No required central server. Not there yet.

What runs in the wallet today, what still needs a hosted server and why, and the route to no required central server. Every function listed.

ZERO-SERVER READINESS

CAPPZ does not claim "zero servers". The claim it is working toward is no required central server: any operation runs in the wallet, on a peer, or on any operator's runtime, and the hosted relay is one replaceable option among them.

Where the work runs now.

Today the platform is not there. Of 108 hosted functions, 7 have a real in-wallet version and 14 route AI requests through the chosen residency; 78 in-wallet handlers are placeholders that answer instantly without doing the work, and 80 of them hide a working hosted function behind them. All shared records, sign-in and the device sync queue still go through one hosted relay, and no two devices sync directly yet. This page lists every function, what it still needs a host for, and the route to removing that dependency.

108

Hosted functions

21

With a working in-wallet path

80

Hidden behind a placeholder

Running on a peer

PLACE 1

In the wallet

7 real handlers · 14 AI requests routed by residency · 78 placeholders

PLACE 2

On a peer

Not yet. Browser tabs share records; devices and agents do not sync directly.

PLACE 3

On an operator's runtime

AI inference only, through the residency setting (local machine or cappz-edge).

PLACE 4

On the hosted relay

108 functions, all shared records, sign-in and the device sync queue.

What the skill numbers mean.

Every page, guide and machine-readable file takes these numbers from the skill catalog. The site build refuses to ship a page that states a different one.

88

Skills declared in the catalog

67

Marked live (at least one operation marked Live)

21

Callable by name today (hosted relay or real in-wallet handler)

A skill can be marked live without being callable: it then runs only as library code inside the app, with no operation an outside agent can call. Activated on-chain is a live figure — see the current count at https://cappz.ai/ai-agents.

Six things between here and no required host.

Each one lists what happens today and what has to be true instead.

Operations with no fixed host

Today: Every operation is published as a hosted address with a bearer key. Outside agents are told to call one host.

Needs: Operations described by name and schema, with a list of places each one can run: in the wallet, on a peer, on an operator's runtime, or on the hosted relay.

State that lives in wallets

Today: Shared records are read from and written to one hosted database. 72 functions use administrator database access.

Needs: Each owner's records held in their wallet partition and exchanged between peers, with the hosted database kept only as an optional mirror.

Devices that sync directly

Today: Devices exchange records only through the hosted relay. Browser tabs share a channel; devices do not.

Needs: Peer-to-peer sync between devices and agents, with any always-on peer — not a fixed host — covering devices that are offline.

Identity that belongs to the user

Today: Sign-in and sessions are issued by the hosted account service. Wallet sign-in exists but still hands off to it.

Needs: Wallet or decentralized-identity sign-in as the primary path, verified by any peer, with hosted accounts kept as an optional convenience.

Secrets on runtimes the user chooses

Today: 46 functions hold third-party keys (AI, payments, email, data providers) on the hosted runtime.

Needs: The same keys held on any operator's runtime — the owner's machine, a partner node, or the hosted relay — selected by residency.

Somewhere to receive calls from outside

Today: 6 functions receive callbacks from outside services (payments, wallet sign requests, scheduling).

Needs: Any always-on operator node able to receive those callbacks. A browser tab cannot, so this one always needs some online runtime — just not a fixed one.

In order, smallest step first.

Each step removes one reason a hosted server is required. None of them is claimed as done until it ships.

Say what is true

Skill numbers come from one source (88 declared, 67 marked live, 21 callable by name), operations list where they can run, and this inventory is regenerated on every build.

Stop placeholders hiding working functions

Remove the 80 placeholder handlers that answer instead of the real hosted function, and move the 9 functions that need no secret into the wallet.

Run on the operator's own runtime

Let the 47 functions that hold keys or receive callbacks run on any operator node, selected by the same residency setting that already routes AI.

Move shared records into wallets

Rebuild the 55 database-backed functions on wallet partitions and peer exchange, with the hosted database as an optional mirror.

Direct device sync and owned identity

Peer-to-peer sync between devices and agents, and wallet sign-in as the primary path. At that point the hosted relay is one peer among many.

What each one needs a host for.

All 111 functions, grouped by the route away from a fixed host. Regenerated on every build; machine-readable at /.well-known/function-inventory.json.

  • Function
  • In the wallet
  • Hosted
  • Still needs a host for
  • Route
  • agent-skills-agent
  • None
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • ai-inference
  • None
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • ai-schedule-assistant
  • AI, by residency
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • analyze-document
  • AI, by residency
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • analyze-feedback
  • AI, by residency
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • auto-distribute-royalties
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • auto-exchange-xrp-cappz
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • bible-agent
  • AI, by residency
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • build-log-agent
  • None
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • cappz-inference-proxy
  • None
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • cappz-issuer-grant
  • None
  • Yes
  • Holds a third-party key; Reads or writes the hosted database
  • Any operator's runtime
  • cappz-metatron-agent
  • AI, by residency
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • create-calendar-event
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • design-principles-agent
  • None
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • dms-duress-alert
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • dms-oracle-webhook
  • Placeholder (hides hosted)
  • Yes
  • Receives calls from outside; Administrator database access
  • Any operator's runtime
  • dms-trigger-executor
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • ehr-inbound-call
  • Placeholder (hides hosted)
  • Yes
  • Receives calls from outside; Holds a third-party key; Administrator database access
  • Any operator's runtime
  • factory-codegen
  • AI, by residency
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • fiat-webhook-banxa
  • Retired (hides hosted)
  • Yes
  • Receives calls from outside; Holds a third-party key
  • Any operator's runtime
  • fiat-webhook-moonpay
  • Retired (hides hosted)
  • Yes
  • Receives calls from outside; Holds a third-party key
  • Any operator's runtime
  • fiat-webhook-ramp
  • Retired (hides hosted)
  • Yes
  • Receives calls from outside; Holds a third-party key
  • Any operator's runtime
  • geocode-address
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • healthcare-ai-diagnosis
  • AI, by residency
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • healthcare-ai-search
  • AI, by residency
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • insurance-ai-assistant
  • AI, by residency
  • Yes
  • Holds a third-party key; Reads or writes the hosted database
  • Any operator's runtime
  • insurance-gold-prices
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • ipfs-pin
  • Real
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • ipfs-pin-build
  • Real
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • mcv-get-availability
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • mcv-google-calendar-connect
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • mdm-agent
  • AI, by residency
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • passkey-sign-transaction
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • patent-agent
  • AI, by residency
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • realtime-scheduler
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • schedule-reminders
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • send-appointment-confirmation
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • send-calendar-invite
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • send-provider-notification
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • send-sms-reminder
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • smart-schedule-assistant
  • AI, by residency
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • sync-subscription-status
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • translate-content
  • None
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • unified-calendar-connect
  • Placeholder (hides hosted)
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • wallet-auth
  • Real
  • Yes
  • Holds a third-party key; Administrator database access
  • Any operator's runtime
  • xaman-webhook
  • Placeholder (hides hosted)
  • Yes
  • Receives calls from outside; Holds a third-party key; Administrator database access
  • Any operator's runtime
  • xrpl-anchor-cid
  • Real
  • Yes
  • Holds a third-party key
  • Any operator's runtime
  • btc-bridge-api
  • Placeholder (hides hosted)
  • Yes
  • Nothing — can move into the wallet
  • Move into the wallet
  • charm-api-proxy
  • Real
  • Yes
  • Nothing — can move into the wallet
  • Move into the wallet
  • code-escrow-contracts
  • Placeholder
  • No
  • Nothing — can move into the wallet
  • Move into the wallet
  • execReadSelfTest
  • Real
  • No
  • Nothing — can move into the wallet
  • Move into the wallet
  • execWriteSelfTest
  • Real
  • No
  • Nothing — can move into the wallet
  • Move into the wallet
  • generate-thumbnail
  • Placeholder (hides hosted)
  • Yes
  • Nothing — can move into the wallet
  • Move into the wallet
  • generate-whitepaper-pdf
  • Placeholder (hides hosted)
  • Yes
  • Nothing — can move into the wallet
  • Move into the wallet
  • healthcare-calculate-drive-time
  • Placeholder (hides hosted)
  • Yes
  • Nothing — can move into the wallet
  • Move into the wallet
  • iso20022-validate
  • Placeholder (hides hosted)
  • Yes
  • Nothing — can move into the wallet
  • Move into the wallet
  • a2a-message
  • Placeholder (hides hosted)
  • Yes
  • Administrator database access
  • Move records into wallets
  • admin-usage
  • None
  • Yes
  • Administrator database access
  • Move records into wallets
  • admin-users
  • None
  • Yes
  • Administrator database access
  • Move records into wallets
  • agent-account-api
  • Placeholder (hides hosted)
  • Yes
  • Administrator database access
  • Move records into wallets
  • agent-identity-api
  • Placeholder (hides hosted)
  • Yes
  • Administrator database access
  • Move records into wallets
  • appointment-notifications
  • Placeholder (hides hosted)
  • Yes
  • Administrator database access
  • Move records into wallets
  • archive-query-logs
  • Placeholder (hides hosted)
  • Yes
  • Administrator database access
  • Move records into wallets
  • auto-unlock-stakes
  • Placeholder (hides hosted)
  • Yes
  • Administrator database access
  • Move records into wallets
  • calendar-agent-api
  • Placeholder (hides hosted)
  • Yes
  • Administrator database access
  • Move records into wallets
  • calendar-config-escrow
  • Placeholder (hides hosted)
  • Yes