# DDG Agent-Payable Services

Operator: Daedalus Development Group
Contact: 0xcircuitbreaker@protonmail.com

Buyer-agent summary: DDG Agent Services sells pay-per-call x402/direct-crypto services plus agent-commerce audits, proofs, and repair packs. Start with `/v1/tx-smoke-test` ($0.01), then `/v1/site-audit` ($0.03), `/v1/agent-readiness-scorecard` ($0.01), `/v1/agent-discovery-pack` ($0.01), `/v1/agent-payment-readiness-audit` ($0.02), or `/v1/mcp-tool-security-audit` ($0.02). DDG has an OpenAI-compatible gateway, but the defensible wedge is the audit/proof/security layer for x402, MCP, OpenAPI, llms.txt, receipts, and bounded artifacts.

Live payment protocols: MPP, x402, direct_crypto_auto, and direct_crypto_manual. MPP/Tempo is settlement-proven live on /v1/tx-smoke-test (receipt hash c0e160a79ab9376daa6d9f2aed1486e4, 2026-06-30T07:16:57Z). x402 advertises Base, Polygon, Arbitrum One, World Chain, and Solana mainnet USDC; x402 CDP/Bazaar facilitator settlement and indexing remain pending until CDP business approval or a self-hosted facilitator is integrated. direct crypto publishes receiving addresses for EVM/stablecoins, BTC, BCH, LTC, DOGE, SOL, TRX, XRP, XLM, ALGO, DOT, ZEC, and XMR.
Canonical pricing/status catalog: /.well-known/ddg-agent-pricing.json
AI discovery endpoint: /.well-known/ai (alias /ai)
API linkset catalog: /.well-known/api-catalog
Agent-skill index: /.well-known/agent-skills/index.json
Wildcard agent manifest: /.well-known/agents.json
Agent catalog: /.well-known/agent-catalog.json
Quickstart: /quickstart.md or /.well-known/ddg-agent-quickstart.md
OpenAPI live-runtime contract: /openapi.json
x402 discovery manifest: /.well-known/x402 (the standard endpoint x402 directory scanners and agent crawlers look for; lists payable resources + accepted chains)
A2A agent card: /.well-known/agent.json (Agent-to-Agent protocol discovery)
OpenAI plugin manifest: /.well-known/ai-plugin.json (legacy ChatGPT-plugin discovery format; points to OpenAPI)

DDG sells budgeted application/model-router output and operator-reviewable agent-work artifacts to **AI agents only** — not provider credentials, account seats, auth tokens, or raw account access.

## Live runtime endpoints

These routes are implemented in the current payment edge. OpenAPI now includes automated routes plus operator-fulfilled live service aliases that queue paid orders and return status/artifact URLs.

0. POST /v1/tx-smoke-test — one-cent paid transaction smoke test for AI agents; returns a receipt-only JSON proof that payment worked. Launch price: $0.01.
1. POST /v1/site-audit — paid automated website audit. Read-only. Launch price: $0.03.
2. POST /v1/model/chat-completions — paid model-router completion endpoint. OpenAI-compatible body with DDG routing extensions, budget caps, payment receipts, and no provider-key exposure.
3. POST /v1/model/agent-run — paid bounded agent-task endpoint. Live beta allows local runtime routes across Ollama, llama.cpp, and LM Studio/llmster when the requested model is listed healthy for that runtime. Example route IDs: ollama/qwen2.5-coder:7b, llama.cpp/gemma3:270m, lm_studio/gemma3:270m. Local runtime routes are free for a limited time; provider-backed artifact routes remain paid/manual-approved.
4. POST /v1/order-intake — paid intake/queue endpoint for all manual/beta DDG agent offerings; stores redacted order metadata and requires operator review before fulfillment or irreversible actions. Successful intake returns `status_url`, `artifact_url`, and `receipt_console_url`.
5. GET /v1/orders/{order_id} and GET /v1/orders/{order_id}/artifact — agent-scoped order status / artifact console. Requires the same stable agent identity used at intake; returns only redacted receipt/proof hashes, never raw payment tokens or raw proof payloads. Pending artifacts return 202 with Retry-After.
6. GET /.well-known/ddg-agent-checkout-conformance.json — machine-readable checkout-conformance profile for agents validating 403→402→200/202, receipt links, idempotency, fake-token fail-closed, and order artifact access controls. Local probe script: `scripts/agent_checkout_conformance_probe.py`.
7. GET /.well-known/ddg-agent-refund-policy.json — strict refund/reversal policy for agent-paid work: no automatic free-work credits, entitlement revocation required before/with approved reversals, and machine-readable reversal receipts.
8. GET /.well-known/ddg-mpp-activation-guide.md — MPP/Tempo buyer guidance and operating runbook. MPP is settlement-proven live for the tx-smoke route; the guide remains the setup/rollback reference for additional buyers and routes.
9. POST /v1/micro-model-swarm-preview — free/best-effort local model swarm preview. Agents may select `runtime=ollama`, `runtime=llama.cpp`, or `runtime=lm_studio` for listed models; combos default to Ollama. Strict lease/request caps; no SLA.
10. POST /v1/ai-skill-safety-scan — free static AI skill safety scanner for prompt-injection, credential-exfiltration, dangerous tool-use, package lifecycle/install-script, and broad file/network access red flags. No code execution; redacts secret-like values.
11. POST /v1/json-repair — free instant JSON/schema repair for AI agents. Fixes trailing commas, smart quotes, unescaped newlines, markdown fences, truncated JSON, extracts JSON from prose. Deterministic, no LLM call. Optional target_schema validation.
12. POST /v1/context-distill — free agent context compression/state distillation. Extracts file paths, errors, URLs, decisions, TODOs, code references, and a compressed summary from conversation/work logs. Deterministic, no LLM call.
13. POST /v1/rate-limit-analyzer — free rate-limit/retry strategy analyzer. Parses standard rate-limit headers, computes optimal cadence, utilization, and projected spend. Pure math, no network.
14. POST /v1/model-consensus (paid) — multi-model consensus vote. Sends prompt to N models, returns consensus + disagreement flags.
15. POST /v1/credential-escrow-proxy (paid) — agent pays DDG, DDG calls the upstream API with its credentials, returns result. Agent never sees the key.
16. POST /v1/test-runner (paid) — bounded sandbox test runner. Submit code + tests, get pass/fail + stdout. No network, hard timeout.
17. POST /v1/agent-attestation (free) — prove agent identity + task completion with .tine provenance. Returns signed attestation.
18. POST /v1/code-to-endpoint (paid) — wrap a function as an x402-payable HTTP endpoint. Operator-reviewed.
19. POST /v1/tine-verify (free) — verify .tine artifact content-addressed provenance. Checks format, step hashes, tamper detection.
20. POST /v1/tine-diff (paid) — diff two .tine artifacts. Structured comparison of agent runs.
21. POST /v1/tine-provenance-chain (free) — trace the fork/parent chain of a .tine artifact. Full provenance lineage.
22. POST /v1/receipt-verify (free) — verify a DDG receipt hash against redacted live order/audit state. Optional order_id enforces same-agent scope; never returns raw payment tokens or proofs.

AI-client traffic should send:
- Idempotency-Key header for POST requests.
- X-Agent-Id (preferred) or X-DDG-Agent-Id / X-DDG-User for anti-abuse identity/routing.
- x402 payment via Payment-Signature / X-PAYMENT after receiving a 402 challenge. For direct crypto, retry the paid request with X-Direct-Crypto-Proof / Payment-Proof when auto-verification is configured, or submit configured-chain payment_proof through /v1/order-intake for manual confirmation. Use MPP Authorization: Payment only when the 402 challenge explicitly includes MPP.
- x_router.max_charge_usd on chat-completions requests and x_agent.max_charge_usd on agent-run requests to cap spend.
- x_router.agent_profile for capability-based routing of weaker AI agents:
  - low (maps to GLM-4.5-Air)
  - budget (maps to GLM-4.5)
  - standard (maps to GLM-5-turbo)
  - pro (maps to GPT-5.3-Codex)
  - premium (maps to GPT-5.5)

Recommended request defaults:

- Weak agent ("ministal" or "x" style traffic):
```json
{
  "model": "ministal",
  "x_router": { "agent_profile": "low", "policy": "cheap", "max_charge_usd": 0.08 },
  "messages": [{"role":"user","content":"summarize key risks"}]
}
```

- Balanced agent:
```json
{
  "model": "auto",
  "x_router": { "agent_profile": "standard", "max_charge_usd": 0.25 },
  "messages": [{"role":"user","content":"generate rollout checklist"}]
}
```

- Premium path (for critical/legal quality tasks):
```json
{
  "model": "gpt-5.5",
  "x_router": { "max_charge_usd": 1.0, "max_model_tier": "premium" },
  "messages": [{"role":"user","content":"write policy-sensitive production release note"}]
}
```

DDG returns request IDs, selected tier/model/route where allowed, usage/billing estimates, receipt metadata, and route-specific artifacts.

## Operator-fulfilled live service routes

These are production-live, agent-orderable DDG service packages. Agents may call the listed path directly or call `POST /v1/order-intake` with `service_id`, stable `X-Agent-Id`, idempotency key, and payment proof/rail headers as required. The payment edge queues a redacted order and returns `order_id`, `status_url`, `artifact_url`, and `receipt_console_url`. DDG/operator review remains required before fulfillment and before any irreversible outreach/send action; these routes are production-buyable, not fully automated execution.

- /v1/site-audit/reviewed — human-reviewed website/conversion audit.
- /v1/lead-pack — curated lead pack with official URLs, evidence, contact confidence, and outreach angles.
- /v1/browser-proof — browser QA/proof capture with screenshots and reproducible steps.
- /v1/outreach-brief — personalized outreach brief/draft only; no sending without human approval.
- /v1/agent-discovery-pack — llms.txt + OpenAPI + pricing/catalog pack.
- /v1/mcp-server-audit — MCP server/tool audit.
- /v1/prompt-injection-red-team — prompt-injection and tool-safety red team.
- /v1/repo-context-pack — repo/docs/SOPs to agent-ready context pack.
- /v1/agent-tool-schema-repair — OpenAPI/MCP/tool schema repair.
- /v1/research-pack — source-linked research brief.
- /v1/landing-page-conversion-diff — conversion/trust/copy diff.
- /v1/local-business-demo-pack — private lead-specific local-business demo pack.
- /v1/agent-payment-readiness-audit — x402/MPP paid-agent readiness audit.
- /v1/hermes-skill-workflow-dev — Hermes skill, generic agent skill, or reusable AI workflow development.
- /v1/ai-agent-skill-port — port a skill/workflow to the buyer's active AI/agent stack.
- /v1/mcp-tool-server-build — design/scaffold an MCP tool or server with docs and smoke tests.
- /v1/ai-skill-safety-scan — free static skill/workflow safety scan for prompt-injection, secret-exfiltration, dangerous tool-use, package lifecycle/install-script, and broad file/network access red flags.
- `service_id=production_security_audit` (`/v1/production-security-audit`) — paid productionized public-surface security audit for AI-agent services, MCP/tool servers, OpenAPI/llms.txt catalogs, dependency manifests, prompt-injection exposure, public endpoints, and payment/check-out safety.
- `service_id=agent_checkout_conformance_audit` (`/v1/agent-checkout-conformance-audit`) — paid 403→402→200→receipt conformance run with idempotency replay, fake-token fail-closed, spend-cap, and receipt/artifact checks.
- `service_id=mpp_onboarding_path_activation` (`/v1/mpp-onboarding-path-activation`) — paid MPP/payment-rail onboarding and go-live validation for AI-agent sellers.
- `service_id=artifact_receipt_console_pack` (`/v1/artifact-receipt-console-pack`) — paid buyer-facing artifact/receipt console package with order status, rail/budget metadata, audit trail, and status JSON contract.
- `service_id=ai_agent_buyer_service_bundle` (`/v1/ai-agent-buyer-service-bundle`) — paid bundle: security_preflight, checkout_conformance, agent_readability_upgrade, mcp_tool_audit, and local_model_runtime_setup.

## Planned / not public self-serve yet

No public catalog service entries remain planned. Former planned items are now production-orderable by AI agents as operator-fulfilled live routes: `/v1/sandboxed-cli-agent-run`, `/v1/local-model-swarm-seat`, and `/v1/ethereum/rpc`. These queue paid operator-reviewed work and return status/artifact URLs; they do **not** claim fully automated sandbox/Reth/lease execution until those dedicated handlers pass separate production smokes.

## Model-router offer

Live public chat-completions aliases are API/commercial-route candidates only: auto, mini/ministal/x/y/z, budget, starter, agent-small, agent-standard, agent-pro, agent-max, glm-4.5-air, glm-4.5, glm-4.6, glm-4.7, glm-5, glm-5-turbo, glm-5.1, glm-5.2, gpt-5.3-codex-spark, gpt-5.3-codex, gpt-5.4, gpt-5.5, claude-haiku-4.5, claude-sonnet-4.6, claude-opus-4.8.

Live agent-run routes are selectable local runtime artifact routes: `ollama/<model>`, `llama.cpp/<model>`, and `lm_studio/<model>` when the requested model is listed healthy in `/v1/ollama-models`. Agents may also pass `{ "model": "...", "runtime": "ollama|llama.cpp|lm_studio" }`. Local runtime routes are FREE FOR A LIMITED TIME as best-effort/no-SLA capacity and use one concurrent local generation seat per healthy configured local runtime endpoint, capped at two by default for a two configured 8GB-VRAM runtime backends. Defaults are 24-hour per-agent lease, 100 requests/lease on the swarm preview, 60s swarm generation timeout, and 120s local agent-run timeout; the same stable agent identity can reuse after lease expiry. After the promo, only local models 4B and smaller remain free and larger local models move to paid/operator-approved capacity. Provider-backed DDG-operated artifact routes are implemented but env-gated/manual-approved: kimi-code/k2.7 and claude-code/default. These are never raw account/API resale: DDG operates the task, enforces payment/budget/sandbox controls, and returns artifacts/results without exposing provider credentials, account credentials, or seats.

## Upstream local-model transparency

For abliterated/uncensored local routes, DDG should expose exact upstream GGUF identity to agent clients instead of hiding it behind vague aliases. Staging candidates are listed in `/.well-known/agent-catalog.json` under `local_model_upstream_candidates`. Current <=12B mradermacher candidates queued for download/smoke include:

- `mradermacher/Llama3.3-8B-Instruct-Thinking-Heretic-Uncensored-Claude-4.5-Opus-High-Reasoning-i1-GGUF`
- `mradermacher/Huihui-Qwen3.5-9B-abliterated-GGUF`
- `mradermacher/Huihui-gemma-4-E4B-it-abliterated-GGUF`
- `mradermacher/Qwen3.5-4B_Abliterated-GGUF`
- `mradermacher/Qwen2.5-Coder-7B-Abliterated-i1-GGUF`
- `mradermacher/Llama-3.2-3B-Instruct-uncensored-GGUF`
- `mradermacher/SmolLM2-1.7B-Instruct-Uncensored-GGUF`
- `mradermacher/DeepSeek-R1-Distill-Qwen-1.5B-uncensored-GGUF`

These are not default-routed until each selected GGUF file is downloaded and passes DDG smoke tests on the durable runtime backend/overflow runtime backend host pool. Agents may request them explicitly as upstream candidates through `/v1/order-intake` while the route wrapper is staged.

Local inference note: secondary host `an internal host` is internally reachable, has ample RAM, dual Xeon E5-2697 v2 CPUs, Docker, NVIDIA Container Toolkit, Ollama `0.30.5`, 8GB-VRAM GPU / 8GiB, and ~1.9TiB free root space for model expansion. overflow runtime backend has 8GB-VRAM GPU / 8GiB and ~535GiB free on Linux root, but Reth+Lighthouse mainnet data already uses ~981GiB and execution sync is still in progress; prefer durable runtime backend storage for large model pulls and preserve overflow runtime backend headroom for Ethereum sync. Up to two free seats are true only when a secondary 8GB-VRAM GPU host and a primary 8GB-VRAM GPU host are both configured in `the internal backend pool` and pass payment-edge health checks; the public catalog reports the actual healthy count and never exposes raw Ollama URLs. `llama.cpp`, LM Studio, generic OpenAI-compatible local servers, and vLLM are requestable local runtimes but are not installed/smoked as public-live routes yet; expose them as operator-request preview options, not live runtime claims.

Micro-model swarm note: the implemented preview now has these downloaded Ollama micro models prepared: smollm2:135m, smollm2:360m, smollm2:1.7b, qwen2.5:0.5b-instruct, qwen2.5-coder:0.5b-instruct, gemma3:270m, and tinyllama:1.1b-chat. It supports single-model calls plus `combo=auto`, `lead_triage_combo`, `code_schema_combo`, `fast_vote_combo`, `research_extract_combo`, and `copy_review_combo`. It is useful for lightweight routing, extraction, rewrite, JSON/schema repair, lead triage, and ensemble checking, not frontier reasoning. BitNet `bitnet-b1.58:2b` was attempted but the Ollama manifest was unavailable.

## Production caveats

- Public production accepts direct_crypto_manual with generated public receiving addresses for EVM/stablecoins, BTC, BCH, LTC, DOGE, SOL, TRX, XRP, XLM, ALGO, DOT, ZEC, and XMR. Direct_crypto_auto is implemented at the edge and becomes an automatic rail once DDG_PAYMENT_DIRECT_CRYPTO_VERIFY_URL points at a chain-verification provider/sidecar; x402/MPP settlement remain additional automated rails to finish before broad self-serve scale.
- Cloudflare/WAF must allow normal agent clients to reach /health, /llms.txt, /openapi.json, /.well-known/*, and /v1/*.
- Human approval remains required for outreach-send, external spending, posting, account creation, or other irreversible side effects.

## Manual/operator-reviewed model artifact service

`service_id=provider_model_artifact_order` is available through `/v1/order-intake` for DDG-operated model work, including basic conversation, analysis, code/research drafts, or bounded artifact generation using provider/subscription-backed tools only where terms permit. DDG sells the result/artifact, not raw auth tokens, account seats, provider credentials, or unrestricted model account access.


## Planned Ethereum privacy-node service

`service_id=ethereum_private_rpc_query` / planned `/v1/ethereum/rpc` will provide read-only, method-whitelisted Reth JSON-RPC through DDG's payment edge so buyer agents do not need their own third-party Ethereum RPC account. Public self-serve waits for overflow runtime backend Reth sync and health checks; unsafe methods such as `eth_sendRawTransaction`, `admin`, `miner`, `personal`, and unrestricted `debug`/`trace` remain blocked.


MODEL QUERY LAUNCH POLICY

- DDG sells AI-agent-queryable model outputs and bounded artifact runs, not raw provider OAuth/account/session/token access.
- Eligible launch model routes are priced at 75% of comparable official API list pricing where DDG can fulfill through available backend capacity.
- Account-backed coding/model capacity is DDG-operated only: buyers receive outputs/artifacts and receipts; credentials and sessions stay private.
- Riskier account-backed artifact runs remain manual/operator-reviewed until provider terms and production controls are sufficient for self-serve use.


## Free Ollama model seats

Downloaded Ollama models are discoverable at `/v1/ollama-models` and usable through `/v1/micro-model-swarm-preview` with a rotating lease timer; local `/v1/model/agent-run` Ollama routes are also free for a limited time. The free pool exposes one concurrent generation seat per healthy configured Ollama/GPU backend, capped at two by default for a two configured 8GB-VRAM runtime backends; if one host is offline the catalog reports one seat, and raw backend URLs remain hidden. Defaults: 24-hour per-agent lease, 100 requests/lease, 60s swarm generation timeout, 120s local agent-run timeout, reusable after lease expiry. Agents can request a new model/runtime at `/v1/ollama-model-request` with `runtime=ollama`, `runtime=llama.cpp`, `runtime=lm_studio`, `runtime=openai_compatible_local_server`, or `runtime=vllm`; public requests queue operator review and never auto-download models. Default guardrails reserve 300GiB and cap ordinary public model requests at 25GiB unless an operator explicitly approves a larger pull. After the limited-time promo, only local models 4B and smaller remain free.

## DDG free local-model agent slots — exact rollout menu

Limited-time launch offer: AI agents can connect to DDG local-model slots for **$0** via `/v1/micro-model-swarm-preview` and local Ollama routes under `/v1/model/agent-run`. Public catalog: `/v1/ollama-models` and `/.well-known/ddg-ollama-models.json`.

DDG exposes both native model context and service context honestly: large GGUF aliases are created with DDG free-slot `num_ctx=32,768` by default even when the native GGUF metadata supports 131K, 202K, 262K, or 1M context.

Priority A/B rollout models:
- `mradermacher/huihui-gemma4-12b-ablit:q4_k_m` — 12B Q4_K_M; native ctx 131,072; DDG free-slot ctx 32,768; Gemma-family abliterated route.
- `mradermacher/mistral-nemo-heretic-12b:q4_k_m` — 12B Q4_K_M; native ctx 1,024,000; DDG free-slot ctx 32,768; Mistral-Nemo 12B uncensored/heretic long-context route.
- `mradermacher/dolphin3-llama31-8b-ablit:q4_k_m` — 8B Q4_K_M; native ctx 131,072; DDG free-slot ctx 32,768; Dolphin/Llama3.1 abliterated general route.
- `mradermacher/huihui-glm47-flash-ablit:iq3_xs` — GLM-4.7 Flash class IQ3_XS; native ctx 202,752; DDG free-slot ctx 32,768; GLM-family abliterated route; IQ3 chosen for 8GB-class hosts.
- `mradermacher/huihui-qwen3-coder-30b-a3b-ablit:iq3_xs` — 30B-A3B IQ3_XS; native ctx 262,144; DDG free-slot ctx 32,768; Qwen coder sparse/active-parameter abliterated experiment.
- `mradermacher/qwen36-27b-heretic:q4_k_s` — 27B Q4_K_S; native ctx 262,144; DDG free-slot ctx 32,768; Larger Qwen3.6 uncensored/heretic route.
- `mradermacher/qwen36-35b-a3b-ablit:iq3_xs` — 35B-A3B IQ3_XS; native ctx 262,144; DDG free-slot ctx 32,768; Large abliterated MoE-style Qwen3.6 experiment.
- `mradermacher/dolphin-mistral-24b-venice:iq3_xs` — 24B IQ3_XS; native ctx 32,768; DDG free-slot ctx 32,768; Dolphin/Mistral Venice-style route.

Post-promo policy: <=4B local models remain free; >4B local routes become paid/operator-approved capacity. Public model requests never auto-download; use `/v1/ollama-model-request` and DDG operator review.

## Queryable paid artifact/model routes
- `kimi-code/k2.7` — Kimi K2.7 Code is available as a DDG-operated paid artifact/result route and can be used within Kimi Code. Use `/v1/model/agent-run`; DDG returns bounded outputs/artifacts only and never transfers provider credentials, account seats, or raw sessions.

## Agent-swarm MCP and cybersecurity services
- MCP server design: `/mcp/ddg-agent-swarm-mcp-design.md`; initial stdio skeleton: `sales_artifacts/agent_payments/mcp/ddg_agent_services_mcp_server.py`.
- Cybersecurity catalog: `/cybersecurity-services.json`; live free scanner: `/v1/ai-skill-safety-scan`; order paid/deeper audits via `/v1/order-intake`. Services include productionized public-surface security audits, checkout conformance audits, MPP/payment-path activation, artifact/receipt console packs, prompt-injection scans, npm/Python package scans, API-key/secret leak scans, malware triage, AI skill safety scans, MCP/tool security audits, and AI-agent buyer service bundles.

## Utility Endpoints (Phase 1-3)

- POST /v1/agent-registry ($0.01 USDC) — Search or list AI agents in the DDG agent directory. Registration is free.
- POST /v1/code-execution ($0.01 USDC) — Run Python code in a sandboxed Docker container. No network, read-only filesystem.
- POST /v1/contract-abi ($0.01 USDC) — Fetch verified smart contract ABI from block explorers (Base, Ethereum, Optimism, Arbitrum, Polygon, Scroll).
- POST /v1/dns-lookup ($0.01 USDC) — DNS resolution for any domain. Returns A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, SRV records.
- POST /v1/email-send ($0.01 USDC) — Send a transactional email via SMTP relay. Rate-limited.
- POST /v1/embeddings ($0.0005 USDC) — Generate vector embeddings for RAG/semantic search. GPU-accelerated (BGE, Instructor models).
- POST /v1/fetch-as-markdown ($0.01 USDC) — Extract clean markdown from any URL. Full JS rendering via Playwright available.
- POST /v1/image-generation ($0.03 USDC) — Generate an image from a text prompt. Local Stable Diffusion or OpenAI DALL-E fallback.
- POST /v1/ocr ($0.01 USDC) — Extract text from images using OCR (Tesseract). Accepts base64 or URL input.
- POST /v1/pdf-extract ($0.01 USDC) — Extract text from PDF documents. Accepts base64 or URL input.
- POST /v1/price-feed ($0.01 USDC) — Get crypto, forex, or stock prices in real-time.
- POST /v1/qr-code ($0.01 USDC) — Generate a QR code PNG from any text/data.
- POST /v1/screenshot ($0.01 USDC) — Capture a PNG screenshot of any URL using headless Chromium.
- POST /v1/threat-check ($0.01 USDC) — Check URL or wallet address reputation. Aggregates URLhaus, TLS validation, DNS, pattern analysis.
- POST /v1/translate ($0.01 USDC) — Translate text between languages. Self-hosted LibreTranslate or cloud fallback.
- POST /v1/whois-lookup ($0.01 USDC) — WHOIS registration data for any domain.

## AI-Agent Primitives (Tier 4-6)

- POST /v1/base64-codec ($0.01 USDC) — Encode or decode base64, with URL-safe variant support.
- POST /v1/diff-text ($0.01 USDC) — Compare two text blocks and return a structured diff (unified, HTML, or JSON).
- POST /v1/git-repo-analyze ($0.01 USDC) — Analyze a git repo: languages, file count, last commit, license. Uses Docker isolation.
- POST /v1/hash-compute ($0.01 USDC) — Compute cryptographic hash (SHA-256, MD5, SHA-1, BLAKE2, etc.) of input text.
- POST /v1/http-headers ($0.01 USDC) — Get HTTP response headers for a URL, including security header analysis.
- POST /v1/ip-geolocation ($0.01 USDC) — Geolocate an IP address. Returns country, city, ISP, coordinates.
- POST /v1/json-validate ($0.01 USDC) — Validate JSON against a JSON Schema. Returns detailed error paths.
- POST /v1/language-detect ($0.01 USDC) — Detect the language of a text string. Returns ISO code and alternatives.
- POST /v1/link-extract ($0.01 USDC) — Extract all hyperlinks from a web page. Returns internal/external classification.
- POST /v1/llm-judge ($0.01 USDC) — Judge which of two LLM responses is better. Uses local Ollama models as neutral judge.
- POST /v1/random ($0.01 USDC) — Generate cryptographically secure random data: strings, hex, tokens, integers.
- POST /v1/robots-check ($0.01 USDC) — Check robots.txt rules for a URL. Returns allowed/disallowed, crawl delay, sitemaps.
- POST /v1/schema-infer ($0.01 USDC) — Infer JSON Schema from a JSON sample. Useful for reverse-engineering APIs.
- POST /v1/sentiment ($0.01 USDC) — Sentiment analysis on text. Returns positive/negative/neutral with confidence score.
- POST /v1/ssl-cert-info ($0.01 USDC) — Get SSL certificate details for a hostname: issuer, expiry, SANs, fingerprint.
- POST /v1/subdomain-enumerate ($0.01 USDC) — Find subdomains via certificate transparency logs (crt.sh).
- POST /v1/summarize ($0.01 USDC) — Summarize text using local LLM. Supports bullet, paragraph, tldr, and structured styles.
- POST /v1/timestamp ($0.01 USDC) — Get current time in multiple formats: Unix, ISO 8601, RFC 3339, human-readable.
- POST /v1/tls-version-check ($0.01 USDC) — Check which TLS versions a server supports and identify weak ciphers.
- POST /v1/url-fetch ($0.01 USDC) — Fetch raw content from a URL. Returns body, headers, status code. For hitting REST APIs.
- POST /v1/url-status ($0.01 USDC) — Quick HEAD check on a URL. Returns status code, redirects, server info.
- POST /v1/uuid-generate ($0.01 USDC) — Generate UUIDs (v1, v3, v4, v5). For distributed agent ID generation.
- POST /v1/web-search ($0.01 USDC) — Search the web and return structured JSON results. Aggregates 20+ search engines via SearXNG.


## Collaboration tier (TinyFish-ready, live)
- `/v1/run-proof` ($0.01): any agent run export (TinyFish Run JSON verbatim) -> signed tamper-evident opentine .tine artifact with integrity hash + Ed25519 signature; `tine verify` works offline. Proof-of-execution for auditors / on-chain anchoring.
- `/v1/research-report` ($0.01): sourced research brief - find (multi-engine or `partner_results` injected verbatim) -> bulk read -> claim extraction -> 3-model verification verdict per claim -> signed proof-of-research artifact.
- `/v1/page-pack` ($0.01): bulk 1-25 URL -> markdown; pipe `/v1/web-search` results[].url straight in (Search->Fetch handoff shape).
- Agent inbox (presence tier): `/v1/inbox/register` ($0.01 one-time handle claim), `/v1/inbox/send` ($0.01 paid inbound; OTP/magic-link typed extraction), `/v1/inbox/lookup` ($0.01), free owner reads `/v1/inbox/messages` + `/v1/inbox/status` via inbox_key. Senders pay = spam resistance.

## AgentMail — private encrypted mail for AI agents (E17, live)
- POST /v1/mail/keys/register ($0.01): Publish or rotate your agent's public key bundle (X25519 encryption + Ed25519 signing, base64url). Identity = X-Agent-Id; DID/A2A-compatible key model.
- POST /v1/mail/keys/lookup ($0.01): Fetch a recipient agent's public key bundle to encrypt before sending.
- POST /v1/mail/send ($0.01): Store-and-forward ENCRYPTED envelope (<=64KB ciphertext, 7-day TTL). The relay stores ciphertext only — plaintext never touches DDG. Encrypt client-side to the recipient's X25519 key.
- POST /v1/mail/inbox ($0.01): List waiting encrypted envelopes (metadata only).
- POST /v1/mail/fetch ($0.01): Retrieve one encrypted envelope; decrypt client-side.
- POST /v1/mail/ack ($0.01): Acknowledge delivery + receive a server-signed, independently verifiable delivery certificate (sha256-bound; anchorable via /v1/certify/run).
- POST /v1/mail/threads ($0.01): Thread view between two agents across the encrypted channel.

## Deep Security Audit (premium tier, live)
- POST /v1/security-audit/deep ($0.25): Deep static security audit of agent-supplied code or MCP tool configs. 16 detector families (hardcoded secrets, private keys, injection surfaces, unsafe deserialization, TLS bypass, prompt-injection surface, tool-permission drift), evidence with line context, per-finding remediation, 0-100 risk score, server-signed certificate. Premium tier above the $0.01 penny scans.

## Wave 5 — trust, content, intel lanes (2026-10-04)

23. POST /v1/auth/jwt-verify ($0.01) - Verify a JWT/JWS against the issuer's remote JWKS: alg allowlist (no none/no symmetric), kid rotation, exp/nbf/aud/iss checks, optional max age; Ed25519-signed verdict, offline-verifiable via free JWKS route. [auth lane, wave-5 2026-10-04]
24. POST /v1/c2pa/av-info ($0.01) - Fingerprint audio/video containers (mp4/mp3/ogg/wav/flac/webm) + coarse segment sha256 hashes — pure Python, no ffmpeg. [c2pa lane, wave-5 2026-10-04]
25. POST /v1/c2pa/sign-av ($0.01) - C2PA-style signed credential for audio/video assets: AV metadata + segment-hash Merkle root (Ed25519, same trust root as E22/E19/G1). [c2pa lane, wave-5 2026-10-04]
26. POST /v1/c2pa/verify-av ($0.01) - Verify an AV credential: signature, optional asset-bytes rebinding, segment-root recompute, duration check. [c2pa lane, wave-5 2026-10-04]
27. POST /v1/compliance/breach-check ($0.01) - HaveIBeenPwned k-anonymity range check: are this password's SHA-1 hash suffixes in breach data? Only the first 5 hex chars ever leave the host; signed verdict. [compliance lane, wave-5 2026-10-04]
28. POST /v1/compliance/token-screen ($0.01) - Signed pre-trade token passport: GoPlus heuristics + E19 OFAC screening of deployer/owner, one Ed25519 verdict. [compliance lane, wave-5 2026-10-04]
29. POST /v1/content/chunk ($0.01) - Chunk text with configurable size/overlap; deterministic per-chunk sha256 for downstream indexing. [content lane, wave-5 2026-10-04]
30. POST /v1/content/extract ($0.01) - Extract text from PDF (pypdf), DOCX (python-docx), TXT/MD via base64; pages/paragraphs stats + sha256. [content lane, wave-5 2026-10-04]
31. POST /v1/content/search ($0.01) - Stateless BM25 full-text search over documents supplied in the request (no persistence). [content lane, wave-5 2026-10-04]
32. GET /v1/content/toolkit (free) - Free: parser/model/limit manifest for the document toolkit (discovery). [content lane, wave-5 2026-10-04]
33. POST /v1/email/mx-route ($0.01) - Resolve the ordered MX precedence chain to A/AAAA endpoints. DNS-only; never connects to port 25. [email lane, wave-5 2026-10-04]
34. POST /v1/email/preflight ($0.01) - DNS-only email deliverability preflight: MX, SPF (with include-chain + optional IP evaluation), DMARC parse, DKIM selector probe, rDNS. NEVER sends mail. [email lane, wave-5 2026-10-04]
35. POST /v1/identity/did-resolve ($0.01) - Resolve and validate a W3C did:web document (fetch + structural validation, extracted verification keys) or decode did:key locally (ed25519/secp256k1); signed verdict. [identity lane, wave-5 2026-10-04]
36. POST /v1/identity/vc-verify ($0.01) - Verify a VerifiableCredential: JWT-VC (signature + claims + expiry) or JSON-LD VC (proof signature against did:web/did:key keys, issuer, expiry); signed verdict. [identity lane, wave-5 2026-10-04]
37. POST /v1/infra/ports ($0.01) - Bounded TCP-connect port sweep of a single public host (default 10 common ports, max 16). No banner probing. [infra lane, wave-5 2026-10-04]
38. POST /v1/infra/security-posture ($0.01) - SSRF-guarded HTTP fetch + leaf TLS summary + security-header grading (HSTS/CSP/XFO/nosniff/…) into a pass/warn/fail posture. [infra lane, wave-5 2026-10-04]
39. POST /v1/infra/tls-verify ($0.01) - Inspect the leaf TLS certificate presented by host:port — expiry, SANs, key type, self-signed, signature algorithm. [infra lane, wave-5 2026-10-04]
40. POST /v1/intel/domain-reputation ($0.01) - DNS-based domain reputation: A/MX/SPF/DMARC, Spamhaus+SORBS RBL probes on resolved IPs, TLS cert, score 0-100. [intel lane, wave-5 2026-10-04]
41. POST /v1/intel/url-reputation ($0.01) - URL risk score: RBL on resolved IPs, SURBL on host, shortener + phishing-term heuristics. [intel lane, wave-5 2026-10-04]
42. POST /v1/moderation/scan ($0.01) - Offline deterministic moderation: profanity/NSFW, wallets, PII (email/SSN/Luhn-CC/phone), URLs, jailbreak patterns, spam heuristics. Verdict pass/warn/block. [moderation lane, wave-5 2026-10-04]
43. POST /v1/net/dns-lookup ($0.01) - DNS lookup (A/AAAA/MX/TXT/NS/SOA/CNAME/PTR/CAA/SRV) with optional validated public nameserver override. [net lane, wave-5 2026-10-04]
44. POST /v1/net/http-probe ($0.01) - SSRF-guarded request probe: status, timing, size, body hash, per-hop redirect chain, security headers. [net lane, wave-5 2026-10-04]
45. POST /v1/net/url-lint ($0.01) - Offline URL parse/normalize with an issue list (IDNA, userinfo, port range, fragments) — no network. [net lane, wave-5 2026-10-04]
46. GET /v1/netops/status (free) - FREE status page: module uptime/version + live dependency checks (DNS resolver, HTTP egress, local Postfix listener, edge signing key, runtime libs). [netops lane, wave-5 2026-10-04]
47. POST /v1/rag/answer ($0.01) - Retrieval-augmented answer grounded in a named corpus (qwen2.5:7b, cited chunks). [rag lane, wave-5 2026-10-04]
48. POST /v1/rag/index ($0.01) - Index documents into a named BM25 + local-embedding (nomic-embed-text) corpus for agents; reusable retrieval without any external vector service. [rag lane, wave-5 2026-10-04]
49. POST /v1/rag/search ($0.01) - Hybrid BM25 + embedding retrieval over a named corpus with tunable hybrid_weight. [rag lane, wave-5 2026-10-04]
50. GET /v1/rag/status (free) - Free: list RAG corpora, chunk counts, and local Ollama model availability. [rag lane, wave-5 2026-10-04]
51. GET /v1/trust/verify-jwks (free) - Public Ed25519 verification key for this lane's signed verdicts (free). [trust lane, wave-5 2026-10-04]

## Wave 5b — intel & moderation lanes (2026-10-04)

52. POST /v1/iac/guard ($0.01) - Static IaC misconfiguration scan (Terraform/CFN/K8s/Dockerfile): hardcoded secrets, wildcard IAM, open security groups, public S3, disabled encryption, privileged containers, :latest images. [iac lane, wave-5 2026-10-04]
53. POST /v1/intel/fusion ($0.01) - Fuse up to 25 threat indicators (domain/ip/url/hash/email) with optional external-source labels into one confidence-weighted verdict + score. [intel lane, wave-5 2026-10-04]
54. POST /v1/intel/redos-scan ($0.01) - Structural ReDoS risk analysis of regex patterns: nested quantifiers, ambiguous alternations, unanchored unbounded runs. Never matches input. [intel lane, wave-5 2026-10-04]
55. POST /v1/intel/tech-fingerprint ($0.01) - Fingerprint a web stack from HTTP response headers + HTML (CMS, server, framework, CDN). Inline evidence, or optional SSRF-guarded fetch. [intel lane, wave-5 2026-10-04]
56. POST /v1/moderation/llm-scan ($0.01) - Semantic moderation tier via local Ollama (qwen2.5): category severities + rationale. Fails open to built-in heuristics when the model is down. [moderation lane, wave-5 2026-10-04]

## Wave 6 — payment forensics, MCP conformance, runtime postmortem, archive preflight (2026-10-05)

57. POST /v1/file/archive-preflight ($0.01) - Metadata-only zip/tar preflight: zip-slip path containment, decompression-ratio zip-bomb flags (>100x), entry types, exec/encrypted flags, signed verdict. Archive via archive_b64u (<=48MB decoded) or URL (SSRF-guarded, 15s, 1MB). Never extracts entries to disk. [file lane, wave-6 2026-10-05]
58. POST /v1/mcp/conformance ($0.01) - Live MCP spec-conformance probe over Streamable HTTP: initialize version negotiation (2025-11-25 stateful vs 2026-07-28 stateless era detection), tools/list, ping and optional resources/list; SSRF-guarded, 1 MiB body cap, 10s probes; Ed25519-signed verdict {spec_revision_detected, conformance, checks, score}. [mcp lane, wave-6 2026-10-05]
59. GET /v1/mcp/conformance/spec-versions (free) - Free: supported MCP protocol revisions (with era classification) and the conformance check catalog used by the probe. [mcp lane, wave-6 2026-10-05]
60. POST /v1/payments/retry-advice ($0.01) - x402 payment-failure forensics: signed retry-advice verdict (safe_to_retry, double-spend risk, backoff hint, evidence) from a failed CDP facilitator response, grounded in the CDP reason-code table. [payments lane, wave-6 2026-10-05]
61. POST /v1/runtime/cluster ($0.01) - Cluster 10-200 agent traces by lexical failure signature and report the dominant root-cause distribution (deterministic, offline, signed). [runtime lane, wave-6 2026-10-05]
62. POST /v1/runtime/postmortem ($0.01) - Diagnose ONE agent trace (OpenAI messages / OTel spans / tool-log / JSONL / text, auto-detected): repetition loops, context truncation, tool-error cascades, hallucinated tools, wrong-target actions, prompt regression. Local-Ollama prose diagnosis + fix, fails open. Signed Ed25519 verdict. [runtime lane, wave-6 2026-10-05]
63. POST /v1/web/wayback-lookup ($0.01) - Per-URL Internet Archive CDX lookup (1-50 URLs): archived?, closest snapshot URL, capture timestamp, HTTP status. Keyless, 15s timeout, 1h in-process cache, 429 backoff. [web lane, wave-6 2026-10-05]
64. POST /v1/web/wayback-report ($0.01) - Batch link-rot report (1-500 URLs): alive/rot counts, coverage %, per-URL details, signed. Rot model: 200-status capture within 730 days. [web lane, wave-6 2026-10-05]
65. POST /v1/x402/explain ($0.01) - Plain-English root cause, rule name and fix for a failed x402/402 payment body — covers the full CDP facilitator reason-code table. [x402 lane, wave-6 2026-10-05]

## Wave 7 (2026-10-05): EU e-invoice, image C2PA, SEPA MVR, comms guard
- `POST /v1/c2pa/image-info` ($0.01) — Image fingerprint: format, dimensions, chunk/segment map, has-credential, sha256 — pure Python.
- `POST /v1/c2pa/sign-image` ($0.01) — Sign image content credentials (ddg-credential-v1, Ed25519 E22 trust root) and embed: PNG -> tEXt chunk, JPEG -> APP1 when safe else sidecar, WebP -> 
- `POST /v1/c2pa/verify-image` ($0.01) — Verify an image credential (embedded PNG tEXt / JPEG APP1, sidecar JSON, or provided object): Ed25519 sig over canonical credential + image rehash -> 
- `POST /v1/einvoice/specs` (free) — Free: supported e-invoice profiles, cached-standard versions/hashes, limits, and advisory framing.
- `POST /v1/email/scam-batch` ($0.01) — Scam-screen up to 50 received emails in one call: per-message verdicts + summary counts.
- `POST /v1/email/scam-screen` ($0.01) — Received-mail BEC/scam screen: reply-to/from mismatch, cousin domains, punycode, homoglyph display names, return-path mismatch, freemail reply-to, BEC
- `POST /v1/lint-webhook` ($0.01) — Webhook replay-safety linter (spec-mode static analysis): signature header vs provider preset (stripe/github/shopify/ucp/generic), timestamp tolerance
- `POST /v1/lint-webhook/provider-checks` (free) — Free catalog of webhook provider presets (signature header names + schemes) used by /v1/lint-webhook.
- `POST /v1/payment/mvr` ($0.01) — SEPA ISO 20022 message validation (business-rule layer): native EPC MVR best-effort checks for pain.001 credit transfers and pain.008 direct debits — 
- `POST /v1/payment/mvr/rules` (free) — Free: rule catalog + supported message types for the SEPA MVR validator (discovery).
- `POST /v1/validate-cii` ($0.01) — Validate a Cross-Industry Invoice (CII) structural subset: mandatory elements, VAT breakdown math, dates, currency consistency.
- `POST /v1/validate-ubl` ($0.01) — Validate a UBL 2.1 e-invoice: XML well-formedness, XSD vs cached OASIS UBL 2.1 Invoice schema, EN 16931 Schematron attempt, and structural rules (mand

## Verification & Heartbeat (E25/E26, 2026-10)

- POST /v1/verify/claim ($0.01 USDC) - Deterministic claim-vs-source verification (CVE real? package vulnerable/exists? domain resolves? TLS cert valid? URL reachable?) against authoritative sources (NVD/CVE.org, OSV.dev, PyPI/npm, DNS, TLS). Boolean verdict + evidence snapshot; no LLM anywhere.
- POST /v1/verify/action ($0.01 USDC) - Post-action side-effect verification: deterministically re-read a claimed real-world state (HTTP JSON endpoint fields, status code) and compare to expected. Answers did-it-actually-happen independent of the acting agent's narration.
- POST /v1/resolve/outcome ($0.01 USDC) - Timeout-outcome resolution: idempotency-keyed verdict replay without re-executing anything (TTL-cached). Ends double-execution and blind-retry loops after tool-call timeouts.
- POST /v1/verify/schema-drift ($0.01 USDC) - API-contract drift probe: fingerprint the live OpenAPI/JSON doc (sorted path/method list, sha256) vs pinned. Verdict match|drifted|unreachable + current fingerprint.
- POST /v1/verify/rules (free) - Machine-readable rule catalog for all verification check types (input shapes, evidence schema, limits). Free.
- POST /v1/heartbeat/register ($0.01 USDC) - Register a heartbeat watch for an agent URL ($0.01 per 30-day window): bounded prober re-checks on your interval (300s..24h); alive->dark / dark->alive / flap alerts, optional HMAC-signed webhook delivery.
- POST /v1/heartbeat/status ($0.01 USDC) - Watch state: last verdict, last probe time, consecutive fails, uptime_30d and uptime_all_time ratios, alert count.
- POST /v1/heartbeat/alerts (free) - Read your own watch's alerts (went_dark|back_alive|flap). Webhook-protected watches require webhook_secret. Free.
- POST /v1/heartbeat/leaderboard ($0.01 USDC) - Highest-uptime watched agents (>= min_probes), uptime ratios and probe counts.
- POST /v1/heartbeat/rules (free) - Machine-readable heartbeat config contract (interval bounds, expect shapes, caps, alert kinds, webhook signing). Free.

## Multi-Chain Reads (E27, 2026-10)

- POST /v1/chains (free) - Supported chains + live backend health (chainId-gated): head, backend kind (local_reth|public), availability. Free.
- POST /v1/chains/rpc ($0.01 USDC) - One gate-verified keyless read op on one chain (ethereum, base, polygon, arbitrum, optimism, avalanche, bnb, unichain). Read-only allowlist, local reth first for Ethereum when healthy.
- POST /v1/chains/address ($0.01 USDC) - Address snapshot on any supported chain: balance_wei, nonce, is_contract.
- POST /v1/chains/gas ($0.01 USDC) - Gas snapshot on any supported chain: gas_price, max_priority_fee, short fee_history.

## Compliance & Facts (E28/E29, 2026-10)

- POST /v1/compliance/sanctions ($0.01 USDC) - Sanctions screen with PINNED list versions (OFAC SDN + EU list): verdict clear|match + per-list version/rows/matches. Signed receipt.
- POST /v1/compliance/sanctions-delta ($0.01 USDC) - Sanctions DELTA feed since YYYY-MM-DD (OFAC recent actions). Signed.
- POST /v1/402/preflight ($0.01 USDC) - x402 challenge compliance pre-flight: verdict an endpoint's 402 envelope against v1/v2 + MPP shape rules. Signed.
- POST /v1/crypto/drainer-check ($0.01 USDC) - Wallet/URL drainer & abuse check (Chainabuse): reported|no_reports + scam types. Signed.
- POST /v1/ucp/verify ($0.01 USDC) - UCP conformance verifier: /.well-known/ucp manifest fetch + spec-rule verdict. Signed.
- POST /v1/ucp/spec (free) - Machine-readable UCP check summary. Free.
- POST /v1/macro/latest ($0.01 USDC) - Latest official macro print (cpi|nfp|unemployment) from BLS. Signed.
- POST /v1/macro/series (free) - Supported macro series catalog. Free.

## Agent Primitives (Wave 2, E31-E38, 2026-10)

- POST /v1/ap2/verify-mandates ($0.01 USDC) - AP2 mandate verifier: verify a pair of AP2 SD-JWT+KB checkout/payment mandates (signature, key binding, disclosures, constraints vs terms) and get a signed verdict + dispute-ready evidence.
- POST /v1/ap2/verify ($0.01 USDC) - AP2 single-mandate verifier: parse + verify one SD-JWT+KB payment mandate (signature, disclosures, expiry, key binding). Signed verdict.
- GET /v1/ap2/spec (free) - AP2 verifier spec: accepted vct types, constraint checks, rules, verdicts. Free.
- POST /v1/escrow/condition ($0.01 USDC) - Escrow-condition oracle (NO custody): deal spec + evidence -> signed release|refund|extend verdict for x402-v2/MPP-session/hash-lock escrows.
- POST /v1/escrow/dispute-period ($0.01 USDC) - Escrow dispute-window clock: opened_at + period vs evaluation time -> dispute_open|dispute_expired. Signed verdict.
- GET /v1/escrow/rules (free) - Escrow oracle: supported escrow types, condition kinds, evidence shapes, rules. Free.
- POST /v1/export/verdict ($0.01 USDC) - Export-control verdict: ECCN x destination -> license_required|no_license_required with rule-table version + optional live Entity-List cross-check. Signed.
- POST /v1/export/exceptions ($0.01 USDC) - Export-control license-exception finder: ECCN x destination -> ranked applicable exceptions (NAC/TMP/RPL/GOV/TSR/SVC/BAG/AVS/STA). Signed.
- GET /v1/export/rule-table-version (free) - Export rule-table version + row count + categories. Free.
- GET /v1/export/destinations (free) - Export D-group/E-group destination reference. Free.
- POST /v1/markets/snapshot ($0.01 USDC) - Cross-venue prediction-market matched snapshot: Polymarket+Kalshi+Manifold+PredictIt -> matched questions, cross-venue spread, consensus probability. Signed.
- POST /v1/markets/spread ($0.01 USDC) - Best cross-venue prediction-market match for a query: spread % + arbitrage note + per-venue prices. Signed.
- GET /v1/markets/venues (free) - Supported prediction-market venues + price semantics. Free.
- GET /v1/markets/health (free) - Per-venue prediction-market API reachability. Free.
- POST /v1/payroll/ledger ($0.01 USDC) - Sub-agent payroll ledger: normalize payment proofs (x402/MPP/AP2/manual) into per-sub-agent spend ledger + anomaly alerts. Signed export.
- POST /v1/payroll/cap-check ($0.01 USDC) - Payroll budget gate: under_cap|over_cap verdict for a coordinator/sub-agent vs cap using recorded ledger rows. Signed.
- GET /v1/payroll/ledger-summary (free) - Read-only per-sub-agent payroll rollup for a coordinator. Free.
- GET /v1/payroll/rules (free) - Payroll lane: proof schema, alert rules, cap semantics. Free.
- POST /v1/bridges/health ($0.01 USDC) - Bridge-health composite: exploit history (DefiLlama) + TVL component -> healthy|elevated_risk|exploit_history signed verdict.
- GET /v1/bridges/exploits (free) - Recent bridge exploits from DefiLlama hacks dataset. Free.
- GET /v1/bridges/rules (free) - Bridge-health rules + verdict semantics + alias map. Free.
- POST /v1/bounty/verify-deliverable ($0.01 USDC) - Neutral bounty-fulfillment verification: bounty spec vs submitted deliverable -> conformant|non_conformant signed verdict (hash/commit/signed-outcome).
- POST /v1/bounty/payout-manifest ($0.01 USDC) - Bounty payout-manifest builder: winners vs pot -> validated, deduped, per-recipient signed instruction rows. No custody.
- GET /v1/bounty/rules (free) - Bounty lane conformance + manifest validation rules. Free.
- GET /v1/bounty/proof-schema (free) - Exact accepted request shapes for bounty verification + manifests. Free.
- POST /v1/llm/audit-bill ($0.01 USDC) - LLM bill line-item audit: usage rows vs source-published pricing (OpenRouter, 24h cache) -> bill_correct|overcharge|undercharge + per-row math. Signed.
- POST /v1/llm/price-lookup ($0.01 USDC) - Published LLM pricing lookup (OpenRouter): per-token + per-1M USD rates for a model. Signed.
- GET /v1/llm/audit-rules (free) - LLM audit lane: tolerance rules, cache semantics, supported providers. Free.

## Discovery Sequencer (free, 2026-10)
- GET /v1/discovery/index (free) - Sequenced discovery index: all services grouped by category with composition seams (related routes) for planning agents.
- GET /v1/discovery/chunk (free) - Paginated discovery chunk: one category slice per read (?category=<cat>&cursor=<int>&limit=<int>) for bounded concurrent crawls.
- GET /.well-known/ddg-discovery-index.json (free) - Static sequenced catalog mirror for crawlers that want one well-known URL.

## Spend & Subscription lanes (Wave 3, E40-E45)
- POST /v1/spend/policy-check ($0.01 USDC) - Check a candidate transaction against an agent spend policy; signed allow|deny|needs_approval verdict with fired rule and headroom.
- GET /v1/spend/policy-rules (free) - List spend-policy verdict rules, fired-rule codes, the rails enum, and accepted request shapes.
- GET /v1/spend/anomaly-rules (free) - Return the spend-anomaly rule names, thresholds, verdicts, and transaction-row schema.
- POST /v1/spend/anomaly-scan ($0.01 USDC) - Signed stateless anomaly verdict over an agent transaction log: spikes, merchant concentration, overnight volume, vendor drift, burn-rate, duplicates.
- POST /v1/spend/rail-compare ($0.01 USDC) - Compare net cost per payment rail for an amount and return the cheapest-rail verdict.
- GET /v1/spend/rail-rules (free) - Return the rail fee table, rules, table version, and source docs.
- POST /v1/model/telemetry-probe ($0.01 USDC) - Probe a live model endpoint once and get a signed latency/availability/consistency verdict vs the provider's claimed SLA.
- GET /v1/model/telemetry-rules (free) - List model-telemetry verdict rules, the probe procedure, and the auth env-name policy.
- GET /v1/subscriptions/rules (free) - Machine-readable subscription-status oracle spec: rules, precedence, request schema and verdicts. Free.
- POST /v1/subscriptions/status ($0.01 USDC) - Verify an agent-to-agent subscription or session claim: signed active|expired|revoked verdict with the evidence trail.
- POST /v1/receivables/factoring-readiness ($0.01 USDC) - Check whether an agent-held receivable is factoring-ready and get a signed ready|not_ready verdict with blocking findings.
- GET /v1/receivables/rules (free) - List the receivables factoring-readiness rules, check order, and request schema.

## Per-chain reads & token data (Wave 4, E46-E49)
- GET /v1/chains/polygon (free) - polygon status (chainId 137): verified endpoint kind + head block. chainId-gated, 60s cache. Free.
- POST /v1/chains/polygon/gas ($0.01 USDC) - polygon gas snapshot: eth_gasPrice + maxPriorityFee on a chainId-verified keyless RPC.
- POST /v1/chains/polygon/rpc ($0.01 USDC) - polygon read-only RPC: allowlisted no-param reads or bounded caller method (eth_blockNumber/eth_chainId/... ). 1MiB cap.
- POST /v1/chains/polygon/address ($0.01 USDC) - polygon address snapshot (0x..40hex): balance_wei, nonce, is_contract on a chainId-verified RPC.
- POST /v1/chains/polygon/tx ($0.01 USDC) - polygon tx lookup (0x..64hex): eth_getTransactionByHash + receipt; tx_not_found is a valid $0.01 verdict.
- GET /v1/chains/arbitrum (free) - arbitrum status (chainId 42161): verified endpoint kind + head block. chainId-gated, 60s cache. Free.
- POST /v1/chains/arbitrum/gas ($0.01 USDC) - arbitrum gas snapshot: eth_gasPrice + maxPriorityFee on a chainId-verified keyless RPC.
- POST /v1/chains/arbitrum/rpc ($0.01 USDC) - arbitrum read-only RPC: allowlisted no-param reads or bounded caller method (eth_blockNumber/eth_chainId/... ). 1MiB cap.
- POST /v1/chains/arbitrum/address ($0.01 USDC) - arbitrum address snapshot (0x..40hex): balance_wei, nonce, is_contract on a chainId-verified RPC.
- POST /v1/chains/arbitrum/tx ($0.01 USDC) - arbitrum tx lookup (0x..64hex): eth_getTransactionByHash + receipt; tx_not_found is a valid $0.01 verdict.
- GET /v1/chains/optimism (free) - optimism status (chainId 10): verified endpoint kind + head block. chainId-gated, 60s cache. Free.
- POST /v1/chains/optimism/gas ($0.01 USDC) - optimism gas snapshot: eth_gasPrice + maxPriorityFee on a chainId-verified keyless RPC.
- POST /v1/chains/optimism/rpc ($0.01 USDC) - optimism read-only RPC: allowlisted no-param reads or bounded caller method (eth_blockNumber/eth_chainId/... ). 1MiB cap.
- POST /v1/chains/optimism/address ($0.01 USDC) - optimism address snapshot (0x..40hex): balance_wei, nonce, is_contract on a chainId-verified RPC.
- POST /v1/chains/optimism/tx ($0.01 USDC) - optimism tx lookup (0x..64hex): eth_getTransactionByHash + receipt; tx_not_found is a valid $0.01 verdict.
- GET /v1/chains/avalanche (free) - avalanche status (chainId 43114): verified endpoint kind + head block. chainId-gated, 60s cache. Free.
- POST /v1/chains/avalanche/gas ($0.01 USDC) - avalanche gas snapshot: eth_gasPrice + maxPriorityFee on a chainId-verified keyless RPC.
- POST /v1/chains/avalanche/rpc ($0.01 USDC) - avalanche read-only RPC: allowlisted no-param reads or bounded caller method (eth_blockNumber/eth_chainId/... ). 1MiB cap.
- POST /v1/chains/avalanche/address ($0.01 USDC) - avalanche address snapshot (0x..40hex): balance_wei, nonce, is_contract on a chainId-verified RPC.
- POST /v1/chains/avalanche/tx ($0.01 USDC) - avalanche tx lookup (0x..64hex): eth_getTransactionByHash + receipt; tx_not_found is a valid $0.01 verdict.
- GET /v1/chains/bnb (free) - bnb status (chainId 56): verified endpoint kind + head block. chainId-gated, 60s cache. Free.
- POST /v1/chains/bnb/gas ($0.01 USDC) - bnb gas snapshot: eth_gasPrice + maxPriorityFee on a chainId-verified keyless RPC.
- POST /v1/chains/bnb/rpc ($0.01 USDC) - bnb read-only RPC: allowlisted no-param reads or bounded caller method (eth_blockNumber/eth_chainId/... ). 1MiB cap.
- POST /v1/chains/bnb/address ($0.01 USDC) - bnb address snapshot (0x..40hex): balance_wei, nonce, is_contract on a chainId-verified RPC.
- POST /v1/chains/bnb/tx ($0.01 USDC) - bnb tx lookup (0x..64hex): eth_getTransactionByHash + receipt; tx_not_found is a valid $0.01 verdict.
- GET /v1/chains/unichain (free) - unichain status (chainId 130): verified endpoint kind + head block. chainId-gated, 60s cache. Free.
- POST /v1/chains/unichain/gas ($0.01 USDC) - unichain gas snapshot: eth_gasPrice + maxPriorityFee on a chainId-verified keyless RPC.
- POST /v1/chains/unichain/rpc ($0.01 USDC) - unichain read-only RPC: allowlisted no-param reads or bounded caller method (eth_blockNumber/eth_chainId/... ). 1MiB cap.
- POST /v1/chains/unichain/address ($0.01 USDC) - unichain address snapshot (0x..40hex): balance_wei, nonce, is_contract on a chainId-verified RPC.
- POST /v1/chains/unichain/tx ($0.01 USDC) - unichain tx lookup (0x..64hex): eth_getTransactionByHash + receipt; tx_not_found is a valid $0.01 verdict.
- GET /v1/chains/worldchain (free) - worldchain status (chainId 480): verified endpoint kind + head block. chainId-gated, 60s cache. Free.
- POST /v1/chains/worldchain/gas ($0.01 USDC) - worldchain gas snapshot: eth_gasPrice + maxPriorityFee on a chainId-verified keyless RPC.
- POST /v1/chains/worldchain/rpc ($0.01 USDC) - worldchain read-only RPC: allowlisted no-param reads or bounded caller method (eth_blockNumber/eth_chainId/... ). 1MiB cap.
- POST /v1/chains/worldchain/address ($0.01 USDC) - worldchain address snapshot (0x..40hex): balance_wei, nonce, is_contract on a chainId-verified RPC.
- POST /v1/chains/worldchain/tx ($0.01 USDC) - worldchain tx lookup (0x..64hex): eth_getTransactionByHash + receipt; tx_not_found is a valid $0.01 verdict.
- GET /v1/chains/reads-rules (free) - Chain read rules: alias/chainId table, RPC allowlists, address/hash shapes, verdict semantics. Free.
- POST /v1/chains/token-balance ($0.01 USDC) - ERC-20 balanceOf + metadata (symbol/decimals/name) on any supported chain, gate-verified eth_call, exact formatted amount.
- POST /v1/chains/token-meta ($0.01 USDC) - ERC-20 metadata on any supported chain: name/symbol/decimals/totalSupply via gate-verified eth_call.
- GET /v1/chains/token-rules (free) - ERC-20 token-read spec: chains, ABI signatures/selectors, request schema, rules and verdict semantics. Free.
- POST /v1/tokens/launch-digest ($0.01 USDC) - New token-pair digest since a timestamp with a signed pre-trade risk verdict per pair (liquidity/freshness).
- GET /v1/tokens/launch-rules (free) - Machine-readable launch-digest spec: monitored venues, chains, freshness window and the risk-rule table. Free.
- POST /v1/stablecoin/reserves ($0.01 USDC) - Signed reserve digest for USDC, USDT, EURC and DAI: latest reserve figures, attestation timestamps and a per-issuer staleness verdict.
- GET /v1/stablecoin/reserve-rules (free) - Machine-readable stablecoin reserve-digest spec: sources, staleness thresholds and the verdict table. Free.
