel:write` | Owned control | Display one owned byte-validated declared artifact privately in the native dashboard, with a durable hash/delivery receipt. Does not create a public share or send externally. |
| `provider.operation` | `dpanel:read` | Read | Read an owned existing video or dedicated speech operation, sanitized failure, checkpoint, reservation and settlement. No polling or new generation. |
| `provider.poll` | `dpanel:write` | Owned control | Poll only the existing owned provider job and reconcile its native billing receipt. No replacement submission or inference. Interrupted polls retain the same operation. |
| `workspace.open` | `dpanel:read` | Read | For an authenticated owner mentioning dpanel.ai or asking for status, tasks or the broadcast board, open the owner workspace widget. Includes stored task steps, recorded token usage and board panel inventory. No execution or approvals. |
| `workspace.refresh` | `dpanel:read` | Read | Refresh the current owner workspace view without opening a second widget. Stored task state and task-attributed usage only; runtime liveness unprobed. |
| `gallery.search` | `dpanel:read` | Read | For new workflow discovery, show the searchable published gallery. For an existing owner status request prefer workspace.open. Filter by goal or topic; never forks or starts a workflow. |
| `gallery.select` | `dpanel:read` | Read | Read the selected published workflow and its current setup skill. Use focused dpanel.ai skills to help with missing inputs, Box readiness, agents, channels and costs. Does not fork or run. |
| `capabilities.search` | `dpanel:read` | Read | Search the full source-evidenced native endpoint inventory. Reports implemented and missing MCP adapters separately; does not execute endpoints. |
| `identity` | `dpanel:read` | Read | Read authenticated identity, verified-email status and consented scopes. |
| `models.list` | `dpanel:read` | Read | List routable Pack model IDs without changing a model or using inference. |
| `tasks.session` | `dpanel:read` | Read | Read the owned task’s canonical session linkage. Stored status is not a live runtime confirmation. |
| `billing.balance` | `dpanel:read` | Read | Read the native account balance, reserved credit and recorded spending; this does not approve a purchase. |
| `usage.summary` | `dpanel:read` | Read | Read recorded native usage and balance. Unmetered external costs are not implied to be zero. |
| `connections.catalog` | `dpanel:read` | Read | List connection options and stored native consent status; availability is not provider verification. |
| `connections.box_list` | `dpanel:read` | Read | List an owned Box’s outbound MCP binding and credential status without credential values or configuration. |
| `organizations.current` | `dpanel:read` | Read | Read the current native organization role, capabilities and seat usage; this grants no new authority. |
| `organizations.list` | `dpanel:read` | Read | List organizations in which your native account has active membership. |
| `hosting.connection` | `dpanel:read` | Read | Read an owned project’s stored hosting connection state. Does not contact, change or provision the host. |
| `security.project_policy` | `dpanel:read` | Read | Read the effective model guardrails and policy schema for an owned project, without event payloads. |
| `admin.backup_configuration` | `dpanel:admin` | Read | Read backup region, bucket names and credential-presence flags with current administrator authority; no cloud request or backup execution. |
| `tasks.list` | `dpanel:read` | Read | List owned tasks with canonical session linkage before starting or resuming work. |
| `instances.ensure_default` | `dpanel:write` | Owned control | Ensure the authenticated approved owner has the default Hermes Box and Depai using native onboarding. Reuses existing Box/job, queues provisioning when absent, and returns pending/readiness state. Requires the owner’s Box name. Uses the same native plan/entitlement guards as New Box. Monitor its existing job while gathering planning inputs; execute only after verified readiness. No custom host/model, workflow execution or media generation. |
| `instances.list` | `dpanel:read` | Read | List owned Boxes and configured funding limits; this does not provision or start a Box. |
| `workflows.list` | `dpanel:read` | Read | List owned workflow plans. |
| `talents.list` | `dpanel:read` | Read | Read the same active public talent catalog as the UI under owner MCP read consent. Discovery does not hire, approve or increase capacity. |
| `talents.get` | `dpanel:read` | Read | Read one active native talent template including reusable default SOUL and grounding. No private owner memory or credentials. |
| `team.eligibility` | `dpanel:read` | Read | Read owned Box roster eligibility using native basic-team and entitlement policies. Credits do not add capacity. Observation is not a seat reservation or approval. |
| `team.list` | `dpanel:read` | Read | List owned team members, selected models and Box attachments. |
| `provisioning.status` | `dpanel:read` | Read | Read an owned provisioning job status. Logs remain on the native authenticated surface. |
| `admin.catalog.list` | `dpanel:admin` | Read | Read the platform talent catalog using current administrator authority. |
| `tasks.create_draft` | `dpanel:write` | Owned control | Propose a draft task in an owned project. Uses account write consent and an exact journal for the configuration, then repeat with the same request_id. May attach to the sole Box; never starts execution. |
| `tasks.create_drafts` | `dpanel:write` | Owned control | Propose up to 24 owned workflow task drafts in one atomic batch. Include instructions, worker IDs, acceptance criteria, outputs and dependency keys. Uses account write consent and exact batch journaling; replay the same request_id only for readback. Does not modify SOUL, run workers, spend, schedule or publish. |
| `team.member` | `dpanel:read` | Read | Read one owned attached agent’s saved profile, SOUL, document groundings and handoff. Does not prove the runtime loaded these values. |
| `team.update` | `dpanel:write` | Owned control | Propose edits to one owned attached agent: display name, role, model, SOUL or persona. Account write consent authorizes the exact changes; the request journal deduplicates replay. Uses native model checks and sync scheduling. Never changes access, credentials or starts inference. |
| `team.document_write` | `dpanel:write` | Owned control | Propose one owned agent document edit: SOUL, HERMES, AGENTS, CLAUDE, MEMORY or per-Box HANDOFF. Uses the same saved records as My AI-Team. Account write consent authorizes edits; locked policies are preserved. Stored save is not live runtime sync. Put task procedures in task instructions or skills. |
| `workflows.prepare` | `dpanel:write` | Owned control | Turn one reviewed plan into the owned team, models, reusable SOUL identities, scoped Markdown skills and dependent task board atomically. Reuse explicit owned members or validated catalog talents. Account write consent applies to every owned plan; exact request journaling prevents duplicate installation. Runtime sync is tracked separately; workflow remains paused. No inference, purchases, posting or scheduling. |
| `workflows.prepared` | `dpanel:read` | Read | Read the owned one-shot preparation receipt, exact member/task bindings and runtime skill synchronization state. Does not execute or retry work. |

Read dpanel://handbook/access and dpanel://handbook/operations through authenticated resources/read for the current native contracts and capability boundaries. resources/list also exposes the published five-skill guidance library. Use exact tool names; an inventory entry does not authorize calling an arbitrary native HTTP endpoint.