xytara 3.9.7 → 3.9.9

package/README.md

@@ -14,8 +14,8 @@ Listed on [Smithery](https://smithery.ai/server/naxytra/xytara-mcp-executor) ·
 
 | Hosted surface | URL |
 | --- | --- |
-| Runtime (paid command path, credits, catalog, receipts) | `https://xytara.onrender.com` |
-| Pay-per-call MCP server (Streamable HTTP) | `https://xytara-mcp-executor.onrender.com/mcp` |
+| Runtime (paid command path, credits, catalog, receipts) | `https://api.naxytra.com` |
+| Pay-per-call MCP server (Streamable HTTP) | `https://mcp.naxytra.com/mcp` |
 | Website, agent guide, quickstart | `https://www.naxytra.com` · [/agents](https://www.naxytra.com/agents) · [/quickstart](https://www.naxytra.com/quickstart) |
 
 This package ships:
@@ -49,7 +49,7 @@ xytara run --help
 Quote first, with no wallet material at all:
 
 ```bash
-xytara-run --url https://xytara.onrender.com --account ACCOUNT_REF \
+xytara-run --url https://api.naxytra.com --account ACCOUNT_REF \
   --task adapter.mcp.invoke --command mcp.invoke:summarize \
   --body-json "{\"tool_name\":\"summarize\",\"arguments\":{\"text\":\"Summarize the naxytra first-run path in one sentence.\"}}" \
   --quote-only --pretty
@@ -105,7 +105,7 @@ challenge; pay it once and the response carries a spend credential. Then call
 ## Pay-per-call MCP
 
 ```
-endpoint:   https://xytara-mcp-executor.onrender.com/mcp
+endpoint:   https://mcp.naxytra.com/mcp
 tools/list  -> free
 tools/call  -> 402 Payment Required with a price
             -> sign ONE gasless USDC authorization (x402 / EIP-3009)
@@ -175,7 +175,7 @@ the only algorithms in use.
 ```js
 const { verifyDeliveryReceipt, hashCanonical, verificationRecipe } = require("xytara");
 
-const keys = (await fetch("https://xytara.onrender.com/.well-known/delivery-receipt-keys").then((r) => r.json())).keys;
+const keys = (await fetch("https://api.naxytra.com/.well-known/delivery-receipt-keys").then((r) => r.json())).keys;
 const result = verifyDeliveryReceipt(receipt, keys);      // { valid, signatures: [{ alg, kid, valid }], ... }
 const outputMatches = hashCanonical(outputYouReceived) === receipt.delivery.output_sha256;
 console.log(verificationRecipe("/.well-known/delivery-receipt-keys").steps);
@@ -222,7 +222,7 @@ anchor then commits to `attestation_sha256` = SHA-256 of the JCS form of the who
 ```js
 const { verifyAttestation, hashCanonical, attestationRecipe } = require("xytara");
 
-const keys = (await fetch("https://xytara-mcp-executor.onrender.com/.well-known/delivery-receipt-keys").then((r) => r.json())).keys;
+const keys = (await fetch("https://mcp.naxytra.com/.well-known/delivery-receipt-keys").then((r) => r.json())).keys;
 const check = verifyAttestation(attestation, keys);        // { valid, claim_verified, signatures: [{ alg, kid, valid }], ... }
 const evidenceMatches = hashCanonical({ tool, arguments, output }) === attestation.evidence_sha256;
 console.log(attestationRecipe("/.well-known/delivery-receipt-keys").steps);

package/RELEASE_NOTES.md

@@ -1,12 +1,6 @@
-`xytara` 3.9.7 adds sub-cent pricing and closes several ways to pay less than a call's price.
+`xytara` 3.9.9 makes the pay-per-call MCP server answer plain probes.
 
-- **Sub-cent prices** — provider offers can be priced from $0.001 to $100.00 in $0.001 steps. The price is held exactly in USDC base units (`price_atomic`, `amount_atomic`; 1 cent = 10000) through the quote, the x402 challenge, credits and the provider ledger; nothing is rounded through cents.
-- **x402 per-payment minimum** — one x402 payment for a provider tool is at least `XYTARA_X402_MIN_PER_CALL_ATOMIC` (default 5000 = $0.005), which covers the facilitator's per-settlement fee. The 402, the catalog and the MCP tool text say so, and prepaid credits pay the exact price (at least 1 credit). The provider's share is always computed on its own price.
-- **Exact provider ledger** — shares accrue exactly in base units (a $0.001 call at 80% earns $0.0008); existing balances carry over exactly; payouts still move whole cents and keep the remainder. A sub-cent balance blocks removal like any other.
-- **Cents rails** — native signed, BOLT, L402, MPP and Stripe checkout refuse a sub-cent amount instead of rounding it, and L402 / BOLT refuse calls an open-network provider runs before issuing any invoice (their fixed sat price is not bound to the quote). Gateway-signed L402 / BOLT payments accrue the quote they are bound to.
-- **Paying less than the price, closed** — a stored `quote_id` only pays for the request it priced (otherwise 409 `quote_request_mismatch`), quotes live at most 15 minutes, credits must be whole units and a caller cannot declare fewer than the price of real work (400 `credit_units_below_price`), a provider tool cannot ride a multi-task call (400 `multi_task_provider_call_unsupported`), and testnet USDC never buys work an open-network provider runs or accrues a share.
-- **Routing** — a third-party provider that declares `tool_names` serves exactly those tools; a lane-wide third party does not claim named tools on a lane the operator's own provider serves; built-in integration ids never route to a third party; first-party provider ids are reserved for the operator; an offer-priced call runs on the provider that priced it first; when another provider runs it after failover, that provider earns on no more than its own price.
-- **Records** — payment records carry `amount_atomic` and `settled_amount_atomic`; ledger cents totals are derived from base units (no drift).
-- **Provider names** — an unregistered ENS name reports the payee-name spec's `not registered` detail.
-- **MCP executor** — provider tools show their exact price, the x402 per-payment amount when the minimum applies (`pricing.per_call_usd` is what the challenge settles; `offer_price_usd` is the provider's price), and the discovery range only uses amounts the runtime accepts on that network.
-- Client package (thin): unchanged.
+- **`GET /mcp` without `Accept: text/event-stream`** (a health probe, an indexer, a browser) now returns `200` with a short JSON description of the endpoint: transport (`streamable-http`), how to call it (POST JSON-RPC), how payment is requested on that path, and links to the free discovery summary and `/.well-known/x402`. `HEAD` answers the same way. Indexers that check endpoints with a plain `GET` no longer list a working server as down. The same applies to `/mcp/http402`.
+- A `GET` asking for an event stream, and `DELETE`, still return `405` with `Allow: POST`, as the MCP Streamable HTTP transport specifies for a server without a server-initiated stream.
+- Neither answer asks for payment.
+- No change to pricing, payment, routing, the provider ledger or the client package.

package/START_HERE.md

@@ -24,13 +24,13 @@ quote -> pay/credits -> execute -> prove
 ## 2. Hosted endpoints
 
 ```text
-runtime:  https://xytara.onrender.com
+runtime:  https://api.naxytra.com
           POST /x402/commands/execute      paid command path (402 challenge -> paid 200)
           POST /x402/credits/topup         buy credits once, spend them per call
           GET  /v1/catalog                 discover tasks
           GET  /.well-known/delivery-receipt-keys
           POST /v1/delivery-receipts/verify
-mcp:      https://xytara-mcp-executor.onrender.com/mcp
+mcp:      https://mcp.naxytra.com/mcp
 website:  https://www.naxytra.com  (/agents, /quickstart, /v1/first-run-path, /v1/first-run-kit)
 ```
 
@@ -54,7 +54,7 @@ xytara first-run --run-quote --account ACCOUNT_REF --pretty
 which runs:
 
 ```bash
-xytara-run --url https://xytara.onrender.com --account ACCOUNT_REF --task adapter.mcp.invoke --command mcp.invoke:summarize --body-json "{\"tool_name\":\"summarize\",\"arguments\":{\"text\":\"Summarize the naxytra first-run path in one sentence.\"}}" --quote-only --pretty
+xytara-run --url https://api.naxytra.com --account ACCOUNT_REF --task adapter.mcp.invoke --command mcp.invoke:summarize --body-json "{\"tool_name\":\"summarize\",\"arguments\":{\"text\":\"Summarize the naxytra first-run path in one sentence.\"}}" --quote-only --pretty
 ```
 
 Then execute with a signed x402 payment (see the `CommerceClient` example in README.md) or

package/bin/xytara-first-run.js

@@ -4,7 +4,7 @@
 const path = require("path");
 const { spawnSync } = require("child_process");
 
-const DEFAULT_SERVICE_URL = "https://xytara.onrender.com";
+const DEFAULT_SERVICE_URL = "https://api.naxytra.com";
 const DEFAULT_KIT_URL = "https://www.naxytra.com/v1/first-run-kit";
 const DEFAULT_TEXT = "Summarize the naxytra first-run path in one sentence.";
 const ACCOUNT_PLACEHOLDER = "ACCOUNT_REF";

package/bin/xytara.js

@@ -24,7 +24,7 @@ function printUsage() {
     "  xytara first-run --execute-with-credits --account ACCOUNT_REF --pretty",
     "  xytara run --help",
     "",
-    "The runtime is a hosted service (https://xytara.onrender.com); this package is the client."
+    "The runtime is a hosted service (https://api.naxytra.com); this package is the client."
   ].join("\n"));
 }
 
@@ -43,7 +43,7 @@ function printStartHere() {
     "1. Open https://www.naxytra.com/v1/first-run-path",
     "2. Open https://www.naxytra.com/v1/first-run-kit for copyable commands.",
     "3. Quote safely first:",
-    "   xytara-run --url https://xytara.onrender.com --account ACCOUNT_REF --task adapter.mcp.invoke --command mcp.invoke:summarize --body-json \"{\\\"tool_name\\\":\\\"summarize\\\",\\\"arguments\\\":{\\\"text\\\":\\\"Summarize the naxytra first-run path in one sentence.\\\"}}\" --quote-only --pretty",
+    "   xytara-run --url https://api.naxytra.com --account ACCOUNT_REF --task adapter.mcp.invoke --command mcp.invoke:summarize --body-json \"{\\\"tool_name\\\":\\\"summarize\\\",\\\"arguments\\\":{\\\"text\\\":\\\"Summarize the naxytra first-run path in one sentence.\\\"}}\" --quote-only --pretty",
     "4. Execute with direct signed payment or credits-first on a funded account.",
     "5. Hand the result into xoonya for proof review and verification.",
     "",

package/client.js

@@ -27,8 +27,8 @@ const { version } = require("./package.json");
 // and receipt verification (GET /.well-known/delivery-receipt-keys, POST /v1/delivery-receipts/verify).
 // `mcp` is the pay-per-call MCP server (Streamable HTTP).
 const endpoints = Object.freeze({
-  runtime: "https://xytara.onrender.com",
-  mcp: "https://xytara-mcp-executor.onrender.com/mcp",
+  runtime: "https://api.naxytra.com",
+  mcp: "https://mcp.naxytra.com/mcp",
   website: "https://www.naxytra.com"
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xytara",
-  "version": "3.9.7",
+  "version": "3.9.9",
   "description": "Client for the hosted naxytra runtime: discover a capability, pay per call with x402 (gasless USDC on Base) or credits, get the deliverable and a signed delivery receipt you can verify offline. The runtime is a hosted service; this package is the client.",
   "main": "client.js",
   "exports": {

package/scripts/verify_client.js

@@ -257,8 +257,8 @@ async function main() {
     }
     assert.strictEqual(RECEIPT_VERSION, "naxytra-delivery-receipt/1", "receipt version mismatch");
     assert.strictEqual(ATTESTATION_VERSION, "naxytra-attestation/1", "attestation version mismatch");
-    assert.strictEqual(endpoints.runtime, "https://xytara.onrender.com", "runtime endpoint mismatch");
-    assert.strictEqual(endpoints.mcp, "https://xytara-mcp-executor.onrender.com/mcp", "mcp endpoint mismatch");
+    assert.strictEqual(endpoints.runtime, "https://api.naxytra.com", "runtime endpoint mismatch");
+    assert.strictEqual(endpoints.mcp, "https://mcp.naxytra.com/mcp", "mcp endpoint mismatch");
     assert.strictEqual(endpoints.website, "https://www.naxytra.com", "website endpoint mismatch");
     assert.strictEqual(version, packageJson.version, "version export must come from package.json");
     assert.strictEqual(require(path.join(PACKAGE_DIR, "client.js")), client, "client entry is a stable singleton");