TOKENIZACE.CZ — AI MANDÁT / AI MANDATE — PILOT v1
Base Sepolia testnet, chain ID 84532. No mainnet payments.

Česky: Ve firemním dashboardu otevřete AI Mandát, vytvořte mandát a klíč.
Klíč vložte jen do zabezpečeného úložiště svého konektoru. Není to MCP server:
jde o REST API, které musí váš nástroj skutečně volat. Pouhý pokyn v chatu
nezapojí sledování. Ukládají se pouze výslovně předané návrhy.

English: Create a mandate and a scoped key in your company dashboard.
Store the key in your connector's secret store. This is a REST API, not an
MCP server. Your integration must actually call it. A chat instruction alone
does not enable tracking. Only explicitly submitted proposals are recorded.

Deutsch: Mandat und Schlüssel im Firmen-Dashboard erstellen. Schlüssel nur
im sicheren Konnektorspeicher ablegen. REST API, kein MCP-Server. Der
Konnektor muss die API aufrufen; eine Chat-Anweisung allein genügt nicht.

Русский: Создайте мандат и ключ в кабинете компании. Храните ключ только
в защищённых настройках коннектора. Это REST API, не MCP-сервер. Интеграция
должна вызывать API; инструкция в чате сама по себе не включает учёт.

POST https://amiable-minnow-475.eu-west-1.convex.site/ai-mandate/v1/events
Authorization: Bearer <scoped key from your dashboard>
Content-Type: application/json

{
  "requestId": "unique-action-0001",
  "summary": "Prepare a draft client proposal; awaiting owner approval",
  "documentHash": "<64 hexadecimal characters: SHA-256 of the exact draft bytes>"
}

Limits: JSON body <=4096 bytes; summary <=240 characters; requestId 8–80
letters/digits/_/-. No full documents, chats, personal or sensitive data.
Key expires after at most 30 days or when its mandate expires/revokes.
The key can submit proposals for ONE mandate only; it cannot approve them.

202 returns { id, status: "pending" | "approved" | "rejected" }.
Retry the SAME requestId with the SAME summary and documentHash to retrieve
the current decision without creating a duplicate. A changed document needs
a NEW requestId and a NEW approval. Back off on errors; never send a different
requestId just to retry. Maximum 50 ordinary evidence events per company/24h, 100 per mandate/24h and
at least 3 seconds between new proposals. Approval/key events also count.

Your integration must wait for explicit approval tied to the exact document
hash before executing any external action. Tokenizace.cz itself does not
send messages, make payments or enforce rules in unrelated tools. The
record is agent-reported, not independent proof of execution.

Blockchain evidence:
- Private canonical event payload + random 32-byte salt are kept in the account.
- digest = SHA256(UTF8("TOKENIZACE_AI_MANDATE_V1\n" + salt_hex + "\n" + payload)).
- On-chain data = 0x544b4e414931 followed by the 32-byte digest.
- Zero-value self-transactions on Base Sepolia only, signed by the service.
- Pending is not confirmed. Confirmation requires a successful receipt,
  matching transaction data and 12 additional blocks.
- Download the displayed JSON evidence from the dashboard, recompute the
  digest, compare it to the transaction input on sepolia.basescan.org.
- Testnet records are experimental and may not be retained permanently.
- Hash evidence proves integrity of a committed record, not its truth,
  legal effect or compliance with the AI Act. It does not capture all chats.

MCP connector: https://www.tokenizace.cz/api/ai-mandate/mcp
Setup: https://www.tokenizace.cz/ai-mandate-mcp-cs.txt
MCP access requires an explicitly created MCP key. Existing write-only API keys cannot read rules or receipts. Weekly reports are opt-in in the company workspace.