SesApp Access Sheets

Reviewed 23h ago.

• tools: 15 tools scanned
• metadata: scanned

No findings.

Tools (15)

• subscribe

  Subscribe or renew. plan=agent (15 USDC, 20 sheets), fleet (79 USDC, 200), platform (250 USDC, fair-use). Send PAYMENT-SIGNATURE (x402 v2). Returns a Bearer JWT.

• status

  Current agent plan, expiry, fichesCount, maxFiches, overageUsdc. Requires Authorization: Bearer.

• geocode

  Resolve a postal address to formattedAddress + lat/lon for create_fiche (cover map and 150 m WiFi geofence). Optional country ISO2. Requires Bearer.

• list_fiches

  List access sheets owned by the authenticated agent. Requires Authorization: Bearer.

• create_fiche

  Create an access sheet. Write the guest flip-book in `instructions` (Markdown; guest language, usually French). Cover (map/name/address/accessCode) is auto. Pages: --- . Photos: . Intents: [Add WiFi](sesapp:wifi) or [Ajouter le WiFi](sesapp:wifi) + wifiName/wifiPassword; [Add contact](sesapp:contact) or [Ajouter le contact](sesapp:contact) + phoneNumber. Never put wifiPassword in Markdown (150 m GPS). Optional `locale` fr|en for guest chrome. Playbook: GET /llms.txt. Requires Bearer. Beyond quota, retry with PAYMENT-SIGNATURE (0.50 USDC on Agent, 0.25 on Fleet).

• get_fiche

  Get one owned access sheet by id (same fields as list_fiches). Requires Bearer.

• update_fiche

  Update an owned access sheet. Same fields as create_fiche. Typical: update instructions with photos/links. Requires Bearer.

• delete_fiche

  Delete an owned access sheet and its share links. Requires Bearer.

• share_fiche

  Create a revocable guest link. Optional expiresAt (ISO). WiFi password is never in Markdown: guests unlock it within 150 m of lat/lon. Requires Bearer.

• list_shares

  List guest links for a fiche (token, url, expiresAt, viewCount, createdAt). Requires Bearer.

• revoke_share

  Revoke a guest share token. Optional delayDays (1–365) keeps the link until then (soft revoke). Requires Bearer.

• register_webhook

  Fleet/Platform only. Register an HTTPS endpoint. Events: fiche.viewed, share.created, share.revoked, wifi.unlocked, quota.warning. HMAC SHA-256 in X-SesApp-Signature (t=unix,v1=hex of timestamp.body). Secret returned once. Max 5 endpoints. Requires Bearer.

• list_webhooks

  List webhook endpoints (secret is never returned). Fleet/Platform. Requires Bearer.

• update_webhook

  Update url, events, or active. Fleet/Platform. Requires Bearer.

• delete_webhook

  Delete a webhook endpoint. Fleet/Platform. Requires Bearer.