plugin-x402-endpoints 0.1.0 → 0.3.0

package/dist/index.cjs

@@ -1716,6 +1716,413 @@ var catalog_default = {
       payTo: "0x1D1B81247C407521E2A01F3E21514870dcf1620f",
       network: "eip155:8453",
       asset: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
+    },
+    {
+      tool: "x402_seller_trust",
+      action: "X402_SELLER_TRUST",
+      path: "/x402/seller-trust",
+      method: "GET",
+      price: "$0.01",
+      description: "Score an x402 seller wallet BEFORE paying it: verdict TRUSTED/CAUTION/AVOID + confidence from its on-chain settlement graph on Base \u2014 settlement count, unique paying counterparties, wallet age, wash-trade and sybil signals \u2014 with a signed, offline-verifiable receipt. Vet / due-diligence an unknown x402 endpoint or merchant wallet before you pay it: is this seller a scam, a fake-volume wash-trader, or a sybil cluster? Agent counterparty risk, seller reputation and trust score for x402 / agentic payments. Price: $0.01 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Score an x402 seller wallet TRUSTED/CAUTION/AVOID before paying it, from its on-chain settlement graph (settlements, counterparties, age, wash-trade/sybil) with a signed offline-verifiable receipt. Input: seller_wallet.",
+      tags: [
+        "x402-seller-trust",
+        "reputation-score",
+        "wash-trade",
+        "sybil",
+        "counterparty-risk"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          seller_wallet: {
+            type: "string",
+            description: "x402 seller payTo wallet (0x + 40 hex)",
+            pattern: "^0x[a-fA-F0-9]{40}$"
+          },
+          depth: {
+            type: "string",
+            description: "'shallow' (~200 settlements) or 'deep' (~500)"
+          }
+        },
+        required: [
+          "seller_wallet"
+        ]
+      }
+    },
+    {
+      tool: "x402_payment_firewall",
+      action: "X402_PAYMENT_FIREWALL",
+      path: "/x402/payment-firewall",
+      method: "GET",
+      price: "$0.005",
+      description: "Pre-payment risk firewall for AI agents: validate {recipient, amount, chain} BEFORE sending an x402 payment and get ALLOW/REVIEW/BLOCK in <200ms \u2014 OFAC blocklist, sanctioned-mixer check, runaway-overspend vs expected price and anomalous-amount guard. Stop an agent from overpaying or paying a bad address; transaction risk screening and payment guardrail before send. The hosted spending guard / agent budget protection an offline SDK cannot give. Price: $0.005 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Pre-payment firewall: validate {recipient, amount, chain} before an x402 payment, get ALLOW/REVIEW/BLOCK in <200ms (OFAC blocklist, mixer, runaway-overspend). Input: to_address + amount.",
+      tags: [
+        "x402-payment-firewall",
+        "spending-guard",
+        "pre-payment-risk",
+        "recipient-allowlist",
+        "anomalous-spend"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          to_address: {
+            type: "string",
+            description: "Recipient/payTo address (EVM 0x.., Solana, BTC, TRON, XRP)"
+          },
+          amount: {
+            type: "number",
+            description: "Payment amount in USD, e.g. 0.01"
+          },
+          chain: {
+            type: "string",
+            description: "base | ethereum | solana | bitcoin | tron (optional; inferred from address)"
+          },
+          expected_price: {
+            type: "number",
+            description: "Price the resource advertised \u2014 flags runaway overspend"
+          }
+        },
+        required: [
+          "to_address"
+        ]
+      }
+    },
+    {
+      tool: "compliance_wallet_screen",
+      action: "X402_COMPLIANCE_WALLET_SCREEN",
+      path: "/compliance/wallet-screen",
+      method: "GET",
+      price: "$0.005",
+      description: "Crypto wallet sanctions & compliance screening (AML/KYT): screen any EVM/Solana/Bitcoin/Tron/XRP wallet against the official OFAC SDN crypto list (UN/UK declared) with mixer (Tornado Cash) exposure and wallet age, returning PASS/WARN/BLOCK and a cryptographically SIGNED compliance receipt (list-version-pinned, verifiable offline) for audit. Is this address sanctioned, blacklisted or mixer-linked? OFAC wallet check, travel-rule / KYT counterparty screening with an auditable attestation an agent can keep. Price: $0.005 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Crypto wallet sanctions/AML screening (OFAC SDN multi-chain) with mixer exposure, wallet age and a signed compliance receipt for audit. Verdict PASS/WARN/BLOCK. Input: wallet.",
+      tags: [
+        "crypto-sanctions-screening",
+        "ofac",
+        "aml",
+        "kyt",
+        "compliance-receipt"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          wallet: {
+            type: "string",
+            description: "Wallet to screen \u2014 EVM '0x..', Solana, BTC, TRON 'T..', XRP 'r..'"
+          },
+          chains: {
+            type: "string",
+            description: "Optional comma-separated EVM chains for exposure/age, e.g. 'ethereum,base'"
+          }
+        },
+        required: [
+          "wallet"
+        ]
+      }
+    },
+    {
+      tool: "macro_snapshot",
+      action: "X402_MACRO_SNAPSHOT",
+      path: "/macro/snapshot",
+      method: "GET",
+      price: "$0.005",
+      description: "Macro economic snapshot API \u2014 dated Eurozone economic indicators for trading/research agents: euro-area / Eurozone inflation (HICP / CPI), ECB policy interest rates (deposit, refi), unemployment and EUR FX from the official European Central Bank data portal \u2014 each indicator with value, as_of date, next_release cadence and a signed dated snapshot receipt for reproducible backtests. The interest-rate, inflation and currency context an agent needs before trading. Central bank / economic indicators data API. Price: $0.005 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Dated euro-area macro snapshot (HICP inflation, ECB policy rates, unemployment, EUR FX) from the official ECB data portal, with next_release and a signed dated snapshot receipt for backtests. Input: indicators.",
+      tags: [
+        "macro-data",
+        "ecb",
+        "inflation",
+        "interest-rate",
+        "economic-indicators"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          indicators: {
+            type: "string",
+            description: "Comma-separated: inflation_hicp, core_inflation, unemployment, deposit_facility_rate, main_refi_rate, marginal_lending_rate, fx_usd, fx_gbp, fx_jpy, fx_chf"
+          },
+          area: {
+            type: "string",
+            description: "HICP reference area: 'U2' (euro area, default) or a country code e.g. 'FR','DE'"
+          }
+        }
+      }
+    },
+    {
+      tool: "solana_token_safety",
+      action: "X402_SOLANA_TOKEN_SAFETY",
+      path: "/solana/token-safety",
+      method: "GET",
+      price: "$0.01",
+      description: "Solana SPL token safety, rug check and honeypot / scam detection before trading: is this Solana token a rug pull, honeypot or scam? Verdict SAFE/RISKY/CRITICAL + 0-100 score combining STATIC checks (mint/freeze authority, holder concentration) AND BEHAVIORAL analysis (liquidity adequacy, churn, recent dump, tx velocity) plus a blue-chip false-positive guard so USDC/USDT/SOL are never flagged as rugs. Pre-trade SPL token security / scam-token detection that catches behavioral rugs static checkers miss. Price: $0.01 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Solana SPL token rug check SAFE/RISKY/CRITICAL: static (mint/freeze authority, holders) + behavioral (liquidity, churn, dump, velocity) + blue-chip false-positive guard. Input: mint.",
+      tags: [
+        "solana-token-safety",
+        "rug-check",
+        "honeypot",
+        "behavioral-analysis",
+        "spl-token-risk"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          mint: {
+            type: "string",
+            description: "SPL token mint address (base58), e.g. 'EPjFW...Dt1v' (USDC)"
+          },
+          deep: {
+            type: "boolean",
+            description: "Deeper behavioral + holder analysis (more RPC calls)"
+          }
+        },
+        required: [
+          "mint"
+        ]
+      }
+    },
+    {
+      tool: "solana_pre_trade",
+      action: "X402_SOLANA_PRE_TRADE",
+      path: "/solana/pre-trade",
+      method: "GET",
+      price: "$0.05",
+      description: "All-in-one Solana pre-trade decision in ONE call: BUY-SAFE/CAUTION/AVOID fusing four scored modules \u2014 token security, EXECUTABLE liquidity depth (estimated slippage at $100/$1k/$10k), deployer history/control and holder concentration. Should I buy or avoid this Solana token? Full token due-diligence in one call \u2014 replaces 3-4 lookups; built for a trading / sniping agent's risk-review pipeline. Solana trading safety decision and buy/avoid verdict. Price: $0.05 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "One-call Solana pre-trade decision BUY-SAFE/CAUTION/AVOID fusing token security + executable liquidity depth (slippage at size) + deployer history + holder concentration. Input: mint.",
+      tags: [
+        "solana-pre-trade",
+        "trading-decision",
+        "liquidity-depth",
+        "deployer-history",
+        "all-in-one"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          mint: {
+            type: "string",
+            description: "SPL token mint address (base58) to evaluate before buying"
+          }
+        },
+        required: [
+          "mint"
+        ]
+      }
+    },
+    {
+      tool: "crypto_signal_fusion",
+      action: "X402_CRYPTO_SIGNAL_FUSION",
+      path: "/crypto/signal-fusion",
+      method: "GET",
+      price: "$0.02",
+      description: "Crypto trading signal (long/short) and market-regime signal in ONE call: LONG/SHORT/NEUTRAL with confidence, fusing the cross-exchange funding rate, crowding (long/short) bias, trend/chop market regime and BTC\u2192altcoin lead-lag from Binance/Bybit/OKX/Hyperliquid \u2014 with declared data freshness. Should I go long or short on this coin? A fused directional trading signal where competitors sell the funding rate, regime and the four numbers separately. Derivatives trading signal for any altcoin. Price: $0.02 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "One-call fused trading signal LONG/SHORT/NEUTRAL combining cross-exchange funding, crowding, trend/chop regime and BTC\u2192alt lead-lag. Input: symbol + timeframe.",
+      tags: [
+        "crypto-trading-signal",
+        "funding-rate",
+        "market-regime",
+        "lead-lag",
+        "signal-fusion"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          symbol: {
+            type: "string",
+            description: "Coin ticker, e.g. 'BTC','ETH','SOL'"
+          },
+          timeframe: {
+            type: "string",
+            description: "Regime/lead-lag timeframe: 5m | 15m | 1h | 4h (default 1h)"
+          }
+        }
+      }
+    },
+    {
+      tool: "agent_due_diligence",
+      action: "X402_AGENT_DUE_DILIGENCE",
+      path: "/agent/due-diligence",
+      method: "POST",
+      price: "$0.50",
+      description: "Vet any company, crypto project, counterparty or domain before engaging: one call composes a risk DOSSIER \u2014 synthesis + detected signals + sources + 0-100 risk score + GO/CAUTION/STOP verdict + recommendation + a signed, offline-verifiable receipt. Is this entity a scam, fraud, sanctioned, or safe to deal with? Replaces 3-4 manual web searches plus the synthesis an agent would have to do itself, composed from live public web signals. Counterparty / vendor / project due-diligence for agents. Price: $0.50 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Composed risk dossier on any entity/project/counterparty/domain: summary + signals + sources + 0-100 score + GO/CAUTION/STOP verdict + signed receipt. One call replaces 3-4 lookups. Input: target.",
+      tags: [
+        "due-diligence",
+        "kyb",
+        "counterparty-risk",
+        "risk-dossier",
+        "agent-decision"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          target: {
+            type: "string",
+            description: "Entity / project / counterparty / domain to vet, e.g. 'Acme DeFi Labs'"
+          },
+          target_type: {
+            type: "string",
+            description: "Optional: entity | project | counterparty | domain | wallet"
+          },
+          context: {
+            type: "string",
+            description: "Optional: why you're engaging / what you're about to do"
+          }
+        },
+        required: [
+          "target"
+        ]
+      }
+    },
+    {
+      tool: "agent_analysis_report",
+      action: "X402_AGENT_ANALYSIS_REPORT",
+      path: "/agent/analysis-report",
+      method: "POST",
+      price: "$0.25",
+      description: "Structured analysis report on any URL, company, product or subject in one call: positioning + strengths + risks + opportunities + 0-100 actionable score + STRONG/MODERATE/WEAK rating + recommendation + provenance + a signed receipt. A fixed-schema research report an agent can consume without re-parsing, composed from live public web signals. Competitive / investment / partnership analysis for agents. Price: $0.25 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Fixed-schema analysis report on a URL/company/subject: positioning + strengths + risks + opportunities + 0-100 score + STRONG/MODERATE/WEAK + signed receipt. Input: input (+ optional focus).",
+      tags: [
+        "analysis-report",
+        "market-analysis",
+        "competitive",
+        "research",
+        "agent-decision"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          input: {
+            type: "string",
+            description: "URL, company, product or subject, e.g. 'stripe.com'"
+          },
+          focus: {
+            type: "string",
+            description: "Optional: investment | competitive | partnership | security | general"
+          }
+        },
+        required: [
+          "input"
+        ]
+      }
+    },
+    {
+      tool: "agent_clearance",
+      action: "X402_AGENT_CLEARANCE",
+      path: "/agent/clearance",
+      method: "POST",
+      price: "$0.25",
+      description: "Safety preflight before an agent runs a DESTRUCTIVE, costly or IRREVERSIBLE action (delete, deploy, transfer funds, publish, overwrite): risk assessment + reversibility check + timing + CLEAR/LIMIT/REVIEW/BLOCK verdict + a cryptographically SIGNED ClearancePacket (decision, approved amount, policy version, evidence hash, expiry, rationale) the agent keeps as proof of authorization. Should I run this action, or stop and ask a human? Stops a mistake far costlier than the call price. Agent action guardrail / clearance / human-in-the-loop gate. Price: $0.25 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Preflight clearance before a destructive/costly/irreversible agent action: risk + reversibility + timing + CLEAR/LIMIT/REVIEW/BLOCK + a signed Ed25519 ClearancePacket. Input: action (+ action_type, amount_usd).",
+      tags: [
+        "preflight",
+        "action-clearance",
+        "reversibility",
+        "agent-safety",
+        "guardrail"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          action: {
+            type: "string",
+            description: "Action about to run, e.g. 'delete the production users table'"
+          },
+          action_type: {
+            type: "string",
+            description: "Optional: delete|deploy|send|spend|transfer|publish|email|overwrite|approve|rotate|shutdown|other"
+          },
+          amount_usd: {
+            type: "number",
+            description: "Monetary stake in USD if applicable, e.g. 250"
+          },
+          reversible: {
+            type: "boolean",
+            description: "Optional caller hint: is the action reversible?"
+          },
+          target: {
+            type: "string",
+            description: "Optional target (table, address, repo, recipient)"
+          },
+          context: {
+            type: "string",
+            description: "Optional extra context (environment, prior approval)"
+          }
+        },
+        required: [
+          "action"
+        ]
+      }
+    },
+    {
+      tool: "agent_output_qa",
+      action: "X402_AGENT_OUTPUT_QA",
+      path: "/agent/output-qa",
+      method: "POST",
+      price: "$0.10",
+      description: "Review and improve an agent's outbound text (email, social post, customer reply) before sending: a multi-criteria scorecard (clarity, spam-safety, tone, length, personalization, CTA, compliance \u2014 each 0-100) + poor/fair/good/excellent rating + top suggestions + a ready-to-send IMPROVED REWRITE. Will this message land or get flagged as spam? One call scores and rewrites. Output review / spam check / copy QA for agents. Price: $0.10 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Score an agent's outbound text on 7 criteria (clarity, spam-safety, tone, length, personalization, CTA, compliance) + rating + suggestions + improved rewrite. Input: output (+ format, goal).",
+      tags: [
+        "output-qa",
+        "email-review",
+        "content-scoring",
+        "rewrite",
+        "agent-decision"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          output: {
+            type: "string",
+            description: "The agent's outbound text to review (email, post, reply)"
+          },
+          format: {
+            type: "string",
+            description: "Optional: email | social_post | customer_reply | other"
+          },
+          goal: {
+            type: "string",
+            description: "Optional intended goal, e.g. 'book a demo'"
+          }
+        },
+        required: [
+          "output"
+        ]
+      }
+    },
+    {
+      tool: "agent_content_scan",
+      action: "X402_AGENT_CONTENT_SCAN",
+      path: "/agent/content-scan",
+      method: "POST",
+      price: "$0.10",
+      description: "Scan any external content before an agent INGESTS it (SKILL.md, web page, user input, tool output) for prompt-injection, data exfiltration, dangerous code execution, hidden/invisible unicode and instruction overrides: 0-100 risk score + SAFE/WARN/BLOCK verdict + structured findings with matched evidence. Is it safe to feed this content to my agent? A fast, cheap, deterministic, high-volume pre-ingest firewall. Prompt-injection / skill-audit / untrusted-content security check for agents. Price: $0.10 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Deterministic pre-ingest scan for prompt-injection, exfiltration, dangerous exec, hidden unicode and instruction overrides: 0-100 risk score + SAFE/WARN/BLOCK + structured findings. Input: content.",
+      tags: [
+        "content-scan",
+        "prompt-injection",
+        "exfiltration",
+        "agent-security",
+        "safe-ingest"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          content: {
+            type: "string",
+            description: "Raw content to scan before ingestion (SKILL.md, web page, user input, tool output)"
+          },
+          source_type: {
+            type: "string",
+            description: "Optional: skill | webpage | user_input | tool_output | document"
+          }
+        },
+        required: [
+          "content"
+        ]
+      }
     }
   ]
 };
@@ -1815,12 +2222,15 @@ async function readBody(resp) {
   }
 }
 async function callEndpoint(ep, params, cfg) {
-  const url = buildUrl(cfg.baseUrl, ep.path, params);
-  const headers = { accept: "application/json" };
+  const method = (ep.method || "GET").toUpperCase();
+  const isPost = method === "POST";
+  const url = isPost ? `${cfg.baseUrl}${ep.path}` : buildUrl(cfg.baseUrl, ep.path, params);
+  const headers = isPost ? { accept: "application/json", "content-type": "application/json" } : { accept: "application/json" };
+  const reqInit = isPost ? { method, headers, body: JSON.stringify(params || {}) } : { method, headers };
   const paidFetch = await getPaidFetch(cfg).catch(() => null);
   if (paidFetch) {
     try {
-      const resp2 = await paidFetch(url, { method: "GET", headers });
+      const resp2 = await paidFetch(url, reqInit);
       const body2 = await readBody(resp2);
       if (resp2.status === 200) return { kind: "data", status: 200, data: body2 };
       if (resp2.status === 402) {
@@ -1838,7 +2248,7 @@ async function callEndpoint(ep, params, cfg) {
   }
   let resp;
   try {
-    resp = await fetch(url, { method: "GET", headers });
+    resp = await fetch(url, reqInit);
   } catch (err) {
     return { kind: "error", message: "request failed", detail: `${err?.name}: ${err?.message}` };
   }