MCPx
[ WEBMCP RELIABILITY RUNTIME ]

WebMCP,without theguesswork.

MCPx runs consequential WebMCP workflows as durable transactions — recovering uncertain writes, reconciling authoritative state, and safely rolling back partial failures.

LIVE TRANSACTION
RUNTIME // ACTIVE
01 · EXECUTEcreate_route()
Request dispatched across origin boundary
02 · OUTCOME UNKNOWNIN_DOUBT
Transport acknowledgement lost · Mutation not repeated
03 · AUTHORITATIVE INSPECTIONget_route(operationKey)
Querying target state owner: exists: true
04 · RECOVERY✓ RECOVERED
Resource confirmed · Reconciled without duplicate mutation
WebMCP-native
Cross-origin execution
Durable state
PostgreSQL-backed
Authoritative
Reconciliation
Human-controlled
Saga rollback
[ DISTRIBUTED UNCERTAINTY ]

A timeout doesn’t tell you what happened.

A consequential write can commit successfully while its response disappears in transit. Retrying may duplicate the mutation. Assuming failure may corrupt state.

[ 01 ]
WRITE SENT
create_route(spec) →

Mutation dispatched across origins to the state-owning service.

[ 02 ]
ACK LOST
? IN_DOUBT

Response packet dropped. Runtime halts blind retry to prevent duplicate creation.

[ 03 ]
GROUND TRUTH
get_route(opKey) → RECOVERED

Authoritative query discovers resource exists. Reconciled safely.

[ RELIABILITY PRIMITIVES ]

Reliability primitives, not retry wrappers.

Every consequential WebMCP operation implements deterministic execution, inspection, and reverse compensation contracts.

[ 01 ]EXECUTE

Operation Identity

Bind consequential actions to a stable operation identity across origins.

[ 02 ]INSPECT

Authoritative Inspection

Ask the application that owns the resource what actually exists.

[ 03 ]RECONCILE

Uncertainty Recovery

Resolve uncertain outcomes through authoritative inspection instead of blindly repeating the mutation.

[ 04 ]COMPENSATE

Verified Compensation

Undo completed work in reverse dependency order and inspect again to verify absence.

[ COMPARISON // RUNTIME ]

Naive retry logic treats a timeout like failure.

MCPx treats uncertainty as a state.

Instead of guessing whether a consequential write succeeded, MCPx reconciles against authoritative service state before progressing or compensating.

TRADITIONAL RETRY LOGIC
Request timeout
↓
FAILED (Assumed)
↓
Blind retry mutation
Risk: Duplicate writes & orphaned resources.
MCPX RELIABILITY RUNTIME
Request timeout
↓
IN_DOUBT (Uncertain)
↓
Inspect authoritative state
↓
✓ RECOVERED
Result: Resource confirmed without reissuing mutation.
[ 04 · REFERENCE TOPOLOGY ]

Watch a distributed transaction fail safely.

The included reference workflow runs across four independent WebMCP services to demonstrate cross-origin execution, reconciliation, and human-approved Saga rollback.

Run in app
TOPOLOGY // 4 SERVICESSTATUS: ACTIVE
[01] DATABASEcreate_database()
✓ SUCCEEDED
[02] BACKENDdeploy_backend()
✓ SUCCEEDED
[03] ROUTINGRECOVERED
create_route()
[04] FRONTENDFAILED
deploy_frontend()
[ SAFETY GATE ]

Destructive rollback stays human-controlled.

When downstream steps fail, MCPx calculates safe reverse-order deletion and halts for human approval before removing live resources.

ROLLBACK APPROVAL REQUIRED
FAILED STEP: [04] FRONTEND (NEVER COMMITTED)
Resources currently present
✓ Database (PostgreSQL schema active)
✓ Backend (Compute runtime active)
✓ Routing (Gateway route active)
✕ Frontend (Never committed)
Proposed rollback sequence
01 Routing gateway (delete_route)
02 Compute backend (delete_backend)
03 Database schema (CASCADE)
Approve rollback in app →Resources remain active until explicitly approved by operator
[ DEVELOPER PLATFORM ]

Bring your own WebMCP service.

Connect compatible applications, discover their tools, define reliability contracts, and compose them into multi-step workflows without modifying the MCPx runtime.

[ 01 ]
CONNECT
billing.example.com
[ 02 ]
DISCOVER
6 tools found
[ 03 ]
CONTRACT
Execute / Inspect
[ 04 ]
COMPOSE
DAG Pipeline
[ 05 ]
RUN
Durable transaction
[ GROUND TRUTH THESIS ]

Built around ground truth.

Consequential systems cannot rely on optimistic transport. The application that owns the resource is the sole authority on state.

Unknown is not failure.

When transport acknowledgements drop, operations enter authoritative inspection rather than being written off as errors.

Durability before UI state.

Every node transition, attempt, and inspection event is durably committed to PostgreSQL before downstream progression.

Compensation is verified.

Saga rollbacks execute in strict reverse dependency order and inspect remote state to confirm deletion occurred.

The application owns the truth.

MCPx never assumes external state; it queries the WebMCP application directly via its inspection contracts.

Run workflows that know what actually happened.

Connect WebMCP applications and execute consequential workflows with durable state, reconciliation, and controlled rollback.