Skip to content

Platform capabilities

The Capabilities every Startup is built from, each with a contract, Verbs, and Interfaces.

Each platform Capability has a contract, the Verbs that use it, and the Interfaces that reach it.

TermKindDefinition
Agent paymentsCapabilityAgent payments let agents pay and get paid per call under a Mandate, settling each priced request inside its Limits.
AgentsCapabilityAgents run named and Role agents in sessions with Tools, Memory, Skills and a pinned model, each under its Mandate.
AI gatewayCapabilityAI gateway routes every model call by Policy, checks cost Limits before the call, and keeps the full request and response.
AnalyticsCapabilityAnalytics collects Visits and product Events and derives every Metric from them, split by Version.
Apps and sitesCapabilityApps and sites host every Site and App at the edge, with a preview for each Change and a one-step rollback.
Audit logCapabilityAudit log keeps every Action with who took it, for whom, under which Mandate and with what result, append-only and hash-chained.
Background actionsCapabilityBackground actions run a Verb durably after the call returns, with retries, ordering and dead letters, and hand the caller an Action to watch.
BackupsCapabilityBackups keep point-in-time copies of every namespace, so any past state reads back and any Change reverts.
Billing portalCapabilityBilling portal lets each Customer replace a card, fix billing details, download receipts, change plans and cancel, on the Startup’s own Domain.
BrowserCapabilityBrowser completes tasks in a real, recorded browser session wherever a site offers no programmatic access.
CertificatesCapabilityCertificates keep a valid TLS certificate on every serving Domain, renew it through delegated validation, and name the check that fails.
Chat deliveryCapabilityChat delivery posts and receives Messages in connected chat workspaces, carries buttons and forms, and links each chat account to a Worker or Contact.
CheckoutCapabilityCheckout takes payment on a Startup’s own Domain through a hosted checkout page, payment links, a pricing table and an embedded payment form.
CreditsCapabilityCredits let a Customer prepay or receive a balance that its metered calls draw down, checked before each call and settled on the Invoice.
DatabaseCapabilityDatabase stores every Thing in an owner database per namespace, with an analytics copy of every Event and reads at any past moment.
Dispute responseCapabilityDispute response answers chargebacks and contested deliveries with the Startup’s own records as Evidence, under each Dispute kind’s rules and deadlines.
DNSCapabilityDNS serves each Domain’s records as data, signs every zone with DNSSEC, and flags missing, drifted or dangling records daily.
DomainsCapabilityDomains connect names, DNS Records and certificates to a Startup’s Sites, Apps, Interfaces and Mailboxes, signed with DNSSEC by default.
Email deliveryCapabilityEmail delivery sends and receives email from warmed, authenticated Mailboxes, and checks Consent and Suppression before every send.
Email routingCapabilityEmail routing receives mail for a Startup’s Domains, routes each address to a Mailbox or the sink, and publishes SPF, DKIM and DMARC.
EncryptionCapabilityEncryption protects every namespace in transit and at rest under its own keys, rotated on schedule with every old key kept.
EnrichmentCapabilityEnrichment finds and fills in people and Organizations, with provenance on every field and Suppression checked first.
EnvironmentsCapabilityEnvironments give every namespace a test and a live environment, with separate keys, records and money over one shared definition.
Event streamsCapabilityEvent streams record every completed Action as an immutable Event and deliver it, in order, to subscribers, Watches and replays.
Financial accountsCapabilityFinancial accounts hold a Startup’s cash on Stripe, move it between its cash accounts and out to banks, and post every movement to the ledger.
FunctionsCapabilityFunctions run a Verb as code, a model call, an agent or a human Task, behind one signature.
IdentityCapabilityIdentity signs in humans and agents, issues every key and session, and connects single sign-on and directory sync for Customers.
Import and exportCapabilityImport and export bring a Customer’s records in from another tool and hand every record back in one call.
IntegrationsCapabilityIntegrations bind a wrapped outside Source to a System with credentials under an Agreement.
InvoicingCapabilityInvoicing bills a Customer with a numbered Invoice, payment terms and a hosted payment page, then collects, reminds or voids it.
KV and cacheCapabilityKV and cache serve hot reads at the edge with explicit expiry, and every value rebuilds from the database.
LocalizationCapabilityLocalization translates a Startup’s Site, docs, Messages, and support into each Market’s locales and keeps every translation in step with its source.
Market dataCapabilityMarket data measures the outside market: search demand, rankings, links, answer citations, running ads and social reach, each with provenance.
Marketplace paymentsCapabilityMarketplace payments settle each sale on the Supplier’s own connected Stripe account and keep the Marketplace’s take as an application fee.
MediaCapabilityMedia generates, edits and transcribes images, video, voice and music, with provenance on every asset.
ObservabilityCapabilityObservability captures logs, traces and errors from every request and Action, and opens an Incident when a check fails.
Party screeningCapabilityParty screening checks who a counterparty is and whether a Startup may deal with them, from identity to sanctions and fraud signals.
Payment railsCapabilityPayment rails move money as charges, refunds, payouts and transfers between connected accounts, so funds never rest with the platform.
Payment riskCapabilityPayment risk scores each charge before it runs and allows, authenticates, holds or blocks it by the Startup’s risk Policy.
PermissionsCapabilityPermissions grant each Role a Verb on a Noun in a scope, check every Action before it runs, and narrow unused grants nightly.
Rate limitsCapabilityRate limits check each call against its Limits before it runs and count its usage into Meters after, exactly once.
RealtimeCapabilityRealtime pushes Events, Messages and record changes to connected Apps and agents as they happen, resumable from a cursor.
Recurring billingCapabilityRecurring billing charges Subscriptions on Stripe Billing, with trials, proration, metered usage, retries and dunning, while db.sb stays the record.
ResidencyCapabilityResidency pins where a namespace stores and processes its records, Files and analytics, set per Startup or per Tenant.
SandboxesCapabilitySandboxes run untrusted or generated code in isolated, leased machines, from millisecond scripts to full builds.
SchedulesCapabilitySchedules start Actions and Workflows at set times, on recurring rules and on business-hours calendars.
SearchCapabilitySearch answers keyword, semantic and hybrid queries across a namespace, indexes every write, and returns only what the caller may read.
SecretsCapabilitySecrets hold keys and outside credentials, scoped, rotated and audited, injected at call time and never shown to agents.
SigningCapabilitySigning binds each signature to a fingerprint of exactly what the signer read, then seals the File with its signing record.
StorageCapabilityStorage keeps the bytes of every File, addressed by content hash, while the File record lives in the database.
Tax calculationCapabilityTax calculation computes and collects sales tax and VAT on every Order with Stripe Tax, on the Startup’s own account as seller of record.
TelephonyCapabilityTelephony places and answers voice calls and sends text messages from a Startup’s numbers, honoring Consent and opt-outs.
TenancyCapabilityTenancy isolates each Customer in its own Tenant inside a Startup namespace, from records and keys to Limits.
Vector searchCapabilityVector search embeds Things and their parts and finds nearest neighbors for search, deduplication, matching and Memory.
VideoCapabilityVideo renders a Video’s timeline into one cut per format, with captions, a transcript and a receipt for every file.
WebCapabilityWeb searches and reads the open web for agents and keeps each page read as a Source with its fetch time.
WorkflowsCapabilityWorkflows run the durable body of one Action: steps, waits, retries and hand-offs that survive restarts.