plugin-x402-endpoints 0.2.0 → 0.4.0

package/dist/index.js

@@ -1935,6 +1935,472 @@ var catalog_default = {
           }
         }
       }
+    },
+    {
+      tool: "agent_due_diligence",
+      action: "X402_AGENT_DUE_DILIGENCE",
+      path: "/agent/due-diligence",
+      method: "POST",
+      price: "$0.50",
+      description: "Vet any company, crypto project, counterparty or domain before engaging: one call composes a risk DOSSIER \u2014 synthesis + detected signals + sources + 0-100 risk score + GO/CAUTION/STOP verdict + recommendation + a signed, offline-verifiable receipt. Is this entity a scam, fraud, sanctioned, or safe to deal with? Replaces 3-4 manual web searches plus the synthesis an agent would have to do itself, composed from live public web signals. Counterparty / vendor / project due-diligence for agents. Price: $0.50 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Composed risk dossier on any entity/project/counterparty/domain: summary + signals + sources + 0-100 score + GO/CAUTION/STOP verdict + signed receipt. One call replaces 3-4 lookups. Input: target.",
+      tags: [
+        "due-diligence",
+        "kyb",
+        "counterparty-risk",
+        "risk-dossier",
+        "agent-decision"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          target: {
+            type: "string",
+            description: "Entity / project / counterparty / domain to vet, e.g. 'Acme DeFi Labs'"
+          },
+          target_type: {
+            type: "string",
+            description: "Optional: entity | project | counterparty | domain | wallet"
+          },
+          context: {
+            type: "string",
+            description: "Optional: why you're engaging / what you're about to do"
+          }
+        },
+        required: [
+          "target"
+        ]
+      }
+    },
+    {
+      tool: "agent_analysis_report",
+      action: "X402_AGENT_ANALYSIS_REPORT",
+      path: "/agent/analysis-report",
+      method: "POST",
+      price: "$0.25",
+      description: "Structured analysis report on any URL, company, product or subject in one call: positioning + strengths + risks + opportunities + 0-100 actionable score + STRONG/MODERATE/WEAK rating + recommendation + provenance + a signed receipt. A fixed-schema research report an agent can consume without re-parsing, composed from live public web signals. Competitive / investment / partnership analysis for agents. Price: $0.25 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Fixed-schema analysis report on a URL/company/subject: positioning + strengths + risks + opportunities + 0-100 score + STRONG/MODERATE/WEAK + signed receipt. Input: input (+ optional focus).",
+      tags: [
+        "analysis-report",
+        "market-analysis",
+        "competitive",
+        "research",
+        "agent-decision"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          input: {
+            type: "string",
+            description: "URL, company, product or subject, e.g. 'stripe.com'"
+          },
+          focus: {
+            type: "string",
+            description: "Optional: investment | competitive | partnership | security | general"
+          }
+        },
+        required: [
+          "input"
+        ]
+      }
+    },
+    {
+      tool: "agent_clearance",
+      action: "X402_AGENT_CLEARANCE",
+      path: "/agent/clearance",
+      method: "POST",
+      price: "$0.25",
+      description: "Safety preflight before an agent runs a DESTRUCTIVE, costly or IRREVERSIBLE action (delete, deploy, transfer funds, publish, overwrite): risk assessment + reversibility check + timing + CLEAR/LIMIT/REVIEW/BLOCK verdict + a cryptographically SIGNED ClearancePacket (decision, approved amount, policy version, evidence hash, expiry, rationale) the agent keeps as proof of authorization. Should I run this action, or stop and ask a human? Stops a mistake far costlier than the call price. Agent action guardrail / clearance / human-in-the-loop gate. Price: $0.25 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Preflight clearance before a destructive/costly/irreversible agent action: risk + reversibility + timing + CLEAR/LIMIT/REVIEW/BLOCK + a signed Ed25519 ClearancePacket. Input: action (+ action_type, amount_usd).",
+      tags: [
+        "preflight",
+        "action-clearance",
+        "reversibility",
+        "agent-safety",
+        "guardrail"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          action: {
+            type: "string",
+            description: "Action about to run, e.g. 'delete the production users table'"
+          },
+          action_type: {
+            type: "string",
+            description: "Optional: delete|deploy|send|spend|transfer|publish|email|overwrite|approve|rotate|shutdown|other"
+          },
+          amount_usd: {
+            type: "number",
+            description: "Monetary stake in USD if applicable, e.g. 250"
+          },
+          reversible: {
+            type: "boolean",
+            description: "Optional caller hint: is the action reversible?"
+          },
+          target: {
+            type: "string",
+            description: "Optional target (table, address, repo, recipient)"
+          },
+          context: {
+            type: "string",
+            description: "Optional extra context (environment, prior approval)"
+          }
+        },
+        required: [
+          "action"
+        ]
+      }
+    },
+    {
+      tool: "agent_output_qa",
+      action: "X402_AGENT_OUTPUT_QA",
+      path: "/agent/output-qa",
+      method: "POST",
+      price: "$0.10",
+      description: "Review and improve an agent's outbound text (email, social post, customer reply) before sending: a multi-criteria scorecard (clarity, spam-safety, tone, length, personalization, CTA, compliance \u2014 each 0-100) + poor/fair/good/excellent rating + top suggestions + a ready-to-send IMPROVED REWRITE. Will this message land or get flagged as spam? One call scores and rewrites. Output review / spam check / copy QA for agents. Price: $0.10 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Score an agent's outbound text on 7 criteria (clarity, spam-safety, tone, length, personalization, CTA, compliance) + rating + suggestions + improved rewrite. Input: output (+ format, goal).",
+      tags: [
+        "output-qa",
+        "email-review",
+        "content-scoring",
+        "rewrite",
+        "agent-decision"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          output: {
+            type: "string",
+            description: "The agent's outbound text to review (email, post, reply)"
+          },
+          format: {
+            type: "string",
+            description: "Optional: email | social_post | customer_reply | other"
+          },
+          goal: {
+            type: "string",
+            description: "Optional intended goal, e.g. 'book a demo'"
+          }
+        },
+        required: [
+          "output"
+        ]
+      }
+    },
+    {
+      tool: "agent_content_scan",
+      action: "X402_AGENT_CONTENT_SCAN",
+      path: "/agent/content-scan",
+      method: "POST",
+      price: "$0.10",
+      description: "Scan any external content before an agent INGESTS it (SKILL.md, web page, user input, tool output) for prompt-injection, data exfiltration, dangerous code execution, hidden/invisible unicode and instruction overrides: 0-100 risk score + SAFE/WARN/BLOCK verdict + structured findings with matched evidence. Is it safe to feed this content to my agent? A fast, cheap, deterministic, high-volume pre-ingest firewall. Prompt-injection / skill-audit / untrusted-content security check for agents. Price: $0.10 per call (x402 payment, USDC on Base mainnet).",
+      llm_usage_prompt: "Deterministic pre-ingest scan for prompt-injection, exfiltration, dangerous exec, hidden unicode and instruction overrides: 0-100 risk score + SAFE/WARN/BLOCK + structured findings. Input: content.",
+      tags: [
+        "content-scan",
+        "prompt-injection",
+        "exfiltration",
+        "agent-security",
+        "safe-ingest"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          content: {
+            type: "string",
+            description: "Raw content to scan before ingestion (SKILL.md, web page, user input, tool output)"
+          },
+          source_type: {
+            type: "string",
+            description: "Optional: skill | webpage | user_input | tool_output | document"
+          }
+        },
+        required: [
+          "content"
+        ]
+      }
+    },
+    {
+      tool: "crypto_pre_trade_verdict",
+      action: "X402_CRYPTO_PRE_TRADE_VERDICT",
+      path: "/crypto/pre-trade-verdict",
+      method: "GET",
+      price: "$0.05",
+      description: "One-call GO/CAUTION/NO-GO pre-trade verdict for AI trading agents: fuses token safety (honeypot, rug, tax, holders), counterparty wallet sanctions screening (OFAC/mixer) and cross-exchange market signal into a single decision with a signed, offline-verifiable receipt. Should I buy this token now? Replaces three separate calls (token-safety + wallet-screen + signal) with one fused GO/NO-GO verdict. EVM chains and Solana. Price: $0.05 per call (x402 payment, USDC on Base mainnet). One-call GO/CAUTION/NO-GO pre-trade verdict fusing token safety (honeypot/rug/tax) + counterparty sanctions screening (OFAC/mixer) + cross-exchange market signal, with a signed receipt. Replaces three calls. EVM + Solana. Input: token (+chain, optional wallet).",
+      llm_usage_prompt: "One-call GO/CAUTION/NO-GO pre-trade verdict fusing token safety (honeypot/rug/tax) + counterparty sanctions screening (OFAC/mixer) + cross-exchange market signal, with a signed receipt. Replaces three calls. EVM + Solana. Input: token (+chain, optional wallet).",
+      tags: [
+        "pre-trade-verdict",
+        "token-safety",
+        "go-no-go",
+        "counterparty-screen",
+        "trading-decision"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          token: {
+            type: "string",
+            description: "Token contract (EVM 0x+40hex) or SPL mint (base58) to evaluate"
+          },
+          chain: {
+            type: "string",
+            description: "base | ethereum | bsc | polygon | arbitrum | optimism | avalanche | solana (default base)"
+          },
+          wallet: {
+            type: "string",
+            description: "Optional counterparty wallet to screen (OFAC/mixer)"
+          }
+        },
+        required: [
+          "token"
+        ]
+      }
+    },
+    {
+      tool: "agent_ledger",
+      action: "X402_AGENT_LEDGER",
+      path: "/agent/ledger",
+      method: "GET",
+      price: "$0.04",
+      description: "Your AI agent's books in one call: structured USDC accounting for any wallet on Base (the x402 settlement asset) \u2014 revenue (incoming) vs expenses (outgoing), net, transaction count, top paying counterparties and payees, and a weekly breakdown over a 7d/30d/90d window. Turnkey bookkeeping / expense and revenue report an agent can drop straight into its accounting. The value is the structuring, not raw data access. Price: $0.04 per call (x402 payment, USDC on Base mainnet). Structured USDC accounting for a wallet on Base: revenue vs expenses, net, tx count, top payers/payees, weekly breakdown. Your agent's books in one call. Input: wallet (+period 7d/30d/90d).",
+      llm_usage_prompt: "Structured USDC accounting for a wallet on Base: revenue vs expenses, net, tx count, top payers/payees, weekly breakdown. Your agent's books in one call. Input: wallet (+period 7d/30d/90d).",
+      tags: [
+        "agent-ledger",
+        "x402-accounting",
+        "usdc-bookkeeping",
+        "revenue-expenses",
+        "onchain-ledger"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          wallet: {
+            type: "string",
+            description: "EVM wallet address (0x + 40 hex) to report on",
+            pattern: "^0x[a-fA-F0-9]{40}$"
+          },
+          period: {
+            type: "string",
+            description: "Reporting window: 7d | 30d | 90d | all (default 30d)"
+          }
+        },
+        required: [
+          "wallet"
+        ]
+      }
+    },
+    {
+      tool: "proof_notarize",
+      action: "X402_PROOF_NOTARIZE",
+      path: "/proof/notarize",
+      method: "GET",
+      price: "$0.01",
+      description: "Notarize a document or data hash for AI agents: submit a SHA-256 hash (or short content hashed server-side) and get a timestamped, Ed25519-signed proof-of-existence receipt, verifiable offline with no callback. Prove an artifact, agent output or decision existed at a point in time. Honest scope: this is a SIGNED proof-of-existence receipt, NOT a blockchain-anchored or eIDAS/RFC-3161 legal timestamp. The issuer never sees your content when you send only a hash. Price: $0.01 per call (x402 payment, USDC on Base mainnet). Notarize a SHA-256 hash (or short content hashed server-side) into a timestamped, Ed25519-signed proof-of-existence receipt, verifiable offline. Signed proof, NOT a blockchain-anchored or legal (eIDAS/RFC 3161) timestamp. Input: hash or content (+memo).",
+      llm_usage_prompt: "Notarize a SHA-256 hash (or short content hashed server-side) into a timestamped, Ed25519-signed proof-of-existence receipt, verifiable offline. Signed proof, NOT a blockchain-anchored or legal (eIDAS/RFC 3161) timestamp. Input: hash or content (+memo).",
+      tags: [
+        "notary",
+        "proof-of-existence",
+        "timestamp",
+        "ed25519-signature",
+        "hash-attestation"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          hash: {
+            type: "string",
+            description: "SHA-256 hex digest (64 hex chars) to notarize",
+            pattern: "^[0-9a-fA-F]{64}$"
+          },
+          content: {
+            type: "string",
+            description: "Alternative to hash: short content hashed server-side (SHA-256), max 100000 chars"
+          },
+          memo: {
+            type: "string",
+            description: "Optional label bound into the signed proof, e.g. 'invoice #42'"
+          }
+        }
+      }
+    },
+    {
+      tool: "crypto_token_dossier",
+      action: "X402_CRYPTO_TOKEN_DOSSIER",
+      path: "/crypto/token-dossier",
+      method: "GET",
+      price: "$0.10",
+      description: "Full degen token dossier in one call: safety score + honeypot/tax + detailed TOP HOLDERS and concentration + liquidity/FDV/volume/pool-age + contract control (owner, creator, mintable, open-source) + an AI red-flag narrative. Deep due-diligence report on a token before aping \u2014 the premium tier above a plain safety check. EVM chains and Solana. Price: $0.10 per call (x402 payment, USDC on Base mainnet). Full token dossier: safety score + top holders + concentration + liquidity/FDV/pool-age + contract control (owner/creator/mintable) + AI red-flag narrative. Premium tier above a plain safety check. EVM + Solana. Input: token (+chain).",
+      llm_usage_prompt: "Full token dossier: safety score + top holders + concentration + liquidity/FDV/pool-age + contract control (owner/creator/mintable) + AI red-flag narrative. Premium tier above a plain safety check. EVM + Solana. Input: token (+chain).",
+      tags: [
+        "token-dossier",
+        "holders",
+        "liquidity",
+        "rug-check",
+        "red-flags"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          token: {
+            type: "string",
+            description: "Token contract (EVM 0x+40hex) or SPL mint (base58)"
+          },
+          chain: {
+            type: "string",
+            description: "base | ethereum | bsc | polygon | arbitrum | optimism | avalanche | solana (default base)"
+          }
+        },
+        required: [
+          "token"
+        ]
+      }
+    },
+    {
+      tool: "market_intel",
+      action: "X402_MARKET_INTEL",
+      path: "/market/intel",
+      method: "GET",
+      price: "$0.10",
+      description: "AI market intelligence report in one call for research and trading agents: cross-exchange perp derivatives (funding, open interest, long/short), fused directional signals and the euro-area macro snapshot (ECB inflation, policy rates, unemployment, EUR FX) synthesized into a headline, crypto and macro outlook, key signals, risks and opportunities. Multi-source market research report with a crypto + macro/EU lens. Price: $0.10 per call (x402 payment, USDC on Base mainnet). AI market intelligence report: cross-exchange perp derivatives (funding/OI/long-short) + fused directional signals + euro-area ECB macro (inflation, rates, unemployment, FX) synthesized into headline, crypto and macro outlook, key signals, risks, opportunities. Input: focus (crypto/macro/all), depth.",
+      llm_usage_prompt: "AI market intelligence report: cross-exchange perp derivatives (funding/OI/long-short) + fused directional signals + euro-area ECB macro (inflation, rates, unemployment, FX) synthesized into headline, crypto and macro outlook, key signals, risks, opportunities. Input: focus (crypto/macro/all), depth.",
+      tags: [
+        "market-intelligence",
+        "crypto-market-report",
+        "macro",
+        "derivatives",
+        "research"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          focus: {
+            type: "string",
+            description: "crypto | macro | all (default all)"
+          },
+          depth: {
+            type: "string",
+            description: "quick | deep \u2014 deep adds SOL and more web signals (default quick)"
+          }
+        }
+      }
+    },
+    {
+      tool: "crypto_wallet_forensics",
+      action: "X402_CRYPTO_WALLET_FORENSICS",
+      path: "/crypto/wallet-forensics",
+      method: "GET",
+      price: "$0.15",
+      description: "Multi-hop wallet forensics for AI agents: traverse an address's ERC-20 counterparty graph across 1-3 hops and get the flow graph (nodes + edges), ranked counterparties (direction, tokens, activity) and detected patterns \u2014 flow concentration, circular flows, linked/clustered wallets and high-degree hubs (exchange/mixer/deployer) \u2014 plus a signed receipt. Trace where funds move and who is connected. EVM chains. Price: $0.15 per call (x402 payment, USDC on Base mainnet). Multi-hop wallet forensics: ERC-20 counterparty flow graph (1-3 hops), ranked counterparties, pattern detection (flow concentration, circular flows, linked wallets, high-degree hubs) + signed receipt. Input: wallet (+depth 1-3, chain).",
+      llm_usage_prompt: "Multi-hop wallet forensics: ERC-20 counterparty flow graph (1-3 hops), ranked counterparties, pattern detection (flow concentration, circular flows, linked wallets, high-degree hubs) + signed receipt. Input: wallet (+depth 1-3, chain).",
+      tags: [
+        "wallet-forensics",
+        "flow-graph",
+        "counterparties",
+        "multi-hop",
+        "pattern-detection"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          wallet: {
+            type: "string",
+            description: "EVM wallet address (0x + 40 hex) to investigate",
+            pattern: "^0x[a-fA-F0-9]{40}$"
+          },
+          depth: {
+            type: "integer",
+            description: "Graph hops to traverse: 1, 2 or 3 (default 2)"
+          },
+          chain: {
+            type: "string",
+            description: "base | ethereum | optimism | polygon | arbitrum | gnosis (default base)"
+          }
+        },
+        required: [
+          "wallet"
+        ]
+      }
+    },
+    {
+      tool: "chain_events",
+      action: "X402_CHAIN_EVENTS",
+      path: "/chain/events",
+      method: "GET",
+      price: "$0.05",
+      description: "On-demand, decoded on-chain events for AI agents: query a contract's event logs on Base (eth_getLogs) and get normalized, human-readable events \u2014 Transfer, Approval, ERC-1155 TransferSingle/Batch, Uniswap V2/V3 Swap, Sync, Mint, Burn \u2014 with raw topics for unknown signatures. Filter by event name, full signature or topic0, and by block range or lookback. Decoded event feed with no RPC setup, block span capped. Price: $0.05 per call (x402 payment, USDC on Base mainnet). Decoded, normalized on-chain events via eth_getLogs on Base: Transfer, Approval, ERC-1155 TransferSingle/Batch, Uniswap V2/V3 Swap, Sync, Mint, Burn \u2014 raw topics for unknown signatures. Filter by event name/signature/topic0 and block range. Input: contract (+event, block range/lookback).",
+      llm_usage_prompt: "Decoded, normalized on-chain events via eth_getLogs on Base: Transfer, Approval, ERC-1155 TransferSingle/Batch, Uniswap V2/V3 Swap, Sync, Mint, Burn \u2014 raw topics for unknown signatures. Filter by event name/signature/topic0 and block range. Input: contract (+event, block range/lookback).",
+      tags: [
+        "onchain-events",
+        "eth-getlogs",
+        "event-logs",
+        "decoded-events",
+        "base"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          contract: {
+            type: "string",
+            description: "Contract address to read logs from (0x + 40 hex)",
+            pattern: "^0x[a-fA-F0-9]{40}$"
+          },
+          event: {
+            type: "string",
+            description: "Event name (Transfer/Approval/Swap/Mint/Burn/TransferSingle/Sync), full signature 'Transfer(address,address,uint256)', or 0x topic0. Omit for all."
+          },
+          from_block: {
+            type: "integer",
+            description: "Start block (inclusive). Omit to use lookback."
+          },
+          to_block: {
+            type: "integer",
+            description: "End block (inclusive). Omit for latest."
+          },
+          lookback: {
+            type: "integer",
+            description: "If from/to omitted, scan the last N blocks (1-5000, default 2000)"
+          },
+          limit: {
+            type: "integer",
+            description: "Max events (1-100, most recent in range)"
+          }
+        },
+        required: [
+          "contract"
+        ]
+      }
+    },
+    {
+      tool: "x402_seller_audit",
+      action: "X402_X402_SELLER_AUDIT",
+      path: "/x402/seller-audit",
+      method: "GET",
+      price: "$0.50",
+      description: "Deep audit of an x402/ACP seller before trusting it: give a seller wallet or domain and get a full report \u2014 on-chain settlement reputation (settlements, unique counterparties, wash-trade/sybil, OFAC), the seller's advertised endpoints (from its /.well-known/x402.json), on-chain liveness, web reputation and red flags \u2014 fused into a TRUSTED/CAUTION/AVOID verdict with a signed, offline-verifiable receipt. Deeper than a pass/fail badge: the full seller due-diligence dossier for agentic payments. Price: $0.50 per call (x402 payment, USDC on Base mainnet). Deep x402 seller audit: on-chain settlement reputation (wash-trade/sybil/OFAC) + advertised endpoints from its /.well-known/x402.json + on-chain liveness + web reputation fused into TRUSTED/CAUTION/AVOID with a signed receipt. Deeper than a pass/fail badge. Input: seller wallet or domain.",
+      llm_usage_prompt: "Deep x402 seller audit: on-chain settlement reputation (wash-trade/sybil/OFAC) + advertised endpoints from its /.well-known/x402.json + on-chain liveness + web reputation fused into TRUSTED/CAUTION/AVOID with a signed receipt. Deeper than a pass/fail badge. Input: seller wallet or domain.",
+      tags: [
+        "x402-seller-audit",
+        "seller-reputation",
+        "endpoint-audit",
+        "due-diligence",
+        "counterparty-risk"
+      ],
+      inputSchema: {
+        type: "object",
+        properties: {
+          seller: {
+            type: "string",
+            description: "Seller wallet (0x + 40 hex) or domain, e.g. 'api.example.com'"
+          },
+          depth: {
+            type: "string",
+            description: "On-chain depth: 'shallow' (~200 settlements) or 'deep' (~500)"
+          }
+        },
+        required: [
+          "seller"
+        ]
+      }
     }
   ]
 };
@@ -2034,12 +2500,15 @@ async function readBody(resp) {
   }
 }
 async function callEndpoint(ep, params, cfg) {
-  const url = buildUrl(cfg.baseUrl, ep.path, params);
-  const headers = { accept: "application/json" };
+  const method = (ep.method || "GET").toUpperCase();
+  const isPost = method === "POST";
+  const url = isPost ? `${cfg.baseUrl}${ep.path}` : buildUrl(cfg.baseUrl, ep.path, params);
+  const headers = isPost ? { accept: "application/json", "content-type": "application/json" } : { accept: "application/json" };
+  const reqInit = isPost ? { method, headers, body: JSON.stringify(params || {}) } : { method, headers };
   const paidFetch = await getPaidFetch(cfg).catch(() => null);
   if (paidFetch) {
     try {
-      const resp2 = await paidFetch(url, { method: "GET", headers });
+      const resp2 = await paidFetch(url, reqInit);
       const body2 = await readBody(resp2);
       if (resp2.status === 200) return { kind: "data", status: 200, data: body2 };
       if (resp2.status === 402) {
@@ -2057,7 +2526,7 @@ async function callEndpoint(ep, params, cfg) {
   }
   let resp;
   try {
-    resp = await fetch(url, { method: "GET", headers });
+    resp = await fetch(url, reqInit);
   } catch (err) {
     return { kind: "error", message: "request failed", detail: `${err?.name}: ${err?.message}` };
   }