Skip to main content

zambo-sdk

AER-1, the agent execution receipt standard: zambo.dev/aer-1 | Add Zambo to your AI: zambo.dev/add

Thin Python client for Zambo, the verifiable work layer for AI. 153 tools behind one MCP endpoint, a verifiable AER-1 receipt for every call. Free tier included: 20 free calls per day. No account, no API key. Zero dependencies.

Install

pip install zambo-sdk

Quickstart

from zambo_sdk import Client, verify_receipt

z = Client()

# 1. Call a tool: plain JSON-RPC, no API key
result = z.call("live_price", {"symbol": "BTC"})
print(result.text)
print("receipt:", result.receipt_id)
print("audit:  ", result.audit_url)

# 2. Route any goal through the universal entry point
job = z.universal("audit https://example.com for AI discoverability", session="demo-1")
print(job.text)

# 3. Search the full 153-tool catalog
found = z.search("generate QR code")
print(found.text)

# 4. Verify a receipt client-side (recomputes the sha256 locally)
v = verify_receipt(result.receipt_id)
print("verified:", v.verified, v.checks)

API

  • Client().call(tool, arguments) -> CallResult (.text, .receipt_id, .audit_url, .receipt)
  • Client().list_tools() -> list of tool descriptors
  • Client().search(query) -> search the full catalog via capability_search
  • Client().universal(goal, session=None) -> multi-step jobs via zambo_universal
  • get_receipt(receipt_id) -> full receipt JSON
  • verify_receipt(receipt_id) -> Verification (.verified, .checks, .audit_url)

verify_receipt checks three things: the receipt exists, the server marks it verified, and, recomputed locally so the server can't fake it, sha256(canonical_bytes) == output_hash, plus the presence of the anchor record. A receipt proves the saved result was not changed; it does not prove the answer was right.

Receipts follow AER-1 (IETF Internet-Draft draft-zambo-aer1-26). Multi-step jobs can be packaged as a handover: one link a reviewer opens to walk the steps and record a decision.

Notes

  • Endpoint: https://zambo.dev/mcp (JSON-RPC 2.0 over HTTPS, streamable_http-compatible).
  • Receipts: audit page https://zambo.dev/run/<uuid>; verify any receipt at https://zambo.dev/verify/.
  • Need more than the free tier? The $0.99/24h Day Pass is at zambo.dev/day-pass.

Metadata

Release files for zambo-sdk 0.1.7

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for zambo-sdk 0.1.7
File Size Uploaded Provenance Actions
zambo_sdk-0.1.7.tar.gz 5.3 kB Without provenance Details for zambo_sdk-0.1.7.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for zambo-sdk 0.1.7
File Interpreter ABI Platform Actions
zambo_sdk-0.1.7-py3-none-any.whl Python 3 none any Details for zambo_sdk-0.1.7-py3-none-any.whl

Total release size: 11.0 kB

Release files / zambo_sdk-0.1.7.tar.gz

Download URL zambo_sdk-0.1.7.tar.gz
Size 5.3 kB
Tags Source
SHA-256 checksum
How to use checksums
a67e1cee64380dc813424896c776829d84496b375505048eb1035460f5ea3945
BLAKE2b-256 checksum
How to use checksums
9edc8000285625b0bfa83dabd3cbacc42fa4e6c93e994b226013ca9baca6a70f
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via rambo-pypi-grab/0.1.0

Release files / zambo_sdk-0.1.7-py3-none-any.whl

Download URL zambo_sdk-0.1.7-py3-none-any.whl
Size 5.6 kB
Tags Python 3
SHA-256 checksum
How to use checksums
9050cd4c9c116099981e688f6cdba8b8b8727ffa2ca5c96da84b97f7d150017b
BLAKE2b-256 checksum
How to use checksums
ac1420e8b48c2298c8d562a772499471dc1236a3b552ff89918a11ba9dd57560
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via rambo-pypi-grab/0.1.0

Security for zambo-sdk 0.1.7

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page