# Platform capabilities

URL: /code/platform/capabilities · Id: `page:code/platform/capabilities`

> The Capabilities every Startup is built from, each with a contract, Verbs, and Interfaces.

Each platform [Capability](/business/nouns/capability) has a contract, the [Verbs](/business/nouns/verb) that use it, and the [Interfaces](/business/nouns/interface) that reach it.

| Term | Kind | Definition |
| --- | --- | --- |
| [Agent payments](/systems/finance/agent-payments) | Capability | Agent payments let agents pay and get paid per call under a Mandate, settling each priced request inside its Limits. |
| [Agents](/code/platform/capabilities/agents) | Capability | Agents run named and Role agents in sessions with Tools, Memory, Skills and a pinned model, each under its Mandate. |
| [AI gateway](/code/platform/ai-gateway) | Capability | AI gateway routes every model call by Policy, checks cost Limits before the call, and keeps the full request and response. |
| [Analytics](/systems/data-and-insights/analytics) | Capability | Analytics collects Visits and product Events and derives every Metric from them, split by Version. |
| [Apps and sites](/products/platform/apps-and-sites) | Capability | Apps and sites host every Site and App at the edge, with a preview for each Change and a one-step rollback. |
| [Audit log](/systems/trust-and-governance/audit-log) | Capability | Audit log keeps every Action with who took it, for whom, under which Mandate and with what result, append-only and hash-chained. |
| [Background actions](/code/platform/queues) | Capability | Background actions run a Verb durably after the call returns, with retries, ordering and dead letters, and hand the caller an Action to watch. |
| [Backups](/code/platform/backups) | Capability | Backups keep point-in-time copies of every namespace, so any past state reads back and any Change reverts. |
| [Billing portal](/systems/finance/billing-portal) | Capability | Billing portal lets each Customer replace a card, fix billing details, download receipts, change plans and cancel, on the Startup’s own Domain. |
| [Browser](/code/platform/browser) | Capability | Browser completes tasks in a real, recorded browser session wherever a site offers no programmatic access. |
| [Certificates](/products/platform/certificates) | Capability | Certificates keep a valid TLS certificate on every serving Domain, renew it through delegated validation, and name the check that fails. |
| [Chat delivery](/systems/communications/chat) | Capability | Chat delivery posts and receives Messages in connected chat workspaces, carries buttons and forms, and links each chat account to a Worker or Contact. |
| [Checkout](/systems/finance/checkout) | Capability | Checkout takes payment on a Startup’s own Domain through a hosted checkout page, payment links, a pricing table and an embedded payment form. |
| [Credits](/systems/finance/credits) | Capability | Credits let a Customer prepay or receive a balance that its metered calls draw down, checked before each call and settled on the Invoice. |
| [Database](/code/platform/capabilities/database) | Capability | Database stores every Thing in an owner database per namespace, with an analytics copy of every Event and reads at any past moment. |
| [Dispute response](/systems/finance/dispute-response) | Capability | Dispute response answers chargebacks and contested deliveries with the Startup’s own records as Evidence, under each Dispute kind’s rules and deadlines. |
| [DNS](/products/platform/dns) | Capability | DNS serves each Domain’s records as data, signs every zone with DNSSEC, and flags missing, drifted or dangling records daily. |
| [Domains](/products/platform/domains) | Capability | Domains connect names, DNS Records and certificates to a Startup’s Sites, Apps, Interfaces and Mailboxes, signed with DNSSEC by default. |
| [Email delivery](/systems/communications/email) | Capability | Email delivery sends and receives email from warmed, authenticated Mailboxes, and checks Consent and Suppression before every send. |
| [Email routing](/products/platform/email-routing) | Capability | Email routing receives mail for a Startup’s Domains, routes each address to a Mailbox or the sink, and publishes SPF, DKIM and DMARC. |
| [Encryption](/code/platform/encryption) | Capability | Encryption protects every namespace in transit and at rest under its own keys, rotated on schedule with every old key kept. |
| [Enrichment](/systems/sales/enrichment) | Capability | Enrichment finds and fills in people and Organizations, with provenance on every field and Suppression checked first. |
| [Environments](/code/platform/environments) | Capability | Environments give every namespace a test and a live environment, with separate keys, records and money over one shared definition. |
| [Event streams](/code/platform/event-streams) | Capability | Event streams record every completed Action as an immutable Event and deliver it, in order, to subscribers, Watches and replays. |
| [Financial accounts](/systems/finance/financial-accounts) | Capability | Financial accounts hold a Startup’s cash on Stripe, move it between its cash accounts and out to banks, and post every movement to the ledger. |
| [Functions](/code/platform/capabilities/functions) | Capability | Functions run a Verb as code, a model call, an agent or a human Task, behind one signature. |
| [Identity](/code/platform/identity) | Capability | Identity signs in humans and agents, issues every key and session, and connects single sign-on and directory sync for Customers. |
| [Import and export](/code/platform/import-export) | Capability | Import and export bring a Customer’s records in from another tool and hand every record back in one call. |
| [Integrations](/code/platform/integrations) | Capability | Integrations bind a wrapped outside Source to a System with credentials under an Agreement. |
| [Invoicing](/systems/finance/invoicing) | Capability | Invoicing bills a Customer with a numbered Invoice, payment terms and a hosted payment page, then collects, reminds or voids it. |
| [KV and cache](/code/platform/kv-cache) | Capability | KV and cache serve hot reads at the edge with explicit expiry, and every value rebuilds from the database. |
| [Localization](/systems/marketing/localization) | Capability | Localization translates a Startup’s Site, docs, Messages, and support into each Market’s locales and keeps every translation in step with its source. |
| [Market data](/systems/marketing/market-data) | Capability | Market data measures the outside market: search demand, rankings, links, answer citations, running ads and social reach, each with provenance. |
| [Marketplace payments](/systems/finance/marketplace-payments) | Capability | Marketplace payments settle each sale on the Supplier’s own connected Stripe account and keep the Marketplace’s take as an application fee. |
| [Media](/systems/marketing/media) | Capability | Media generates, edits and transcribes images, video, voice and music, with provenance on every asset. |
| [Observability](/code/platform/observability) | Capability | Observability captures logs, traces and errors from every request and Action, and opens an Incident when a check fails. |
| [Party screening](/systems/legal-and-corporate/party-screening) | Capability | Party screening checks who a counterparty is and whether a Startup may deal with them, from identity to sanctions and fraud signals. |
| [Payment rails](/systems/finance/payments) | Capability | Payment rails move money as charges, refunds, payouts and transfers between connected accounts, so funds never rest with the platform. |
| [Payment risk](/systems/finance/payment-risk) | Capability | Payment risk scores each charge before it runs and allows, authenticates, holds or blocks it by the Startup’s risk Policy. |
| [Permissions](/code/platform/permissions) | Capability | Permissions grant each Role a Verb on a Noun in a scope, check every Action before it runs, and narrow unused grants nightly. |
| [Rate limits](/code/platform/rate-limits) | Capability | Rate limits check each call against its Limits before it runs and count its usage into Meters after, exactly once. |
| [Realtime](/code/platform/capabilities/realtime) | Capability | Realtime pushes Events, Messages and record changes to connected Apps and agents as they happen, resumable from a cursor. |
| [Recurring billing](/systems/finance/recurring-billing) | Capability | Recurring billing charges Subscriptions on Stripe Billing, with trials, proration, metered usage, retries and dunning, while db.sb stays the record. |
| [Residency](/code/platform/residency) | Capability | Residency pins where a namespace stores and processes its records, Files and analytics, set per Startup or per Tenant. |
| [Sandboxes](/code/platform/sandboxes) | Capability | Sandboxes run untrusted or generated code in isolated, leased machines, from millisecond scripts to full builds. |
| [Schedules](/code/platform/schedules) | Capability | Schedules start Actions and Workflows at set times, on recurring rules and on business-hours calendars. |
| [Search](/code/platform/search) | Capability | Search answers keyword, semantic and hybrid queries across a namespace, indexes every write, and returns only what the caller may read. |
| [Secrets](/code/platform/secrets) | Capability | Secrets hold keys and outside credentials, scoped, rotated and audited, injected at call time and never shown to agents. |
| [Signing](/systems/legal-and-corporate/signing) | Capability | Signing binds each signature to a fingerprint of exactly what the signer read, then seals the File with its signing record. |
| [Storage](/code/platform/capabilities/storage) | Capability | Storage keeps the bytes of every File, addressed by content hash, while the File record lives in the database. |
| [Tax calculation](/systems/finance/tax-calculation) | Capability | Tax calculation computes and collects sales tax and VAT on every Order with Stripe Tax, on the Startup’s own account as seller of record. |
| [Telephony](/systems/communications/phone) | Capability | Telephony places and answers voice calls and sends text messages from a Startup’s numbers, honoring Consent and opt-outs. |
| [Tenancy](/code/platform/tenancy) | Capability | Tenancy isolates each Customer in its own Tenant inside a Startup namespace, from records and keys to Limits. |
| [Vector search](/code/platform/vector-search) | Capability | Vector search embeds Things and their parts and finds nearest neighbors for search, deduplication, matching and Memory. |
| [Video](/systems/marketing/video) | Capability | Video renders a Video’s timeline into one cut per format, with captions, a transcript and a receipt for every file. |
| [Web](/code/platform/web) | Capability | Web searches and reads the open web for agents and keeps each page read as a Source with its fetch time. |
| [Workflows](/code/platform/workflows) | Capability | Workflows run the durable body of one Action: steps, waits, retries and hand-offs that survive restarts. |