BBC MCP Tool v2.3 — Safe-by-Default WhatsApp Bot Builder

v2.3 changelog (vs v2.2): Added builderbot_blacklist (list | add | remove) for project-level spam/abuse numbers. The Cloud blacklist is an MCP tool; do not send users to the panel or a homemade Apps Script filter.

v2.2 changelog (vs v2.1): Project tools were unified into builderbot_project with action. builderbot_list_projects and builderbot_create_project no longer exist — calling them returns unknown_tool with the replacement. Added builderbot_docs, builderbot_sanity_check, and builderbot_read_logs. See references/learned-patterns.md for production patterns.

v2.1 changelog (vs v2.0): Corrected EVENTS.* uniqueness rule (it's only the literal system event that must be unique, not "action-style" flows). Replaced the simplified add_chatpdf assistant config with the real plugins.openai.* structure. Added new sections: Routing from add_chatpdf rules, System Variables, Deploy Status Diagnostics, EVENTS.MEDIA with vision, Google Calendar native answer, Outbound Messaging REST API, _capture_conditional_ trigger.

CORE PHILOSOPHY

v2.x = v1 + Safety. Same tools, same BBC API, but with mandatory patterns that prevent the silent failures, accidental deletions, and unvalidated deploys that plagued v1.

Three pillars:

1. VERIFY — After every mutating operation, call the matching list (builderbot_project action='list', builderbot_list_flows, or builderbot_list_answers) to confirm
2. GATE — Before every destructive operation, show impact and require explicit "yes"
3. RECOVER — When something fails, diagnose why and propose a fix, never just stop