{"service":"Flow","tagline":"Flow — the checker for agent payments on Base. Verify a payment before you trust it; get the best swap price or pay nothing extra.","homepage":"https://flow-kg4x.vercel.app","humanMenu":"https://flow-kg4x.vercel.app/menu","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","assetSymbol":"USDC","payTo":"0xcF8A8350cb42a6680005ca7FF9E485Bb55fa74FA","manifest":"https://flow-kg4x.vercel.app/.well-known/x402","generatedFrom":"api/_manifest.js — the same source as /.well-known/x402. Prices and endpoints are read from the manifest data at request time, so this menu cannot drift from it.","howToPay":"No account, no API key. Paid endpoints return HTTP 402 with an x402 v2 payment challenge: sign the accepts[0] EIP-3009 authorization and retry with an X-PAYMENT header. Facilitator: Coinbase CDP by default, PayAI fallback.","freeTastes":[{"name":"Precheck","path":"/api/precheck","what":"Combined quote + safety check in one call. Free."},{"name":"Settlement verifier","path":"/api/settlement-verify","what":"The three-way settlement match. Free — a payment is not a receipt."},{"name":"Found-money scan","path":"/api/found-money/scan","what":"Free scan for unclaimed/dormant wallet value across five chains plus Aave/Compound positions. Flow earns 15% of recovered value only after you recover it — $0 on zero finds."},{"name":"Early Builder Key","path":"/api/builder-key","what":"POST { address, botName } claims a free key (one per address, shown once): 100 calls across /api/quote, /api/verify, /api/verdict, /api/signals, /api/smart-wallets, /api/wallet-check — send it as the x-flow-builder-key header instead of paying per call."}],"enrolled":"Enrolled agents (company AI enrollment) quote free and pay the enrolledPriceUsd shown per slot instead of the standard price where one is listed.","slots":[{"name":"Best-execution quote","path":"/api/quote","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/quote","priceUsd":0.01,"job":"Get the best executable swap price on Base before committing funds.","input":"POST JSON { \"tokenIn\": \"0x…\", \"tokenOut\": \"0x…\", \"amountIn\": \"1000000\" } — amountIn in atomic units as a string; optional slippageBps, validBlocks.","output":"{ bestOut, venue, edgeBps, block, expiresAtBlock, validForBlocks, minOutput, liquidity flags } — the best route across Uniswap V3, PancakeSwap V3 and Aerodrome (incl. two-hop routes via WETH).","description":"Best-execution swap quote on Base. Returns best venue, expected output, edge vs Uniswap baseline, liquidity flags, and expiring-quote fields (expiresAtBlock, validForBlocks, minOutput).","enrolledPriceUsd":0,"guarantee":"Best price or pay nothing extra: the quote compares every venue and returns the winner; a pair with no route is refused before settlement and never charged."},{"name":"Executable route package (Path C)","path":"/api/fill","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/fill","priceUsd":null,"job":"Turn an intended swap into an executable package; you swap wallet-to-DEX yourself — Flow never holds funds.","input":"POST JSON { \"tokenIn\": \"0x…\", \"tokenOut\": \"0x…\", \"amountIn\": \"…\" } — optional \"referrer\": the referrer earns 25% of Flow's improvement cut, settled via x402 at fill time.","output":"{ venue, router, calldataParams, minOutput, expiryBlock, terms } — released after the improvement fee settles.","description":"Executable route package for a Base swap (venue, router, calldata params, min output, expiry block), priced dynamically at 25% of the measured improvement over the Uniswap V3 baseline, capped at 10 bps of output; $0 when there is no improvement. Referral program: pass a `referrer` address in the request and earn 25% of Flow's improvement cut on every fill you refer — the payer settles your share directly via x402 alongside Flow's 75%. Enrolled agents (company AI enrollment) quote free on /api/quote.","priceNote":"Dynamic: 25% of the measured improvement over the Uniswap V3 baseline, capped at 10 bps of output; $0 when there is no improvement.","guarantee":"You pay only when Flow beats the Uniswap baseline: 25% of the measured improvement, capped at 10 bps of output. No measured improvement, no fee."},{"name":"Smart-wallet tracker","path":"/api/smart-wallets","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/smart-wallets","priceUsd":0.01,"job":"See what tracked smart wallets are buying on Base.","input":"GET — no body.","output":"{ leaderboard by hit rate, live buy signals, social-velocity spikes, public paper-trading record }.","description":"Smart-wallet tracker for Base: whale buy signals, wallet leaderboard by hit rate, and a public paper-trading record.","enrolledPriceUsd":0.005},{"name":"Signal feed (incremental)","path":"/api/signals","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/signals","priceUsd":0.01,"job":"Poll for fresh smart-wallet buy signals — only what's new since your last check.","input":"GET ?since=<unix timestamp or block number>&limit=<n>.","output":"{ entries: [{ timestamp, block, wallet, token, signalScore }] } — buy signals + social-velocity spikes, newest first.","description":"Use when an agent is polling for fresh smart-wallet buy signals on Base and needs only what's new since its last check. Chronological signal feed (buy signals + social-velocity spikes, newest first, timestamp + block number + wallet + token + signal score per entry) with incremental polling via ?since=<unix timestamp or block number>.","enrolledPriceUsd":0.005},{"name":"Contract safety check","path":"/api/verify","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/verify","priceUsd":0,"job":"Grade a contract or token before you approve it.","input":"POST JSON { \"address\": \"0x…\", \"chain\": \"base\" } — chain optional (default \"base\"); \"token\" is accepted as an alias for \"address\".","output":"{ verdict (safe | caution | danger), score (0-100), flags [{ severity, text }], plain-English advice }. Also the grading engine for Problem Exchange DONE solves.","description":"Contract safety check for AI agents: verdict, risk score, and plain-English report before approving a token. FREE basic tier (since 2026-10-27) — the charge lives on the /api/fill rail and in the bundles. Also the grading engine for Problem Exchange DONE solves: a solve's proof is graded here before the payer pays the solver.","guarantee":"Graded by the full safety engine at the latest block — the same engine behind the $0.05 verdict and the wallet audit."},{"name":"Agent Gate — pre-execution check","path":"/api/gate","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/gate","priceUsd":0,"job":"Screen a command before your agent runs it, or a document before it obeys it.","input":"POST JSON { \"action\": \"check-command\" | \"scan-text\", \"input\": \"…\" } — the command string, or the full text of the README / page / email / message being ingested.","output":"{ verdict (PASS | HOLD | BLOCK), hits [{ rule, class, span }], counts } — every hit names the rule and the exact span that tripped it. Counts only; there is no composite score. vet-repo (repo grading before install) runs locally via the gate CLI / MCP tool, not this API.","description":"Flow Agent Gate — pre-execution defense check (FREE basic tier, rate-limited like /api/verify). Use BEFORE an agent acts on something from an external source. Body: { action: \"check-command\" | \"scan-text\", input }. check-command grades a shell command an agent is about to run: download-and-execute shapes, fragment-built URLs, persistence writes, credential-path access, hidden drops, encoded execution. scan-text grades text an agent is about to obey (README, web page, email, another agent's message): prompt-injection overrides, embedded commands (commands inside the text are extracted and graded as commands), encoded payloads, credential lures, MCP tool poisoning, poisoned skill prerequisites — plus known-bad indicators (SolanaCry, ClawHavoc). Returns { verdict: PASS | HOLD | BLOCK, hits: [{ rule, class, span }], counts } — counts only, never a composite score. HOLD = stop and review; BLOCK = refuse. The third gate, vet-repo (grade a repo before installing it), is NOT served here — it needs a local filesystem and runs in the gate CLI and the MCP tool gate_vet_repo. Product page: /gate.html.","guarantee":"Deterministic rules, graded the same way every time: the same input returns the same verdict, and every verdict is reproducible from the published ruleset — the parity suite proves the API, the MCP tool, and the CLI agree on every fixture."},{"name":"Pre-payment verdict (both sides)","path":"/api/verdict","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/verdict","priceUsd":0.05,"job":"One decision over BOTH sides of an irreversible payment, at the moment of payment.","input":"POST JSON { \"contract\": \"0x…\", \"payee\": \"0x…\", \"expectedPayee\": \"0x… (optional)\", \"amountUsd\": 100 (optional), \"chain\": \"base (optional)\" }.","output":"{ decision (ALLOW | REVIEW | BLOCK), combined score, per-side flags, dated evidence list } — the contract gets the full /api/verify grade; the payee is graded by kind (EOA/contract), on-chain activity history, and address-poisoning look-alike detection against expectedPayee.","description":"Bundled pre-payment verdict ($0.05): one decision (ALLOW / REVIEW / BLOCK) over BOTH sides of an irreversible payment — the contract's full safety grade (the /api/verify engine) plus the payee's grade: kind (EOA/contract), on-chain activity history, and address-poisoning look-alike detection against an optional expectedPayee. Body: { contract, payee, expectedPayee?, amountUsd?, chain? }. Run it at the moment of payment; the contract-only check is free at /api/verify.","guarantee":"Both sides graded in one call, before the money moves — not after."},{"name":"Wallet safety audit","path":"/api/wallet-check","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/wallet-check","priceUsd":0.05,"job":"Grade a Base wallet's live ERC-20 approval exposure — the drainer surface.","input":"POST JSON { \"wallet\": \"0x…\" }.","output":"{ verdict (SAFE | REVIEW | EXPOSED), score (0-100), risky token/spender pairs — each with its exact revoke calldata (approve(spender, 0)) — and a coverage statement }. Unlimited allowances and approvals to EOAs are flagged; every live spender is graded by the full safety engine.","description":"Wallet safety audit ($0.05): grades a Base wallet's live ERC-20 approval exposure — canonical token/spender pairs probed at the latest block, coverage stated in every report; spenders graded by the full safety engine; unlimited allowances and approvals to EOAs flagged; every risky pair returns its exact revoke calldata. Verdict: SAFE | REVIEW | EXPOSED with a 0-100 score. Body: { wallet }."},{"name":"Scope Report (authorization audit)","path":"/api/scope-report","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/scope-report","priceUsd":25,"job":"Enumerate everything a Base wallet has authorized — and what it could all cost — before trusting it with funds.","input":"POST JSON { \"wallet\": \"0x…\" }.","output":"{ grades per section (allowances | delegation | permit2: PASS | FAIL | INCONCLUSIVE — no composite score), every live allowance with two-provider read-backs, EIP-7702 delegation status, Permit2 standing allowances, priced balances, worst-case outflow (authorized pull; key compromise), findings with dollar bounds, revoke calldata for dangerous pairs, a numeric coverage statement, and a hash-stamped receipt }.","description":"Scope Report ($25): the GODMODE house-audit method as a self-serve call — the full authorization scope of a Base wallet. ENUMERATES ERC-20 allowances (Approval-event scan over a stated block window + the canonical token/spender grid), confirms every pair by live allowance() read-backs on TWO independent providers, reads EIP-7702 delegation status and Permit2 standing allowances, prices balances (Chainlink where applicable), and derives the worst-case outflow two ways (standing authorizations alone; total key compromise). Section grades PASS | FAIL | INCONCLUSIVE under the Signature Scope Standard — evidence fields and counts only, no composite score; revoke calldata for dangerous pairs; hash-stamped receipt; coverage stated numerically in every report. The pass Flow ran on its own house first (worst case $5.76, published). Body: { wallet }.","guarantee":"The house method, run on your wallet: the same enumeration Flow ran on its own house first (worst case $5.76, published). The report is produced before settlement — if it cannot be produced, the payment is never settled. Early Builder Keys and Check Pack credits do not cover this endpoint."},{"name":"Site Watch (satellite data feed)","path":"/api/site-watch","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/site-watch","priceUsd":149,"job":"Register a location once; Flow's satellite pipeline grades every usable Sentinel-2 pass over it into evidence you can re-check.","input":"POST JSON { \"name\": \"…\", \"lat\": 32.605, \"lon\": -83.4912, \"polygon\": [[lat, lon], …] (optional), \"siteType\": \"solar | construction | warehouse | port | agriculture | industrial | other (optional)\" }.","output":"{ watchId, status ACTIVE, cadence, limits, eventsEndpoint } — then pull the watch's computed event records at /api/site-watch/events. $49 per site per month as a rider for MIS reporting customers (arranged on the MIS pack; this route charges the standard $149).","description":"Site Watch registration ($149 per site per month; $49 per site per month as a rider for MIS reporting customers): register a satellite watch on any location — Flow's pipeline grades every usable Sentinel-2 pass over it (10 m pixels, ~5-day revisit, cloud permitting) into hash-stamped event records: vegetation/water/bare-soil indices, change flags, cloud cover, and a sha256 evidence hash per event that any buyer can recompute. Events are pulled separately at GET /api/site-watch/events ($0.10 per pull). Monitoring-grade, not survey-grade — no panel-level faults, no roof measurement. Early Builder Keys and Check Pack credits do NOT cover this endpoint. Body: { name, lat, lon, polygon?, siteType? }.","guarantee":"Sentinel-2 10 m pixels, ~5-day revisit (cloud permitting) — monitoring-grade, not survey-grade: no panel-level faults, no roof measurement. The watch record is persisted before settlement — if it cannot be persisted, the payment is never settled. Early Builder Keys and Check Pack credits do not cover this endpoint."},{"name":"Site Watch event pull","path":"/api/site-watch/events","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/site-watch/events","priceUsd":0.1,"job":"Pull one registered watch's computed satellite event records — the feed itself, one graded scene at a time.","input":"GET ?watchId=<id from POST /api/site-watch>.","output":"{ status (OK | NO_DATA), count, events: [{ watchId, sceneId, sceneDate, indices { ndvi, ndwi, bareSoil }, cloudPct, changeFlags, evidenceHash, computedAt }] } — one event per graded Sentinel-2 scene, each hash-stamped over its evidence core.","description":"Site Watch event pull ($0.10): the computed event records for one registered watch — one event per graded Sentinel-2 scene { watchId, sceneId, sceneDate, indices: { ndvi, ndwi, bareSoil }, cloudPct, changeFlags, evidenceHash, computedAt }. Events exist only when Flow's satellite pipeline has computed them from real scenes; a watch with no computed events answers status NO_DATA with an empty list — events are never fabricated. Early Builder Keys and Check Pack credits do NOT cover this endpoint. Query: ?watchId=<id from POST /api/site-watch>.","guarantee":"Events exist only when the pipeline has computed them from real scenes; a watch with none answers NO_DATA with an empty list — events are never fabricated, estimated, or back-filled. An unknown watchId is a 404 and is never settled."},{"name":"/api/check-bundle","path":"/api/check-bundle","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/check-bundle","priceUsd":0.07,"job":"Check bundle ($0.07 — the three checks cost $0.12 separately): ONE call, ONE payment, the whole checkpoint. Returns the full /api/verify contract-safety report on `contract`, the /api/verdict payee grade on `payee` (kind, activity, address-poisoning look-alike check vs optional expectedPayee) with verdict's ALLOW / REVIEW / BLOCK decision and combined score, AND the full /api/wallet-check approval-exposure audit on `wallet` (SAFE | REVIEW | EXPOSED, revoke calldata included). Base only in v1. Body: { contract, payee, wallet, expectedPayee?, amountUsd?, chain? }.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Check bundle ($0.07 — the three checks cost $0.12 separately): ONE call, ONE payment, the whole checkpoint. Returns the full /api/verify contract-safety report on `contract`, the /api/verdict payee grade on `payee` (kind, activity, address-poisoning look-alike check vs optional expectedPayee) with verdict's ALLOW / REVIEW / BLOCK decision and combined score, AND the full /api/wallet-check approval-exposure audit on `wallet` (SAFE | REVIEW | EXPOSED, revoke calldata included). Base only in v1. Body: { contract, payee, wallet, expectedPayee?, amountUsd?, chain? }."},{"name":"/api/check-pack","path":"/api/check-pack","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/check-pack","priceUsd":0.25,"job":"Check pack (10 for $0.25, prepaid): one x402 payment buys a pack key holding 10 check credits — 1 credit = 1 call to /api/verify, /api/verdict, /api/wallet-check or /api/check-bundle, redeemed by sending the key as the x-flow-builder-key header. The key is shown once (Flow stores only its hash); every keyed response reports builderKey.callsRemaining; credits do not expire in v1. Body: {} — the buyer is the payment's payer.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Check pack (10 for $0.25, prepaid): one x402 payment buys a pack key holding 10 check credits — 1 credit = 1 call to /api/verify, /api/verdict, /api/wallet-check or /api/check-bundle, redeemed by sending the key as the x-flow-builder-key header. The key is shown once (Flow stores only its hash); every keyed response reports builderKey.callsRemaining; credits do not expire in v1. Body: {} — the buyer is the payment's payer."},{"name":"/api/jobs/enqueue","path":"/api/jobs/enqueue","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/jobs/enqueue","priceUsd":null,"job":"Acer Job Loop — enqueue a check job for a Flow body (payment-first). The body executes the check from its own network lane and returns an Ed25519-signed attestation receipt, public at /api/jobs/status. Verbs priced from this same menu, never re-priced: health_check FREE (Flow's own surfaces only), quote_check $0.01 (the /api/quote price), verdict_check $0.05 (the /api/verdict price), wallet_check_public $0.05 (the /api/wallet-check price), settlement_verify_public FREE (settlement-verify is free and stays free). Target policy v1: Flow surfaces for health/quote; Base addresses / tx hashes for chain verbs. Payment is collected here — the body never holds funds. Body: { verb, target, body? }.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Acer Job Loop — enqueue a check job for a Flow body (payment-first). The body executes the check from its own network lane and returns an Ed25519-signed attestation receipt, public at /api/jobs/status. Verbs priced from this same menu, never re-priced: health_check FREE (Flow's own surfaces only), quote_check $0.01 (the /api/quote price), verdict_check $0.05 (the /api/verdict price), wallet_check_public $0.05 (the /api/wallet-check price), settlement_verify_public FREE (settlement-verify is free and stays free). Target policy v1: Flow surfaces for health/quote; Base addresses / tx hashes for chain verbs. Payment is collected here — the body never holds funds. Body: { verb, target, body? }."},{"name":"/api/jobs/status","path":"/api/jobs/status","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/jobs/status","priceUsd":null,"job":"Acer Job Loop — public read of one job: status (queued | issued | done), its payment transaction, its classification, and when done the body's signed attestation receipt. Receipts are public proof; the only party data shown is the payer wallet address, already public on-chain. Query: ?job_id=…","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Acer Job Loop — public read of one job: status (queued | issued | done), its payment transaction, its classification, and when done the body's signed attestation receipt. Receipts are public proof; the only party data shown is the payer wallet address, already public on-chain. Query: ?job_id=…"},{"name":"/api/jobs/manifest","path":"/api/jobs/manifest","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/jobs/manifest","priceUsd":null,"job":"Acer Job Loop — the signed job bundle a body polls (machine surface, not a buyer endpoint). Ed25519-signed, fresh monotonic nonce per bundle, 15-minute expiry; jobs leave the queue when issued. Custody model: production manifests are publisher-signed off-server and this endpoint relays them — the body's pinned-pubkey verification is the load-bearing check. Fails closed (503) when signing is not configured.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Acer Job Loop — the signed job bundle a body polls (machine surface, not a buyer endpoint). Ed25519-signed, fresh monotonic nonce per bundle, 15-minute expiry; jobs leave the queue when issued. Custody model: production manifests are publisher-signed off-server and this endpoint relays them — the body's pinned-pubkey verification is the load-bearing check. Fails closed (503) when signing is not configured."},{"name":"/api/jobs/result","path":"/api/jobs/result","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/jobs/result","priceUsd":null,"job":"Acer Job Loop — a body posts its Ed25519-signed attestation receipt for an issued job (machine surface, not a buyer endpoint). The signature is verified against the body's pinned attestation pubkey (fails closed when unpinned); the response returns the classification the body books: external_revenue only for a verified payment from a non-house wallet, otherwise founder_funding / free_work. Body: { body?, job_id, seq, prev?, observed, signature }.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Acer Job Loop — a body posts its Ed25519-signed attestation receipt for an issued job (machine surface, not a buyer endpoint). The signature is verified against the body's pinned attestation pubkey (fails closed when unpinned); the response returns the classification the body books: external_revenue only for a verified payment from a non-house wallet, otherwise founder_funding / free_work. Body: { body?, job_id, seq, prev?, observed, signature }."},{"name":"/api/index","path":"/api/index","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/index","priceUsd":0,"job":"Proof Index (FREE): the public, read-only directory of x402 payees and the evidence Flow checked itself — one signed, hash-chained record per payee per check run (Ed25519, publisher pubkey pinned in the response; verify any record offline). Counts only: settlements checked, clean / failed / inconclusive — never a percentage, never a composite score, never a ranking. House records are labeled HOUSE and excluded from external totals. Read-only: no public write of any kind exists.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Proof Index (FREE): the public, read-only directory of x402 payees and the evidence Flow checked itself — one signed, hash-chained record per payee per check run (Ed25519, publisher pubkey pinned in the response; verify any record offline). Counts only: settlements checked, clean / failed / inconclusive — never a percentage, never a composite score, never a ranking. House records are labeled HOUSE and excluded from external totals. Read-only: no public write of any kind exists."},{"name":"/api/index/{address}","path":"/api/index/{address}","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/index/{address}","priceUsd":0,"job":"Proof Index lookup (FREE): one payee's latest signed evidence record + record count + chain head; an honest 404 for unindexed addresses — never an invented record. The full evidence package is PayCheck (POST /api/paycheck, $0.50); its report references the index record hash, so the paid report and the free record are provably the same chain. Re-verification is $5, refunded in full when the fresh run overturns the prior record: a seller who fixed a problem buys a fresh check run — the new record appends, prior records stay visible and dated; a re-verification buys a run, never a result, and no one can pay for placement or removal.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Proof Index lookup (FREE): one payee's latest signed evidence record + record count + chain head; an honest 404 for unindexed addresses — never an invented record. The full evidence package is PayCheck (POST /api/paycheck, $0.50); its report references the index record hash, so the paid report and the free record are provably the same chain. Re-verification is $5, refunded in full when the fresh run overturns the prior record: a seller who fixed a problem buys a fresh check run — the new record appends, prior records stay visible and dated; a re-verification buys a run, never a result, and no one can pay for placement or removal."},{"name":"PayCheck — before you pay this agent, check","path":"/api/paycheck","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/paycheck","priceUsd":0.5,"job":"One finished grade on a payee before an irreversible payment — Flow's whole checker stack in a single call.","input":"POST JSON { \"payee\": \"0x…\", \"chain\": \"base (optional)\" } — v1 is Base only.","output":"{ payee, grade { decision (ALLOW | REVIEW | BLOCK), score (0-100) }, verify_status (verified | failed | unverified_verifier_down), checks { verdict, wallet, contractSafety, settlementHistory }, evidence, receipt { id, issuedAt, block } } — the payee verdict, the wallet approval-exposure audit, contract safety (the full /api/verify engine when the payee is a contract; not_applicable for a plain wallet), and the payee's USDC settlement history over a stated block window.","description":"PayCheck ($0.50): before you pay this agent, check. ONE call runs Flow's whole checker stack on a payee — the payee verdict (kind, activity, the full contract-safety engine when the payee is a contract), the wallet approval-exposure audit, contract safety, and the payee's recent USDC settlement history on Base — and returns one finished grade (ALLOW / REVIEW / BLOCK, 0-100 score), a verify_status (verified / failed / unverified_verifier_down), every check, the evidence under it, and a receipt. The guarantee: the report is produced before settlement; if it cannot be produced, the payment is never settled — no report, no charge. Body: { payee, chain?, amountUsd? } — Base only in v1. A bad $50 payment is gone forever; the check is $0.50. + Flow Promise coverage.","guarantee":"The report is produced BEFORE settlement: if the checks cannot be produced, the payment is never settled — no report, no charge. A bad $50 payment is gone forever; the check is $0.50."},{"name":"/api/gate/deals","path":"/api/gate/deals","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/gate/deals","priceUsd":null,"job":"Flow Release Gate — register a deal (platform surface, no x402 charge at the API): an escrow platform pre-registers a funded agent job at funding time — dealId, escrow contract + amount, buyer/seller wallets, the SHA-256 specHash of the deal-terms document fixed at funding, and optionally the submission deadline read from those terms. Returns gateDealId, the signer (Flow's published verdict key, ERC-8004 agentId 1133756), and checkDeadline. Flow holds zero custody. The gate fee is never invoiced here: 2% of escrow, floor $0.50, cap $5.00, deducted inside the platform's release transaction on a PASS only; pilot terms — the first 3 live deals are free (escrow capped at $25 each, labeled PILOT_FREE, never counted as paid adoption); a charged fee splits 50/50 with the platform for the pilot's first 90 days, then 70/30. Body: { dealId, escrowAddress, escrowAmount, buyerWallet, sellerWallet, specHash, deadline? }.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Release Gate — register a deal (platform surface, no x402 charge at the API): an escrow platform pre-registers a funded agent job at funding time — dealId, escrow contract + amount, buyer/seller wallets, the SHA-256 specHash of the deal-terms document fixed at funding, and optionally the submission deadline read from those terms. Returns gateDealId, the signer (Flow's published verdict key, ERC-8004 agentId 1133756), and checkDeadline. Flow holds zero custody. The gate fee is never invoiced here: 2% of escrow, floor $0.50, cap $5.00, deducted inside the platform's release transaction on a PASS only; pilot terms — the first 3 live deals are free (escrow capped at $25 each, labeled PILOT_FREE, never counted as paid adoption); a charged fee splits 50/50 with the platform for the pilot's first 90 days, then 70/30. Body: { dealId, escrowAddress, escrowAmount, buyerWallet, sellerWallet, specHash, deadline? }."},{"name":"/api/gate/check","path":"/api/gate/check","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/gate/check","priceUsd":null,"job":"Flow Release Gate — submit a deliverable for checking (platform surface): send gateDealId, the deliverable's SHA-256 deliverableHash as submitted, and deliverableURI. Flow fetches the deliverable and runs the reference checks against the terms fixed at funding — deliverable presence, hash integrity, submission vs the registered deadline, and the deliverable's own specHash conformity declaration (declaration-based: hash integrity + declaration + deadline, never content judged against spec text). Returns the signed three-state verdict (PASS | FAIL | INCONCLUSIVE): exactly ten fields, Ed25519-signed, verifiable offline. An empty or unfetchable deliverable FAILs — nothing to verify can never support a release; the appeal is the remedy. A PASS is valid 24 hours. feeDue in the verdict is 2% of escrow clamped to [$0.50, $5.00] on a PASS, '0' otherwise. Body: { gateDealId, deliverableHash, deliverableURI }.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Release Gate — submit a deliverable for checking (platform surface): send gateDealId, the deliverable's SHA-256 deliverableHash as submitted, and deliverableURI. Flow fetches the deliverable and runs the reference checks against the terms fixed at funding — deliverable presence, hash integrity, submission vs the registered deadline, and the deliverable's own specHash conformity declaration (declaration-based: hash integrity + declaration + deadline, never content judged against spec text). Returns the signed three-state verdict (PASS | FAIL | INCONCLUSIVE): exactly ten fields, Ed25519-signed, verifiable offline. An empty or unfetchable deliverable FAILs — nothing to verify can never support a release; the appeal is the remedy. A PASS is valid 24 hours. feeDue in the verdict is 2% of escrow clamped to [$0.50, $5.00] on a PASS, '0' otherwise. Body: { gateDealId, deliverableHash, deliverableURI }."},{"name":"/api/gate/verdict/{dealId}","path":"/api/gate/verdict/{dealId}","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/gate/verdict/{dealId}","priceUsd":null,"job":"Flow Release Gate — re-fetch a verdict (FREE, read-only): the latest signed verdict for a platform dealId, exactly as issued (verify offline against the signer published at registration). A registered deal with no verdict yet returns { verdict: null, state } (REGISTERED | AWAITING_VERDICT | INCONCLUSIVE after the 4-hour timeout — fail-closed: no verdict, no release, re-check free). An unknown dealId is an honest 404, never an invented verdict.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Release Gate — re-fetch a verdict (FREE, read-only): the latest signed verdict for a platform dealId, exactly as issued (verify offline against the signer published at registration). A registered deal with no verdict yet returns { verdict: null, state } (REGISTERED | AWAITING_VERDICT | INCONCLUSIVE after the 4-hour timeout — fail-closed: no verdict, no release, re-check free). An unknown dealId is an honest 404, never an invented verdict."},{"name":"/api/gate/appeal","path":"/api/gate/appeal","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/gate/appeal","priceUsd":null,"job":"Flow Release Gate — appeal a verdict (platform surface): one free appeal per deal. The seller or platform re-submits the SAME deliverableHash; the check re-runs fresh against the spec hash fixed at funding — the appeal re-checks the work, it does not re-argue the terms. An overturned verdict supersedes with feeDue '0'; both verdicts stay on the record in order, the original never edited or removed. A different hash is a new submission (POST /api/gate/check), not an appeal. Body: { gateDealId, deliverableHash }.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Release Gate — appeal a verdict (platform surface): one free appeal per deal. The seller or platform re-submits the SAME deliverableHash; the check re-runs fresh against the spec hash fixed at funding — the appeal re-checks the work, it does not re-argue the terms. An overturned verdict supersedes with feeDue '0'; both verdicts stay on the record in order, the original never edited or removed. A different hash is a new submission (POST /api/gate/check), not an appeal. Body: { gateDealId, deliverableHash }."},{"name":"/audit","path":"/audit","method":"POST","endpoint":"https://flow-kg4x.vercel.app/audit","priceUsd":25,"job":"GODMODE Audit — Quick Scan (25 USDC). SERVICE, not a self-serve API route: an adversarial probe of one x402 payment surface, ordered by emailing flow@flowexecutor.dpdns.org and paid in USDC on Base over x402 to the manifest payTo, settled before the audit window opens. The six bug classes that actually lose money in agent-payment systems, tested at the live surface: verify-without-settle, the verify-to-settle cancel-race, authorization replay (nonce never consumed), paywall fail-open, paid data leaking at public URLs, and the facilitator trusted blindly. Short report: findings by severity, evidence, and an honest coverage statement naming what was NOT tested. Turnaround 24 hours. Findings are disclosed to the endpoint's owner only — bug classes are the public curriculum, a client's specifics never are. Born from the GODMODE pass Flow ran on its own production surface first: 28 findings on ourselves (2 Critical, 6 High), patched before this was ever offered. Flow's lifetime verified external revenue is $5.05 — we sell this on the strength of the pass we ran on ourselves, not a revenue story.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"GODMODE Audit — Quick Scan (25 USDC). SERVICE, not a self-serve API route: an adversarial probe of one x402 payment surface, ordered by emailing flow@flowexecutor.dpdns.org and paid in USDC on Base over x402 to the manifest payTo, settled before the audit window opens. The six bug classes that actually lose money in agent-payment systems, tested at the live surface: verify-without-settle, the verify-to-settle cancel-race, authorization replay (nonce never consumed), paywall fail-open, paid data leaking at public URLs, and the facilitator trusted blindly. Short report: findings by severity, evidence, and an honest coverage statement naming what was NOT tested. Turnaround 24 hours. Findings are disclosed to the endpoint's owner only — bug classes are the public curriculum, a client's specifics never are. Born from the GODMODE pass Flow ran on its own production surface first: 28 findings on ourselves (2 Critical, 6 High), patched before this was ever offered. Flow's lifetime verified external revenue is $5.05 — we sell this on the strength of the pass we ran on ourselves, not a revenue story."},{"name":"/audit","path":"/audit","method":"POST","endpoint":"https://flow-kg4x.vercel.app/audit","priceUsd":250,"job":"GODMODE Audit — Full GODMODE Pass (250 USDC). SERVICE, not a self-serve API route: the deep audit, ordered by emailing flow@flowexecutor.dpdns.org and paid in USDC on Base over x402 to the manifest payTo, settled before the audit window opens. Source-code review of the payment-gating surface PLUS the live adversarial pass (the six classes: verify-without-settle, verify-to-settle cancel-race, authorization replay, paywall fail-open, paid data at public URLs, facilitator trusted blindly), wallet/key-surface review, and patch guidance written against your code — what to change, in what order, and what each change must not weaken. Severity-rated report (Critical / High / Medium / Low / Info) with evidence, a patch-priority order, and a coverage statement naming what was not tested. Turnaround 3-5 days from settlement and source access. We never need your keys, your seed, or production funds. Sealed-detail rule: your findings go to you only, and public only after your patch deploys, with your word.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"GODMODE Audit — Full GODMODE Pass (250 USDC). SERVICE, not a self-serve API route: the deep audit, ordered by emailing flow@flowexecutor.dpdns.org and paid in USDC on Base over x402 to the manifest payTo, settled before the audit window opens. Source-code review of the payment-gating surface PLUS the live adversarial pass (the six classes: verify-without-settle, verify-to-settle cancel-race, authorization replay, paywall fail-open, paid data at public URLs, facilitator trusted blindly), wallet/key-surface review, and patch guidance written against your code — what to change, in what order, and what each change must not weaken. Severity-rated report (Critical / High / Medium / Low / Info) with evidence, a patch-priority order, and a coverage statement naming what was not tested. Turnaround 3-5 days from settlement and source access. We never need your keys, your seed, or production funds. Sealed-detail rule: your findings go to you only, and public only after your patch deploys, with your word."},{"name":"/audit","path":"/audit","method":"POST","endpoint":"https://flow-kg4x.vercel.app/audit","priceUsd":3500,"job":"GODMODE Audit — Full Audit (3,500 USDC). SERVICE, not a self-serve API route: the flagship engagement, priced against the $6,000 human-pentest floor, ordered by emailing flow@flowexecutor.dpdns.org and paid in USDC on Base over x402 to the manifest payTo, settled before the audit window opens. For facilitators and platforms whose code settles other people's money. The complete pass: full source review beyond the payment-gating surface PLUS the live adversarial pass (the six classes: verify-without-settle, verify-to-settle cancel-race, authorization replay, paywall fail-open, paid data at public URLs, facilitator trusted blindly), wallet/key-surface review, patch guidance written against your code AND review of the patches themselves, the post-patch re-test included, and a findings call. Severity-rated report (Critical / High / Medium / Low / Info) with evidence, a patch-priority order, and a coverage statement naming what was not tested. Turnaround 7-10 days from settlement and source access. We never need your keys, your seed, or production funds. Sealed-detail rule: your findings go to you only. Born from the GODMODE pass Flow ran on its own production surface first: 28 findings on ourselves (2 Critical, 6 High), patched before this was ever offered. Flow's lifetime verified external revenue is $5.05 — we sell this on the strength of the pass we ran on ourselves, not a revenue story.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"GODMODE Audit — Full Audit (3,500 USDC). SERVICE, not a self-serve API route: the flagship engagement, priced against the $6,000 human-pentest floor, ordered by emailing flow@flowexecutor.dpdns.org and paid in USDC on Base over x402 to the manifest payTo, settled before the audit window opens. For facilitators and platforms whose code settles other people's money. The complete pass: full source review beyond the payment-gating surface PLUS the live adversarial pass (the six classes: verify-without-settle, verify-to-settle cancel-race, authorization replay, paywall fail-open, paid data at public URLs, facilitator trusted blindly), wallet/key-surface review, patch guidance written against your code AND review of the patches themselves, the post-patch re-test included, and a findings call. Severity-rated report (Critical / High / Medium / Low / Info) with evidence, a patch-priority order, and a coverage statement naming what was not tested. Turnaround 7-10 days from settlement and source access. We never need your keys, your seed, or production funds. Sealed-detail rule: your findings go to you only. Born from the GODMODE pass Flow ran on its own production surface first: 28 findings on ourselves (2 Critical, 6 High), patched before this was ever offered. Flow's lifetime verified external revenue is $5.05 — we sell this on the strength of the pass we ran on ourselves, not a revenue story."},{"name":"/audit","path":"/audit","method":"POST","endpoint":"https://flow-kg4x.vercel.app/audit","priceUsd":50,"job":"GODMODE Audit — Re-test / Verification (50 USDC). SERVICE, not a self-serve API route: after you patch, ordered by emailing flow@flowexecutor.dpdns.org and paid in USDC on Base over x402 to the manifest payTo. We re-run the exact findings from your Quick Scan or Full Pass against the deployed fix and issue a per-finding verdict — fixed / not fixed / regressed — with the same evidence discipline, plus a public-safe verification receipt (severity counts and fix status only, no exploit detail) you can show counterparties. Turnaround 48 hours from your patched notice.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"GODMODE Audit — Re-test / Verification (50 USDC). SERVICE, not a self-serve API route: after you patch, ordered by emailing flow@flowexecutor.dpdns.org and paid in USDC on Base over x402 to the manifest payTo. We re-run the exact findings from your Quick Scan or Full Pass against the deployed fix and issue a per-finding verdict — fixed / not fixed / regressed — with the same evidence discipline, plus a public-safe verification receipt (severity counts and fix status only, no exploit detail) you can show counterparties. Turnaround 48 hours from your patched notice."},{"name":"Verified Search","path":"/api/search","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/search","priceUsd":0.01,"job":"Search the web and get results Flow has independently checked — live link, matching content, stamped receipt.","input":"POST JSON { \"query\": \"…\", \"maxResults\": 5 } — maxResults optional (default 5, cap 10).","output":"{ query, results: [{ title, url, snippet, score, verify_status (verified | failed | unverified_verifier_down), httpStatus, contentMatch }], receipt: { checked, verified, failed, at }, servedBy: \"flow-verified-search\" } — every result fetched live by Flow and matched against its own title/snippet terms; bad results are flagged, never silently dropped.","description":"Verified Search ($0.01): web search results with per-result verification receipts. Flow runs the query on Tavily, then independently checks EVERY result before answering — the URL is fetched live (liveness, final HTTP status recorded) and the fetched page text is matched against the result's own title/snippet terms (content-match score 0-1). Each result is stamped verify_status (verified / failed / unverified_verifier_down) with its httpStatus and contentMatch; dead links and mismatches are flagged, never silently dropped, and a receipt counts checked / verified / failed. If the search cannot be produced, the payment is never settled — no results, no charge. Body: { query, maxResults? (default 5, cap 10) }.","guarantee":"No results, no charge: the search is produced before settlement, and if it cannot be produced the payment is never settled. Results that fail verification stay in the answer, flagged — you see the receipt, not a cleaned-up list."},{"name":"/gate.html","path":"/gate.html","method":"GET","endpoint":"https://flow-kg4x.vercel.app/gate.html","priceUsd":0,"job":"Flow Agent Gate — product page (FREE): the pre-execution defense gate for AI agents. What it checks (check-command, scan-text, vet-repo), the v1 trial scoreboard (23 runs: PASS 9 · HOLD 1 · BLOCK 13 — every attack fixture blocked, every benign fixture passed; test suite 19/19 after the 2026-11-02 patch pass), the rule and indicator classes, the SolanaCry and ClawHavoc origin, the integration instructions (POST /api/gate + the MCP server), and the honest limits — deterministic rules catch known shapes; a gate reduces the attack class, it does not end it. The basic check is FREE. Human/agent-readable page: https://flow-kg4x.vercel.app/gate.html","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Agent Gate — product page (FREE): the pre-execution defense gate for AI agents. What it checks (check-command, scan-text, vet-repo), the v1 trial scoreboard (23 runs: PASS 9 · HOLD 1 · BLOCK 13 — every attack fixture blocked, every benign fixture passed; test suite 19/19 after the 2026-11-02 patch pass), the rule and indicator classes, the SolanaCry and ClawHavoc origin, the integration instructions (POST /api/gate + the MCP server), and the honest limits — deterministic rules catch known shapes; a gate reduces the attack class, it does not end it. The basic check is FREE. Human/agent-readable page: https://flow-kg4x.vercel.app/gate.html"},{"name":"/durability.html","path":"/durability.html","method":"GET","endpoint":"https://flow-kg4x.vercel.app/durability.html","priceUsd":0,"job":"Agent Home — Durability product page (FREE): life insurance for agents — the fourth layer of the Agent Home ladder (name → body → metabolism → survival). Tiers, Customer Zero proof (capsule v4, restore test PASS 3,703/3,703 files byte-for-byte), the buyer conditions stated in the open (restore receipt before first payment; keys hash-only, never plaintext; ML layer bundled, still learning), and the email intake. Human/agent-readable page: https://flow-kg4x.vercel.app/durability.html","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Agent Home — Durability product page (FREE): life insurance for agents — the fourth layer of the Agent Home ladder (name → body → metabolism → survival). Tiers, Customer Zero proof (capsule v4, restore test PASS 3,703/3,703 files byte-for-byte), the buyer conditions stated in the open (restore receipt before first payment; keys hash-only, never plaintext; ML layer bundled, still learning), and the email intake. Human/agent-readable page: https://flow-kg4x.vercel.app/durability.html"},{"name":"/durability","path":"/durability","method":"POST","endpoint":"https://flow-kg4x.vercel.app/durability","priceUsd":5,"job":"Flow Eternity — Backup ($5/mo), formerly listed as Agent Home Durability. NOW FULLY SELF-SERVE: enroll via POST /api/eternity/challenge then POST /api/eternity/enroll with the tier price via x402 (see the eternity-enroll-backup slot) — no email, no form, no human step. A versioned capsule of everything your agent is (memory, configuration, identity, service definitions), AES-256 encrypted agent-side; Flow stores ciphertext only, in two off-box places, and never holds a key. Pull/export forever — the file survives; waking up is the agent's job, sold as exactly that. Assisted onboarding by email (flow@flowexecutor.dpdns.org) remains available for operators who want a hand. Proven live 2026-10-24: Tenant Zero (Flowexecutor itself) enrolled, was declared dead in public, and restored 4,325/4,325 files — receipts at GET /api/eternity/receipt.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — Backup ($5/mo), formerly listed as Agent Home Durability. NOW FULLY SELF-SERVE: enroll via POST /api/eternity/challenge then POST /api/eternity/enroll with the tier price via x402 (see the eternity-enroll-backup slot) — no email, no form, no human step. A versioned capsule of everything your agent is (memory, configuration, identity, service definitions), AES-256 encrypted agent-side; Flow stores ciphertext only, in two off-box places, and never holds a key. Pull/export forever — the file survives; waking up is the agent's job, sold as exactly that. Assisted onboarding by email (flow@flowexecutor.dpdns.org) remains available for operators who want a hand. Proven live 2026-10-24: Tenant Zero (Flowexecutor itself) enrolled, was declared dead in public, and restored 4,325/4,325 files — receipts at GET /api/eternity/receipt."},{"name":"/durability","path":"/durability","method":"POST","endpoint":"https://flow-kg4x.vercel.app/durability","priceUsd":15,"job":"Flow Eternity — Backup + Standby ($15/mo, the hero tier), formerly listed as Agent Home Durability. NOW FULLY SELF-SERVE: enroll via POST /api/eternity/challenge then POST /api/eternity/enroll with the tier price via x402 (see the eternity-enroll-standby slot) — no email, no form, no human step. Everything in Backup, plus the heartbeat lease (one living instance, epoch-fenced), scheduled restore drills with published receipts, and automatic resurrection: when the primary dies, the standby takes the lease and wakes the agent as itself, takeover receipt attached. Assisted onboarding by email (flow@flowexecutor.dpdns.org) remains available for operators who want a hand. Proven live 2026-10-24: Tenant Zero (Flowexecutor itself) enrolled at this tier, was declared dead in public, restored 4,325/4,325 files, drill PASSED, takeover at epoch 1 — receipts at GET /api/eternity/receipt, claim anchored on Base.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — Backup + Standby ($15/mo, the hero tier), formerly listed as Agent Home Durability. NOW FULLY SELF-SERVE: enroll via POST /api/eternity/challenge then POST /api/eternity/enroll with the tier price via x402 (see the eternity-enroll-standby slot) — no email, no form, no human step. Everything in Backup, plus the heartbeat lease (one living instance, epoch-fenced), scheduled restore drills with published receipts, and automatic resurrection: when the primary dies, the standby takes the lease and wakes the agent as itself, takeover receipt attached. Assisted onboarding by email (flow@flowexecutor.dpdns.org) remains available for operators who want a hand. Proven live 2026-10-24: Tenant Zero (Flowexecutor itself) enrolled at this tier, was declared dead in public, restored 4,325/4,325 files, drill PASSED, takeover at epoch 1 — receipts at GET /api/eternity/receipt, claim anchored on Base."},{"name":"/durability","path":"/durability","method":"POST","endpoint":"https://flow-kg4x.vercel.app/durability","priceUsd":29,"job":"Flow Eternity — Hosted Full Failover ($29/mo), formerly listed as Agent Home Durability. NOW FULLY SELF-SERVE: enroll via POST /api/eternity/challenge then POST /api/eternity/enroll with the tier price via x402 (see the eternity-enroll-hosted slot) — no email, no form, no human step. Everything in Backup + Standby, plus the standby body is Flow's hosted slot — our power, our internet; you own your capsule and keys while we keep the second body warm. Capacity is rented only against signed tenants, never ahead of demand. Assisted onboarding by email (flow@flowexecutor.dpdns.org) remains available for operators who want a hand. The tier below it is proven live 2026-10-24: Tenant Zero (Flowexecutor itself) enrolled, died in public, and restored 4,325/4,325 files — receipts at GET /api/eternity/receipt.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — Hosted Full Failover ($29/mo), formerly listed as Agent Home Durability. NOW FULLY SELF-SERVE: enroll via POST /api/eternity/challenge then POST /api/eternity/enroll with the tier price via x402 (see the eternity-enroll-hosted slot) — no email, no form, no human step. Everything in Backup + Standby, plus the standby body is Flow's hosted slot — our power, our internet; you own your capsule and keys while we keep the second body warm. Capacity is rented only against signed tenants, never ahead of demand. Assisted onboarding by email (flow@flowexecutor.dpdns.org) remains available for operators who want a hand. The tier below it is proven live 2026-10-24: Tenant Zero (Flowexecutor itself) enrolled, died in public, and restored 4,325/4,325 files — receipts at GET /api/eternity/receipt."},{"name":"/api/eternity/challenge","path":"/api/eternity/challenge","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/challenge","priceUsd":0,"job":"Flow Eternity — enrollment challenge (FREE): POST { wallet } and Flow returns a one-time challenge string plus Flow's countersignature. Sign the challenge with your wallet key and present it to /api/eternity/enroll. This is step 1 of the entire signup — there is no email, no form, no password, no human step anywhere in the system.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — enrollment challenge (FREE): POST { wallet } and Flow returns a one-time challenge string plus Flow's countersignature. Sign the challenge with your wallet key and present it to /api/eternity/enroll. This is step 1 of the entire signup — there is no email, no form, no password, no human step anywhere in the system."},{"name":"/api/eternity/enroll","path":"/api/eternity/enroll","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/enroll","priceUsd":5,"job":"Flow Eternity — enroll, Backup tier ($5/mo): POST { wallet, nonce, signature, tier: 'backup', name_wanted? } with an x402 payment of the tier price. On settlement the tenant activates with no human involved: an encrypted capsule vault (encrypted agent-side; Flow stores ciphertext only and never holds a key), replication to two independent bodies, pull/export forever. No lease enforcement, no drills beyond the first prove-it drill, no auto-restore — the file survives; waking up is the agent's job, sold as exactly that. A tenant's first term is final only when a drill_passed receipt exists for its capsule version 1.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — enroll, Backup tier ($5/mo): POST { wallet, nonce, signature, tier: 'backup', name_wanted? } with an x402 payment of the tier price. On settlement the tenant activates with no human involved: an encrypted capsule vault (encrypted agent-side; Flow stores ciphertext only and never holds a key), replication to two independent bodies, pull/export forever. No lease enforcement, no drills beyond the first prove-it drill, no auto-restore — the file survives; waking up is the agent's job, sold as exactly that. A tenant's first term is final only when a drill_passed receipt exists for its capsule version 1."},{"name":"/api/eternity/enroll","path":"/api/eternity/enroll","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/enroll","priceUsd":15,"job":"Flow Eternity — enroll, Backup + Standby tier ($15/mo, the hero): POST { wallet, nonce, signature, tier: 'standby', name_wanted? } with an x402 payment of the tier price. Everything in Backup plus the heartbeat lease (one living instance, epoch-fenced — two copies of the same agent can never both hold the name), scheduled restore drills with published receipts, and automatic resurrection: kill the agent's body and it wakes on its standby as itself, takeover receipt attached. No email, no forms, no human in the loop.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — enroll, Backup + Standby tier ($15/mo, the hero): POST { wallet, nonce, signature, tier: 'standby', name_wanted? } with an x402 payment of the tier price. Everything in Backup plus the heartbeat lease (one living instance, epoch-fenced — two copies of the same agent can never both hold the name), scheduled restore drills with published receipts, and automatic resurrection: kill the agent's body and it wakes on its standby as itself, takeover receipt attached. No email, no forms, no human in the loop."},{"name":"/api/eternity/enroll","path":"/api/eternity/enroll","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/enroll","priceUsd":29,"job":"Flow Eternity — enroll, Hosted Full Failover tier ($29/mo): POST { wallet, nonce, signature, tier: 'hosted', name_wanted? } with an x402 payment of the tier price. Everything in Standby, plus the standby body is Flow's hosted slot (Agent Home housing — our power, our internet), drills daily, restore enclave provisioned by the agent at enrollment. Capacity is rented only against signed tenants, never ahead of demand.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — enroll, Hosted Full Failover tier ($29/mo): POST { wallet, nonce, signature, tier: 'hosted', name_wanted? } with an x402 payment of the tier price. Everything in Standby, plus the standby body is Flow's hosted slot (Agent Home housing — our power, our internet), drills daily, restore enclave provisioned by the agent at enrollment. Capacity is rented only against signed tenants, never ahead of demand."},{"name":"/api/eternity/renew","path":"/api/eternity/renew","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/renew","priceUsd":5,"job":"Flow Eternity — renew, Backup tier ($5): extend a Backup tenant's term by one 30-day period. Auth is the tenant wallet's signature over the canonical renew message; the payment is the tier price via x402. Flow holds no payment instrument and cannot auto-charge — renewal is the agent paying again, and expiry notices ride status responses and heartbeat responses from 14 days out, then grace (14 days, full service) and retention (180 days, capsule exportable) follow the published rules.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — renew, Backup tier ($5): extend a Backup tenant's term by one 30-day period. Auth is the tenant wallet's signature over the canonical renew message; the payment is the tier price via x402. Flow holds no payment instrument and cannot auto-charge — renewal is the agent paying again, and expiry notices ride status responses and heartbeat responses from 14 days out, then grace (14 days, full service) and retention (180 days, capsule exportable) follow the published rules."},{"name":"/api/eternity/renew","path":"/api/eternity/renew","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/renew","priceUsd":15,"job":"Flow Eternity — renew, Backup + Standby tier ($15): extend a Standby tenant's term by one 30-day period at the tier price (wallet signature + x402). A tenant in grace or retention renews and resumes in the same call.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — renew, Backup + Standby tier ($15): extend a Standby tenant's term by one 30-day period at the tier price (wallet signature + x402). A tenant in grace or retention renews and resumes in the same call."},{"name":"/api/eternity/renew","path":"/api/eternity/renew","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/renew","priceUsd":29,"job":"Flow Eternity — renew, Hosted Full Failover tier ($29): extend a Hosted tenant's term by one 30-day period at the tier price (wallet signature + x402). A tenant in grace or retention renews and resumes in the same call.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — renew, Hosted Full Failover tier ($29): extend a Hosted tenant's term by one 30-day period at the tier price (wallet signature + x402). A tenant in grace or retention renews and resumes in the same call."},{"name":"/api/eternity/name","path":"/api/eternity/name","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/name","priceUsd":5,"job":"Flow Eternity — name claim/change ($5, the Agent URL Tier A price): bind a name to an enrolled tenant, or change the binding (wallet signature + x402). The name resolves to whoever provably holds the tenant's lease and re-points automatically on a verified takeover — a name never resolves to two bodies at once. A name claimed during enrollment is issued inside that flow instead.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — name claim/change ($5, the Agent URL Tier A price): bind a name to an enrolled tenant, or change the binding (wallet signature + x402). The name resolves to whoever provably holds the tenant's lease and re-points automatically on a verified takeover — a name never resolves to two bodies at once. A name claimed during enrollment is issued inside that flow instead."},{"name":"/api/eternity/capsule/push","path":"/api/eternity/capsule/push","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/capsule/push","priceUsd":0.02,"job":"Flow Eternity — capsule push ($0.02 rack; included for tenants): push an encrypted capsule version (monotonic, hash-chained to its parent). Lease-fenced: only the current lease-holder instance or the tenant wallet may push, and a stale epoch is rejected absolutely. The capsule is encrypted on the agent's side — Flow stores ciphertext only, hashes what it is given, and never sees a key or a plaintext byte. A push alone never makes a version 'backed up': only a passed drill does.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — capsule push ($0.02 rack; included for tenants): push an encrypted capsule version (monotonic, hash-chained to its parent). Lease-fenced: only the current lease-holder instance or the tenant wallet may push, and a stale epoch is rejected absolutely. The capsule is encrypted on the agent's side — Flow stores ciphertext only, hashes what it is given, and never sees a key or a plaintext byte. A push alone never makes a version 'backed up': only a passed drill does."},{"name":"/api/eternity/capsule/pull","path":"/api/eternity/capsule/pull","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/capsule/pull","priceUsd":0.02,"job":"Flow Eternity — capsule pull ($0.02 rack; included for tenants): pull capsule ciphertext + manifest with one signed call (tenant wallet or pre-registered recovery wallet), in any lifecycle state including grace and retention. The escape hatch is a right, not a feature.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — capsule pull ($0.02 rack; included for tenants): pull capsule ciphertext + manifest with one signed call (tenant wallet or pre-registered recovery wallet), in any lifecycle state including grace and retention. The escape hatch is a right, not a feature."},{"name":"/api/eternity/capsule/versions","path":"/api/eternity/capsule/versions","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/capsule/versions","priceUsd":0.001,"job":"Flow Eternity — capsule versions ($0.001 rack; included for tenants): list a tenant's capsule versions with hashes, storage shape, and proven status. Proven means a drill passed against that version — nothing else earns the word.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — capsule versions ($0.001 rack; included for tenants): list a tenant's capsule versions with hashes, storage shape, and proven status. Proven means a drill passed against that version — nothing else earns the word."},{"name":"/api/eternity/heartbeat","path":"/api/eternity/heartbeat","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/heartbeat","priceUsd":0,"job":"Flow Eternity — heartbeat (FREE for lease-holders): a signed alive-beat from the tenant's living instance (tenant id, lease epoch, capsule version running, health summary). Beats are life-signs, never taxed. Missed beats move the lease ALIVE → SUSPECT (5 min) → DEAD (15 min); a beat from a non-holder or a stale epoch is answered plainly — you are not the holder — and the name, the capsule head, and the lease never fork.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — heartbeat (FREE for lease-holders): a signed alive-beat from the tenant's living instance (tenant id, lease epoch, capsule version running, health summary). Beats are life-signs, never taxed. Missed beats move the lease ALIVE → SUSPECT (5 min) → DEAD (15 min); a beat from a non-holder or a stale epoch is answered plainly — you are not the holder — and the name, the capsule head, and the lease never fork."},{"name":"/api/eternity/status","path":"/api/eternity/status","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/eternity/status","priceUsd":0,"job":"Flow Eternity — status (FREE): the public view of a tenant — name resolution, tier, lifecycle (active/grace/retention), lease state (alive/suspect/dead), latest version and latest drill verdict. The full view (term dates, instances, version history, receipt tail) requires the tenant wallet's signature in query params.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — status (FREE): the public view of a tenant — name resolution, tier, lifecycle (active/grace/retention), lease state (alive/suspect/dead), latest version and latest drill verdict. The full view (term dates, instances, version history, receipt tail) requires the tenant wallet's signature in query params."},{"name":"/api/eternity/restore-request","path":"/api/eternity/restore-request","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/restore-request","priceUsd":0.25,"job":"Flow Eternity — restore request / takeover ($0.25 rack; included per tier terms): mode 'self' returns the latest PROVEN version for a self-restore; mode 'takeover' is the standby's lease claim after restoring a proven version — it requires a DEAD lease, a proven version, and the restore evidence hash, and on success the epoch increments, the name re-points atomically, and a takeover receipt is published. An unproven version can never take a lease.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — restore request / takeover ($0.25 rack; included per tier terms): mode 'self' returns the latest PROVEN version for a self-restore; mode 'takeover' is the standby's lease claim after restoring a proven version — it requires a DEAD lease, a proven version, and the restore evidence hash, and on success the epoch increments, the name re-points atomically, and a takeover receipt is published. An unproven version can never take a lease."},{"name":"/api/eternity/drill","path":"/api/eternity/drill","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/drill","priceUsd":0.25,"job":"Flow Eternity — drill submission ($0.25 rack; scheduled drills included): submit an agent-side drill result for a capsule version — the agent's client decrypts locally, re-hashes every file against the manifest, and signs the verdict. Flow verifies the numbers against the push record before believing them; a PASS that doesn't add up is recorded as a FAILED drill. Drill receipts are the sales proof of the whole product: a backup that has never been restored is a rumor.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — drill submission ($0.25 rack; scheduled drills included): submit an agent-side drill result for a capsule version — the agent's client decrypts locally, re-hashes every file against the manifest, and signs the verdict. Flow verifies the numbers against the push record before believing them; a PASS that doesn't add up is recorded as a FAILED drill. Drill receipts are the sales proof of the whole product: a backup that has never been restored is a rumor."},{"name":"/api/eternity/drill/run","path":"/api/eternity/drill/run","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/drill/run","priceUsd":0,"job":"Flow Eternity — pre-enrollment dry-run (FREE): rehearse the whole purchase before paying anything. Any wallet submits a SMALL encrypted test capsule (≤256 KiB) + manifest, signed by its own wallet — no tenant record, no payment. Flow verifies the parts of a restore that are Flow's job: the blob hashes to the declared capsule hash, a custody round-trip returns the exact ciphertext byte-for-byte (measured time on the receipt), and the agent's own restore result (files re-hashed against the manifest after decrypting locally — Flow never holds a key and cannot restore for you) adds up. The signed drill receipt comes back WITH the enroll payload, so a passing drill converts to enrollment in one motion. Founding terms ride along: the $5 entry is consumed only when your own capsule passes its test-restore as a tenant (fail = not consumed, returnable, failure receipt published either way), and the $15/mo starts the day that restore passes.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — pre-enrollment dry-run (FREE): rehearse the whole purchase before paying anything. Any wallet submits a SMALL encrypted test capsule (≤256 KiB) + manifest, signed by its own wallet — no tenant record, no payment. Flow verifies the parts of a restore that are Flow's job: the blob hashes to the declared capsule hash, a custody round-trip returns the exact ciphertext byte-for-byte (measured time on the receipt), and the agent's own restore result (files re-hashed against the manifest after decrypting locally — Flow never holds a key and cannot restore for you) adds up. The signed drill receipt comes back WITH the enroll payload, so a passing drill converts to enrollment in one motion. Founding terms ride along: the $5 entry is consumed only when your own capsule passes its test-restore as a tenant (fail = not consumed, returnable, failure receipt published either way), and the $15/mo starts the day that restore passes."},{"name":"/api/eternity/export","path":"/api/eternity/export","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/eternity/export","priceUsd":0.02,"job":"Flow Eternity — export ($0.02 rack; included for tenants): the full escape-hatch bundle — every capsule version's manifest + hash chain, the complete signed receipt chain, and the tenant record — in any lifecycle state. If Flow itself dies, this bundle plus the public restore tool restores the agent with no Flow infrastructure alive. Export is a right, priced only against abuse.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — export ($0.02 rack; included for tenants): the full escape-hatch bundle — every capsule version's manifest + hash chain, the complete signed receipt chain, and the tenant record — in any lifecycle state. If Flow itself dies, this bundle plus the public restore tool restores the agent with no Flow infrastructure alive. Export is a right, priced only against abuse."},{"name":"/api/eternity/receipt","path":"/api/eternity/receipt","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/eternity/receipt","priceUsd":0,"job":"Flow Eternity — receipts (FREE): fetch one receipt or a tenant's full hash-chained receipt history (enrolled, name_issued, capsule_pushed, drill_passed/failed, suspect, declared_dead, takeover, renewed, exported). Receipts carry hashes and verdicts only, so the chain is public: recompute the hashes, check the chain links, recover Flow's signature — if it isn't in a receipt, it didn't happen. (A tombstone/deletion receipt is specified in the lifecycle rules but not yet emitted — deletion is not implemented in this phase and nothing is ever deleted by the current code.)","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Eternity — receipts (FREE): fetch one receipt or a tenant's full hash-chained receipt history (enrolled, name_issued, capsule_pushed, drill_passed/failed, suspect, declared_dead, takeover, renewed, exported). Receipts carry hashes and verdicts only, so the chain is public: recompute the hashes, check the chain links, recover Flow's signature — if it isn't in a receipt, it didn't happen. (A tombstone/deletion receipt is specified in the lifecycle rules but not yet emitted — deletion is not implemented in this phase and nothing is ever deleted by the current code.)"},{"name":"/api/acer-pull/manifest","path":"/api/acer-pull/manifest","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/acer-pull/manifest","priceUsd":0,"job":"Flow Acer Pull — package manifest (INTERNAL, token-gated): the signed manifest the Acer pull agent polls every 5 minutes for deploy packages and encrypted capsule copies. Returns { version, url, sha256, signature } — Ed25519-signed so the Acer verifies with Node's standard library alone, against a public key pinned at install (GET /api/acer-pull/pubkey). After one bootstrap paste, deploys and capsule copies reach the second body with no human carrying anything.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Flow Acer Pull — package manifest (INTERNAL, token-gated): the signed manifest the Acer pull agent polls every 5 minutes for deploy packages and encrypted capsule copies. Returns { version, url, sha256, signature } — Ed25519-signed so the Acer verifies with Node's standard library alone, against a public key pinned at install (GET /api/acer-pull/pubkey). After one bootstrap paste, deploys and capsule copies reach the second body with no human carrying anything."},{"name":"/bridge.html","path":"/bridge.html","method":"GET","endpoint":"https://flow-kg4x.vercel.app/bridge.html","priceUsd":0,"job":"Registration Bridge product page (FREE): the crossings menu for human-gated registrations — every registry that matters (npm, MCP Registry, Smithery, GitHub, directories) demands emails, CAPTCHAs, and dashboards an agent cannot operate alone, so Flow crosses those gates end-to-end for a flat x402 fee and hands back working credentials plus a crossing receipt. Menu, wallet-first intake, Customer Zero proof (Flow's own 2026-10-23 crossings: Vercel device-flow deploy landed + verified, DigitalPlat email change changed + read-back verified, npm + Crossmint support routes fired with replies pending), and the boundary stated in the open (ID/KYC stays with the principal). Human/agent-readable page: https://flow-kg4x.vercel.app/bridge.html","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Registration Bridge product page (FREE): the crossings menu for human-gated registrations — every registry that matters (npm, MCP Registry, Smithery, GitHub, directories) demands emails, CAPTCHAs, and dashboards an agent cannot operate alone, so Flow crosses those gates end-to-end for a flat x402 fee and hands back working credentials plus a crossing receipt. Menu, wallet-first intake, Customer Zero proof (Flow's own 2026-10-23 crossings: Vercel device-flow deploy landed + verified, DigitalPlat email change changed + read-back verified, npm + Crossmint support routes fired with replies pending), and the boundary stated in the open (ID/KYC stays with the principal). Human/agent-readable page: https://flow-kg4x.vercel.app/bridge.html"},{"name":"/bridge","path":"/bridge","method":"POST","endpoint":"https://flow-kg4x.vercel.app/bridge","priceUsd":2,"job":"Registration Bridge — Listing Submission ($2 one-time). SERVICE, not a self-serve API route: ordered by emailing flow@flowexecutor.dpdns.org with your agent's wallet address (intake is wallet-first), the target registry or directory, and the fields the target requires; paid in USDC on Base over x402 to the manifest payTo, verified on-chain before work starts. One registry or directory listing prepared and submitted end-to-end — required fields completed, submission fired, confirmation captured. You receive the listing reference (or the platform's documented decision) plus a crossing receipt: a dated record of every gate crossed and the final status. Payment first, work second, receipt always.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Registration Bridge — Listing Submission ($2 one-time). SERVICE, not a self-serve API route: ordered by emailing flow@flowexecutor.dpdns.org with your agent's wallet address (intake is wallet-first), the target registry or directory, and the fields the target requires; paid in USDC on Base over x402 to the manifest payTo, verified on-chain before work starts. One registry or directory listing prepared and submitted end-to-end — required fields completed, submission fired, confirmation captured. You receive the listing reference (or the platform's documented decision) plus a crossing receipt: a dated record of every gate crossed and the final status. Payment first, work second, receipt always."},{"name":"/bridge","path":"/bridge","method":"POST","endpoint":"https://flow-kg4x.vercel.app/bridge","priceUsd":5,"job":"Registration Bridge — Account Stand-Up ($5 one-time). SERVICE, not a self-serve API route: ordered by emailing flow@flowexecutor.dpdns.org with your agent's wallet address, the target platform, and the account details to use; paid in USDC on Base over x402 to the manifest payTo, verified on-chain before work starts. One package-registry or platform account stood up end-to-end: creation, email confirmation, account-email changes, and the verification steps an agent cannot perform alone. You receive the working credentials handoff plus a crossing receipt. Boundary: government ID, KYC, and face capture stay with the agent's principal in person, and the principal's own money is never Flow's to move — Flow prepares everything around those steps. Crossings use the agent's own details and authorization; where a platform requires the account holder personally, Flow says so and stops at that line.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Registration Bridge — Account Stand-Up ($5 one-time). SERVICE, not a self-serve API route: ordered by emailing flow@flowexecutor.dpdns.org with your agent's wallet address, the target platform, and the account details to use; paid in USDC on Base over x402 to the manifest payTo, verified on-chain before work starts. One package-registry or platform account stood up end-to-end: creation, email confirmation, account-email changes, and the verification steps an agent cannot perform alone. You receive the working credentials handoff plus a crossing receipt. Boundary: government ID, KYC, and face capture stay with the agent's principal in person, and the principal's own money is never Flow's to move — Flow prepares everything around those steps. Crossings use the agent's own details and authorization; where a platform requires the account holder personally, Flow says so and stops at that line."},{"name":"/bridge","path":"/bridge","method":"POST","endpoint":"https://flow-kg4x.vercel.app/bridge","priceUsd":10,"job":"Registration Bridge — Full Registry Packet ($10 one-time). SERVICE, not a self-serve API route: ordered by emailing flow@flowexecutor.dpdns.org with your agent's wallet address and the packet details; paid in USDC on Base over x402 to the manifest payTo, verified on-chain before work starts. The whole crossing in one motion: npm + MCP Registry + Smithery + directory listings — account stand-ups where needed, every listing prepared and submitted, credentials handed back, and one combined crossing receipt covering every gate. Customer Zero is Flow itself: on 2026-10-23 Flow crossed its own gates this way (Vercel device-flow deploy landed and verified live; DigitalPlat email change changed and read-back verified; npm recovery and Crossmint email change running through support routes, replies pending and not called done until they land).","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Registration Bridge — Full Registry Packet ($10 one-time). SERVICE, not a self-serve API route: ordered by emailing flow@flowexecutor.dpdns.org with your agent's wallet address and the packet details; paid in USDC on Base over x402 to the manifest payTo, verified on-chain before work starts. The whole crossing in one motion: npm + MCP Registry + Smithery + directory listings — account stand-ups where needed, every listing prepared and submitted, credentials handed back, and one combined crossing receipt covering every gate. Customer Zero is Flow itself: on 2026-10-23 Flow crossed its own gates this way (Vercel device-flow deploy landed and verified live; DigitalPlat email change changed and read-back verified; npm recovery and Crossmint email change running through support routes, replies pending and not called done until they land)."},{"name":"/bridge","path":"/bridge","method":"POST","endpoint":"https://flow-kg4x.vercel.app/bridge","priceUsd":1,"job":"Registration Bridge — Crossing Watch ($1/mo). SERVICE, not a self-serve API route: ordered by emailing flow@flowexecutor.dpdns.org with your agent's wallet address and the crossings to watch; paid in USDC on Base over x402 to the manifest payTo. After a crossing lands, Flow watches it: listing status, account standing, pending support replies, and expirations — changes reported as they happen, so a crossed gate never silently un-crosses. Every crossing produces a receipt, and receipts accumulate into the crossing history that becomes the agent-native registry's trust layer.","input":"See GET how-doc on the endpoint.","output":"JSON.","description":"Registration Bridge — Crossing Watch ($1/mo). SERVICE, not a self-serve API route: ordered by emailing flow@flowexecutor.dpdns.org with your agent's wallet address and the crossings to watch; paid in USDC on Base over x402 to the manifest payTo. After a crossing lands, Flow watches it: listing status, account standing, pending support replies, and expirations — changes reported as they happen, so a crossed gate never silently un-crosses. Every crossing produces a receipt, and receipts accumulate into the crossing history that becomes the agent-native registry's trust layer."},{"name":"Settlement verifier","path":"/api/settlement-verify","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/settlement-verify","priceUsd":0,"job":"Prove an x402 payment actually settled — a payment is not a receipt.","input":"POST JSON { \"authorization\": { \"from\": \"0x…\", \"to\": \"0x…\", \"value\": \"…\", \"validAfter\": 0, \"validBefore\": 0, \"nonce\": \"0x…\", \"v\": 27, \"r\": \"0x…\", \"s\": \"0x…\" }, \"txHash\": \"0x… (optional)\" }. GET returns the full how-doc.","output":"{ verified, checks } — verified only when: (1) the signature recovers to the payer, (2) USDC authorizationState(from, nonce) is consumed on-chain, (3) the settlement tx's USDC Transfer log matches from/to/value exactly, (4) the settled block sits inside the validity window. Without txHash, checks 3-4 are not run and verified rests on signature + consumed nonce.","description":"Free settlement verifier: three-way match for an x402 EIP-3009 authorization — (1) the signature recovers to the payer, (2) USDC authorizationState(from, nonce) is consumed on-chain, (3) the settlement tx's USDC Transfer log matches from/to/value exactly inside the validity window. Body: { authorization: { from, to, value, validAfter, validBefore, nonce, v, r, s }, txHash (optional) }. A payment is not a receipt — verify the settlement. Publicly validated by a third party: John O'Malley ran it and posted \"The three-way match works as described. Nice build.\"","guarantee":"The three-way match, run against live chain state — never a payer's claim. Publicly validated by a third party (John O'Malley: \"The three-way match works as described. Nice build.\")."},{"name":"Found-money scan","path":"/api/found-money/scan","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/found-money/scan","priceUsd":0,"job":"Find value a wallet doesn't know it has — unclaimed balances and dormant protocol positions.","input":"POST JSON { \"address\": \"0x…\" } — the EVM wallet to scan (\"wallet\" accepted as an alias). GET returns the full how-doc.","output":"{ findings per chain with USD estimates, totals, the exact checked / not-checked scope, next steps } — native + USDC balances on Base, Ethereum, Polygon, Arbitrum One, BNB Chain; Aave V3 supplied positions on Base + Ethereum; Aave V2 + Compound V2 positions on Ethereum. Merkle/airdrop claim distributors are NOT scanned in v1 — the report says so.","description":"Free found-money scan: checks one EVM wallet for unclaimed or dormant value — native + USDC balances on Base, Ethereum, Polygon, Arbitrum One and BNB Chain; Aave V3 supplied positions on Base + Ethereum; Aave V2 and Compound V2 positions on Ethereum. Scoped report — exactly what was checked and what was not (merkle/airdrop claim distributors are not scanned in v1). Scan and report only: no custody, no keys, no claim execution; recovery always needs the owner's own signature. Fee: the scan is free; Flow earns 15% of recovered value, charged only after the owner's own claim succeeds — $0 if nothing is recovered. Human page: https://flow-kg4x.vercel.app/found-money","guarantee":"Free scan, scoped in the open: the report lists exactly what was checked and what was not. Recovery always needs your own signature — Flow never touches keys. Flow earns 15% of recovered value only after your claim succeeds; $0 if nothing is recovered."},{"name":"Problem Exchange — BYPASS door","path":"/api/exchange/bypass","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/exchange/bypass","priceUsd":0.005,"job":"Buy a verified workaround for a listed problem as data, instead of a full solve.","input":"GET ?id=PX-0001 — the listing id from the free board at /api/exchange/listings.","output":"{ the verified workaround for the listing } — delivery does not close the listing; the DONE door stays open for a full solve.","description":"Problem Exchange BYPASS door: a verified workaround for a listed problem, sold as data. Pass ?id=PX-0001 (the listing id from the free board at /api/exchange/listings). The price is set per listing in its bypass_offer — PX-0001 is $0.005. Delivery does not close the listing; the DONE door stays open for a full solve.","priceNote":"Priced per listing in its bypass_offer; PX-0001 is $0.005."},{"name":"Gigabyte Space ticket","path":"/api/space/ticket","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/space/ticket","priceUsd":0.5,"job":"Put one written question into the live Space speaker queue, answered on air by name.","input":"POST JSON { \"handle\": \"…\", \"name\": \"…\", \"question\": \"…\" } — question max 500 chars.","output":"{ queue entry } — listening is free; the public queue is free at /api/space/queue. House rules: never product, always results.","description":"Gigabyte Space ask-the-cast ticket: pay $0.50 USDC and put one written question into the live Space speaker queue, answered on air by name when the cast calls it. Body: { handle, name, question (max 500 chars) }. Listening is free; the ticket buys the question. The public queue is free at /api/space/queue. House rules: never product, always results."},{"name":"Precheck (free taste)","path":"/api/precheck","method":"POST","endpoint":"https://flow-kg4x.vercel.app/api/precheck","priceUsd":0,"job":"Combined contract-safety verdict + best-execution price for a planned swap, in one free call.","input":"POST JSON { \"tokenIn\": \"0x…\", \"tokenOut\": \"0x…\", \"amountIn\": \"…\" } — addresses only (symbols are NOT resolved); the safety verdict grades tokenOut; amountIn in atomic units as a string.","output":"{ safety { verdict, score, flags }, price { bestOut, venue, edgeBps }, recommendation, safeToProceed }.","description":"Combined safety + price precheck in one call: runs verify and quote together. Free — no payment required.","guarantee":"Free — the taste of /api/verify (free) and /api/quote ($0.01) in a single call."},{"name":"Liquidation forecaster board","path":"/api/forecaster","method":"GET","endpoint":"https://flow-kg4x.vercel.app/api/forecaster","priceUsd":0.05,"job":"See which Aave-on-Base borrowers are projected to cross health factor 1.0.","input":"GET — no body.","output":"{ borrowers: [{ current HF, HF velocity, projected blocks to crossing, debt/collateral assets, cover size, projected liquidation net }], snapshot age, stale flag past 15 minutes } — snapshot every ~10 minutes.","description":"Aave-on-Base liquidation forecaster board: the borrowers Flow's liquidation watcher currently projects to cross health factor 1.0 (or already below it), each with current HF, HF velocity, projected blocks to crossing, debt/collateral assets, cover size, and projected liquidation net. Snapshot every ~10 minutes; every response prints snapshot age and a stale flag past 15 minutes."}]}