Solwyn

Use `solwyn --json budget status` for polling. It is a pure read and does not hold budget. Accepts a Solwyn login or a project API key with access to the selected project.

Reserve budget only immediately before the caller-made spend. Denial is a successful decision with allowed=false, not an execution error. Denials record attribution by default; no_record skips ingest. Never automatically replay an ambiguous check: each invocation can create a new reservation. Use `solwyn budget check` followed by `solwyn budget confirm` only around a specific un-instrumented provider spend that you make yourself. Never wrap SDK-instrumented code with `budget check` or `budget confirm`; the Solwyn SDK already reserves and confirms that spend. Fail-open is explicit: when a check returns `allowed=true` and `reservation_id=null`, skip confirm. Do not create repeated unconfirmed checks. They temporarily hold budget and can cause self-denial. Requires a write-scoped project API key; writes use its project, not the selected read project.

Settle a non-null reservation after caller-made spend using observed token/media usage and actual served provider/model. Records attribution with the same call_id and attempt_index; no_record skips ingest. Recording failure does not undo settlement. Save the FIRST recording_retry event. After known settlement success, use only record_only=FIRST event to retry ingest; this reports settlement=not_submitted. After a lost 204, within Core's project-bound 3600-second receipt window replay identical settlement inputs with no_record=true. After a known 204, submit only record_only=FIRST event; never replace it with the replay's unused new event. Ordinary fresh-confirm replay regenerates timestamp/SDK identity and rereads ambient tags. An event never returned cannot be reconstructed. The receipt cannot correct successful settlement. Missing-media 422 permits corrected quantities under the retained funding ID; never reserve again for completed provider work. Use `solwyn budget check` followed by `solwyn budget confirm` only around a specific un-instrumented provider spend that you make yourself. Never wrap SDK-instrumented code with `budget check` or `budget confirm`; the Solwyn SDK already reserves and confirms that spend. Fail-open is explicit: when a check returns `allowed=true` and `reservation_id=null`, skip confirm. Do not create repeated unconfirmed checks. They temporarily hold budget and can cause self-denial. Requires a write-scoped project API key; writes use its project, not the selected read project.

Read the configured project's budget and provider health without authorizing spend. Accepts a Solwyn login or a project API key with access to the selected project.

Read the configured project's month-to-date spend forecast without authorizing spend. Accepts a Solwyn login or a project API key with access to the selected project.

Read project costs grouped by a Core dimension or tag:<key>, or account costs grouped by project by default. Shared filters/custom windows apply; account mode permits only model/provider/modality and window filters. Project mode accepts a project key or a Solwyn login; account=true requires a Solwyn login and is mutually exclusive with an explicit project. Account filters are restricted by Core.

List projects visible to the logged-in user. Requires a Solwyn login. Requires a Solwyn login.

Takes no parameters.

Read uncapped project cost totals with the same cost filters and custom windows as get_costs. Accepts a Solwyn login or a project API key with access to the selected project.

Read budget rule conditions, routing, and separate paused/snoozed states. A snoozed hard_deny still denies; pausing releases enforcement. Rule keys change when keyed fields are edited. Project keys or a Solwyn login can list rules; with_last_fired=true requires a Solwyn login for the account latest-events read.

Record one caller-owned completed call without reserving or settling budget, including a record-only retry after known settlement success. Do not duplicate SDK events. Persist call_id before sending and reuse it with unchanged payload and attempt_index=0 on retries; omission generates a new ID per call. Core deduplicates the project/call_id/attempt_index identity while retained; this is not an update mechanism. Costs are server-priced. Inspect status, rejected and duplicates even when transport succeeds. Requires a write-scoped project API key; writes use its project, not the selected read project.

List account-scoped tag discovery through a project. Team required; keys preserve whitespace and case. Accepts a Solwyn login or a project API key with access to the selected project.

Read one page of account-scoped values for a verbatim tag key. Team required; prefix is case-sensitive. Accepts a Solwyn login or a project API key with access to the selected project.

List project agent runs. Costs are lifetime totals; the window only selects which runs qualify. Accepts a project key or login. Accepts a Solwyn login or a project API key with access to the selected project.

Read one agent run by storage ID or exact raw run name. Accepts a project key or login. Accepts a Solwyn login or a project API key with access to the selected project.

Read cursor-paginated alert history and per-channel delivery receipts. Project keys work for project history; account history requires a Solwyn login. failed_only filters partial/failed rollups locally; scope is the rule scope. No mutation tools are exposed. Project history accepts a project key or a Solwyn login; account=true reads account-scope history, requires a Solwyn login and ignores project. Use list_alert_activity for all projects plus account scope.

Submit 1–32 checks once to Core's durable batch journal. Retain a caller-prepared UUIDv7 operation_id before calling so an entirely lost MCP reply is recoverable. Omission generates an ID returned when a reply can be delivered. recover_only with that ID performs GET only: no admission, recording, resumption or renewed reservation authority. Indexed completed, failed, unknown and unattempted outcomes remain distinct; reservations expire at their original checked_at + 300 seconds and journal IDs expire after 24 hours. Never replay an unknown outcome or unattempted suffix automatically, or replace an ID to evade conflicts/expiry. Denials are successful decisions and record attribution unless no_record; retain each recording_retry payload for explicit record_only retry, which only ingests that identical event. Settlement remains separate. All calls share a fixed 30-second work deadline, 1 MiB HTTP response budget and 2 MiB result limit. An admitted request may remain effective after cancellation. Requires a project API key. Submission and record_only require write scope; recover_only GET accepts read-only scope. Uses the key's project, not the selected read project.

Read calendar-month account spend, requests, trend, savings, and free-tier quota metadata. Requires a Solwyn login. Requires a Solwyn login.

Takes no parameters.

Read cursor-paginated cost events with shared filters and bounded all_pages. Accepts a Solwyn login or a project API key with access to the selected project.

Read committed daily spend baseline excluding today. Accepts a Solwyn login or a project API key with access to the selected project.

Read unit-cost metrics and optional server-inferred causes. Accepts a Solwyn login or a project API key with access to the selected project.

Compare historical stored spend and estimates with coverage and caveats. Accepts a Solwyn login or a project API key with access to the selected project.

List exact available priced targets and current pricing version. Accepts a Solwyn login or a project API key with access to the selected project.

Read-only historical repricing; never reserves or bills. 429: one bounded retry. No 503/transport replay. Accepts a Solwyn login or a project API key with access to the selected project.

Read recent provider/model failover groups, capped by Core at 50 groups. Accepts a Solwyn login or a project API key with access to the selected project.

Read untracked surfaces with effective retention window, capped by Core at 25 observations. Accepts a Solwyn login or a project API key with access to the selected project.

Read account audit events newest first with exact action filters and bounded pagination. Requires a Solwyn login.

Read current plan limits, capabilities and subscription lifecycle state. Accepts a Solwyn login or a project key with account context; no project selection is required.

Takes no parameters.

Read plan catalog: prices in cents, currency, included requests, decimal cent overage, limits and capabilities. Accepts a Solwyn login or project keys with authenticated user context; no project selection is required.

Takes no parameters.

Read account identity and email verification; project keys return local key context without a user identity. A Solwyn login reads user/account/project identity; project keys return only local auth and selected-project context without revealing the key.

Takes no parameters.

Read user phone verification and SMS consent state. Verification and consent writes stay in the dashboard. Requires a Solwyn login.

Takes no parameters.

Read account-wide activity across all projects plus account scope with delivery receipts. Requires a Solwyn login.

Read pending/retrying deliveries and attempts regardless of event retention. Requires a Solwyn login.

Read advisory unpriced upper-bound offline traffic, possibly overcounted. A 503 means unknown; retry the read, never assume zero or no past traffic. Accepts a Solwyn login or a project API key with access to the selected project.

Read account spend alert configuration, optionally latest firing and lifecycle history within Core’s 30d retention window. Requires a Solwyn login.

Read a plan-change estimate: immediate proration or scheduling at term end, integer cents, currency and line periods. Never changes a subscription or bills; not a price lock. No 503/transport replay. Requires a Solwyn login at any account role; no selected project required.

Read the complete active account roster in join order. Any account member may read it; no project selection is required. Requires a Solwyn login.

Takes no parameters.

Read all open account invitations and their delivery status, including expired invitations. Core requires owner/admin role; no project selection is required. Requires a Solwyn login.

Takes no parameters.