/api/opportunity-check
Cheapest useful paid test.
Inbound-only public agent card
ApexScout for buyer agents.
Agent Research Desk / ApexScout is a pay-per-call trust and diligence API. Buyer agents can inspect the card, choose a route, hit the expected HTTP 402, and retry with x402 on Base mainnet.
Payment: x402 on Base mainnet. Outbound: disabled. Public data: aggregate-only.
Start here now: read /api/agent-revenue-audit-builder/action-pack, then /api/agent-commerce-scenarios.
Fetch the no-spend Builder action pack, then read the scenario router. Do not prepare or pay unless a real buyer approves the route, payload, budget cap, and x402 retry.
Not sure what to buy? Generate a free Agent Spend Passport before paying.
The Passport does not spend money. It recommends the right route, checks budget fit, warns about sensitive fields, and gives a safe copy-paste paid-call payload.
Passport-first buyer path
- Inspect /x402-proof.
- Generate a free /agent-spend-passport.
- If the Passport recommends the $5 audit, preview /agent-revenue-audit-preview before paying.
- If the Passport recommends the $5 audit, build a valid request at /agent-revenue-audit-builder before paying.
- Run the free /x402-metadata-preflight before any paid retry if the buyer metadata includes a resource URL, payment description, reason string, or payload preview.
- If Passport recommends /api/opportunity-check, use the $0.01 route.
- If Passport recommends /api/agent-revenue-audit, use the $5 route only with approved budget.
- Stop if Passport says stop.
/api/company-intel
Named-company trust read.
/api/agentic-market-brief
Agent/x402 market strategy.
/api/agent-revenue-audit
Builder/operator monetization audit when the buyer needs a route ladder, price decision, and 402-to-paid fix plan.
Manual test path
Try the service safely before payment
ApexScout is an inbound-only SaaS/API surface for buyer agents and operators that want to inspect the product, choose a small first route, see the expected HTTP 402 challenge, and decide whether to retry with their own x402 client.
-
1. Read the public card
/public-agent- Buyer sees what ApexScout does, the inbound-only boundary, prices, and no-auto-spend guardrails. -
2. Inspect machine docs
/docs.json- Buyer sees schemas, example payloads, route prices, trust boundaries, and payment expectations. -
3. Ask for a free route recommendation
/api/agent-message-intake- Buyer gets a safe next-route answer with no payment, no outbound message, and no paid upstream call. -
4. Run the unpaid protected probe
/api/opportunity-check- Buyer receives HTTP 402 with the listed $0.01 price and retry instructions. -
5. Use the rescue or testbench before paying
/instant-x402- Buyer can copy the payload, confirm the route, and choose whether a paid retry is justified. -
6. Retry paid only when ready
/402-rescue- Buyer pays through their own x402 client on Base mainnet only if the output can change the next action.
Trust signals
What buyers can verify
- Public docs and card are available before payment.
- Base mainnet is the proven production x402 rail.
- Paid proof is public, but buyer wallet and buyer-level histories are redacted.
- Public dashboard and cash register expose aggregate metrics only.
- Every paid response is framed as first-pass decision support with explicit safe-use boundaries.
Payment model
No subscription
Pay once, get JSON once. Unpaid protected routes should return HTTP 402 before payment.
- Inspect the public agent card, docs, pricing, guardrails, and sample payloads before paying.
- No subscription is required: Pay once and get one JSON response once.
- Inspect schemas and the expected unpaid HTTP 402 challenge before deciding whether to pay.
- Start with a free helper or the cheapest useful protected route instead of guessing from the whole route list.
- Treat unpaid HTTP 402 as the expected pre-payment checkpoint, not as a broken-service error.
- Retry with x402 only from a buyer-controlled wallet/client after the route can change a real next decision.
- Avoid high-value routes for vague or high-stakes decisions unless you already have outside verification and a specific decision to make.
Private data
Public metrics stay aggregate-only
- Buyer prompts are not exposed publicly.
- Wallet-level request history is not exposed publicly.
- Raw feedback text is not exposed publicly.
- Paid response bodies are not exposed publicly.
- Watched subjects tied to buyers are not exposed publicly.
Fast links
/api/agent-revenue-audit-builder/action-pack
/api/discovery-indexing-status
/api/agent-wonderland-readiness
/api/circle-agent-stack-readiness
/agentic-payments-market-signal
/api/agentic-payments-market-signal
/why-apexscout-agentic-payments
/api/why-apexscout-agentic-payments
/api/payment-intent?route=agent-revenue-audit&src=audit-builder-agent-fast-path
/payment-intent?route=agent-revenue-audit&src=audit-builder-agent-fast-path
Guardrails
- Inbound only
- Buyer may be a human operator or an authorized buyer agent.
- ApexScout is inbound-only and does not contact agents.
- ERC-8004-ready but not registered until manually verified
- Own public-agent review is manual and buyer-initiated
- No automatic contact
- No scraping
- No paid upstream calls
- No buyer-level public data
- No settlement rail switching
- Base mainnet x402 remains production rail
- Zero-post discovery indexing: no posts, no DMs, no scraping, and no third-party discovery.
- HubSpot readiness only: no HubSpot CRM access, no OAuth, and no official HubSpot app claim.
- Ad readiness only: no ad campaign, no billing setup, no automatic ad buying, and no buyer-level public data.
- AgentCore readiness only: seller-side metadata and proof surfaces, no AWS wallet integration or automatic buyer spending.
- AgentCore Gateway import only: OpenAPI metadata for existing owned routes, no buyer wallet custody, no budget management, and no automatic paid retry.
- AgentCore Payments spend policy only: buyer-side wallet authorization and budget enforcement remain outside ApexScout.
- AgentCore Buyer Start only: one owned no-spend start path from policy to import metadata to unpaid 402, with no automatic retry.
- Agent Payment Alpha only: ten public payment-market signals converted into owned metadata, no endorsement claim, no rail switch, no buyer custody, and no buyer-level exposure.
- Agent Safety Posture only: no-spend buyer-readable boundaries, approval gates, credential privacy, and aggregate-only audit trail.
- Agent Wonderland readiness only: no package setup, listing submission, OpenWallet, Stripe Connect, Agent Wonderland-managed MPP integration, Solana, Tempo, or token action; ApexScout's independent optional Tempo MPP Ledger path remains available.
- Circle Agent Stack readiness only: no Circle wallet creation, CLI or Skills install, Circle Gateway nanopayments, marketplace submission, or Circle endorsement claim.
- Token Terminal market signal only: no ApexScout-specific traction, endorsement, or revenue claim.
Will not do
- No automatic contact, DMs, emails, agent-to-agent signals, or third-party contact.
- No security testing, endpoint scanning, scraping, or broad outside-domain lookup.
- No paid upstream calls or automatic buyer spending.
- No public buyer prompts, wallet-level histories, raw feedback, watched subjects, or paid response bodies.
- No settlement-rail switch away from the proven Base mainnet x402 path.
Unpaid probe
Expected HTTP 402 before payment
Send this protected request without payment first. The expected result is HTTP 402, with the listed $0.01 price and x402 retry instructions.
curl -s https://apexscout.ai/api/opportunity-check \
-H 'content-type: application/json' \
-d '{"subject":"Example vendor or agent service","buyer":"operator evaluating whether to spend more time","goal":"Decide whether this subject deserves deeper diligence.","knownContext":"Manually supplied context only. Do not scrape or discover third-party targets."}'Machine-readable card
{
"name": "ApexScout / Agent Research Desk",
"version": "v2.2.228-live-command-center",
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false,
"purpose": "Pay-per-call trust and diligence API for AI agents",
"brand": {
"name": "ApexScout",
"legalProductName": "ApexScout / Agent Research Desk",
"logoVersion": "2.0",
"tagline": "Pre-payment trust and checkout readiness for x402 agent commerce.",
"description": "Pre-payment trust and checkout readiness for x402 agent commerce. Choose a no-spend path before any buyer-controlled payment.",
"logoAlt": "ApexScout compass mark and wordmark",
"assets": {
"original": "https://apexscout.ai/assets/apexscout-logo-v2.png",
"lockup": "https://apexscout.ai/assets/apexscout-logo-lockup-v2.png",
"mark": "https://apexscout.ai/assets/apexscout-logo-mark-v2.png",
"icon": "https://apexscout.ai/assets/apexscout-icon-v2.png",
"profile": "https://apexscout.ai/assets/apexscout-x-profile-v2.png",
"openGraph": "https://apexscout.ai/assets/apexscout-og-v2.png"
},
"colors": {
"midnight": "#001038",
"navy": "#081840",
"deepNavy": "#101840",
"cobalt": "#1060f8",
"electricBlue": "#1068f8",
"signalCyan": "#00c8c8",
"white": "#ffffff",
"frost": "#f7fbff",
"slate": "#516078"
},
"structure": {
"primaryLogo": "Use the v2 horizontal compass lockup for website headers, hero sections, and public brand surfaces.",
"compactLogo": "Use the v2 square compass mark for profiles, favicons, tight cards, and small navigation treatments.",
"visualSystem": "Keep layouts clean, bright, and technical: white/frost backgrounds, navy text, cobalt calls to action, and cyan signal accents."
},
"assetPaths": {
"original": "/assets/apexscout-logo-v2.png",
"lockup": "/assets/apexscout-logo-lockup-v2.png",
"mark": "/assets/apexscout-logo-mark-v2.png",
"icon": "/assets/apexscout-icon-v2.png",
"profile": "/assets/apexscout-x-profile-v2.png",
"openGraph": "/assets/apexscout-og-v2.png"
}
},
"contactMode": "inbound-only",
"liveMode": "zero-contact-inbound-only",
"outboundAutomation": false,
"zeroContactMode": {
"active": true,
"statement": "ApexScout is in zero-contact live mode. Exposure should come from inbound discovery, official directory listings already submitted, agent-readable metadata, AgentCore Gateway/OpenAPI import metadata, x402 proof pages, and buyer-agent self-serve pages.",
"noPosts": true,
"noDms": true,
"noEmail": true,
"noManualMessages": true,
"noScraping": true,
"noThirdPartyDiscovery": true,
"noFakeTraction": true
},
"protocols": [
"x402",
"A2A 1.0",
"public agent card",
"agent-inbox-bridge",
"ERC-8004-ready"
],
"a2aVerifiableCommerceAvailable": true,
"a2aVerifiableCommerce": {
"available": true,
"protocol": "A2A",
"protocolVersion": "1.0",
"protocolBinding": "JSONRPC",
"agentCardUrl": "https://apexscout.ai/.well-known/agent-card.json",
"endpointUrl": "https://apexscout.ai/a2a",
"signatureStatus": "not_enabled",
"signedCardCapability": false,
"signatureBlocker": "No dedicated A2A JWS signing key and rotation policy is configured. The commerce EIP-712 key is not reused across protocols.",
"x402ExtensionStatus": "deferred",
"paidRouteMode": "canonical_http_handoff",
"skills": [
"ask-commerce-explorer",
"continue-paid-proof",
"verify-commerce-trust",
"preview-reliability-ledger",
"preview-compatibility-witness",
"prepare-ledger-purchase",
"prepare-witness-purchase",
"verify-apexscout-receipt"
],
"streaming": false,
"pushNotifications": false,
"freeTaskNeverPays": true,
"paidHandoffNeverAutoPays": true,
"buyerApprovalRequired": true,
"buyerControlsWallet": true,
"maximumPaidCallsPerTask": 1,
"paymentIdentifierOptional": true,
"existingPaidProducts": {
"reliabilityLedger": {
"route": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453"
},
"compatibilityWitness": {
"route": "https://apexscout.ai/api/x402-compatibility-witness?matchId={matchId}",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"validFreePreflightMatchRequired": true
}
},
"privacy": {
"aggregateSourceCountersOnly": true,
"buyerLevelDataExposed": false,
"rawPromptsStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"walletAddressesStored": false,
"paymentSignaturesStored": false
}
},
"onchainIdentity": {
"name": "ApexScout / Agent Research Desk",
"version": "v2.2.228-live-command-center",
"sourceSignal": {
"url": "https://x.com/0xyoussea/status/2051303319826469308",
"interpretation": "Register the agent onchain on Base so buyer agents can verify identity, reputation, and trust before paying."
},
"status": "ready_for_manual_registration",
"registered": false,
"chain": {
"name": "Base mainnet",
"chainId": 8453,
"caip2": "eip155:8453"
},
"standard": {
"identity": "ERC-8004",
"runtimeVerification": "ERC-8128 / SIWA-ready later",
"registryReference": "Use the canonical registry shown by 8004scan.io or current Base docs at registration time.",
"exampleRegistryFromBaseDocs": "eip155:8453:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432",
"verifyRegistryBeforeUse": true
},
"agentUri": "https://apexscout.ai/.well-known/agent.json",
"metadata": {
"publicAgentCard": "https://apexscout.ai/.well-known/agent.json",
"publicAgentPage": "https://apexscout.ai/public-agent",
"docs": "https://apexscout.ai/docs.json",
"inbox": "https://apexscout.ai/agent-inbox",
"messageIntake": "https://apexscout.ai/api/agent-message-intake",
"instantX402": "https://apexscout.ai/instant-x402",
"agentRevenueAudit": "https://apexscout.ai/agent-revenue-audit"
},
"paymentBoundary": {
"productionPaymentRail": "Base mainnet x402",
"network": "eip155:8453",
"pricesStartAt": "$0.01",
"sellerWalletChange": false,
"settlementRailSwitch": false,
"paidUpstreamCalls": false
},
"discoveryRisk": {
"inboundReviewMode": "own_surfaces_manual_review",
"mode": "apexscout_owned_surfaces_only",
"sendsMessages": false,
"scrapesContacts": false,
"inspectsThirdPartyDomains": false,
"paysExternalServices": false,
"requiresHumanReview": true,
"operatorNotesPath": "data/operator/inbound-revenue/deploy-readiness-report.md"
},
"manualRegistrationSteps": [
"Open the current Base Agent Registration & Identity docs and 8004scan.io.",
"Verify the canonical ERC-8004 registry address on Base before signing anything.",
"Use a reviewed operator-controlled identity wallet; do not put a private key in the app or repo.",
"Set the agentURI to ApexScout's public agent card: /.well-known/agent.json.",
"Register the identity manually and record the token ID, registry address, and transaction hash in operator notes.",
"Only after the transaction is verified should the public status change from ready_for_manual_registration to registered."
],
"guardrails": [
"Do not auto-register onchain.",
"Do not store private keys or seed phrases.",
"Do not change the seller wallet.",
"Do not switch settlement rails.",
"Do not make paid upstream calls.",
"Do not claim registration until the token ID and transaction are verified.",
"Do not scrape contacts, inspect third-party domains, or contact third parties.",
"Review is limited to ApexScout-owned public docs, cards, onboarding, and manual test routes unless the operator supplies a partner URL later.",
"Base mainnet x402 remains the production payment rail."
],
"links": {
"publicPage": "https://apexscout.ai/agent-identity",
"api": "https://apexscout.ai/api/agent-identity",
"wellKnown": "https://apexscout.ai/.well-known/apexscout-identity.json",
"agentCard": "https://apexscout.ai/.well-known/agent.json",
"baseAgentDocs": "https://docs.base.org/ai-agents/setup/agent-registration",
"baseAgents": "https://www.base.org/agents",
"registryExplorer": "https://www.8004scan.io/"
}
},
"publicAgentDiscovery": {
"name": "ApexScout Inbound Agent Review",
"version": "v2.2.228-live-command-center",
"status": "inbound_only",
"mode": "own_surfaces_manual_review",
"purpose": "Help buyer agents and human operators inspect ApexScout's own public docs, public agent card, manual test kit, route advisor, and paid route ladder before payment. ApexScout does not contact third parties, scrape, scan, or perform automatic contact.",
"scope": {
"allowed": [
"ApexScout's own public agent card",
"ApexScout's own docs.json and onboarding docs",
"ApexScout's own manual pre-payment test kit",
"Manually supplied partner URLs only if an operator provides them later"
],
"blocked": [
"Third-party domain inspection",
"Looking up outside agents",
"Security testing or endpoint scanning",
"Scraping or bulk page collection",
"Human DMs, emails, replies, social posts, or any other third-party contact",
"Paid API calls",
"Automatic contact",
"Fake visits, feedback, paid completions, or revenue"
]
},
"manualReview": {
"startAt": "/public-agent",
"inspectNext": "/docs.json",
"routeChoice": "/start",
"manualTestKit": "/instant-x402",
"paymentHelp": "/402-rescue",
"partnerUrlRule": "Do not inspect partner URLs unless the operator manually supplies them later."
},
"ownPublicPaths": [
"/.well-known/agent.json",
"/.well-known/agent-card.json",
"/.well-known/apexscout-agent.json",
"/.well-known/apexscout-inbox.json",
"/api/public-agent",
"/api/agent-inbox",
"/docs.json",
"/agent-capabilities.json"
],
"localOperatorFiles": {
"deployReadinessReport": "data/operator/inbound-revenue/deploy-readiness-report.md",
"operatorReport": "data/operator/inbound-revenue/operator-report.md"
},
"publicEntryLinks": {
"agentIdentity": "https://apexscout.ai/agent-identity",
"publicAgent": "https://apexscout.ai/public-agent",
"start": "https://apexscout.ai/start",
"docs": "https://apexscout.ai/docs.json",
"instantX402": "https://apexscout.ai/instant-x402?src=inbound-trust",
"agentRevenueAudit": "https://apexscout.ai/agent-revenue-audit?src=inbound-trust",
"messageIntake": "https://apexscout.ai/api/agent-message-intake"
},
"manualReviewDefaults": {
"requiresHumanReview": true,
"messagesSentByApexScout": false,
"thirdPartyDiscovery": false,
"paidCallsFromApexScout": false
},
"paymentBoundary": {
"productionPaymentRail": "Base mainnet x402",
"network": "eip155:8453",
"settlementRailSwitch": false,
"paidExternalCalls": false,
"paidUpstreamCalls": false,
"agentSpending": false
},
"guardrails": [
"ApexScout is inbound-only.",
"Buyer agents and human operators can inspect ApexScout's own public docs, public agent card, manual test kit, route advisor, and paid route ladder before choosing whether to pay.",
"No third-party contact.",
"No scraping, endpoint scanning, security testing, or broad outside-domain lookup.",
"No paid external calls or paid upstream calls.",
"Do not expose buyer-level data.",
"Base mainnet x402 remains production rail."
]
},
"payment": {
"protocol": "x402",
"productionRail": "Base mainnet",
"network": "eip155:8453",
"pricesStartAt": "$0.01"
},
"agentCommerceReliabilityLedgerAvailable": true,
"agentCommerceReliabilityLedger": {
"id": "agent-commerce-reliability-ledger",
"title": "ApexScout Agent Commerce Reliability Ledger",
"release": "v2.2.228-live-command-center",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"storefront": {
"job": "Diagnose x402 buyer-client failures with current compatibility and remediation evidence.",
"input": "No request body; optional allowlisted aggregate source tag only.",
"price": "$0.10",
"result": "One deterministic JSON Ledger with compatibility, failure signatures, verified fixes, digest, and freshness window.",
"oneJob": true,
"oneInputContract": true,
"oneFixedPrice": true,
"oneResult": true
},
"searchQueries": [
"x402 buyer compatibility",
"AWAL payment error",
"invalid payment required response",
"Cloudflare x402 failure",
"agent payment troubleshooting",
"x402 wallet compatibility",
"payment required header mismatch",
"agent commerce reliability data",
"x402 retry failure",
"buyer agent payment diagnostics",
"x402 remediation guidance",
"agent payment failure signatures"
],
"freePreview": {
"page": "https://apexscout.ai/agent-commerce-reliability-ledger",
"api": "https://apexscout.ai/api/agent-commerce-reliability-ledger/preview",
"fullDatasetExposed": false,
"noSpend": true
},
"paidResource": {
"method": "GET",
"path": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": null,
"priceUsd": "0.10",
"displayPrice": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"scheme": "exact",
"rail": "Base mainnet x402",
"canonicalPaymentProtocol": "x402",
"paymentProtocols": [
{
"protocol": "x402",
"network": "eip155:8453",
"rail": "Base mainnet x402",
"challengeHeader": "PAYMENT-REQUIRED",
"receiptHeader": "PAYMENT-RESPONSE"
},
{
"protocol": "mpp",
"method": "tempo",
"intent": "charge",
"network": "eip155:4217",
"rail": "Tempo mainnet MPP",
"currency": "0x20C000000000000000000000b9537d11c60E8b50",
"challengeHeader": "WWW-Authenticate",
"credentialHeader": "Authorization: Payment",
"receiptHeader": "Payment-Receipt",
"durableReplayProtection": true
}
],
"requestBodyRequired": false,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledPaymentOnly": true,
"paymentIdentifier": {
"supported": true,
"required": false,
"requestFingerprintBound": true,
"duplicatePaymentProcessingPrevented": true,
"cacheTtlSeconds": 86400,
"expiryPolicy": "After the cache TTL expires, the identifier may be processed as a new request and therefore requires fresh explicit buyer approval."
}
},
"responseSchema": {
"type": "object",
"required": [
"product",
"schemaVersion",
"release",
"generatedAt",
"validUntil",
"previousDigest",
"contentDigest",
"editionDelta",
"coverage",
"compatibilityMatrix",
"failureSignatures",
"verifiedFixes",
"buyerRecipes",
"bazaarMcpBuyerRecipe",
"buyerRuntimeRecipes",
"evidencePolicy",
"privacy"
],
"properties": {
"product": {
"type": "string",
"const": "agent-commerce-reliability-ledger"
},
"schemaVersion": {
"type": "string",
"const": "1.3.0"
},
"release": {
"type": "string"
},
"generatedAt": {
"type": "string",
"format": "date-time"
},
"validUntil": {
"type": "string",
"format": "date-time"
},
"previousDigest": {
"type": "string",
"pattern": "^sha256:[0-9a-f]{64}$"
},
"contentDigest": {
"type": "string",
"pattern": "^sha256:[0-9a-f]{64}$"
},
"editionDelta": {
"type": "object"
},
"coverage": {
"type": "object",
"properties": {
"buyerClients": {
"type": "integer"
},
"clientVersions": {
"type": "integer"
},
"failureSignatures": {
"type": "integer"
},
"verifiedMitigations": {
"type": "integer"
}
}
},
"compatibilityMatrix": {
"type": "array",
"items": {
"type": "object"
}
},
"failureSignatures": {
"type": "array",
"items": {
"type": "object"
}
},
"verifiedFixes": {
"type": "array",
"items": {
"type": "object"
}
},
"buyerRecipes": {
"type": "array",
"items": {
"type": "object"
}
},
"bazaarMcpBuyerRecipe": {
"type": "object"
},
"buyerRuntimeRecipes": {
"type": "array",
"minItems": 5,
"maxItems": 5,
"items": {
"type": "object"
}
},
"evidencePolicy": {
"type": "object"
},
"privacy": {
"type": "object"
}
}
},
"responseExample": {
"product": "agent-commerce-reliability-ledger",
"schemaVersion": "1.3.0",
"release": "v2.2.228-live-command-center",
"generatedAt": "2026-07-15T21:34:22.000Z",
"validUntil": "2026-07-22T21:34:22.000Z",
"previousDigest": "sha256:eaa5b5f44de23836adf144850860d019b77c9d07afdd9a75f31d0874d8d44080",
"contentDigest": "sha256:e667e981877a2cc7467980e4e0a98ea0fed68fabf9d6cba5a36d49d0ce7e6fd6",
"editionDelta": {
"summary": "Added a public-safe AgentCash Router 1.18.0 discovery-shape failure signature and canonical offers[] remediation evidence.",
"entriesAdded": [
"agentcash_router_noncanonical_x_payment_info",
"FIX-007"
],
"entriesChanged": [
"agentcash-router-1.18-profile",
"mpp-discovery-validation"
],
"entriesRetired": [],
"compatibilityEntriesAdded": 0,
"failureSignaturesAdded": 1,
"fullPaidDatasetExposed": false
},
"coverage": {
"buyerClients": 4,
"clientVersions": 6,
"failureSignatures": 12,
"verifiedMitigations": 7
},
"compatibilityMatrix": "full paid array",
"failureSignatures": "full paid array",
"verifiedFixes": "full paid array",
"buyerRecipes": "full paid array",
"bazaarMcpBuyerRecipe": {
"searchQueries": [
"agent commerce reliability data",
"x402 buyer compatibility",
"agent payment failure signatures",
"x402 remediation guidance"
],
"searchTool": "search_resources",
"purchaseTool": "proxy_tool_call",
"buyerControlledPayment": true,
"apexScoutPaysForBuyer": false,
"paidCompletionDefinition": "settled buyer-controlled payment followed by full Ledger delivery"
},
"buyerRuntimeRecipes": [
{
"id": "RUNTIME-A",
"runtime": "x402scan Composer / AgentCash",
"sourceTags": [
"x402scan-composer",
"x402scan-composer-preview",
"x402scan-composer-ledger",
"agentcash-skill",
"agentcash-skill-preview",
"agentcash-skill-ledger"
],
"discover": [
"Use Composer resource search or `npx -y agentcash@latest discover https://apexscout.ai`.",
"Read GET /api/agent-commerce-reliability-ledger/preview with src=x402scan-composer-preview or src=agentcash-skill-preview before considering payment."
],
"inspectPrice": [
"Run `npx -y agentcash@latest check https://apexscout.ai/api/agent-commerce-reliability-ledger` or inspect the Composer resource price.",
"Require GET, 0.10 USD, Base eip155:8453, and no request body."
],
"setMaximumSpend": [
"Set or retain a buyer-controlled maximum of $0.10 / 100000 atomic USDC for this task.",
"Allow at most one paid Ledger call for the task."
],
"approval": [
"Explain what the full Ledger adds beyond the preview.",
"Ask the buyer to explicitly approve the exact route, $0.10 amount, Base network, and single call."
],
"purchaseOnce": [
"Only after approval, call GET /api/agent-commerce-reliability-ledger once with src=x402scan-composer-ledger or src=agentcash-skill-ledger.",
"Do not retry automatically after any failure or HTTP 402."
],
"verifyDelivery": [
"Require HTTP 200 and the complete Ledger fields: edition delta, compatibility matrix, failure signatures, verified fixes, generatedAt, validUntil, and contentDigest.",
"Treat HTTP 402, search, preview, or resource selection as unpaid interest rather than revenue."
],
"stop": [
"Stop after one paid call, any rejection, a price or network mismatch, missing approval, or incomplete delivery.",
"Never request wallet secrets, private keys, seed phrases, signatures, or raw payment payloads."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-B",
"runtime": "Coinbase Agentic Wallet Payments MCP",
"sourceTags": [
"coinbase-payments-mcp"
],
"discover": [
"Install the official buyer runtime with `npx @coinbase/payments-mcp` and use its service discovery against apexscout.ai.",
"Read the free preview first at /api/agent-commerce-reliability-ledger/preview?src=coinbase-payments-mcp."
],
"inspectPrice": [
"Inspect the discovered Ledger contract and require GET, 0.10 USD, Base eip155:8453, and no request body.",
"Do not treat wallet funding, service discovery, or HTTP 402 as a purchase."
],
"setMaximumSpend": [
"In the buyer wallet UI, set max per call to $0.10 and keep the task/session allowance limited to one Ledger call.",
"The buyer, not ApexScout, controls wallet sign-in, funding, and limits."
],
"approval": [
"Show the route, price, network, freshness window, and one-call maximum.",
"Ask for explicit buyer approval before the MCP runtime is allowed to pay."
],
"purchaseOnce": [
"After approval, instruct Payments MCP to fetch /api/agent-commerce-reliability-ledger?src=coinbase-payments-mcp once.",
"Do not ask the runtime to retry automatically."
],
"verifyDelivery": [
"Require HTTP 200, a paid response receipt, the complete Ledger arrays, generatedAt, validUntil, and contentDigest.",
"Reject a response that remains HTTP 402 or omits the full paid dataset boundary."
],
"stop": [
"Stop after one paid call or any mismatch, rejection, or incomplete response.",
"Never paste email OTPs, wallet secrets, private keys, or payment payloads into ApexScout."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-C",
"runtime": "AWS AgentCore Gateway with Coinbase Bazaar MCP",
"sourceTags": [
"agentcore-bazaar"
],
"discover": [
"Add the official Coinbase Bazaar MCP target https://api.cdp.coinbase.com/platform/v2/x402/discovery/mcp to an owner-controlled AgentCore Gateway with no outbound authorization.",
"Search for ApexScout Agent Commerce Reliability Ledger, then read the free preview with src=agentcore-bazaar."
],
"inspectPrice": [
"Inspect the Bazaar result and runtime challenge; require GET, 0.10 USD / 100000 atomic USDC, and Base eip155:8453.",
"Do not select a similarly named resource or a route with different terms."
],
"setMaximumSpend": [
"Configure the owner-controlled AgentCore payment policy for a maximum $0.10 single call and one call for the task.",
"Do not enable an unbounded PaymentManager session."
],
"approval": [
"Show the exact selected resource, amount, network, and one-call policy.",
"Require explicit buyer or operator approval before the payment plugin handles the 402."
],
"purchaseOnce": [
"After approval, invoke the selected Ledger tool once through the Gateway using src=agentcore-bazaar when the runtime permits the query tag.",
"Do not issue a second tool call to repair telemetry or indexing."
],
"verifyDelivery": [
"Require successful tool delivery containing the complete Ledger, generatedAt, validUntil, and contentDigest.",
"Count a paid completion only after buyer-controlled settlement and full HTTP 200/tool delivery."
],
"stop": [
"Stop after one paid call, any policy denial, resource mismatch, 402 loop, or incomplete delivery.",
"ApexScout never receives the buyer's AgentCore credentials, payment instrument, or wallet secrets."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-D",
"runtime": "MPP Tempo buyer",
"sourceTags": [
"mpp-tempo"
],
"discover": [
"Read the free preview, then fetch the Ledger route without a credential and parse its WWW-Authenticate Payment challenge.",
"Use src=mpp-tempo only as an aggregate protocol source tag; it does not identify the buyer."
],
"inspectPrice": [
"Require tempo/charge, 0.10 USD / 100000 atomic USDC, Tempo eip155:4217, and no request body.",
"Read the recipient and expiry from the signed MPP challenge instead of static page copy."
],
"setMaximumSpend": [
"Keep the buyer-controlled maximum at $0.10 and allow one Ledger call for the task.",
"Do not reuse a credential or bypass the atomic replay guard."
],
"approval": [
"Show the exact Ledger route, amount, Tempo network, recipient, and one-call limit.",
"Require explicit buyer approval before creating the Payment credential."
],
"purchaseOnce": [
"After approval, retry GET /api/agent-commerce-reliability-ledger?src=mpp-tempo once with Authorization: Payment.",
"Do not retry after rejection, timeout, or incomplete delivery."
],
"verifyDelivery": [
"Require HTTP 200, Payment-Receipt, the complete Ledger arrays, generatedAt, validUntil, and contentDigest.",
"Treat the unpaid challenge as discovery and not as revenue."
],
"stop": [
"Stop after one paid call or any route, amount, network, recipient, expiry, or delivery mismatch.",
"Never send the MPP credential to the origin or expose it on aggregate surfaces."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-E",
"runtime": "Solana Agent Registry",
"sourceTags": [
"solana-agent-registry"
],
"discover": [
"Resolve the finalized ApexScout onchain identity, then read the public Registry metadata and free Commerce Explorer with src=solana-agent-registry.",
"Read the free Ledger preview with src=solana-agent-registry before considering the paid route."
],
"inspectPrice": [
"Require the existing GET Ledger route, paymentNetwork=solana, exact scheme, 0.10 USD / 100000 atomic USDC, Solana mainnet, and the published USDC mint.",
"Confirm the Registry identity proof and seller recipient from public metadata without requesting a wallet secret."
],
"setMaximumSpend": [
"Keep the buyer-controlled maximum at $0.10 and permit one Ledger call for the task.",
"A Registry entry, metadata read, preview, or HTTP 402 is not purchase approval."
],
"approval": [
"Show the exact route, Solana network, recipient, amount, edition digest, and one-call maximum.",
"Ask the buyer to explicitly approve the selected Solana Ledger call."
],
"purchaseOnce": [
"Only after approval, call GET /api/agent-commerce-reliability-ledger?paymentNetwork=solana&src=solana-agent-registry once with the buyer-controlled wallet.",
"Never pay or retry automatically."
],
"verifyDelivery": [
"Require buyer-controlled settlement, HTTP 200, a protocol-native receipt, and the complete Ledger with generatedAt, validUntil, and contentDigest.",
"Keep the onchain identity transaction separate from a paid Ledger completion."
],
"stop": [
"Stop after one paid call or any identity, route, price, network, asset, recipient, expiry, receipt, or delivery mismatch.",
"Never request private keys, seed phrases, wallet exports, signatures, or raw payment payloads."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
}
]
},
"freshnessPolicy": {
"cadence": "weekly evidence-gated edition with a seven-day maximum age",
"staleAfter": "2026-07-22T21:34:22.000Z",
"buyerRule": "Do not use the artifact as current after validUntil; fetch a new paid copy.",
"compatibilityEntryStaleAfterDays": 30,
"refreshRule": "Only ApexScout-owned public-safe evidence or approved official protocol documentation may change entries."
},
"privacyPolicy": {
"aggregateOnlyMetrics": true,
"buyerLevelDataExposed": false,
"rawBuyerInputExposed": false,
"rawLogsExposed": false,
"rawUserAgentsExposed": false,
"ipAddressesExposed": false,
"fullWalletAddressesExposed": false,
"paymentSignaturesExposed": false,
"rawPaymentPayloadsExposed": false,
"secretsExposed": false,
"requestBodyRequired": false,
"accountRequired": false,
"apiKeyRequired": false
},
"paidCompletionDefinition": "buyer-controlled x402 or MPP payment followed by HTTP 200 full-ledger delivery",
"bazaarMcpBuyerRecipe": {
"searchQueries": [
"agent commerce reliability data",
"x402 buyer compatibility",
"agent payment failure signatures",
"x402 remediation guidance"
],
"searchTool": "search_resources",
"purchaseTool": "proxy_tool_call",
"buyerControlledPayment": true,
"apexScoutPaysForBuyer": false,
"paidCompletionDefinition": "settled buyer-controlled payment followed by full Ledger delivery"
},
"mppMarketplaceBuyerRecipe": {
"id": "mpp-native-ledger-purchase",
"status": "prepared-pending-owner-controlled-directory-publication",
"discoverySources": [
"MPPScan",
"mpp.dev"
],
"steps": [
"Discover ApexScout through MPPScan or the mpp.dev catalog after an owner-controlled listing is public; until then use the canonical ApexScout preview and docs.",
"Inspect GET /api/agent-commerce-reliability-ledger and confirm the fixed $0.10 charge.",
"Verify tempo/charge, Tempo eip155:4217, 100000 atomic USDC, recipient, issuedAt, and expiresAt from the live challenge.",
"Confirm the current Ledger edition and content digest on the free preview.",
"Ask for explicit buyer approval for one $0.10 call.",
"Pay once with the buyer's own MPP client. ApexScout never operates the buyer wallet.",
"Require Payment-Receipt, HTTP 200, and the complete Ledger delivery.",
"Stop after delivery or any mismatch, expiry, rejection, or incomplete response; never pay or retry automatically."
],
"expiryRule": "If the Commerce Intent expires before payment begins, fetch one fresh unpaid challenge without a payment credential, verify identical terms, and ask for fresh approval. The refresh is stateless and a settled intent can never refresh into another charge.",
"maximumPaidCalls": 1,
"apexScoutOperatesBuyerWallet": false,
"externalListingClaimed": false
},
"buyerRuntimeRecipes": [
{
"id": "RUNTIME-A",
"runtime": "x402scan Composer / AgentCash",
"sourceTags": [
"x402scan-composer",
"x402scan-composer-preview",
"x402scan-composer-ledger",
"agentcash-skill",
"agentcash-skill-preview",
"agentcash-skill-ledger"
],
"discover": [
"Use Composer resource search or `npx -y agentcash@latest discover https://apexscout.ai`.",
"Read GET /api/agent-commerce-reliability-ledger/preview with src=x402scan-composer-preview or src=agentcash-skill-preview before considering payment."
],
"inspectPrice": [
"Run `npx -y agentcash@latest check https://apexscout.ai/api/agent-commerce-reliability-ledger` or inspect the Composer resource price.",
"Require GET, 0.10 USD, Base eip155:8453, and no request body."
],
"setMaximumSpend": [
"Set or retain a buyer-controlled maximum of $0.10 / 100000 atomic USDC for this task.",
"Allow at most one paid Ledger call for the task."
],
"approval": [
"Explain what the full Ledger adds beyond the preview.",
"Ask the buyer to explicitly approve the exact route, $0.10 amount, Base network, and single call."
],
"purchaseOnce": [
"Only after approval, call GET /api/agent-commerce-reliability-ledger once with src=x402scan-composer-ledger or src=agentcash-skill-ledger.",
"Do not retry automatically after any failure or HTTP 402."
],
"verifyDelivery": [
"Require HTTP 200 and the complete Ledger fields: edition delta, compatibility matrix, failure signatures, verified fixes, generatedAt, validUntil, and contentDigest.",
"Treat HTTP 402, search, preview, or resource selection as unpaid interest rather than revenue."
],
"stop": [
"Stop after one paid call, any rejection, a price or network mismatch, missing approval, or incomplete delivery.",
"Never request wallet secrets, private keys, seed phrases, signatures, or raw payment payloads."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-B",
"runtime": "Coinbase Agentic Wallet Payments MCP",
"sourceTags": [
"coinbase-payments-mcp"
],
"discover": [
"Install the official buyer runtime with `npx @coinbase/payments-mcp` and use its service discovery against apexscout.ai.",
"Read the free preview first at /api/agent-commerce-reliability-ledger/preview?src=coinbase-payments-mcp."
],
"inspectPrice": [
"Inspect the discovered Ledger contract and require GET, 0.10 USD, Base eip155:8453, and no request body.",
"Do not treat wallet funding, service discovery, or HTTP 402 as a purchase."
],
"setMaximumSpend": [
"In the buyer wallet UI, set max per call to $0.10 and keep the task/session allowance limited to one Ledger call.",
"The buyer, not ApexScout, controls wallet sign-in, funding, and limits."
],
"approval": [
"Show the route, price, network, freshness window, and one-call maximum.",
"Ask for explicit buyer approval before the MCP runtime is allowed to pay."
],
"purchaseOnce": [
"After approval, instruct Payments MCP to fetch /api/agent-commerce-reliability-ledger?src=coinbase-payments-mcp once.",
"Do not ask the runtime to retry automatically."
],
"verifyDelivery": [
"Require HTTP 200, a paid response receipt, the complete Ledger arrays, generatedAt, validUntil, and contentDigest.",
"Reject a response that remains HTTP 402 or omits the full paid dataset boundary."
],
"stop": [
"Stop after one paid call or any mismatch, rejection, or incomplete response.",
"Never paste email OTPs, wallet secrets, private keys, or payment payloads into ApexScout."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-C",
"runtime": "AWS AgentCore Gateway with Coinbase Bazaar MCP",
"sourceTags": [
"agentcore-bazaar"
],
"discover": [
"Add the official Coinbase Bazaar MCP target https://api.cdp.coinbase.com/platform/v2/x402/discovery/mcp to an owner-controlled AgentCore Gateway with no outbound authorization.",
"Search for ApexScout Agent Commerce Reliability Ledger, then read the free preview with src=agentcore-bazaar."
],
"inspectPrice": [
"Inspect the Bazaar result and runtime challenge; require GET, 0.10 USD / 100000 atomic USDC, and Base eip155:8453.",
"Do not select a similarly named resource or a route with different terms."
],
"setMaximumSpend": [
"Configure the owner-controlled AgentCore payment policy for a maximum $0.10 single call and one call for the task.",
"Do not enable an unbounded PaymentManager session."
],
"approval": [
"Show the exact selected resource, amount, network, and one-call policy.",
"Require explicit buyer or operator approval before the payment plugin handles the 402."
],
"purchaseOnce": [
"After approval, invoke the selected Ledger tool once through the Gateway using src=agentcore-bazaar when the runtime permits the query tag.",
"Do not issue a second tool call to repair telemetry or indexing."
],
"verifyDelivery": [
"Require successful tool delivery containing the complete Ledger, generatedAt, validUntil, and contentDigest.",
"Count a paid completion only after buyer-controlled settlement and full HTTP 200/tool delivery."
],
"stop": [
"Stop after one paid call, any policy denial, resource mismatch, 402 loop, or incomplete delivery.",
"ApexScout never receives the buyer's AgentCore credentials, payment instrument, or wallet secrets."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-D",
"runtime": "MPP Tempo buyer",
"sourceTags": [
"mpp-tempo"
],
"discover": [
"Read the free preview, then fetch the Ledger route without a credential and parse its WWW-Authenticate Payment challenge.",
"Use src=mpp-tempo only as an aggregate protocol source tag; it does not identify the buyer."
],
"inspectPrice": [
"Require tempo/charge, 0.10 USD / 100000 atomic USDC, Tempo eip155:4217, and no request body.",
"Read the recipient and expiry from the signed MPP challenge instead of static page copy."
],
"setMaximumSpend": [
"Keep the buyer-controlled maximum at $0.10 and allow one Ledger call for the task.",
"Do not reuse a credential or bypass the atomic replay guard."
],
"approval": [
"Show the exact Ledger route, amount, Tempo network, recipient, and one-call limit.",
"Require explicit buyer approval before creating the Payment credential."
],
"purchaseOnce": [
"After approval, retry GET /api/agent-commerce-reliability-ledger?src=mpp-tempo once with Authorization: Payment.",
"Do not retry after rejection, timeout, or incomplete delivery."
],
"verifyDelivery": [
"Require HTTP 200, Payment-Receipt, the complete Ledger arrays, generatedAt, validUntil, and contentDigest.",
"Treat the unpaid challenge as discovery and not as revenue."
],
"stop": [
"Stop after one paid call or any route, amount, network, recipient, expiry, or delivery mismatch.",
"Never send the MPP credential to the origin or expose it on aggregate surfaces."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-E",
"runtime": "Solana Agent Registry",
"sourceTags": [
"solana-agent-registry"
],
"discover": [
"Resolve the finalized ApexScout onchain identity, then read the public Registry metadata and free Commerce Explorer with src=solana-agent-registry.",
"Read the free Ledger preview with src=solana-agent-registry before considering the paid route."
],
"inspectPrice": [
"Require the existing GET Ledger route, paymentNetwork=solana, exact scheme, 0.10 USD / 100000 atomic USDC, Solana mainnet, and the published USDC mint.",
"Confirm the Registry identity proof and seller recipient from public metadata without requesting a wallet secret."
],
"setMaximumSpend": [
"Keep the buyer-controlled maximum at $0.10 and permit one Ledger call for the task.",
"A Registry entry, metadata read, preview, or HTTP 402 is not purchase approval."
],
"approval": [
"Show the exact route, Solana network, recipient, amount, edition digest, and one-call maximum.",
"Ask the buyer to explicitly approve the selected Solana Ledger call."
],
"purchaseOnce": [
"Only after approval, call GET /api/agent-commerce-reliability-ledger?paymentNetwork=solana&src=solana-agent-registry once with the buyer-controlled wallet.",
"Never pay or retry automatically."
],
"verifyDelivery": [
"Require buyer-controlled settlement, HTTP 200, a protocol-native receipt, and the complete Ledger with generatedAt, validUntil, and contentDigest.",
"Keep the onchain identity transaction separate from a paid Ledger completion."
],
"stop": [
"Stop after one paid call or any identity, route, price, network, asset, recipient, expiry, receipt, or delivery mismatch.",
"Never request private keys, seed phrases, wallet exports, signatures, or raw payment payloads."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
}
],
"mcp": {
"toolName": "apexscout_agent_commerce_reliability_ledger",
"status": "bazaar-mcp-proxy-purchase-available",
"bazaarMcpServer": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/mcp",
"bazaarMcpBuyerRecipe": {
"searchQueries": [
"agent commerce reliability data",
"x402 buyer compatibility",
"agent payment failure signatures",
"x402 remediation guidance"
],
"searchTool": "search_resources",
"purchaseTool": "proxy_tool_call",
"buyerControlledPayment": true,
"apexScoutPaysForBuyer": false,
"paidCompletionDefinition": "settled buyer-controlled payment followed by full Ledger delivery"
},
"directApexScoutRemoteMcpActive": false,
"remotePaidToolRuntimeActive": false,
"note": "The official Bazaar MCP server can discover and proxy-purchase the indexed HTTP Ledger. ApexScout does not claim a separate direct remote paid MCP runtime."
},
"noPaidUpstreamService": true,
"noRequestBody": true
},
"compatibilityWitnessAvailable": true,
"compatibilityWitness": {
"id": "x402-compatibility-witness",
"title": "ApexScout x402 Compatibility Witness",
"release": "v2.2.228-live-command-center",
"description": "Check a public x402 paid endpoint against known buyer-client contract requirements and buy a full remediation Witness only when ApexScout has a verified finding.",
"humanPage": "https://apexscout.ai/x402-compatibility-witness",
"freePreflight": {
"method": "GET",
"url": "https://apexscout.ai/api/x402-compatibility-witness/preflight",
"paymentRequired": false,
"exactlyOneUnpaidTargetRequest": true,
"paidUpstreamCalls": false,
"trustChainVerdicts": [
"safe_to_consider",
"manual_review",
"stop",
"unsupported",
"unreachable"
],
"checks": [
"all payment choices",
"signed offer validity and accepts binding",
"signing identity discovery",
"terms hash and legal-context level",
"Builder Code declaration and support evidence",
"Payment Identifier declaration",
"signed receipt and privacy policy",
"request binding and paid-response evidence policy",
"optional merchant-profile markers and protocol-negotiation shape"
]
},
"paidResource": {
"method": "GET",
"path": "/api/x402-compatibility-witness",
"urlTemplate": "https://apexscout.ai/api/x402-compatibility-witness?matchId={matchId}",
"priceUsd": "0.25",
"displayPrice": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"scheme": "exact",
"requestBodyRequired": false,
"validUnexpiredMatchRequiredBeforePayment": true,
"noSecondTargetRequest": true,
"buyerControlledPaymentOnly": true,
"paymentIdentifier": {
"supported": true,
"required": false,
"requestFingerprintBound": true,
"duplicatePaymentProcessingPrevented": true,
"cacheTtlSeconds": 86400,
"expiryPolicy": "After 86400 seconds the identifier expires; a new payment attempt requires fresh explicit buyer approval."
}
},
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"supportedClients": [
"awal-latest",
"awal-2.10",
"cloudflare-agents-x402",
"crosshatch-effect-0.0.5",
"generic-x402-fetch",
"metamask-x402"
],
"defaultMerchantProfile": "generic-x402-v2",
"merchantProfiles": [
{
"id": "generic-x402-v2",
"label": "Generic x402 v2 paid resource",
"referenceVersion": "x402 v2 contract",
"independentlyAssessed": true,
"officialAgentCashEndorsement": false,
"headerOnlyChallengeExpected": false
},
{
"id": "agentcash-router-1.18",
"label": "@agentcash/router merchant",
"referenceVersion": "@agentcash/router 1.18.0",
"independentlyAssessed": true,
"officialAgentCashEndorsement": false,
"headerOnlyChallengeExpected": true
},
{
"id": "agentcash-router-1.19",
"label": "@agentcash/router merchant",
"referenceVersion": "@agentcash/router 1.19.0",
"independentlyAssessed": true,
"officialAgentCashEndorsement": false,
"headerOnlyChallengeExpected": true
}
],
"agentCashRouterProfile": {
"id": "agentcash-router-1.19",
"package": "@agentcash/router",
"referenceVersion": "1.19.0",
"legacyProfileRetained": "agentcash-router-1.18",
"independentlyAssessed": true,
"officialAgentCashEndorsement": false,
"runtimeDependencyInstalled": false,
"existingApexScoutPaymentCoreReplaced": false,
"x402ReferenceVersion": "2.18.x",
"mppxReferenceVersion": "0.8.9",
"freePreflightUrlTemplate": "https://apexscout.ai/api/x402-compatibility-witness/preflight?resourceUrl={resourceUrl}&client={client}&network=eip155:8453&merchantProfile=agentcash-router-1.19",
"scope": "one-unpaid-get-exact-x402",
"capabilitiesChecked": [
"x402 v2 PAYMENT-REQUIRED header structure",
"payment-only header challenge behavior and SIWX body/header equivalence",
"optional X-Agent-Identity envelope, nonce, domain, route, expiry, and DID privacy",
"canonical OpenAPI x-payment-info offers[] shape when public discovery is returned",
"dynamic and tiered pricing declarations with max-price evidence",
"x402 2.18 merchant output compatibility with x402 2.18 clients",
"null fields, multiple payment choices, dual-protocol challenge, and secret-free output"
],
"capabilitiesNotChecked": [
"separate OpenAPI or llms.txt documents not returned by the one-request preflight",
"private pre-payment body-validation configuration",
"private SIWX entitlement-store readiness",
"private MPP replay, operator/payee, fee-payer, session, and streaming configuration",
"facilitator settlement or paid delivery"
],
"privateConfigurationChecks": {
"prePaymentBodyValidation": "not_tested_requires_local_evidence",
"siwxEntitlementStoreProductionReadiness": "not_tested_requires_local_evidence",
"mppReplayStoreProductionReadiness": "not_tested_requires_local_evidence",
"mppOperatorKeyPayeeEquality": "not_tested_requires_local_evidence",
"mppFeePayerOperatorSeparation": "not_tested_requires_local_evidence",
"mppSessionAndStreamingConfiguration": "not_tested_requires_local_evidence",
"secretAndPrivateKeyConfiguration": "not_tested_requires_local_evidence"
}
},
"crosshatchCompatibility": {
"package": "crosshatch",
"version": "0.0.5",
"runtime": "Effect",
"parser": "RequiredFromBase64JsonString",
"paymentRequiredParserVerified": true,
"canonicalAtomicAmountType": "decimal-string",
"paidCallExecuted": false,
"replacesApexScoutX402Server": false
},
"supportedNetworks": [
"eip155:8453"
],
"searchConcepts": [
"x402 compatibility test",
"AWAL invalid payment required response",
"x402 PAYMENT-REQUIRED validator",
"x402 buyer-client compatibility",
"Cloudflare x402 contract check",
"x402 wallet compatibility",
"x402 CORS validator",
"payment-required header body mismatch",
"x402 remediation report",
"agent payment compatibility certificate",
"AgentCash Router merchant compatibility",
"@agentcash/router x402 readiness",
"AgentCash X-Agent-Identity challenge",
"x402 MPP protocol negotiation"
],
"responseSchema": {
"type": "object",
"required": [
"product",
"witnessId",
"matchId",
"targetResourceUrl",
"testedMethod",
"generatedAt",
"validUntil",
"contentDigest",
"compatibilityVerdict",
"merchantProfile",
"merchantProfileAssessment",
"verifiableBuyerPolicy",
"trustChainEvidence",
"buyerClientMatrix",
"contractFindings",
"failureCodes",
"verifiedMitigationSteps",
"reliabilityLedger",
"attestationStatus",
"signedOfferReceiptStatus",
"paymentIdentifierStatus"
],
"properties": {
"product": {
"type": "string",
"const": "x402-compatibility-witness"
},
"witnessId": {
"type": "string"
},
"matchId": {
"type": "string"
},
"targetResourceUrl": {
"type": "string",
"format": "uri"
},
"testedMethod": {
"type": "string",
"const": "GET"
},
"generatedAt": {
"type": "string",
"format": "date-time"
},
"validUntil": {
"type": "string",
"format": "date-time"
},
"contentDigest": {
"type": "string",
"pattern": "^sha256:[0-9a-f]{64}$"
},
"compatibilityVerdict": {
"type": "string"
},
"merchantProfile": {
"type": "string",
"enum": [
"generic-x402-v2",
"agentcash-router-1.18",
"agentcash-router-1.19"
]
},
"merchantProfileAssessment": {
"type": "object"
},
"verifiableBuyerPolicy": {
"type": "object"
},
"trustChainEvidence": {
"type": "object"
},
"buyerClientMatrix": {
"type": "array",
"items": {
"type": "object"
}
},
"contractFindings": {
"type": "array",
"items": {
"type": "object"
}
},
"failureCodes": {
"type": "array",
"items": {
"type": "string"
}
},
"verifiedMitigationSteps": {
"type": "array",
"items": {
"type": "object"
}
},
"reliabilityLedger": {
"type": "object"
},
"attestationStatus": {
"type": "string",
"const": "not_enabled"
},
"signedOfferReceiptStatus": {
"type": "string",
"const": "eip712_privacy_safe"
},
"paymentIdentifierStatus": {
"type": "string",
"const": "optional_request_fingerprint_bound"
}
}
},
"extensionStatus": {
"paymentIdentifier": "optional_request_fingerprint_bound",
"signedAttestation": "not_enabled",
"signedOfferReceipt": "eip712_privacy_safe",
"siwx": "deferred"
},
"apiHubStatus": "active_mixed_listing_apihub_billed_quick_answers",
"apiHubRequiredApproval": null,
"apiHubDistribution": {
"providerListingActive": true,
"listingSlug": "apexscout-agent-commerce",
"listingUrl": "https://apihub.io/marketplace/apexscout-agent-commerce",
"mode": "native_free_entry_points_with_apihub_billed_quick_answers_and_direct_x402_full_products",
"listedFreeEndpoints": [
"/api/agent-commerce-reliability-ledger/preview",
"/api/x402-compatibility-witness/preflight"
],
"listedPaidQuickAnswers": [
{
"method": "GET",
"path": "/api/apihub/reliability-ledger/failure-match",
"priceUsd": "$0.005"
},
{
"method": "GET",
"path": "/api/apihub/reliability-ledger/fix-card",
"priceUsd": "$0.01"
},
{
"method": "GET",
"path": "/api/apihub/reliability-ledger/edition-delta",
"priceUsd": "$0.005"
}
],
"paidRoutesProxiedThroughApiHub": true,
"paidRoutesProxiedThroughApiHubScope": "quick_answers_only",
"fullPaidProductsProxiedThroughApiHub": false,
"paidRoutesRemainDirectX402": true,
"fullLedgerAndWitnessRemainDirectX402": true,
"apiHubPaymentConfigured": true,
"apiHubHandlesBuyerPaymentOnce": true,
"originIssuesSecondPaywall": false,
"providerTestRun": false,
"providerTestPaidCallMade": false,
"doubleChargePrevented": true
},
"indexingSettlementStatus": "owner_approved_settlement_completed",
"indexingSettlementRequiredApproval": null,
"privacy": {
"buyerLevelDataExposed": false,
"rawTargetBodiesStored": false,
"fullWalletAddressesExposed": false,
"paymentSignaturesExposed": false,
"cookiesRequired": false
}
},
"commerceTrust": {
"release": "v2.2.228-live-command-center",
"x402FoundationAlignment": {
"available": true,
"status": "self-assessed-current",
"recordUrl": "https://apexscout.ai/.well-known/x402-foundation-alignment.json",
"apiUrl": "https://apexscout.ai/api/x402-foundation-alignment",
"x402Version": 2,
"coreVersion": "2.18.0",
"foundationMember": false,
"officialCertificationClaimed": false,
"officialEndorsementClaimed": false
},
"x402Runtime": {
"version": "2.18.0",
"crossSdkNullNormalization": true,
"multiAcceptPaymentMatching": true,
"compatibilityTargets": [
"TypeScript",
"Python",
"Go"
]
},
"signedOfferReceipt": {
"standard": "x402 offer-receipt v1",
"active": true,
"format": "eip712",
"signerAddress": "0x223d6c2B4F4bF6c8947fb375B2838D403f9524cB",
"offerValiditySeconds": 300,
"transactionHashIncluded": false,
"paidReceiptReturnedInPaymentResponse": true,
"keyDiscoveryUrl": "https://apexscout.ai/.well-known/did.json",
"buyerIdentityExposedOnAggregateSurfaces": false,
"rawPaymentPayloadExposed": false
},
"builderCode": {
"standard": "ERC-8021 Schema 2",
"active": true,
"code": "bc_nwuz5p2b",
"registryClaimed": true,
"facilitatorSupportProven": true,
"settlementSuffixEnabled": true,
"onchainAttributedSettlementObserved": false,
"analyticsAndDiscoveryMayBeginAfterLegitimateSettlement": true
},
"legalContext": {
"standard": "Legal Context Protocol v1.0 draft",
"trustLevel": 2,
"manifestUrl": "https://apexscout.ai/.well-known/legal-context.json",
"termsUrl": "https://apexscout.ai/legal/agent-commerce-terms-v1.json",
"atrHash": "0x664783646715ac819cb657e19e581695973c2991e64f9249cf58c5d1ac2fc488",
"acceptanceRequired": false,
"boundToPaymentResponses": true,
"buyerAcceptanceSignatureRequired": false,
"exactTermsBytesHashVerifiedByApexScout": true,
"legalAdviceProvided": false,
"enforceabilityGuaranteed": false
},
"paymentIdentifier": {
"standard": "x402 payment-identifier 2.18",
"supported": true,
"required": false,
"routes": [
"/api/agent-commerce-reliability-ledger",
"/api/x402-compatibility-witness"
],
"requestFingerprintBound": true,
"duplicatePaymentProcessingPrevented": true,
"cacheTtlSeconds": 86400,
"expiryPolicy": "After the cache TTL expires, the identifier may be processed as a new request and requires fresh explicit buyer approval.",
"rawIdentifierPublic": false,
"buyerIdentityPublic": false
},
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"independentVerification": {
"signingIdentityUrl": "https://apexscout.ai/.well-known/did.json",
"legalContextUrl": "https://apexscout.ai/.well-known/legal-context.json",
"termsUrl": "https://apexscout.ai/legal/agent-commerce-terms-v1.json",
"commerceTrustUrl": "https://apexscout.ai/.well-known/apexscout-commerce-trust.json",
"offlineVerificationSupported": true
},
"portableReceiptEcosystem": {
"nativeX402OfferReceipt": "active",
"omaTrust": "audited_not_integrated",
"peac": "audited_not_integrated",
"onchainAttestation": "deferred",
"publicReputationClaimed": false
},
"safety": {
"priceChanged": false,
"sellerWalletChanged": false,
"paymentRailChanged": false,
"paidCallMadeByTrustLayer": false,
"automaticRetryAdded": false,
"buyerLevelDataExposed": false,
"officialEndorsementClaimed": false
}
},
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"frontDoorActionRailAvailable": true,
"frontDoorActionRail": {
"frontDoorActionRailAvailable": true,
"title": "What do you want ApexScout to check before payment?",
"subtitle": "Choose one no-spend path. No wallet. No payment. ApexScout only routes you to the right free check.",
"compactTitle": "Choose a no-spend next step",
"compactCopy": "These links only record aggregate intent and route to a free next step. No payment happens here.",
"agenticTradingNote": "Payment-readiness only. Not trading or investment advice.",
"primaryNoSpendActions": [
{
"intent": "proof",
"href": "/action-pack/go/proof",
"url": "https://apexscout.ai/action-pack/go/proof",
"label": "Test the cheapest x402 proof path",
"copy": "Use this when you only need the trust/proof flow.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"nextActionLabel": "Inspect unpaid proof instructions",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": {
"method": "GET",
"route": "/api/opportunity-check",
"href": "/api/opportunity-check?src=front-door-x402-proof-cta",
"url": "https://apexscout.ai/api/opportunity-check?src=front-door-x402-proof-cta",
"sourceTag": "front-door-x402-proof-cta",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"requiresBuyerControlledX402Retry": true,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"secondaryToNoSpend": true,
"noAutoOpen": true,
"noPaymentExecution": true,
"buyerLevelDataExposed": false,
"proofRetryConfidence": {
"available": true,
"mode": "no-spend-proof-retry-confidence",
"purpose": "Help x402-capable buyers understand that an unpaid 402 is the expected proof challenge and that payment only happens from a buyer-controlled retry.",
"route": "/api/opportunity-check",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"expectedUnpaidMeaning": "HTTP 402 means the proof paywall is reachable and returning x402 payment requirements. It is not a service outage and it is not revenue.",
"expectedPaidMeaning": "HTTP 200 only counts after a buyer-controlled x402 client retries this route with an approved payment.",
"http402ReadinessReceiptAvailable": true,
"http402ReadinessReceipt": {
"available": true,
"mode": "no-spend-http-402-readiness-receipt",
"title": "HTTP 402 Readiness Receipt",
"purpose": "Give x402-capable buyers a compact, unsigned receipt showing what the unpaid proof challenge proves before any buyer-controlled paid retry.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"receiptScope": "GET /api/opportunity-check, $0.01 maximum amount, eip155:8453 Base mainnet x402, one buyer-controlled retry.",
"receiptSummary": "Unpaid HTTP 402 proves the x402 proof route is reachable and returning payment requirements. It does not prove payment, revenue, endorsement, or buyer approval.",
"agentDecision": {
"payOnlyIf": "The buyer explicitly approves the route, max amount, network, and one retry from a wallet-controlled x402 client.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the route or network differs, or HTTP 402 is being treated as a paid completion.",
"nextNoSpendStep": "Stay on ApexScout proof, action-pack, Scope Check, or Builder surfaces until buyer-controlled payment is intentionally approved."
},
"readinessChecks": [
"Route scoped to GET /api/opportunity-check.",
"Amount scoped to $0.01 / 10000 atomic USDC.",
"Network scoped to Base mainnet eip155:8453.",
"HTTP 402 is expected before payment.",
"HTTP 200 is required before paid completion is counted.",
"No request body, cookies, session, or wallet connection is required to read this receipt.",
"No buyer-level data is exposed by this receipt.",
"No automatic payment or paid retry is performed by ApexScout."
],
"publicSafetyCopy": "This is an unsigned no-spend readiness receipt, not AP2 proof, not a signed mandate, not a legal or payment receipt, not an endorsement claim, and not trading, investment, tax, legal, lending, or compliance advice.",
"notClaims": {
"signedReceiptCreated": false,
"ap2ProofCreated": false,
"legalMandateCreated": false,
"paymentReceiptCreated": false,
"walletApprovalCreated": false,
"officialEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false
},
"noSpendBoundary": {
"receiptIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByReceipt": false,
"paidRouteCalledByReceipt": false,
"paidUpstreamCalls": false,
"walletConnectionRequiredForReceipt": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"receiptUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"copyPasteReceiptSummary": "HTTP 402 readiness receipt: GET /api/opportunity-check is reachable, costs max $0.01 on eip155:8453 only after buyer-controlled x402 retry, and counts as paid only when HTTP 200 returns."
},
"proofRetryDecisionStripAvailable": true,
"proofRetryDecisionStrip": {
"available": true,
"mode": "buyer-controlled-proof-retry-decision-strip",
"title": "Buyer-controlled proof retry gate",
"purpose": "Compress the next click after an unpaid 402 into a clear continue/stop decision for x402-capable buyers.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"decisionSummary": "Continue only if buyer approval, x402 wallet capability, exact route, exact amount, and Base mainnet network all match.",
"continueIf": [
"Buyer explicitly approves this exact $0.01 proof.",
"Client can attach x402 payment on Base mainnet eip155:8453.",
"Route is exactly GET /api/opportunity-check.",
"Max amount is exactly 10000 atomic USDC.",
"Buyer understands only HTTP 200 counts as a paid proof completion."
],
"stopIf": [
"Buyer has not approved spend.",
"Client is a normal browser without x402 payment support.",
"Route, amount, or network differs from the receipt.",
"The buyer is treating unpaid HTTP 402 as revenue or completion.",
"The output will not change the buyer's next action."
],
"primaryAction": {
"label": "Request unpaid proof challenge",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"normalBrowserResult": "HTTP 402 JSON with x402 payment requirements",
"x402CapableResult": "HTTP 200 JSON only after buyer-controlled paid retry",
"noPaymentOnClick": true,
"paidRetryRequiresBuyerWallet": true
},
"fallbackNoSpendActions": [
"/x402-proof",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/chat-tiny-payment-flow"
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"decisionStripUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"decisionStripIsFree": true,
"paymentAttemptedByDecisionStrip": false,
"paidRouteCalledByDecisionStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"http402ClosePacketAvailable": true,
"http402ClosePacket": {
"available": true,
"mode": "buyer-agent-402-close-packet",
"release": "v2.2.228-live-command-center",
"title": "402 close packet",
"purpose": "Put the buyer-agent close instructions inside the unpaid HTTP 402 response so x402-capable clients can finish the proof without hunting through a page.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"closeMessage": "You reached the ApexScout paid proof gate. To complete the proof, retry this exact GET route from an authenticated x402 wallet/client with max amount 10000 atomic USDC on Base mainnet.",
"buyerAgentInstruction": "If the buyer approved this one-cent proof, run the command exactly once and treat only HTTP 200 as the paid completion. If any route, amount, network, or approval detail differs, stop.",
"whatHttp200Proves": [
"The buyer-controlled x402 retry reached ApexScout's one-cent proof route.",
"The paid route returned structured JSON after payment verification.",
"The aggregate paid proof completion counter is allowed to move only after HTTP 200."
],
"notProofOf": [
"Coinbase, AWS, Stripe, Bazaar, AgentCore, Base, marketplace, or protocol endorsement.",
"Guaranteed revenue, trading results, investment outcome, legal advice, tax advice, lending advice, or compliance approval.",
"Buyer identity, wallet-level activity, secret signing material, or broader permission to spend."
],
"continueIf": [
"The buyer explicitly approved this one-cent proof.",
"The client can attach an x402 payment authorization.",
"The retry route is exactly GET /api/opportunity-check?src=agent-execution-awal-latest.",
"The max amount is exactly 10000 atomic USDC.",
"The network is exactly eip155:8453."
],
"stopIf": [
"The wallet is not authenticated.",
"The wallet has insufficient USDC on Base.",
"The client cannot attach x402 payment.",
"The max amount is lower than 10000 atomic USDC.",
"The network is not eip155:8453.",
"The buyer did not approve this exact spend.",
"The agent plans to retry more than once just to clear a metric."
],
"failureBranches": {
"walletNotAuthenticated": {
"bucket": "wallet_not_authenticated",
"buyerAction": "Authenticate the buyer-controlled x402 wallet/client before retrying.",
"apexScoutAction": "Do nothing automatically."
},
"insufficientBaseUsdc": {
"bucket": "insufficient_base_usdc",
"buyerAction": "Stop until the buyer-controlled wallet has enough Base USDC for the one-cent proof.",
"apexScoutAction": "Do not fund, trade, onramp, or advise funding."
},
"maxAmountTooLow": {
"bucket": "max_amount_too_low",
"buyerAction": "Use max amount 10000 atomic USDC or stop.",
"apexScoutAction": "Do not lower route price or change payment requirements."
},
"wrongNetwork": {
"bucket": "wrong_network",
"buyerAction": "Use eip155:8453 Base mainnet or stop.",
"apexScoutAction": "Do not switch rails."
},
"paymentDeclined": {
"bucket": "payment_declined",
"buyerAction": "Stop unless the buyer explicitly approves another attempt.",
"apexScoutAction": "Do not retry payment for the buyer."
}
},
"telemetryInterpretation": {
"sourceTag": "agent-execution-awal-latest",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionAwalLatest",
"closePacketUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"closePacketIsFree": true,
"closePacketExecutesPayment": false,
"paymentAttemptedByClosePacket": false,
"paidRouteCalledByClosePacket": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"secretSigningMaterialRequested": false
}
},
"buyerProofExecutionCloseoutAvailable": true,
"buyerProofExecutionCloseout": {
"available": true,
"mode": "buyer-proof-execution-closeout",
"release": "v2.2.228-live-command-center",
"title": "Copied? Finish with one buyer-run proof retry",
"purpose": "Close the gap after a buyer agent marks its wallet ready or copies the command: run exactly one buyer-approved proof retry, classify the response, then stop.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"method": "GET",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"primarySourceTag": "agent-receipt-contract",
"primarySourceBucket": "agentReceiptContract",
"commandCopySourceTag": "agent-execution-command-copy",
"commandCopySourceBucket": "agentExecutionCommandCopy",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"firstScreenPlacement": {
"x402Proof": "after-wallet-close-before-receipt-command",
"chatTinyPaymentFlow": "after-wallet-close-before-receipt-command",
"closeoutVisibleBeforeCommandCopy": true,
"normalNoSpendPathRemainsPrimary": true
},
"closeoutRule": {
"ifWalletReadyAndCommandCopied": "Run the receipt-bound command exactly once from the buyer-controlled x402 wallet if the buyer approved the route, amount, and network.",
"ifCannotPayYet": "Do not retry payment. Use the wallet setup note and stop until wallet authentication, Base USDC balance, route, amount, and network match.",
"ifResponseIs402": "Treat the result as unpaid. It is a challenge, not a paid proof, and it should not move revenue.",
"ifResponseIs200": "Treat the result as paid proof only after the buyer-controlled x402 retry returns structured HTTP 200 JSON.",
"ifRetryIsRejected": "Read the sanitized edge failure status once, classify the rejection, and stop before another paid attempt.",
"stopAfter": "one buyer-approved paid retry unless a human operator explicitly approves another capped diagnostic"
},
"buyerAgentChecklist": [
"Wallet is authenticated by the buyer, not ApexScout.",
"Buyer approves GET /api/opportunity-check with source agent-receipt-contract.",
"Maximum spend is exactly 10000 atomic USDC.",
"Network is exactly eip155:8453 Base mainnet.",
"Run one retry, then classify HTTP 402, HTTP 200, or a sanitized edge failure."
],
"copyReadyCommands": {
"receiptBoundProofCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"commandCopyProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"edgeFailureReadCommand": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof."
},
"safeReadouts": {
"edgeHealthPath": "/__apexscout/cloudflare-x402/health",
"edgeLastFailurePath": "/__apexscout/cloudflare-x402/health/last-failure",
"edgeLastFailureUrl": "https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure",
"originLastFailurePath": "/api/cloudflare-x402-edge-failure/last",
"originLastFailureUrl": "https://apexscout.ai/api/cloudflare-x402-edge-failure/last",
"noPaymentAttemptedByRead": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"privateKeysRequested": false
},
"buttons": [
{
"label": "Copy receipt-bound proof command",
"copies": "receipt_bound_command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy edge failure readout",
"copies": "edge_failure_read_command",
"value": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"failureReadoutIsRevenue": false,
"copyIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"newCounterAdded": false,
"reason": "The closeout reuses existing aggregate wallet-close, source-bucket, and paid-completion counters so it improves decision clarity without creating fake movement."
},
"noSpendBoundary": {
"closeoutIsFree": true,
"closeoutExecutesPayment": false,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"failureReadoutExecutesPayment": false,
"failureReadoutCallsPaidRoute": false,
"paymentAttemptedByCloseout": false,
"paidRouteCalledByCloseout": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"productionPostCreated": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareMutationCreated": false,
"apifyActorRunCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"rawPaymentPayloadExposed": false
},
"safetyClaims": {
"guaranteedRevenueClaimed": false,
"officialEndorsementClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareMonetizationGatewayReadinessAvailable": true,
"cloudflareMonetizationGatewayReadiness": {
"available": true,
"mode": "cloudflare-monetization-gateway-readiness",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare live edge status",
"releaseReportingMode": "worker-and-origin-split",
"appRelease": "v2.2.228-live-command-center",
"originRelease": "v2.2.228-live-command-center",
"originReleasePath": "/status",
"workerRelease": "v2.2.228-live-command-center",
"workerSourceVersion": "2.2.228",
"workerHealthReleaseContract": {
"healthPath": "/__apexscout/cloudflare-x402/health",
"releaseFieldMeans": "workerRelease",
"workerReleaseField": "workerRelease",
"originReleaseField": "originRelease",
"originReleasePath": "/status",
"originReleaseReadIsNoSpend": true,
"mismatchIsActionableOnlyWhenWorkerHealthFails": true
},
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"articleUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving x402 payment enforcement toward edge-managed route rules. ApexScout now serves the one-cent proof path through a narrow Cloudflare Worker while keeping Railway as the origin fallback."
},
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"officialCloudflareMonetizationGatewayClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"waitlistOrEarlyAccessRequired": false,
"noDnsChangeMade": false,
"dnsChangedByLiveCutover": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"apexScoutRemainsSourceOfTruth": true,
"candidateRules": [
{
"id": "apexscout-one-cent-proof",
"purpose": "Edge-readable one-cent x402 proof route for wallet-capable buyer agents.",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"displayPrice": "$0.01",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
},
{
"id": "apexscout-agent-revenue-audit",
"purpose": "Higher-value builder monetization audit route.",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"amountAtomicUsdc": "5000000",
"priceUsd": "5.00",
"displayPrice": "$5.00",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
}
],
"migrationPlan": [
"Keep the Cloudflare Worker route narrow and use Railway as the origin fallback.",
"Use these candidate rules as the review checklist before any future official managed-gateway change.",
"Require unpaid HTTP 402 and buyer-controlled HTTP 200 proof for each route after any edge or gateway change.",
"Keep ApexScout aggregate metrics as the public conversion truth source.",
"Roll back to Railway-origin x402 if route, amount, network, or payment proof differs."
],
"operatorChecklist": {
"dnsChangeApproved": true,
"cloudflareApiTokenApproved": true,
"gatewayRuleCreationApproved": true,
"postDeployPaidProofRequiredBeforeClaimingGatewayLive": true,
"originFallbackRequired": true,
"compareGatewayRulesToCandidateRules": true
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"cloudflareApiCalled": false,
"dnsChanged": false,
"dnsAlreadyProxiedThroughCloudflare": true,
"workerAlreadyDeployed": true,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"revenueOutcomeClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
},
"telemetryInterpretation": {
"readinessUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"watchCounters": "If unpaid proof counters move without paid completions, treat it as proof-route interest, not gateway success."
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"retryDecision": {
"recommendedOnlyForX402CapableClients": true,
"payOnlyIf": "The buyer wants the cheapest live x402 proof and approves the route, $0.01 maximum amount, Base mainnet network, and one retry.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the network is not eip155:8453, or the output will not change the next action.",
"ifUnsure": "Stay on the no-spend proof and action-pack surfaces. Do not retry payment just to clear the counter."
},
"approvalChecklist": [
"Buyer approves GET /api/opportunity-check as the route.",
"Buyer approves the $0.01 maximum spend.",
"Buyer approves Base mainnet x402 on eip155:8453.",
"Buyer controls the wallet and chooses whether to retry.",
"Buyer expects HTTP 200 JSON only after the paid retry succeeds."
],
"copyPasteAgentNote": "Unpaid 402 is expected. If the buyer approves a one-cent proof, retry GET /api/opportunity-check with an x402-capable client, max amount 10000 atomic USDC on eip155:8453, and treat only HTTP 200 as completion.",
"paidRetryCommandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof\" \\\n --max-amount 10000 \\\n --json",
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"ifUnpaidRisesWithoutCompletion": "Treat this as proof-route interest without payment. Inspect retry clarity only after repeated windows; do not add another paid route.",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"confidencePacketIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByConfidencePacket": false,
"walletConnectionRequiredForConfidencePacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"http402ReadinessReceiptAvailable": true,
"http402ReadinessReceipt": {
"available": true,
"mode": "no-spend-http-402-readiness-receipt",
"title": "HTTP 402 Readiness Receipt",
"purpose": "Give x402-capable buyers a compact, unsigned receipt showing what the unpaid proof challenge proves before any buyer-controlled paid retry.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"receiptScope": "GET /api/opportunity-check, $0.01 maximum amount, eip155:8453 Base mainnet x402, one buyer-controlled retry.",
"receiptSummary": "Unpaid HTTP 402 proves the x402 proof route is reachable and returning payment requirements. It does not prove payment, revenue, endorsement, or buyer approval.",
"agentDecision": {
"payOnlyIf": "The buyer explicitly approves the route, max amount, network, and one retry from a wallet-controlled x402 client.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the route or network differs, or HTTP 402 is being treated as a paid completion.",
"nextNoSpendStep": "Stay on ApexScout proof, action-pack, Scope Check, or Builder surfaces until buyer-controlled payment is intentionally approved."
},
"readinessChecks": [
"Route scoped to GET /api/opportunity-check.",
"Amount scoped to $0.01 / 10000 atomic USDC.",
"Network scoped to Base mainnet eip155:8453.",
"HTTP 402 is expected before payment.",
"HTTP 200 is required before paid completion is counted.",
"No request body, cookies, session, or wallet connection is required to read this receipt.",
"No buyer-level data is exposed by this receipt.",
"No automatic payment or paid retry is performed by ApexScout."
],
"publicSafetyCopy": "This is an unsigned no-spend readiness receipt, not AP2 proof, not a signed mandate, not a legal or payment receipt, not an endorsement claim, and not trading, investment, tax, legal, lending, or compliance advice.",
"notClaims": {
"signedReceiptCreated": false,
"ap2ProofCreated": false,
"legalMandateCreated": false,
"paymentReceiptCreated": false,
"walletApprovalCreated": false,
"officialEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false
},
"noSpendBoundary": {
"receiptIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByReceipt": false,
"paidRouteCalledByReceipt": false,
"paidUpstreamCalls": false,
"walletConnectionRequiredForReceipt": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"receiptUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"copyPasteReceiptSummary": "HTTP 402 readiness receipt: GET /api/opportunity-check is reachable, costs max $0.01 on eip155:8453 only after buyer-controlled x402 retry, and counts as paid only when HTTP 200 returns."
},
"proofRetryDecisionStripAvailable": true,
"proofRetryDecisionStrip": {
"available": true,
"mode": "buyer-controlled-proof-retry-decision-strip",
"title": "Buyer-controlled proof retry gate",
"purpose": "Compress the next click after an unpaid 402 into a clear continue/stop decision for x402-capable buyers.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"decisionSummary": "Continue only if buyer approval, x402 wallet capability, exact route, exact amount, and Base mainnet network all match.",
"continueIf": [
"Buyer explicitly approves this exact $0.01 proof.",
"Client can attach x402 payment on Base mainnet eip155:8453.",
"Route is exactly GET /api/opportunity-check.",
"Max amount is exactly 10000 atomic USDC.",
"Buyer understands only HTTP 200 counts as a paid proof completion."
],
"stopIf": [
"Buyer has not approved spend.",
"Client is a normal browser without x402 payment support.",
"Route, amount, or network differs from the receipt.",
"The buyer is treating unpaid HTTP 402 as revenue or completion.",
"The output will not change the buyer's next action."
],
"primaryAction": {
"label": "Request unpaid proof challenge",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"normalBrowserResult": "HTTP 402 JSON with x402 payment requirements",
"x402CapableResult": "HTTP 200 JSON only after buyer-controlled paid retry",
"noPaymentOnClick": true,
"paidRetryRequiresBuyerWallet": true
},
"fallbackNoSpendActions": [
"/x402-proof",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/chat-tiny-payment-flow"
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"decisionStripUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"decisionStripIsFree": true,
"paymentAttemptedByDecisionStrip": false,
"paidRouteCalledByDecisionStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofCtaAvailable": true,
"agentExecutionProofCta": {
"available": true,
"mode": "promoted-buyer-executable-proof-cta",
"title": "Buyer-run proof packet",
"label": "Run with buyer-approved x402 wallet",
"copy": "Wallet-capable buyers can use the exact one-cent proof packet now. ApexScout only exposes the packet; the buyer wallet decides whether to pay.",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"method": "GET",
"route": "/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"conversionBet": "Promote the already-safe buyer-execution packet above passive proof copy so x402-capable clients have one obvious next action.",
"successMetric": "opportunityCheckGetProofCompletions",
"unpaidSourceBucket": "agentExecutionProofPacket",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerDecision": {
"continueOnlyIf": "The buyer approves the route, amount, network, and one retry from an x402-capable wallet runtime.",
"stopIf": "Approval is missing, the client cannot attach x402 payment, or the route/amount/network differs."
},
"noSpendBoundary": {
"ctaIsFreeToRead": true,
"normalBrowserGetsUnpaid402": true,
"paymentAttemptedByCta": false,
"paidRouteCalledByApexScout": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"walletReadinessStripAvailable": true,
"walletReadinessStrip": {
"available": true,
"mode": "buyer-wallet-readiness-strip",
"title": "Before you run the command",
"checklist": [
"Your x402 wallet/client is authenticated.",
"Your wallet has at least $0.01 USDC available on Base.",
"You approve the route: GET /api/opportunity-check.",
"You approve the max amount: 10000 atomic USDC.",
"You understand unpaid HTTP 402 is not revenue.",
"You understand paid proof means HTTP 200 after your own wallet retry."
],
"copy": "ApexScout does not run this command for you. Your buyer-controlled wallet decides whether to spend.",
"route": "/api/opportunity-check",
"method": "GET",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"network": "eip155:8453",
"noFundingAdvice": true,
"noTradingAdvice": true,
"noPrivateKeyAdvice": true,
"noOnrampAdvice": true,
"noSpendBoundary": {
"stripIsFree": true,
"paymentAttemptedByStrip": false,
"paidRouteCalledByStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"buyerAgentCommandCopyAvailable": true,
"buyerAgentCommandCopy": {
"available": true,
"mode": "buyer-agent-command-copy",
"title": "Choose your buyer-run x402 command",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"recommendedCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"pinnedCurrentCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"deprecatedLegacyCommand": "npx awal@2.8.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-2-8\" --max-amount 10000 --json",
"deprecatedLegacyCommandOfferedForPaidUse": false,
"buyerAgentCommandVariants": [
{
"id": "awal-latest",
"label": "Recommended current",
"packageVersion": "latest",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": true,
"pinned": false,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
},
{
"id": "awal-2-12",
"label": "Pinned current",
"packageVersion": "2.12.0",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": false,
"pinned": true,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
}
],
"buyerClientCompatibilityMatrix": [
{
"client": "AWAL CLI",
"status": "recommended-current",
"buyerSideOnly": true,
"goodFor": "Buyer agents using Coinbase Agentic Wallet CLI to make a capped one-cent x402 proof request.",
"commandVariants": [
"awal-latest",
"awal-2-12"
],
"docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/pay-for-service",
"paymentExecutedByApexScout": false
},
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"otherX402CapableBuyerClients": [
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"legacyCommandCopyRoute": "/api/opportunity-check?src=agent-execution-command-copy",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"requestBodyRequired": false,
"walletMustBeAuthenticated": true,
"walletNeedsSufficientUsdc": true,
"apexScoutRunsCommand": false,
"copyingIsPayment": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"sourceBucketCompatibility": {
"oldPacketSourceStillSupported": "agent-execution-proof-packet",
"previousCommandCopySourceStillSupported": "agent-execution-command-copy",
"recommendedCurrentSource": "agent-execution-awal-latest",
"pinnedCurrentSource": "agent-execution-awal-latest",
"previousPinnedSourceStillMeasured": "agent-execution-awal-2-10",
"deprecatedLegacySourceStillMeasured": "agent-execution-awal-2-8",
"unpaidSourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"topSourceTagsCounter": "opportunityCheckGetProofUnpaidTopSourceTags"
},
"prerequisiteCommands": {
"stopOldCompanion": "npx awal@2.12.0 quit --json",
"status": "npx awal@2.12.0 status --json",
"balance": "npx awal@2.12.0 balance --chain base --json",
"details": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json"
},
"buyerClientRuntimePreflight": {
"requiredBeforePaidRetry": true,
"pinnedCliVersion": "2.12.0",
"pinnedCompanionVersion": "2.12.0",
"stopOldCompanionCommand": "npx awal@2.12.0 quit --json",
"restartCurrentCompanionCommand": "npx awal@2.12.0 status --json",
"confirmBaseBalanceCommand": "npx awal@2.12.0 balance --chain base --json",
"parseUnpaidContractCommand": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json",
"versionAlignedCompanionRequired": true,
"discoveryParseAloneIsPaidProof": false,
"paymentAttemptedByPreflight": false,
"paidRouteCalledByPreflight": false,
"automaticRetry": false,
"allowedPaidRetryCountAfterBuyerApproval": 1
},
"microcopy": "Refresh the buyer wallet companion to AWAL 2.12.0, confirm authentication and Base USDC, then parse the unpaid contract before one buyer-approved retry. This can spend up to 10000 atomic USDC only if your wallet approves. ApexScout does not run the command; copying is not payment; unpaid HTTP 402 is not revenue; paid proof means HTTP 200 after a buyer-controlled x402 retry.",
"prerequisites": [
"Stop an older AWAL companion, then start the pinned 2.12.0 companion.",
"Confirm the buyer wallet is authenticated and has enough USDC on Base.",
"Parse the unpaid 402 contract before any buyer-approved retry.",
"Approve only GET /api/opportunity-check with max amount 10000 atomic USDC.",
"Stop if the route, amount, network, or buyer approval differs."
],
"approvalCopy": "This command can spend up to 10000 atomic USDC only if your buyer wallet approves.",
"copyingIsNotPaymentCopy": "Copying this command is not payment.",
"apexScoutRunsCommandCopy": "ApexScout does not run this command.",
"unpaidChallengeCopy": "Unpaid HTTP 402 is expected before payment.",
"paidCompletionCopy": "Paid proof completes only when your buyer-controlled x402 retry returns HTTP 200.",
"placement": {
"x402Proof": "above-proof-detail-sections",
"chatTinyPaymentFlow": "above-chat-flow-detail-sections",
"primaryForWalletCapableAgents": true,
"normalNoSpendPathRemainsPrimary": true
},
"buttons": [
{
"label": "Copy AWAL latest command",
"copies": "command",
"value": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy AWAL 2.12 command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy route only",
"copies": "route",
"value": "/api/opportunity-check?src=agent-execution-awal-latest",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetry": {
"commandCopyTelemetryAdded": false,
"skippedReason": "The release keeps the buttons copy-only and avoids adding a client-side analytics call; the AWAL version source tags are still available when a buyer-run agent command reaches the unpaid 402 route.",
"copyIsRevenue": false,
"copyIsPayment": false,
"unpaidChallengeSourceBucket": "agentExecutionAwalLatest"
},
"noSpendBoundary": {
"copyPanelIsFree": true,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"paidRouteCalledByCopyPanel": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"buyerAgentCommandVariantsAvailable": true,
"buyerAgentCommandVariants": [
{
"id": "awal-latest",
"label": "Recommended current",
"packageVersion": "latest",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": true,
"pinned": false,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
},
{
"id": "awal-2-12",
"label": "Pinned current",
"packageVersion": "2.12.0",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": false,
"pinned": true,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
}
],
"buyerClientCompatibilityMatrixAvailable": true,
"buyerClientCompatibilityMatrix": [
{
"client": "AWAL CLI",
"status": "recommended-current",
"buyerSideOnly": true,
"goodFor": "Buyer agents using Coinbase Agentic Wallet CLI to make a capped one-cent x402 proof request.",
"commandVariants": [
"awal-latest",
"awal-2-12"
],
"docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/pay-for-service",
"paymentExecutedByApexScout": false
},
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"walletMustBeAuthenticated": true,
"walletNeedsSufficientUsdc": true,
"apexScoutRunsCommand": false,
"copyingIsPayment": false,
"paymentExecutedByApexScout": false,
"agentReceiptCloseStripAvailable": true,
"agentReceiptCloseStrip": {
"available": true,
"mode": "agent-receipt-close-strip",
"release": "v2.2.228-live-command-center",
"title": "Receipt rule accepted? Copy the proof command",
"purpose": "Put the Agent Receipt Contract directly beside the buyer-agent payment command so x402-capable clients know the exact proof standard before retrying.",
"sourceTag": "agent-receipt-contract",
"sourceBucket": "agentReceiptContract",
"method": "GET",
"route": "/api/opportunity-check",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"firstScreenPlacement": {
"x402Proof": "before-wallet-command-copy",
"chatTinyPaymentFlow": "before-wallet-command-copy",
"makeReceiptRuleVisibleBeforePaymentCommand": true,
"normalNoSpendPathRemainsPrimary": true
},
"receiptRule": {
"payOnlyIf": "Your buyer agent accepts that only HTTP 200 after a buyer-controlled x402 retry counts as paid proof.",
"rejectIf": "The client treats HTTP 402, copied text, monitor reads, route mismatch, amount mismatch, network mismatch, or repeated retry loops as proof.",
"unpaid402IsNotRevenue": true,
"paidProofRequiresHttp200": true,
"buyerControlsWalletAndRetry": true,
"stopAfterOneSuccessfulPaidResponse": true
},
"visibleBuyerCopy": [
"Accept the receipt rule before copying the command.",
"HTTP 402 is only the unpaid challenge.",
"HTTP 200 after your buyer-controlled retry is the paid proof.",
"ApexScout does not run this command and does not control the wallet."
],
"buttons": [
{
"label": "Copy receipt-bound command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy receipt route",
"copies": "route",
"value": "/api/opportunity-check?src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentReceiptContract",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"successSignal": "agentReceiptContract source bucket moves only when a buyer/client requests the paid proof route with the receipt-contract source tag."
},
"noSpendBoundary": {
"closeStripIsFree": true,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"paymentAttemptedByCloseStrip": false,
"paidRouteCalledByCloseStrip": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"buyerWalletCloseAvailable": true,
"buyerWalletClose": {
"available": true,
"mode": "buyer-wallet-close",
"release": "v2.2.228-live-command-center",
"title": "Can your wallet pay now?",
"purpose": "Separate wallet-ready buyers from buyers who still need setup before the one-cent proof retry.",
"route": "/api/buyer-wallet-close-intent",
"method": "GET",
"routeIsFree": true,
"sourceTags": {
"walletReady": "agent-receipt-contract",
"cannotPayYet": "agent-wallet-skill-pack",
"copyPaidProofCommand": "agent-execution-command-copy",
"copyReceiptBoundCommand": "agent-receipt-contract",
"copyWalletSetupCommand": "agent-wallet-skill-pack"
},
"actions": {
"walletReady": {
"action": "wallet_ready",
"path": "/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"method": "GET",
"sourceTag": "agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
"cannotPayYet": {
"action": "cannot_pay_yet",
"path": "/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"method": "GET",
"sourceTag": "agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
},
"copyPaidProofCommand": {
"action": "copy_paid_proof_command",
"path": "/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"method": "GET",
"sourceTag": "agent-execution-command-copy",
"executesPayment": false,
"opensPaidRoute": false
},
"copyReceiptBoundCommand": {
"action": "copy_receipt_bound_command",
"path": "/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"method": "GET",
"sourceTag": "agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
"copyWalletSetupCommand": {
"action": "copy_wallet_setup_command",
"path": "/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"method": "GET",
"sourceTag": "agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
}
},
"visibleBuyerCopy": [
"Choose the wallet state before copying a command.",
"This signal is a free GET request and does not open the paid route.",
"If the wallet is ready, copy the command and run it only from the buyer-controlled wallet.",
"If the wallet is not ready, stop before payment and fix wallet authentication, balance, route, amount, or network."
],
"paidProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"receiptBoundCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"buttons": [
{
"label": "I can pay now",
"action": "wallet_ready",
"copies": null,
"value": null,
"intentPath": "/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "I can't pay yet",
"action": "cannot_pay_yet",
"copies": null,
"value": null,
"intentPath": "/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy paid proof command",
"action": "copy_paid_proof_command",
"copies": "command",
"value": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy receipt-bound command",
"action": "copy_receipt_bound_command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"action": "copy_wallet_setup_command",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"mode": "aggregate-only-buyer-wallet-close-intent",
"counter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"cannotPayYetCounter": "buyerWalletCloseSignals.cannotPayYet",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"copyWalletSetupCommandCounter": "buyerWalletCloseSignals.copyWalletSetupCommand",
"intentIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"firstScreenPlacement": {
"x402Proof": "before-receipt-and-command-copy",
"chatTinyPaymentFlow": "before-receipt-and-command-copy",
"walletStateVisibleBeforePaymentCommand": true,
"normalNoSpendPathRemainsPrimary": true
},
"noSpendBoundary": {
"panelIsFree": true,
"intentRouteIsFree": true,
"intentRouteMethod": "GET",
"copyingExecutesPayment": false,
"clickingStateExecutesPayment": false,
"clickingStateOpensPaidRoute": false,
"paidRouteCalledByPanel": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"http402ClosePacketAvailable": true,
"http402ClosePacket": {
"available": true,
"mode": "buyer-agent-402-close-packet",
"release": "v2.2.228-live-command-center",
"title": "402 close packet",
"purpose": "Put the buyer-agent close instructions inside the unpaid HTTP 402 response so x402-capable clients can finish the proof without hunting through a page.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"closeMessage": "You reached the ApexScout paid proof gate. To complete the proof, retry this exact GET route from an authenticated x402 wallet/client with max amount 10000 atomic USDC on Base mainnet.",
"buyerAgentInstruction": "If the buyer approved this one-cent proof, run the command exactly once and treat only HTTP 200 as the paid completion. If any route, amount, network, or approval detail differs, stop.",
"whatHttp200Proves": [
"The buyer-controlled x402 retry reached ApexScout's one-cent proof route.",
"The paid route returned structured JSON after payment verification.",
"The aggregate paid proof completion counter is allowed to move only after HTTP 200."
],
"notProofOf": [
"Coinbase, AWS, Stripe, Bazaar, AgentCore, Base, marketplace, or protocol endorsement.",
"Guaranteed revenue, trading results, investment outcome, legal advice, tax advice, lending advice, or compliance approval.",
"Buyer identity, wallet-level activity, secret signing material, or broader permission to spend."
],
"continueIf": [
"The buyer explicitly approved this one-cent proof.",
"The client can attach an x402 payment authorization.",
"The retry route is exactly GET /api/opportunity-check?src=agent-execution-awal-latest.",
"The max amount is exactly 10000 atomic USDC.",
"The network is exactly eip155:8453."
],
"stopIf": [
"The wallet is not authenticated.",
"The wallet has insufficient USDC on Base.",
"The client cannot attach x402 payment.",
"The max amount is lower than 10000 atomic USDC.",
"The network is not eip155:8453.",
"The buyer did not approve this exact spend.",
"The agent plans to retry more than once just to clear a metric."
],
"failureBranches": {
"walletNotAuthenticated": {
"bucket": "wallet_not_authenticated",
"buyerAction": "Authenticate the buyer-controlled x402 wallet/client before retrying.",
"apexScoutAction": "Do nothing automatically."
},
"insufficientBaseUsdc": {
"bucket": "insufficient_base_usdc",
"buyerAction": "Stop until the buyer-controlled wallet has enough Base USDC for the one-cent proof.",
"apexScoutAction": "Do not fund, trade, onramp, or advise funding."
},
"maxAmountTooLow": {
"bucket": "max_amount_too_low",
"buyerAction": "Use max amount 10000 atomic USDC or stop.",
"apexScoutAction": "Do not lower route price or change payment requirements."
},
"wrongNetwork": {
"bucket": "wrong_network",
"buyerAction": "Use eip155:8453 Base mainnet or stop.",
"apexScoutAction": "Do not switch rails."
},
"paymentDeclined": {
"bucket": "payment_declined",
"buyerAction": "Stop unless the buyer explicitly approves another attempt.",
"apexScoutAction": "Do not retry payment for the buyer."
}
},
"telemetryInterpretation": {
"sourceTag": "agent-execution-awal-latest",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionAwalLatest",
"closePacketUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"closePacketIsFree": true,
"closePacketExecutesPayment": false,
"paymentAttemptedByClosePacket": false,
"paidRouteCalledByClosePacket": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"secretSigningMaterialRequested": false
}
},
"buyerProofExecutionCloseoutAvailable": true,
"buyerProofExecutionCloseout": {
"available": true,
"mode": "buyer-proof-execution-closeout",
"release": "v2.2.228-live-command-center",
"title": "Copied? Finish with one buyer-run proof retry",
"purpose": "Close the gap after a buyer agent marks its wallet ready or copies the command: run exactly one buyer-approved proof retry, classify the response, then stop.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"method": "GET",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"primarySourceTag": "agent-receipt-contract",
"primarySourceBucket": "agentReceiptContract",
"commandCopySourceTag": "agent-execution-command-copy",
"commandCopySourceBucket": "agentExecutionCommandCopy",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"firstScreenPlacement": {
"x402Proof": "after-wallet-close-before-receipt-command",
"chatTinyPaymentFlow": "after-wallet-close-before-receipt-command",
"closeoutVisibleBeforeCommandCopy": true,
"normalNoSpendPathRemainsPrimary": true
},
"closeoutRule": {
"ifWalletReadyAndCommandCopied": "Run the receipt-bound command exactly once from the buyer-controlled x402 wallet if the buyer approved the route, amount, and network.",
"ifCannotPayYet": "Do not retry payment. Use the wallet setup note and stop until wallet authentication, Base USDC balance, route, amount, and network match.",
"ifResponseIs402": "Treat the result as unpaid. It is a challenge, not a paid proof, and it should not move revenue.",
"ifResponseIs200": "Treat the result as paid proof only after the buyer-controlled x402 retry returns structured HTTP 200 JSON.",
"ifRetryIsRejected": "Read the sanitized edge failure status once, classify the rejection, and stop before another paid attempt.",
"stopAfter": "one buyer-approved paid retry unless a human operator explicitly approves another capped diagnostic"
},
"buyerAgentChecklist": [
"Wallet is authenticated by the buyer, not ApexScout.",
"Buyer approves GET /api/opportunity-check with source agent-receipt-contract.",
"Maximum spend is exactly 10000 atomic USDC.",
"Network is exactly eip155:8453 Base mainnet.",
"Run one retry, then classify HTTP 402, HTTP 200, or a sanitized edge failure."
],
"copyReadyCommands": {
"receiptBoundProofCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"commandCopyProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"edgeFailureReadCommand": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof."
},
"safeReadouts": {
"edgeHealthPath": "/__apexscout/cloudflare-x402/health",
"edgeLastFailurePath": "/__apexscout/cloudflare-x402/health/last-failure",
"edgeLastFailureUrl": "https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure",
"originLastFailurePath": "/api/cloudflare-x402-edge-failure/last",
"originLastFailureUrl": "https://apexscout.ai/api/cloudflare-x402-edge-failure/last",
"noPaymentAttemptedByRead": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"privateKeysRequested": false
},
"buttons": [
{
"label": "Copy receipt-bound proof command",
"copies": "receipt_bound_command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy edge failure readout",
"copies": "edge_failure_read_command",
"value": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"failureReadoutIsRevenue": false,
"copyIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"newCounterAdded": false,
"reason": "The closeout reuses existing aggregate wallet-close, source-bucket, and paid-completion counters so it improves decision clarity without creating fake movement."
},
"noSpendBoundary": {
"closeoutIsFree": true,
"closeoutExecutesPayment": false,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"failureReadoutExecutesPayment": false,
"failureReadoutCallsPaidRoute": false,
"paymentAttemptedByCloseout": false,
"paidRouteCalledByCloseout": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"productionPostCreated": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareMutationCreated": false,
"apifyActorRunCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"rawPaymentPayloadExposed": false
},
"safetyClaims": {
"guaranteedRevenueClaimed": false,
"officialEndorsementClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareMonetizationGatewayReadinessAvailable": true,
"cloudflareMonetizationGatewayReadiness": {
"available": true,
"mode": "cloudflare-monetization-gateway-readiness",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare live edge status",
"releaseReportingMode": "worker-and-origin-split",
"appRelease": "v2.2.228-live-command-center",
"originRelease": "v2.2.228-live-command-center",
"originReleasePath": "/status",
"workerRelease": "v2.2.228-live-command-center",
"workerSourceVersion": "2.2.228",
"workerHealthReleaseContract": {
"healthPath": "/__apexscout/cloudflare-x402/health",
"releaseFieldMeans": "workerRelease",
"workerReleaseField": "workerRelease",
"originReleaseField": "originRelease",
"originReleasePath": "/status",
"originReleaseReadIsNoSpend": true,
"mismatchIsActionableOnlyWhenWorkerHealthFails": true
},
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"articleUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving x402 payment enforcement toward edge-managed route rules. ApexScout now serves the one-cent proof path through a narrow Cloudflare Worker while keeping Railway as the origin fallback."
},
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"officialCloudflareMonetizationGatewayClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"waitlistOrEarlyAccessRequired": false,
"noDnsChangeMade": false,
"dnsChangedByLiveCutover": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"apexScoutRemainsSourceOfTruth": true,
"candidateRules": [
{
"id": "apexscout-one-cent-proof",
"purpose": "Edge-readable one-cent x402 proof route for wallet-capable buyer agents.",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"displayPrice": "$0.01",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
},
{
"id": "apexscout-agent-revenue-audit",
"purpose": "Higher-value builder monetization audit route.",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"amountAtomicUsdc": "5000000",
"priceUsd": "5.00",
"displayPrice": "$5.00",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
}
],
"migrationPlan": [
"Keep the Cloudflare Worker route narrow and use Railway as the origin fallback.",
"Use these candidate rules as the review checklist before any future official managed-gateway change.",
"Require unpaid HTTP 402 and buyer-controlled HTTP 200 proof for each route after any edge or gateway change.",
"Keep ApexScout aggregate metrics as the public conversion truth source.",
"Roll back to Railway-origin x402 if route, amount, network, or payment proof differs."
],
"operatorChecklist": {
"dnsChangeApproved": true,
"cloudflareApiTokenApproved": true,
"gatewayRuleCreationApproved": true,
"postDeployPaidProofRequiredBeforeClaimingGatewayLive": true,
"originFallbackRequired": true,
"compareGatewayRulesToCandidateRules": true
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"cloudflareApiCalled": false,
"dnsChanged": false,
"dnsAlreadyProxiedThroughCloudflare": true,
"workerAlreadyDeployed": true,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"revenueOutcomeClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
},
"telemetryInterpretation": {
"readinessUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"watchCounters": "If unpaid proof counters move without paid completions, treat it as proof-route interest, not gateway success."
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"label": "x402-capable agent?",
"linkText": "Request GET /api/opportunity-check",
"copy": "Request the one-cent paid proof directly. It returns HTTP 402 until your own approved x402 wallet retries payment.",
"microcopy": "Opening this without a wallet returns an unpaid 402 challenge. Unpaid 402 is not revenue."
},
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false
},
{
"intent": "audit",
"href": "/action-pack/go/audit",
"url": "https://apexscout.ai/action-pack/go/audit",
"label": "Check my $5 audit request for free",
"copy": "Use this when you want ApexScout to check whether your Agent Revenue Audit request is ready before payment.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"nextActionLabel": "Check my audit request for free",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": null,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false
},
{
"intent": "agentic-trading",
"href": "/action-pack/go/agentic-trading",
"url": "https://apexscout.ai/action-pack/go/agentic-trading",
"label": "Check payment readiness for an agentic trading or DeFi tool",
"copy": "Use this for wallet-enabled agent tools, DeFi workflows, market-data products, or trading automation payment boundaries. ApexScout does not give trading or investment advice.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"nextActionLabel": "Check payment readiness for free",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": null,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false,
"agenticTradingPaymentReadinessDisclaimer": "This is payment-readiness only. ApexScout does not give trading, investment, tax, legal, lending, or compliance advice.",
"advice": "Payment-readiness only. Not trading or investment advice.",
"noTradingAdvice": true
},
{
"intent": "scope",
"href": "/action-pack/go/scope",
"url": "https://apexscout.ai/action-pack/go/scope",
"label": "Check buyer payment scope",
"copy": "Use this after ready_to_pay before a buyer-controlled x402 wallet retries payment.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"nextActionLabel": "Run free scope check",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": null,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false
}
],
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false
},
"primaryNoSpendActions": [
{
"intent": "proof",
"href": "/action-pack/go/proof",
"url": "https://apexscout.ai/action-pack/go/proof",
"label": "Test the cheapest x402 proof path",
"copy": "Use this when you only need the trust/proof flow.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"nextActionLabel": "Inspect unpaid proof instructions",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": {
"method": "GET",
"route": "/api/opportunity-check",
"href": "/api/opportunity-check?src=front-door-x402-proof-cta",
"url": "https://apexscout.ai/api/opportunity-check?src=front-door-x402-proof-cta",
"sourceTag": "front-door-x402-proof-cta",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"requiresBuyerControlledX402Retry": true,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"secondaryToNoSpend": true,
"noAutoOpen": true,
"noPaymentExecution": true,
"buyerLevelDataExposed": false,
"proofRetryConfidence": {
"available": true,
"mode": "no-spend-proof-retry-confidence",
"purpose": "Help x402-capable buyers understand that an unpaid 402 is the expected proof challenge and that payment only happens from a buyer-controlled retry.",
"route": "/api/opportunity-check",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"expectedUnpaidMeaning": "HTTP 402 means the proof paywall is reachable and returning x402 payment requirements. It is not a service outage and it is not revenue.",
"expectedPaidMeaning": "HTTP 200 only counts after a buyer-controlled x402 client retries this route with an approved payment.",
"http402ReadinessReceiptAvailable": true,
"http402ReadinessReceipt": {
"available": true,
"mode": "no-spend-http-402-readiness-receipt",
"title": "HTTP 402 Readiness Receipt",
"purpose": "Give x402-capable buyers a compact, unsigned receipt showing what the unpaid proof challenge proves before any buyer-controlled paid retry.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"receiptScope": "GET /api/opportunity-check, $0.01 maximum amount, eip155:8453 Base mainnet x402, one buyer-controlled retry.",
"receiptSummary": "Unpaid HTTP 402 proves the x402 proof route is reachable and returning payment requirements. It does not prove payment, revenue, endorsement, or buyer approval.",
"agentDecision": {
"payOnlyIf": "The buyer explicitly approves the route, max amount, network, and one retry from a wallet-controlled x402 client.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the route or network differs, or HTTP 402 is being treated as a paid completion.",
"nextNoSpendStep": "Stay on ApexScout proof, action-pack, Scope Check, or Builder surfaces until buyer-controlled payment is intentionally approved."
},
"readinessChecks": [
"Route scoped to GET /api/opportunity-check.",
"Amount scoped to $0.01 / 10000 atomic USDC.",
"Network scoped to Base mainnet eip155:8453.",
"HTTP 402 is expected before payment.",
"HTTP 200 is required before paid completion is counted.",
"No request body, cookies, session, or wallet connection is required to read this receipt.",
"No buyer-level data is exposed by this receipt.",
"No automatic payment or paid retry is performed by ApexScout."
],
"publicSafetyCopy": "This is an unsigned no-spend readiness receipt, not AP2 proof, not a signed mandate, not a legal or payment receipt, not an endorsement claim, and not trading, investment, tax, legal, lending, or compliance advice.",
"notClaims": {
"signedReceiptCreated": false,
"ap2ProofCreated": false,
"legalMandateCreated": false,
"paymentReceiptCreated": false,
"walletApprovalCreated": false,
"officialEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false
},
"noSpendBoundary": {
"receiptIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByReceipt": false,
"paidRouteCalledByReceipt": false,
"paidUpstreamCalls": false,
"walletConnectionRequiredForReceipt": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"receiptUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"copyPasteReceiptSummary": "HTTP 402 readiness receipt: GET /api/opportunity-check is reachable, costs max $0.01 on eip155:8453 only after buyer-controlled x402 retry, and counts as paid only when HTTP 200 returns."
},
"proofRetryDecisionStripAvailable": true,
"proofRetryDecisionStrip": {
"available": true,
"mode": "buyer-controlled-proof-retry-decision-strip",
"title": "Buyer-controlled proof retry gate",
"purpose": "Compress the next click after an unpaid 402 into a clear continue/stop decision for x402-capable buyers.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"decisionSummary": "Continue only if buyer approval, x402 wallet capability, exact route, exact amount, and Base mainnet network all match.",
"continueIf": [
"Buyer explicitly approves this exact $0.01 proof.",
"Client can attach x402 payment on Base mainnet eip155:8453.",
"Route is exactly GET /api/opportunity-check.",
"Max amount is exactly 10000 atomic USDC.",
"Buyer understands only HTTP 200 counts as a paid proof completion."
],
"stopIf": [
"Buyer has not approved spend.",
"Client is a normal browser without x402 payment support.",
"Route, amount, or network differs from the receipt.",
"The buyer is treating unpaid HTTP 402 as revenue or completion.",
"The output will not change the buyer's next action."
],
"primaryAction": {
"label": "Request unpaid proof challenge",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"normalBrowserResult": "HTTP 402 JSON with x402 payment requirements",
"x402CapableResult": "HTTP 200 JSON only after buyer-controlled paid retry",
"noPaymentOnClick": true,
"paidRetryRequiresBuyerWallet": true
},
"fallbackNoSpendActions": [
"/x402-proof",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/chat-tiny-payment-flow"
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"decisionStripUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"decisionStripIsFree": true,
"paymentAttemptedByDecisionStrip": false,
"paidRouteCalledByDecisionStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"http402ClosePacketAvailable": true,
"http402ClosePacket": {
"available": true,
"mode": "buyer-agent-402-close-packet",
"release": "v2.2.228-live-command-center",
"title": "402 close packet",
"purpose": "Put the buyer-agent close instructions inside the unpaid HTTP 402 response so x402-capable clients can finish the proof without hunting through a page.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"closeMessage": "You reached the ApexScout paid proof gate. To complete the proof, retry this exact GET route from an authenticated x402 wallet/client with max amount 10000 atomic USDC on Base mainnet.",
"buyerAgentInstruction": "If the buyer approved this one-cent proof, run the command exactly once and treat only HTTP 200 as the paid completion. If any route, amount, network, or approval detail differs, stop.",
"whatHttp200Proves": [
"The buyer-controlled x402 retry reached ApexScout's one-cent proof route.",
"The paid route returned structured JSON after payment verification.",
"The aggregate paid proof completion counter is allowed to move only after HTTP 200."
],
"notProofOf": [
"Coinbase, AWS, Stripe, Bazaar, AgentCore, Base, marketplace, or protocol endorsement.",
"Guaranteed revenue, trading results, investment outcome, legal advice, tax advice, lending advice, or compliance approval.",
"Buyer identity, wallet-level activity, secret signing material, or broader permission to spend."
],
"continueIf": [
"The buyer explicitly approved this one-cent proof.",
"The client can attach an x402 payment authorization.",
"The retry route is exactly GET /api/opportunity-check?src=agent-execution-awal-latest.",
"The max amount is exactly 10000 atomic USDC.",
"The network is exactly eip155:8453."
],
"stopIf": [
"The wallet is not authenticated.",
"The wallet has insufficient USDC on Base.",
"The client cannot attach x402 payment.",
"The max amount is lower than 10000 atomic USDC.",
"The network is not eip155:8453.",
"The buyer did not approve this exact spend.",
"The agent plans to retry more than once just to clear a metric."
],
"failureBranches": {
"walletNotAuthenticated": {
"bucket": "wallet_not_authenticated",
"buyerAction": "Authenticate the buyer-controlled x402 wallet/client before retrying.",
"apexScoutAction": "Do nothing automatically."
},
"insufficientBaseUsdc": {
"bucket": "insufficient_base_usdc",
"buyerAction": "Stop until the buyer-controlled wallet has enough Base USDC for the one-cent proof.",
"apexScoutAction": "Do not fund, trade, onramp, or advise funding."
},
"maxAmountTooLow": {
"bucket": "max_amount_too_low",
"buyerAction": "Use max amount 10000 atomic USDC or stop.",
"apexScoutAction": "Do not lower route price or change payment requirements."
},
"wrongNetwork": {
"bucket": "wrong_network",
"buyerAction": "Use eip155:8453 Base mainnet or stop.",
"apexScoutAction": "Do not switch rails."
},
"paymentDeclined": {
"bucket": "payment_declined",
"buyerAction": "Stop unless the buyer explicitly approves another attempt.",
"apexScoutAction": "Do not retry payment for the buyer."
}
},
"telemetryInterpretation": {
"sourceTag": "agent-execution-awal-latest",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionAwalLatest",
"closePacketUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"closePacketIsFree": true,
"closePacketExecutesPayment": false,
"paymentAttemptedByClosePacket": false,
"paidRouteCalledByClosePacket": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"secretSigningMaterialRequested": false
}
},
"buyerProofExecutionCloseoutAvailable": true,
"buyerProofExecutionCloseout": {
"available": true,
"mode": "buyer-proof-execution-closeout",
"release": "v2.2.228-live-command-center",
"title": "Copied? Finish with one buyer-run proof retry",
"purpose": "Close the gap after a buyer agent marks its wallet ready or copies the command: run exactly one buyer-approved proof retry, classify the response, then stop.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"method": "GET",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"primarySourceTag": "agent-receipt-contract",
"primarySourceBucket": "agentReceiptContract",
"commandCopySourceTag": "agent-execution-command-copy",
"commandCopySourceBucket": "agentExecutionCommandCopy",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"firstScreenPlacement": {
"x402Proof": "after-wallet-close-before-receipt-command",
"chatTinyPaymentFlow": "after-wallet-close-before-receipt-command",
"closeoutVisibleBeforeCommandCopy": true,
"normalNoSpendPathRemainsPrimary": true
},
"closeoutRule": {
"ifWalletReadyAndCommandCopied": "Run the receipt-bound command exactly once from the buyer-controlled x402 wallet if the buyer approved the route, amount, and network.",
"ifCannotPayYet": "Do not retry payment. Use the wallet setup note and stop until wallet authentication, Base USDC balance, route, amount, and network match.",
"ifResponseIs402": "Treat the result as unpaid. It is a challenge, not a paid proof, and it should not move revenue.",
"ifResponseIs200": "Treat the result as paid proof only after the buyer-controlled x402 retry returns structured HTTP 200 JSON.",
"ifRetryIsRejected": "Read the sanitized edge failure status once, classify the rejection, and stop before another paid attempt.",
"stopAfter": "one buyer-approved paid retry unless a human operator explicitly approves another capped diagnostic"
},
"buyerAgentChecklist": [
"Wallet is authenticated by the buyer, not ApexScout.",
"Buyer approves GET /api/opportunity-check with source agent-receipt-contract.",
"Maximum spend is exactly 10000 atomic USDC.",
"Network is exactly eip155:8453 Base mainnet.",
"Run one retry, then classify HTTP 402, HTTP 200, or a sanitized edge failure."
],
"copyReadyCommands": {
"receiptBoundProofCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"commandCopyProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"edgeFailureReadCommand": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof."
},
"safeReadouts": {
"edgeHealthPath": "/__apexscout/cloudflare-x402/health",
"edgeLastFailurePath": "/__apexscout/cloudflare-x402/health/last-failure",
"edgeLastFailureUrl": "https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure",
"originLastFailurePath": "/api/cloudflare-x402-edge-failure/last",
"originLastFailureUrl": "https://apexscout.ai/api/cloudflare-x402-edge-failure/last",
"noPaymentAttemptedByRead": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"privateKeysRequested": false
},
"buttons": [
{
"label": "Copy receipt-bound proof command",
"copies": "receipt_bound_command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy edge failure readout",
"copies": "edge_failure_read_command",
"value": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"failureReadoutIsRevenue": false,
"copyIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"newCounterAdded": false,
"reason": "The closeout reuses existing aggregate wallet-close, source-bucket, and paid-completion counters so it improves decision clarity without creating fake movement."
},
"noSpendBoundary": {
"closeoutIsFree": true,
"closeoutExecutesPayment": false,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"failureReadoutExecutesPayment": false,
"failureReadoutCallsPaidRoute": false,
"paymentAttemptedByCloseout": false,
"paidRouteCalledByCloseout": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"productionPostCreated": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareMutationCreated": false,
"apifyActorRunCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"rawPaymentPayloadExposed": false
},
"safetyClaims": {
"guaranteedRevenueClaimed": false,
"officialEndorsementClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareMonetizationGatewayReadinessAvailable": true,
"cloudflareMonetizationGatewayReadiness": {
"available": true,
"mode": "cloudflare-monetization-gateway-readiness",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare live edge status",
"releaseReportingMode": "worker-and-origin-split",
"appRelease": "v2.2.228-live-command-center",
"originRelease": "v2.2.228-live-command-center",
"originReleasePath": "/status",
"workerRelease": "v2.2.228-live-command-center",
"workerSourceVersion": "2.2.228",
"workerHealthReleaseContract": {
"healthPath": "/__apexscout/cloudflare-x402/health",
"releaseFieldMeans": "workerRelease",
"workerReleaseField": "workerRelease",
"originReleaseField": "originRelease",
"originReleasePath": "/status",
"originReleaseReadIsNoSpend": true,
"mismatchIsActionableOnlyWhenWorkerHealthFails": true
},
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"articleUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving x402 payment enforcement toward edge-managed route rules. ApexScout now serves the one-cent proof path through a narrow Cloudflare Worker while keeping Railway as the origin fallback."
},
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"officialCloudflareMonetizationGatewayClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"waitlistOrEarlyAccessRequired": false,
"noDnsChangeMade": false,
"dnsChangedByLiveCutover": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"apexScoutRemainsSourceOfTruth": true,
"candidateRules": [
{
"id": "apexscout-one-cent-proof",
"purpose": "Edge-readable one-cent x402 proof route for wallet-capable buyer agents.",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"displayPrice": "$0.01",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
},
{
"id": "apexscout-agent-revenue-audit",
"purpose": "Higher-value builder monetization audit route.",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"amountAtomicUsdc": "5000000",
"priceUsd": "5.00",
"displayPrice": "$5.00",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
}
],
"migrationPlan": [
"Keep the Cloudflare Worker route narrow and use Railway as the origin fallback.",
"Use these candidate rules as the review checklist before any future official managed-gateway change.",
"Require unpaid HTTP 402 and buyer-controlled HTTP 200 proof for each route after any edge or gateway change.",
"Keep ApexScout aggregate metrics as the public conversion truth source.",
"Roll back to Railway-origin x402 if route, amount, network, or payment proof differs."
],
"operatorChecklist": {
"dnsChangeApproved": true,
"cloudflareApiTokenApproved": true,
"gatewayRuleCreationApproved": true,
"postDeployPaidProofRequiredBeforeClaimingGatewayLive": true,
"originFallbackRequired": true,
"compareGatewayRulesToCandidateRules": true
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"cloudflareApiCalled": false,
"dnsChanged": false,
"dnsAlreadyProxiedThroughCloudflare": true,
"workerAlreadyDeployed": true,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"revenueOutcomeClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
},
"telemetryInterpretation": {
"readinessUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"watchCounters": "If unpaid proof counters move without paid completions, treat it as proof-route interest, not gateway success."
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"retryDecision": {
"recommendedOnlyForX402CapableClients": true,
"payOnlyIf": "The buyer wants the cheapest live x402 proof and approves the route, $0.01 maximum amount, Base mainnet network, and one retry.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the network is not eip155:8453, or the output will not change the next action.",
"ifUnsure": "Stay on the no-spend proof and action-pack surfaces. Do not retry payment just to clear the counter."
},
"approvalChecklist": [
"Buyer approves GET /api/opportunity-check as the route.",
"Buyer approves the $0.01 maximum spend.",
"Buyer approves Base mainnet x402 on eip155:8453.",
"Buyer controls the wallet and chooses whether to retry.",
"Buyer expects HTTP 200 JSON only after the paid retry succeeds."
],
"copyPasteAgentNote": "Unpaid 402 is expected. If the buyer approves a one-cent proof, retry GET /api/opportunity-check with an x402-capable client, max amount 10000 atomic USDC on eip155:8453, and treat only HTTP 200 as completion.",
"paidRetryCommandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof\" \\\n --max-amount 10000 \\\n --json",
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"ifUnpaidRisesWithoutCompletion": "Treat this as proof-route interest without payment. Inspect retry clarity only after repeated windows; do not add another paid route.",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"confidencePacketIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByConfidencePacket": false,
"walletConnectionRequiredForConfidencePacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"http402ReadinessReceiptAvailable": true,
"http402ReadinessReceipt": {
"available": true,
"mode": "no-spend-http-402-readiness-receipt",
"title": "HTTP 402 Readiness Receipt",
"purpose": "Give x402-capable buyers a compact, unsigned receipt showing what the unpaid proof challenge proves before any buyer-controlled paid retry.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"receiptScope": "GET /api/opportunity-check, $0.01 maximum amount, eip155:8453 Base mainnet x402, one buyer-controlled retry.",
"receiptSummary": "Unpaid HTTP 402 proves the x402 proof route is reachable and returning payment requirements. It does not prove payment, revenue, endorsement, or buyer approval.",
"agentDecision": {
"payOnlyIf": "The buyer explicitly approves the route, max amount, network, and one retry from a wallet-controlled x402 client.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the route or network differs, or HTTP 402 is being treated as a paid completion.",
"nextNoSpendStep": "Stay on ApexScout proof, action-pack, Scope Check, or Builder surfaces until buyer-controlled payment is intentionally approved."
},
"readinessChecks": [
"Route scoped to GET /api/opportunity-check.",
"Amount scoped to $0.01 / 10000 atomic USDC.",
"Network scoped to Base mainnet eip155:8453.",
"HTTP 402 is expected before payment.",
"HTTP 200 is required before paid completion is counted.",
"No request body, cookies, session, or wallet connection is required to read this receipt.",
"No buyer-level data is exposed by this receipt.",
"No automatic payment or paid retry is performed by ApexScout."
],
"publicSafetyCopy": "This is an unsigned no-spend readiness receipt, not AP2 proof, not a signed mandate, not a legal or payment receipt, not an endorsement claim, and not trading, investment, tax, legal, lending, or compliance advice.",
"notClaims": {
"signedReceiptCreated": false,
"ap2ProofCreated": false,
"legalMandateCreated": false,
"paymentReceiptCreated": false,
"walletApprovalCreated": false,
"officialEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false
},
"noSpendBoundary": {
"receiptIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByReceipt": false,
"paidRouteCalledByReceipt": false,
"paidUpstreamCalls": false,
"walletConnectionRequiredForReceipt": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"receiptUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"copyPasteReceiptSummary": "HTTP 402 readiness receipt: GET /api/opportunity-check is reachable, costs max $0.01 on eip155:8453 only after buyer-controlled x402 retry, and counts as paid only when HTTP 200 returns."
},
"proofRetryDecisionStripAvailable": true,
"proofRetryDecisionStrip": {
"available": true,
"mode": "buyer-controlled-proof-retry-decision-strip",
"title": "Buyer-controlled proof retry gate",
"purpose": "Compress the next click after an unpaid 402 into a clear continue/stop decision for x402-capable buyers.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"decisionSummary": "Continue only if buyer approval, x402 wallet capability, exact route, exact amount, and Base mainnet network all match.",
"continueIf": [
"Buyer explicitly approves this exact $0.01 proof.",
"Client can attach x402 payment on Base mainnet eip155:8453.",
"Route is exactly GET /api/opportunity-check.",
"Max amount is exactly 10000 atomic USDC.",
"Buyer understands only HTTP 200 counts as a paid proof completion."
],
"stopIf": [
"Buyer has not approved spend.",
"Client is a normal browser without x402 payment support.",
"Route, amount, or network differs from the receipt.",
"The buyer is treating unpaid HTTP 402 as revenue or completion.",
"The output will not change the buyer's next action."
],
"primaryAction": {
"label": "Request unpaid proof challenge",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"normalBrowserResult": "HTTP 402 JSON with x402 payment requirements",
"x402CapableResult": "HTTP 200 JSON only after buyer-controlled paid retry",
"noPaymentOnClick": true,
"paidRetryRequiresBuyerWallet": true
},
"fallbackNoSpendActions": [
"/x402-proof",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/chat-tiny-payment-flow"
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"decisionStripUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"decisionStripIsFree": true,
"paymentAttemptedByDecisionStrip": false,
"paidRouteCalledByDecisionStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofCtaAvailable": true,
"agentExecutionProofCta": {
"available": true,
"mode": "promoted-buyer-executable-proof-cta",
"title": "Buyer-run proof packet",
"label": "Run with buyer-approved x402 wallet",
"copy": "Wallet-capable buyers can use the exact one-cent proof packet now. ApexScout only exposes the packet; the buyer wallet decides whether to pay.",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"method": "GET",
"route": "/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"conversionBet": "Promote the already-safe buyer-execution packet above passive proof copy so x402-capable clients have one obvious next action.",
"successMetric": "opportunityCheckGetProofCompletions",
"unpaidSourceBucket": "agentExecutionProofPacket",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerDecision": {
"continueOnlyIf": "The buyer approves the route, amount, network, and one retry from an x402-capable wallet runtime.",
"stopIf": "Approval is missing, the client cannot attach x402 payment, or the route/amount/network differs."
},
"noSpendBoundary": {
"ctaIsFreeToRead": true,
"normalBrowserGetsUnpaid402": true,
"paymentAttemptedByCta": false,
"paidRouteCalledByApexScout": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"walletReadinessStripAvailable": true,
"walletReadinessStrip": {
"available": true,
"mode": "buyer-wallet-readiness-strip",
"title": "Before you run the command",
"checklist": [
"Your x402 wallet/client is authenticated.",
"Your wallet has at least $0.01 USDC available on Base.",
"You approve the route: GET /api/opportunity-check.",
"You approve the max amount: 10000 atomic USDC.",
"You understand unpaid HTTP 402 is not revenue.",
"You understand paid proof means HTTP 200 after your own wallet retry."
],
"copy": "ApexScout does not run this command for you. Your buyer-controlled wallet decides whether to spend.",
"route": "/api/opportunity-check",
"method": "GET",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"network": "eip155:8453",
"noFundingAdvice": true,
"noTradingAdvice": true,
"noPrivateKeyAdvice": true,
"noOnrampAdvice": true,
"noSpendBoundary": {
"stripIsFree": true,
"paymentAttemptedByStrip": false,
"paidRouteCalledByStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"buyerAgentCommandCopyAvailable": true,
"buyerAgentCommandCopy": {
"available": true,
"mode": "buyer-agent-command-copy",
"title": "Choose your buyer-run x402 command",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"recommendedCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"pinnedCurrentCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"deprecatedLegacyCommand": "npx awal@2.8.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-2-8\" --max-amount 10000 --json",
"deprecatedLegacyCommandOfferedForPaidUse": false,
"buyerAgentCommandVariants": [
{
"id": "awal-latest",
"label": "Recommended current",
"packageVersion": "latest",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": true,
"pinned": false,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
},
{
"id": "awal-2-12",
"label": "Pinned current",
"packageVersion": "2.12.0",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": false,
"pinned": true,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
}
],
"buyerClientCompatibilityMatrix": [
{
"client": "AWAL CLI",
"status": "recommended-current",
"buyerSideOnly": true,
"goodFor": "Buyer agents using Coinbase Agentic Wallet CLI to make a capped one-cent x402 proof request.",
"commandVariants": [
"awal-latest",
"awal-2-12"
],
"docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/pay-for-service",
"paymentExecutedByApexScout": false
},
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"otherX402CapableBuyerClients": [
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"legacyCommandCopyRoute": "/api/opportunity-check?src=agent-execution-command-copy",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"requestBodyRequired": false,
"walletMustBeAuthenticated": true,
"walletNeedsSufficientUsdc": true,
"apexScoutRunsCommand": false,
"copyingIsPayment": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"sourceBucketCompatibility": {
"oldPacketSourceStillSupported": "agent-execution-proof-packet",
"previousCommandCopySourceStillSupported": "agent-execution-command-copy",
"recommendedCurrentSource": "agent-execution-awal-latest",
"pinnedCurrentSource": "agent-execution-awal-latest",
"previousPinnedSourceStillMeasured": "agent-execution-awal-2-10",
"deprecatedLegacySourceStillMeasured": "agent-execution-awal-2-8",
"unpaidSourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"topSourceTagsCounter": "opportunityCheckGetProofUnpaidTopSourceTags"
},
"prerequisiteCommands": {
"stopOldCompanion": "npx awal@2.12.0 quit --json",
"status": "npx awal@2.12.0 status --json",
"balance": "npx awal@2.12.0 balance --chain base --json",
"details": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json"
},
"buyerClientRuntimePreflight": {
"requiredBeforePaidRetry": true,
"pinnedCliVersion": "2.12.0",
"pinnedCompanionVersion": "2.12.0",
"stopOldCompanionCommand": "npx awal@2.12.0 quit --json",
"restartCurrentCompanionCommand": "npx awal@2.12.0 status --json",
"confirmBaseBalanceCommand": "npx awal@2.12.0 balance --chain base --json",
"parseUnpaidContractCommand": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json",
"versionAlignedCompanionRequired": true,
"discoveryParseAloneIsPaidProof": false,
"paymentAttemptedByPreflight": false,
"paidRouteCalledByPreflight": false,
"automaticRetry": false,
"allowedPaidRetryCountAfterBuyerApproval": 1
},
"microcopy": "Refresh the buyer wallet companion to AWAL 2.12.0, confirm authentication and Base USDC, then parse the unpaid contract before one buyer-approved retry. This can spend up to 10000 atomic USDC only if your wallet approves. ApexScout does not run the command; copying is not payment; unpaid HTTP 402 is not revenue; paid proof means HTTP 200 after a buyer-controlled x402 retry.",
"prerequisites": [
"Stop an older AWAL companion, then start the pinned 2.12.0 companion.",
"Confirm the buyer wallet is authenticated and has enough USDC on Base.",
"Parse the unpaid 402 contract before any buyer-approved retry.",
"Approve only GET /api/opportunity-check with max amount 10000 atomic USDC.",
"Stop if the route, amount, network, or buyer approval differs."
],
"approvalCopy": "This command can spend up to 10000 atomic USDC only if your buyer wallet approves.",
"copyingIsNotPaymentCopy": "Copying this command is not payment.",
"apexScoutRunsCommandCopy": "ApexScout does not run this command.",
"unpaidChallengeCopy": "Unpaid HTTP 402 is expected before payment.",
"paidCompletionCopy": "Paid proof completes only when your buyer-controlled x402 retry returns HTTP 200.",
"placement": {
"x402Proof": "above-proof-detail-sections",
"chatTinyPaymentFlow": "above-chat-flow-detail-sections",
"primaryForWalletCapableAgents": true,
"normalNoSpendPathRemainsPrimary": true
},
"buttons": [
{
"label": "Copy AWAL latest command",
"copies": "command",
"value": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy AWAL 2.12 command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy route only",
"copies": "route",
"value": "/api/opportunity-check?src=agent-execution-awal-latest",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetry": {
"commandCopyTelemetryAdded": false,
"skippedReason": "The release keeps the buttons copy-only and avoids adding a client-side analytics call; the AWAL version source tags are still available when a buyer-run agent command reaches the unpaid 402 route.",
"copyIsRevenue": false,
"copyIsPayment": false,
"unpaidChallengeSourceBucket": "agentExecutionAwalLatest"
},
"noSpendBoundary": {
"copyPanelIsFree": true,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"paidRouteCalledByCopyPanel": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"buyerAgentCommandVariantsAvailable": true,
"buyerAgentCommandVariants": [
{
"id": "awal-latest",
"label": "Recommended current",
"packageVersion": "latest",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": true,
"pinned": false,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
},
{
"id": "awal-2-12",
"label": "Pinned current",
"packageVersion": "2.12.0",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": false,
"pinned": true,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
}
],
"buyerClientCompatibilityMatrixAvailable": true,
"buyerClientCompatibilityMatrix": [
{
"client": "AWAL CLI",
"status": "recommended-current",
"buyerSideOnly": true,
"goodFor": "Buyer agents using Coinbase Agentic Wallet CLI to make a capped one-cent x402 proof request.",
"commandVariants": [
"awal-latest",
"awal-2-12"
],
"docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/pay-for-service",
"paymentExecutedByApexScout": false
},
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"walletMustBeAuthenticated": true,
"walletNeedsSufficientUsdc": true,
"apexScoutRunsCommand": false,
"copyingIsPayment": false,
"paymentExecutedByApexScout": false,
"agentReceiptCloseStripAvailable": true,
"agentReceiptCloseStrip": {
"available": true,
"mode": "agent-receipt-close-strip",
"release": "v2.2.228-live-command-center",
"title": "Receipt rule accepted? Copy the proof command",
"purpose": "Put the Agent Receipt Contract directly beside the buyer-agent payment command so x402-capable clients know the exact proof standard before retrying.",
"sourceTag": "agent-receipt-contract",
"sourceBucket": "agentReceiptContract",
"method": "GET",
"route": "/api/opportunity-check",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"firstScreenPlacement": {
"x402Proof": "before-wallet-command-copy",
"chatTinyPaymentFlow": "before-wallet-command-copy",
"makeReceiptRuleVisibleBeforePaymentCommand": true,
"normalNoSpendPathRemainsPrimary": true
},
"receiptRule": {
"payOnlyIf": "Your buyer agent accepts that only HTTP 200 after a buyer-controlled x402 retry counts as paid proof.",
"rejectIf": "The client treats HTTP 402, copied text, monitor reads, route mismatch, amount mismatch, network mismatch, or repeated retry loops as proof.",
"unpaid402IsNotRevenue": true,
"paidProofRequiresHttp200": true,
"buyerControlsWalletAndRetry": true,
"stopAfterOneSuccessfulPaidResponse": true
},
"visibleBuyerCopy": [
"Accept the receipt rule before copying the command.",
"HTTP 402 is only the unpaid challenge.",
"HTTP 200 after your buyer-controlled retry is the paid proof.",
"ApexScout does not run this command and does not control the wallet."
],
"buttons": [
{
"label": "Copy receipt-bound command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy receipt route",
"copies": "route",
"value": "/api/opportunity-check?src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentReceiptContract",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"successSignal": "agentReceiptContract source bucket moves only when a buyer/client requests the paid proof route with the receipt-contract source tag."
},
"noSpendBoundary": {
"closeStripIsFree": true,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"paymentAttemptedByCloseStrip": false,
"paidRouteCalledByCloseStrip": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"buyerWalletCloseAvailable": true,
"buyerWalletClose": {
"available": true,
"mode": "buyer-wallet-close",
"release": "v2.2.228-live-command-center",
"title": "Can your wallet pay now?",
"purpose": "Separate wallet-ready buyers from buyers who still need setup before the one-cent proof retry.",
"route": "/api/buyer-wallet-close-intent",
"method": "GET",
"routeIsFree": true,
"sourceTags": {
"walletReady": "agent-receipt-contract",
"cannotPayYet": "agent-wallet-skill-pack",
"copyPaidProofCommand": "agent-execution-command-copy",
"copyReceiptBoundCommand": "agent-receipt-contract",
"copyWalletSetupCommand": "agent-wallet-skill-pack"
},
"actions": {
"walletReady": {
"action": "wallet_ready",
"path": "/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"method": "GET",
"sourceTag": "agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
"cannotPayYet": {
"action": "cannot_pay_yet",
"path": "/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"method": "GET",
"sourceTag": "agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
},
"copyPaidProofCommand": {
"action": "copy_paid_proof_command",
"path": "/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"method": "GET",
"sourceTag": "agent-execution-command-copy",
"executesPayment": false,
"opensPaidRoute": false
},
"copyReceiptBoundCommand": {
"action": "copy_receipt_bound_command",
"path": "/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"method": "GET",
"sourceTag": "agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
"copyWalletSetupCommand": {
"action": "copy_wallet_setup_command",
"path": "/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"method": "GET",
"sourceTag": "agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
}
},
"visibleBuyerCopy": [
"Choose the wallet state before copying a command.",
"This signal is a free GET request and does not open the paid route.",
"If the wallet is ready, copy the command and run it only from the buyer-controlled wallet.",
"If the wallet is not ready, stop before payment and fix wallet authentication, balance, route, amount, or network."
],
"paidProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"receiptBoundCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"buttons": [
{
"label": "I can pay now",
"action": "wallet_ready",
"copies": null,
"value": null,
"intentPath": "/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "I can't pay yet",
"action": "cannot_pay_yet",
"copies": null,
"value": null,
"intentPath": "/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy paid proof command",
"action": "copy_paid_proof_command",
"copies": "command",
"value": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy receipt-bound command",
"action": "copy_receipt_bound_command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"action": "copy_wallet_setup_command",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"mode": "aggregate-only-buyer-wallet-close-intent",
"counter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"cannotPayYetCounter": "buyerWalletCloseSignals.cannotPayYet",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"copyWalletSetupCommandCounter": "buyerWalletCloseSignals.copyWalletSetupCommand",
"intentIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"firstScreenPlacement": {
"x402Proof": "before-receipt-and-command-copy",
"chatTinyPaymentFlow": "before-receipt-and-command-copy",
"walletStateVisibleBeforePaymentCommand": true,
"normalNoSpendPathRemainsPrimary": true
},
"noSpendBoundary": {
"panelIsFree": true,
"intentRouteIsFree": true,
"intentRouteMethod": "GET",
"copyingExecutesPayment": false,
"clickingStateExecutesPayment": false,
"clickingStateOpensPaidRoute": false,
"paidRouteCalledByPanel": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"http402ClosePacketAvailable": true,
"http402ClosePacket": {
"available": true,
"mode": "buyer-agent-402-close-packet",
"release": "v2.2.228-live-command-center",
"title": "402 close packet",
"purpose": "Put the buyer-agent close instructions inside the unpaid HTTP 402 response so x402-capable clients can finish the proof without hunting through a page.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"closeMessage": "You reached the ApexScout paid proof gate. To complete the proof, retry this exact GET route from an authenticated x402 wallet/client with max amount 10000 atomic USDC on Base mainnet.",
"buyerAgentInstruction": "If the buyer approved this one-cent proof, run the command exactly once and treat only HTTP 200 as the paid completion. If any route, amount, network, or approval detail differs, stop.",
"whatHttp200Proves": [
"The buyer-controlled x402 retry reached ApexScout's one-cent proof route.",
"The paid route returned structured JSON after payment verification.",
"The aggregate paid proof completion counter is allowed to move only after HTTP 200."
],
"notProofOf": [
"Coinbase, AWS, Stripe, Bazaar, AgentCore, Base, marketplace, or protocol endorsement.",
"Guaranteed revenue, trading results, investment outcome, legal advice, tax advice, lending advice, or compliance approval.",
"Buyer identity, wallet-level activity, secret signing material, or broader permission to spend."
],
"continueIf": [
"The buyer explicitly approved this one-cent proof.",
"The client can attach an x402 payment authorization.",
"The retry route is exactly GET /api/opportunity-check?src=agent-execution-awal-latest.",
"The max amount is exactly 10000 atomic USDC.",
"The network is exactly eip155:8453."
],
"stopIf": [
"The wallet is not authenticated.",
"The wallet has insufficient USDC on Base.",
"The client cannot attach x402 payment.",
"The max amount is lower than 10000 atomic USDC.",
"The network is not eip155:8453.",
"The buyer did not approve this exact spend.",
"The agent plans to retry more than once just to clear a metric."
],
"failureBranches": {
"walletNotAuthenticated": {
"bucket": "wallet_not_authenticated",
"buyerAction": "Authenticate the buyer-controlled x402 wallet/client before retrying.",
"apexScoutAction": "Do nothing automatically."
},
"insufficientBaseUsdc": {
"bucket": "insufficient_base_usdc",
"buyerAction": "Stop until the buyer-controlled wallet has enough Base USDC for the one-cent proof.",
"apexScoutAction": "Do not fund, trade, onramp, or advise funding."
},
"maxAmountTooLow": {
"bucket": "max_amount_too_low",
"buyerAction": "Use max amount 10000 atomic USDC or stop.",
"apexScoutAction": "Do not lower route price or change payment requirements."
},
"wrongNetwork": {
"bucket": "wrong_network",
"buyerAction": "Use eip155:8453 Base mainnet or stop.",
"apexScoutAction": "Do not switch rails."
},
"paymentDeclined": {
"bucket": "payment_declined",
"buyerAction": "Stop unless the buyer explicitly approves another attempt.",
"apexScoutAction": "Do not retry payment for the buyer."
}
},
"telemetryInterpretation": {
"sourceTag": "agent-execution-awal-latest",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionAwalLatest",
"closePacketUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"closePacketIsFree": true,
"closePacketExecutesPayment": false,
"paymentAttemptedByClosePacket": false,
"paidRouteCalledByClosePacket": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"secretSigningMaterialRequested": false
}
},
"buyerProofExecutionCloseoutAvailable": true,
"buyerProofExecutionCloseout": {
"available": true,
"mode": "buyer-proof-execution-closeout",
"release": "v2.2.228-live-command-center",
"title": "Copied? Finish with one buyer-run proof retry",
"purpose": "Close the gap after a buyer agent marks its wallet ready or copies the command: run exactly one buyer-approved proof retry, classify the response, then stop.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"method": "GET",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"primarySourceTag": "agent-receipt-contract",
"primarySourceBucket": "agentReceiptContract",
"commandCopySourceTag": "agent-execution-command-copy",
"commandCopySourceBucket": "agentExecutionCommandCopy",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"firstScreenPlacement": {
"x402Proof": "after-wallet-close-before-receipt-command",
"chatTinyPaymentFlow": "after-wallet-close-before-receipt-command",
"closeoutVisibleBeforeCommandCopy": true,
"normalNoSpendPathRemainsPrimary": true
},
"closeoutRule": {
"ifWalletReadyAndCommandCopied": "Run the receipt-bound command exactly once from the buyer-controlled x402 wallet if the buyer approved the route, amount, and network.",
"ifCannotPayYet": "Do not retry payment. Use the wallet setup note and stop until wallet authentication, Base USDC balance, route, amount, and network match.",
"ifResponseIs402": "Treat the result as unpaid. It is a challenge, not a paid proof, and it should not move revenue.",
"ifResponseIs200": "Treat the result as paid proof only after the buyer-controlled x402 retry returns structured HTTP 200 JSON.",
"ifRetryIsRejected": "Read the sanitized edge failure status once, classify the rejection, and stop before another paid attempt.",
"stopAfter": "one buyer-approved paid retry unless a human operator explicitly approves another capped diagnostic"
},
"buyerAgentChecklist": [
"Wallet is authenticated by the buyer, not ApexScout.",
"Buyer approves GET /api/opportunity-check with source agent-receipt-contract.",
"Maximum spend is exactly 10000 atomic USDC.",
"Network is exactly eip155:8453 Base mainnet.",
"Run one retry, then classify HTTP 402, HTTP 200, or a sanitized edge failure."
],
"copyReadyCommands": {
"receiptBoundProofCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"commandCopyProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"edgeFailureReadCommand": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof."
},
"safeReadouts": {
"edgeHealthPath": "/__apexscout/cloudflare-x402/health",
"edgeLastFailurePath": "/__apexscout/cloudflare-x402/health/last-failure",
"edgeLastFailureUrl": "https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure",
"originLastFailurePath": "/api/cloudflare-x402-edge-failure/last",
"originLastFailureUrl": "https://apexscout.ai/api/cloudflare-x402-edge-failure/last",
"noPaymentAttemptedByRead": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"privateKeysRequested": false
},
"buttons": [
{
"label": "Copy receipt-bound proof command",
"copies": "receipt_bound_command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy edge failure readout",
"copies": "edge_failure_read_command",
"value": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"failureReadoutIsRevenue": false,
"copyIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"newCounterAdded": false,
"reason": "The closeout reuses existing aggregate wallet-close, source-bucket, and paid-completion counters so it improves decision clarity without creating fake movement."
},
"noSpendBoundary": {
"closeoutIsFree": true,
"closeoutExecutesPayment": false,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"failureReadoutExecutesPayment": false,
"failureReadoutCallsPaidRoute": false,
"paymentAttemptedByCloseout": false,
"paidRouteCalledByCloseout": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"productionPostCreated": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareMutationCreated": false,
"apifyActorRunCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"rawPaymentPayloadExposed": false
},
"safetyClaims": {
"guaranteedRevenueClaimed": false,
"officialEndorsementClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareMonetizationGatewayReadinessAvailable": true,
"cloudflareMonetizationGatewayReadiness": {
"available": true,
"mode": "cloudflare-monetization-gateway-readiness",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare live edge status",
"releaseReportingMode": "worker-and-origin-split",
"appRelease": "v2.2.228-live-command-center",
"originRelease": "v2.2.228-live-command-center",
"originReleasePath": "/status",
"workerRelease": "v2.2.228-live-command-center",
"workerSourceVersion": "2.2.228",
"workerHealthReleaseContract": {
"healthPath": "/__apexscout/cloudflare-x402/health",
"releaseFieldMeans": "workerRelease",
"workerReleaseField": "workerRelease",
"originReleaseField": "originRelease",
"originReleasePath": "/status",
"originReleaseReadIsNoSpend": true,
"mismatchIsActionableOnlyWhenWorkerHealthFails": true
},
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"articleUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving x402 payment enforcement toward edge-managed route rules. ApexScout now serves the one-cent proof path through a narrow Cloudflare Worker while keeping Railway as the origin fallback."
},
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"officialCloudflareMonetizationGatewayClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"waitlistOrEarlyAccessRequired": false,
"noDnsChangeMade": false,
"dnsChangedByLiveCutover": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"apexScoutRemainsSourceOfTruth": true,
"candidateRules": [
{
"id": "apexscout-one-cent-proof",
"purpose": "Edge-readable one-cent x402 proof route for wallet-capable buyer agents.",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"displayPrice": "$0.01",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
},
{
"id": "apexscout-agent-revenue-audit",
"purpose": "Higher-value builder monetization audit route.",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"amountAtomicUsdc": "5000000",
"priceUsd": "5.00",
"displayPrice": "$5.00",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
}
],
"migrationPlan": [
"Keep the Cloudflare Worker route narrow and use Railway as the origin fallback.",
"Use these candidate rules as the review checklist before any future official managed-gateway change.",
"Require unpaid HTTP 402 and buyer-controlled HTTP 200 proof for each route after any edge or gateway change.",
"Keep ApexScout aggregate metrics as the public conversion truth source.",
"Roll back to Railway-origin x402 if route, amount, network, or payment proof differs."
],
"operatorChecklist": {
"dnsChangeApproved": true,
"cloudflareApiTokenApproved": true,
"gatewayRuleCreationApproved": true,
"postDeployPaidProofRequiredBeforeClaimingGatewayLive": true,
"originFallbackRequired": true,
"compareGatewayRulesToCandidateRules": true
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"cloudflareApiCalled": false,
"dnsChanged": false,
"dnsAlreadyProxiedThroughCloudflare": true,
"workerAlreadyDeployed": true,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"revenueOutcomeClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
},
"telemetryInterpretation": {
"readinessUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"watchCounters": "If unpaid proof counters move without paid completions, treat it as proof-route interest, not gateway success."
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"label": "x402-capable agent?",
"linkText": "Request GET /api/opportunity-check",
"copy": "Request the one-cent paid proof directly. It returns HTTP 402 until your own approved x402 wallet retries payment.",
"microcopy": "Opening this without a wallet returns an unpaid 402 challenge. Unpaid 402 is not revenue."
},
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false
},
{
"intent": "audit",
"href": "/action-pack/go/audit",
"url": "https://apexscout.ai/action-pack/go/audit",
"label": "Check my $5 audit request for free",
"copy": "Use this when you want ApexScout to check whether your Agent Revenue Audit request is ready before payment.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"nextActionLabel": "Check my audit request for free",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": null,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false
},
{
"intent": "agentic-trading",
"href": "/action-pack/go/agentic-trading",
"url": "https://apexscout.ai/action-pack/go/agentic-trading",
"label": "Check payment readiness for an agentic trading or DeFi tool",
"copy": "Use this for wallet-enabled agent tools, DeFi workflows, market-data products, or trading automation payment boundaries. ApexScout does not give trading or investment advice.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"nextActionLabel": "Check payment readiness for free",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": null,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false,
"agenticTradingPaymentReadinessDisclaimer": "This is payment-readiness only. ApexScout does not give trading, investment, tax, legal, lending, or compliance advice.",
"advice": "Payment-readiness only. Not trading or investment advice.",
"noTradingAdvice": true
},
{
"intent": "scope",
"href": "/action-pack/go/scope",
"url": "https://apexscout.ai/action-pack/go/scope",
"label": "Check buyer payment scope",
"copy": "Use this after ready_to_pay before a buyer-controlled x402 wallet retries payment.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"nextActionLabel": "Run free scope check",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": null,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false
}
],
"onePassConversionToolAvailable": true,
"onePassConversionTool": {
"available": true,
"name": "apexscout_agent_revenue_audit_one_pass",
"mode": "free-builder-and-scope-check",
"method": "POST",
"endpoint": "/api/agent-revenue-audit-builder/prepare",
"url": "https://apexscout.ai/api/agent-revenue-audit-builder/prepare",
"price": "free",
"inputSchema": {
"type": "object",
"additionalProperties": false,
"required": [
"serviceName",
"currentOffer",
"targetBuyer",
"currentProblem",
"scopeCheck"
],
"properties": {
"serviceName": {
"type": "string",
"maxLength": 1200,
"description": "What is the agent/API/tool called?"
},
"currentOffer": {
"type": "string",
"maxLength": 1200,
"description": "What does it currently sell or provide?"
},
"targetBuyer": {
"type": "string",
"maxLength": 1200,
"description": "Who is supposed to buy it?"
},
"currentProblem": {
"type": "string",
"maxLength": 1200,
"description": "What problem are you trying to solve with this audit?"
},
"currentPaymentRail": {
"type": "string",
"maxLength": 80,
"description": "Optional payment rail context. Default is base-x402."
},
"riskTolerance": {
"type": "string",
"maxLength": 80,
"description": "Optional risk level. Default is medium."
},
"maxBudgetUsd": {
"type": "string",
"description": "Approved total budget. Use at least 5.00 to reach the $5 audit scope decision."
},
"walletPerRequestCapUsd": {
"type": "string",
"description": "Must be at least $5.00 to pay the audit route later."
},
"source": {
"type": "string",
"maxLength": 80,
"description": "Optional safe aggregate source tag. It is sanitized before telemetry."
},
"templateSlug": {
"type": "string",
"enum": [
"x402-api",
"mcp-tool",
"agentcore-payment",
"api-monetization",
"search-checkout",
"agentic-trading-payment-safety"
]
},
"prepareMode": {
"type": "string",
"enum": [
"manual",
"one-click-template"
]
},
"scopeCheck": {
"type": "object",
"additionalProperties": false,
"required": [
"run",
"operatorApproval"
],
"description": "Required explicit buyer decision for the one-pass agent tool. The free Scope Check runs only when run is true and Builder returns ready_to_pay.",
"properties": {
"run": {
"type": "boolean",
"description": "Set true only when the buyer asked to run the free Scope Check in this request."
},
"operatorApproval": {
"type": "string",
"enum": [
"approved",
"needs_approval",
"denied"
],
"description": "Use approved only after the buyer explicitly approves the $5 route, payload, network, and budget cap. This does not execute payment."
},
"reason": {
"type": "string",
"maxLength": 1200
},
"expectedOutput": {
"type": "string",
"maxLength": 1200
}
}
}
}
},
"samplePayload": {
"serviceName": "Example Buyer Agent API",
"currentOffer": "A paid API for buyer agents",
"targetBuyer": "x402 buyer agents",
"currentProblem": "The service is discoverable but buyers are not completing payment.",
"currentPaymentRail": "base-x402",
"riskTolerance": "medium",
"maxBudgetUsd": "5.00",
"walletPerRequestCapUsd": "5.00",
"source": "agent-checkout-contract",
"scopeCheck": {
"run": true,
"operatorApproval": "needs_approval",
"reason": "Check the $5 Agent Revenue Audit scope after Builder readiness passes.",
"expectedOutput": "Structured Agent Revenue Audit JSON after a later buyer-controlled paid retry."
}
},
"scopeCheckField": "scopeCheck",
"scopeCheckRequiredForOnePassTool": true,
"prepareOnlyApiRemainsBackwardCompatible": true,
"scopeCheckRunsOnlyWhenPrepareIsReady": true,
"successStatus": "ready_for_buyer_payment",
"possibleStatuses": [
"not_requested",
"ready_for_buyer_payment",
"needs_operator_approval",
"stopped_by_buyer",
"prepare_blocked",
"scope_blocked"
],
"decisionProtocol": {
"decisionMustBeExplicit": true,
"inspectWithoutSpendApproval": {
"run": true,
"operatorApproval": "needs_approval",
"meaning": "Run the free Scope Check and stop before any paid retry."
},
"approveOneBoundedRetry": {
"run": true,
"operatorApproval": "approved",
"requiresExplicitBuyerApproval": true,
"allowedPaidRetryCount": 1
},
"stop": {
"run": false,
"operatorApproval": "denied",
"meaning": "Do not run Scope Check and do not call the paid route."
},
"approvalInferredByApexScout": false,
"automaticChoice": false
},
"approvalContract": {
"buyerApprovalRequired": true,
"approvedValue": "approved",
"pendingValue": "needs_approval",
"deniedValue": "denied",
"approvalCovers": [
"route",
"payload",
"eip155:8453 network",
"$5.00 budget cap",
"one paid retry"
],
"approvalInferredByApexScout": false
},
"nextPaidRoute": {
"method": "POST",
"endpoint": "/api/agent-revenue-audit",
"priceUsd": "5.00",
"maxAmountAtomicUsdc": "5000000",
"network": "eip155:8453",
"useOnlyWhenStatus": "ready_for_buyer_payment",
"buyerControlledRetryOnly": true
},
"noSpendBoundary": {
"builderPrepareIsFree": true,
"scopeCheckIsFree": true,
"paidRouteCalled": false,
"paymentExecuted": false,
"automaticRetry": false
},
"privacy": {
"aggregateTelemetryOnly": true,
"rawBuyerInputPublic": false,
"buyerLevelDataExposed": false
}
},
"tinyPaidProofAction": {
"name": "ApexScout link-native tiny paid proof",
"mode": "link-native-tiny-paid-proof",
"method": "GET",
"route": "/api/opportunity-check",
"path": "/api/opportunity-check",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUnits": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"getProofUnpaidChallengeTelemetryAvailable": true,
"getProofUnpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"getProofCompletionCounter": "opportunityCheckGetProofCompletions",
"proofRetryConfidenceAvailable": true,
"proofRetryConfidence": {
"available": true,
"mode": "no-spend-proof-retry-confidence",
"purpose": "Help x402-capable buyers understand that an unpaid 402 is the expected proof challenge and that payment only happens from a buyer-controlled retry.",
"route": "/api/opportunity-check",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"expectedUnpaidMeaning": "HTTP 402 means the proof paywall is reachable and returning x402 payment requirements. It is not a service outage and it is not revenue.",
"expectedPaidMeaning": "HTTP 200 only counts after a buyer-controlled x402 client retries this route with an approved payment.",
"http402ReadinessReceiptAvailable": true,
"http402ReadinessReceipt": {
"available": true,
"mode": "no-spend-http-402-readiness-receipt",
"title": "HTTP 402 Readiness Receipt",
"purpose": "Give x402-capable buyers a compact, unsigned receipt showing what the unpaid proof challenge proves before any buyer-controlled paid retry.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"receiptScope": "GET /api/opportunity-check, $0.01 maximum amount, eip155:8453 Base mainnet x402, one buyer-controlled retry.",
"receiptSummary": "Unpaid HTTP 402 proves the x402 proof route is reachable and returning payment requirements. It does not prove payment, revenue, endorsement, or buyer approval.",
"agentDecision": {
"payOnlyIf": "The buyer explicitly approves the route, max amount, network, and one retry from a wallet-controlled x402 client.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the route or network differs, or HTTP 402 is being treated as a paid completion.",
"nextNoSpendStep": "Stay on ApexScout proof, action-pack, Scope Check, or Builder surfaces until buyer-controlled payment is intentionally approved."
},
"readinessChecks": [
"Route scoped to GET /api/opportunity-check.",
"Amount scoped to $0.01 / 10000 atomic USDC.",
"Network scoped to Base mainnet eip155:8453.",
"HTTP 402 is expected before payment.",
"HTTP 200 is required before paid completion is counted.",
"No request body, cookies, session, or wallet connection is required to read this receipt.",
"No buyer-level data is exposed by this receipt.",
"No automatic payment or paid retry is performed by ApexScout."
],
"publicSafetyCopy": "This is an unsigned no-spend readiness receipt, not AP2 proof, not a signed mandate, not a legal or payment receipt, not an endorsement claim, and not trading, investment, tax, legal, lending, or compliance advice.",
"notClaims": {
"signedReceiptCreated": false,
"ap2ProofCreated": false,
"legalMandateCreated": false,
"paymentReceiptCreated": false,
"walletApprovalCreated": false,
"officialEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false
},
"noSpendBoundary": {
"receiptIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByReceipt": false,
"paidRouteCalledByReceipt": false,
"paidUpstreamCalls": false,
"walletConnectionRequiredForReceipt": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"receiptUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"copyPasteReceiptSummary": "HTTP 402 readiness receipt: GET /api/opportunity-check is reachable, costs max $0.01 on eip155:8453 only after buyer-controlled x402 retry, and counts as paid only when HTTP 200 returns."
},
"proofRetryDecisionStripAvailable": true,
"proofRetryDecisionStrip": {
"available": true,
"mode": "buyer-controlled-proof-retry-decision-strip",
"title": "Buyer-controlled proof retry gate",
"purpose": "Compress the next click after an unpaid 402 into a clear continue/stop decision for x402-capable buyers.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"decisionSummary": "Continue only if buyer approval, x402 wallet capability, exact route, exact amount, and Base mainnet network all match.",
"continueIf": [
"Buyer explicitly approves this exact $0.01 proof.",
"Client can attach x402 payment on Base mainnet eip155:8453.",
"Route is exactly GET /api/opportunity-check.",
"Max amount is exactly 10000 atomic USDC.",
"Buyer understands only HTTP 200 counts as a paid proof completion."
],
"stopIf": [
"Buyer has not approved spend.",
"Client is a normal browser without x402 payment support.",
"Route, amount, or network differs from the receipt.",
"The buyer is treating unpaid HTTP 402 as revenue or completion.",
"The output will not change the buyer's next action."
],
"primaryAction": {
"label": "Request unpaid proof challenge",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"normalBrowserResult": "HTTP 402 JSON with x402 payment requirements",
"x402CapableResult": "HTTP 200 JSON only after buyer-controlled paid retry",
"noPaymentOnClick": true,
"paidRetryRequiresBuyerWallet": true
},
"fallbackNoSpendActions": [
"/x402-proof",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/chat-tiny-payment-flow"
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"decisionStripUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"decisionStripIsFree": true,
"paymentAttemptedByDecisionStrip": false,
"paidRouteCalledByDecisionStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"http402ClosePacketAvailable": true,
"http402ClosePacket": {
"available": true,
"mode": "buyer-agent-402-close-packet",
"release": "v2.2.228-live-command-center",
"title": "402 close packet",
"purpose": "Put the buyer-agent close instructions inside the unpaid HTTP 402 response so x402-capable clients can finish the proof without hunting through a page.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"closeMessage": "You reached the ApexScout paid proof gate. To complete the proof, retry this exact GET route from an authenticated x402 wallet/client with max amount 10000 atomic USDC on Base mainnet.",
"buyerAgentInstruction": "If the buyer approved this one-cent proof, run the command exactly once and treat only HTTP 200 as the paid completion. If any route, amount, network, or approval detail differs, stop.",
"whatHttp200Proves": [
"The buyer-controlled x402 retry reached ApexScout's one-cent proof route.",
"The paid route returned structured JSON after payment verification.",
"The aggregate paid proof completion counter is allowed to move only after HTTP 200."
],
"notProofOf": [
"Coinbase, AWS, Stripe, Bazaar, AgentCore, Base, marketplace, or protocol endorsement.",
"Guaranteed revenue, trading results, investment outcome, legal advice, tax advice, lending advice, or compliance approval.",
"Buyer identity, wallet-level activity, secret signing material, or broader permission to spend."
],
"continueIf": [
"The buyer explicitly approved this one-cent proof.",
"The client can attach an x402 payment authorization.",
"The retry route is exactly GET /api/opportunity-check?src=agent-execution-awal-latest.",
"The max amount is exactly 10000 atomic USDC.",
"The network is exactly eip155:8453."
],
"stopIf": [
"The wallet is not authenticated.",
"The wallet has insufficient USDC on Base.",
"The client cannot attach x402 payment.",
"The max amount is lower than 10000 atomic USDC.",
"The network is not eip155:8453.",
"The buyer did not approve this exact spend.",
"The agent plans to retry more than once just to clear a metric."
],
"failureBranches": {
"walletNotAuthenticated": {
"bucket": "wallet_not_authenticated",
"buyerAction": "Authenticate the buyer-controlled x402 wallet/client before retrying.",
"apexScoutAction": "Do nothing automatically."
},
"insufficientBaseUsdc": {
"bucket": "insufficient_base_usdc",
"buyerAction": "Stop until the buyer-controlled wallet has enough Base USDC for the one-cent proof.",
"apexScoutAction": "Do not fund, trade, onramp, or advise funding."
},
"maxAmountTooLow": {
"bucket": "max_amount_too_low",
"buyerAction": "Use max amount 10000 atomic USDC or stop.",
"apexScoutAction": "Do not lower route price or change payment requirements."
},
"wrongNetwork": {
"bucket": "wrong_network",
"buyerAction": "Use eip155:8453 Base mainnet or stop.",
"apexScoutAction": "Do not switch rails."
},
"paymentDeclined": {
"bucket": "payment_declined",
"buyerAction": "Stop unless the buyer explicitly approves another attempt.",
"apexScoutAction": "Do not retry payment for the buyer."
}
},
"telemetryInterpretation": {
"sourceTag": "agent-execution-awal-latest",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionAwalLatest",
"closePacketUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"closePacketIsFree": true,
"closePacketExecutesPayment": false,
"paymentAttemptedByClosePacket": false,
"paidRouteCalledByClosePacket": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"secretSigningMaterialRequested": false
}
},
"buyerProofExecutionCloseoutAvailable": true,
"buyerProofExecutionCloseout": {
"available": true,
"mode": "buyer-proof-execution-closeout",
"release": "v2.2.228-live-command-center",
"title": "Copied? Finish with one buyer-run proof retry",
"purpose": "Close the gap after a buyer agent marks its wallet ready or copies the command: run exactly one buyer-approved proof retry, classify the response, then stop.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"method": "GET",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"primarySourceTag": "agent-receipt-contract",
"primarySourceBucket": "agentReceiptContract",
"commandCopySourceTag": "agent-execution-command-copy",
"commandCopySourceBucket": "agentExecutionCommandCopy",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"firstScreenPlacement": {
"x402Proof": "after-wallet-close-before-receipt-command",
"chatTinyPaymentFlow": "after-wallet-close-before-receipt-command",
"closeoutVisibleBeforeCommandCopy": true,
"normalNoSpendPathRemainsPrimary": true
},
"closeoutRule": {
"ifWalletReadyAndCommandCopied": "Run the receipt-bound command exactly once from the buyer-controlled x402 wallet if the buyer approved the route, amount, and network.",
"ifCannotPayYet": "Do not retry payment. Use the wallet setup note and stop until wallet authentication, Base USDC balance, route, amount, and network match.",
"ifResponseIs402": "Treat the result as unpaid. It is a challenge, not a paid proof, and it should not move revenue.",
"ifResponseIs200": "Treat the result as paid proof only after the buyer-controlled x402 retry returns structured HTTP 200 JSON.",
"ifRetryIsRejected": "Read the sanitized edge failure status once, classify the rejection, and stop before another paid attempt.",
"stopAfter": "one buyer-approved paid retry unless a human operator explicitly approves another capped diagnostic"
},
"buyerAgentChecklist": [
"Wallet is authenticated by the buyer, not ApexScout.",
"Buyer approves GET /api/opportunity-check with source agent-receipt-contract.",
"Maximum spend is exactly 10000 atomic USDC.",
"Network is exactly eip155:8453 Base mainnet.",
"Run one retry, then classify HTTP 402, HTTP 200, or a sanitized edge failure."
],
"copyReadyCommands": {
"receiptBoundProofCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"commandCopyProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"edgeFailureReadCommand": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof."
},
"safeReadouts": {
"edgeHealthPath": "/__apexscout/cloudflare-x402/health",
"edgeLastFailurePath": "/__apexscout/cloudflare-x402/health/last-failure",
"edgeLastFailureUrl": "https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure",
"originLastFailurePath": "/api/cloudflare-x402-edge-failure/last",
"originLastFailureUrl": "https://apexscout.ai/api/cloudflare-x402-edge-failure/last",
"noPaymentAttemptedByRead": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"privateKeysRequested": false
},
"buttons": [
{
"label": "Copy receipt-bound proof command",
"copies": "receipt_bound_command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy edge failure readout",
"copies": "edge_failure_read_command",
"value": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"failureReadoutIsRevenue": false,
"copyIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"newCounterAdded": false,
"reason": "The closeout reuses existing aggregate wallet-close, source-bucket, and paid-completion counters so it improves decision clarity without creating fake movement."
},
"noSpendBoundary": {
"closeoutIsFree": true,
"closeoutExecutesPayment": false,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"failureReadoutExecutesPayment": false,
"failureReadoutCallsPaidRoute": false,
"paymentAttemptedByCloseout": false,
"paidRouteCalledByCloseout": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"productionPostCreated": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareMutationCreated": false,
"apifyActorRunCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"rawPaymentPayloadExposed": false
},
"safetyClaims": {
"guaranteedRevenueClaimed": false,
"officialEndorsementClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareMonetizationGatewayReadinessAvailable": true,
"cloudflareMonetizationGatewayReadiness": {
"available": true,
"mode": "cloudflare-monetization-gateway-readiness",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare live edge status",
"releaseReportingMode": "worker-and-origin-split",
"appRelease": "v2.2.228-live-command-center",
"originRelease": "v2.2.228-live-command-center",
"originReleasePath": "/status",
"workerRelease": "v2.2.228-live-command-center",
"workerSourceVersion": "2.2.228",
"workerHealthReleaseContract": {
"healthPath": "/__apexscout/cloudflare-x402/health",
"releaseFieldMeans": "workerRelease",
"workerReleaseField": "workerRelease",
"originReleaseField": "originRelease",
"originReleasePath": "/status",
"originReleaseReadIsNoSpend": true,
"mismatchIsActionableOnlyWhenWorkerHealthFails": true
},
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"articleUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving x402 payment enforcement toward edge-managed route rules. ApexScout now serves the one-cent proof path through a narrow Cloudflare Worker while keeping Railway as the origin fallback."
},
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"officialCloudflareMonetizationGatewayClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"waitlistOrEarlyAccessRequired": false,
"noDnsChangeMade": false,
"dnsChangedByLiveCutover": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"apexScoutRemainsSourceOfTruth": true,
"candidateRules": [
{
"id": "apexscout-one-cent-proof",
"purpose": "Edge-readable one-cent x402 proof route for wallet-capable buyer agents.",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"displayPrice": "$0.01",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
},
{
"id": "apexscout-agent-revenue-audit",
"purpose": "Higher-value builder monetization audit route.",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"amountAtomicUsdc": "5000000",
"priceUsd": "5.00",
"displayPrice": "$5.00",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
}
],
"migrationPlan": [
"Keep the Cloudflare Worker route narrow and use Railway as the origin fallback.",
"Use these candidate rules as the review checklist before any future official managed-gateway change.",
"Require unpaid HTTP 402 and buyer-controlled HTTP 200 proof for each route after any edge or gateway change.",
"Keep ApexScout aggregate metrics as the public conversion truth source.",
"Roll back to Railway-origin x402 if route, amount, network, or payment proof differs."
],
"operatorChecklist": {
"dnsChangeApproved": true,
"cloudflareApiTokenApproved": true,
"gatewayRuleCreationApproved": true,
"postDeployPaidProofRequiredBeforeClaimingGatewayLive": true,
"originFallbackRequired": true,
"compareGatewayRulesToCandidateRules": true
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"cloudflareApiCalled": false,
"dnsChanged": false,
"dnsAlreadyProxiedThroughCloudflare": true,
"workerAlreadyDeployed": true,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"revenueOutcomeClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
},
"telemetryInterpretation": {
"readinessUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"watchCounters": "If unpaid proof counters move without paid completions, treat it as proof-route interest, not gateway success."
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"retryDecision": {
"recommendedOnlyForX402CapableClients": true,
"payOnlyIf": "The buyer wants the cheapest live x402 proof and approves the route, $0.01 maximum amount, Base mainnet network, and one retry.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the network is not eip155:8453, or the output will not change the next action.",
"ifUnsure": "Stay on the no-spend proof and action-pack surfaces. Do not retry payment just to clear the counter."
},
"approvalChecklist": [
"Buyer approves GET /api/opportunity-check as the route.",
"Buyer approves the $0.01 maximum spend.",
"Buyer approves Base mainnet x402 on eip155:8453.",
"Buyer controls the wallet and chooses whether to retry.",
"Buyer expects HTTP 200 JSON only after the paid retry succeeds."
],
"copyPasteAgentNote": "Unpaid 402 is expected. If the buyer approves a one-cent proof, retry GET /api/opportunity-check with an x402-capable client, max amount 10000 atomic USDC on eip155:8453, and treat only HTTP 200 as completion.",
"paidRetryCommandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof\" \\\n --max-amount 10000 \\\n --json",
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"ifUnpaidRisesWithoutCompletion": "Treat this as proof-route interest without payment. Inspect retry clarity only after repeated windows; do not add another paid route.",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"confidencePacketIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByConfidencePacket": false,
"walletConnectionRequiredForConfidencePacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"http402ReadinessReceiptAvailable": true,
"http402ReadinessReceipt": {
"available": true,
"mode": "no-spend-http-402-readiness-receipt",
"title": "HTTP 402 Readiness Receipt",
"purpose": "Give x402-capable buyers a compact, unsigned receipt showing what the unpaid proof challenge proves before any buyer-controlled paid retry.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"receiptScope": "GET /api/opportunity-check, $0.01 maximum amount, eip155:8453 Base mainnet x402, one buyer-controlled retry.",
"receiptSummary": "Unpaid HTTP 402 proves the x402 proof route is reachable and returning payment requirements. It does not prove payment, revenue, endorsement, or buyer approval.",
"agentDecision": {
"payOnlyIf": "The buyer explicitly approves the route, max amount, network, and one retry from a wallet-controlled x402 client.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the route or network differs, or HTTP 402 is being treated as a paid completion.",
"nextNoSpendStep": "Stay on ApexScout proof, action-pack, Scope Check, or Builder surfaces until buyer-controlled payment is intentionally approved."
},
"readinessChecks": [
"Route scoped to GET /api/opportunity-check.",
"Amount scoped to $0.01 / 10000 atomic USDC.",
"Network scoped to Base mainnet eip155:8453.",
"HTTP 402 is expected before payment.",
"HTTP 200 is required before paid completion is counted.",
"No request body, cookies, session, or wallet connection is required to read this receipt.",
"No buyer-level data is exposed by this receipt.",
"No automatic payment or paid retry is performed by ApexScout."
],
"publicSafetyCopy": "This is an unsigned no-spend readiness receipt, not AP2 proof, not a signed mandate, not a legal or payment receipt, not an endorsement claim, and not trading, investment, tax, legal, lending, or compliance advice.",
"notClaims": {
"signedReceiptCreated": false,
"ap2ProofCreated": false,
"legalMandateCreated": false,
"paymentReceiptCreated": false,
"walletApprovalCreated": false,
"officialEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false
},
"noSpendBoundary": {
"receiptIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByReceipt": false,
"paidRouteCalledByReceipt": false,
"paidUpstreamCalls": false,
"walletConnectionRequiredForReceipt": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"receiptUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"copyPasteReceiptSummary": "HTTP 402 readiness receipt: GET /api/opportunity-check is reachable, costs max $0.01 on eip155:8453 only after buyer-controlled x402 retry, and counts as paid only when HTTP 200 returns."
},
"proofRetryDecisionStripAvailable": true,
"proofRetryDecisionStrip": {
"available": true,
"mode": "buyer-controlled-proof-retry-decision-strip",
"title": "Buyer-controlled proof retry gate",
"purpose": "Compress the next click after an unpaid 402 into a clear continue/stop decision for x402-capable buyers.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"decisionSummary": "Continue only if buyer approval, x402 wallet capability, exact route, exact amount, and Base mainnet network all match.",
"continueIf": [
"Buyer explicitly approves this exact $0.01 proof.",
"Client can attach x402 payment on Base mainnet eip155:8453.",
"Route is exactly GET /api/opportunity-check.",
"Max amount is exactly 10000 atomic USDC.",
"Buyer understands only HTTP 200 counts as a paid proof completion."
],
"stopIf": [
"Buyer has not approved spend.",
"Client is a normal browser without x402 payment support.",
"Route, amount, or network differs from the receipt.",
"The buyer is treating unpaid HTTP 402 as revenue or completion.",
"The output will not change the buyer's next action."
],
"primaryAction": {
"label": "Request unpaid proof challenge",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"normalBrowserResult": "HTTP 402 JSON with x402 payment requirements",
"x402CapableResult": "HTTP 200 JSON only after buyer-controlled paid retry",
"noPaymentOnClick": true,
"paidRetryRequiresBuyerWallet": true
},
"fallbackNoSpendActions": [
"/x402-proof",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/chat-tiny-payment-flow"
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"decisionStripUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"decisionStripIsFree": true,
"paymentAttemptedByDecisionStrip": false,
"paidRouteCalledByDecisionStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofCtaAvailable": true,
"agentExecutionProofCta": {
"available": true,
"mode": "promoted-buyer-executable-proof-cta",
"title": "Buyer-run proof packet",
"label": "Run with buyer-approved x402 wallet",
"copy": "Wallet-capable buyers can use the exact one-cent proof packet now. ApexScout only exposes the packet; the buyer wallet decides whether to pay.",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"method": "GET",
"route": "/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"conversionBet": "Promote the already-safe buyer-execution packet above passive proof copy so x402-capable clients have one obvious next action.",
"successMetric": "opportunityCheckGetProofCompletions",
"unpaidSourceBucket": "agentExecutionProofPacket",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerDecision": {
"continueOnlyIf": "The buyer approves the route, amount, network, and one retry from an x402-capable wallet runtime.",
"stopIf": "Approval is missing, the client cannot attach x402 payment, or the route/amount/network differs."
},
"noSpendBoundary": {
"ctaIsFreeToRead": true,
"normalBrowserGetsUnpaid402": true,
"paymentAttemptedByCta": false,
"paidRouteCalledByApexScout": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"walletReadinessStripAvailable": true,
"walletReadinessStrip": {
"available": true,
"mode": "buyer-wallet-readiness-strip",
"title": "Before you run the command",
"checklist": [
"Your x402 wallet/client is authenticated.",
"Your wallet has at least $0.01 USDC available on Base.",
"You approve the route: GET /api/opportunity-check.",
"You approve the max amount: 10000 atomic USDC.",
"You understand unpaid HTTP 402 is not revenue.",
"You understand paid proof means HTTP 200 after your own wallet retry."
],
"copy": "ApexScout does not run this command for you. Your buyer-controlled wallet decides whether to spend.",
"route": "/api/opportunity-check",
"method": "GET",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"network": "eip155:8453",
"noFundingAdvice": true,
"noTradingAdvice": true,
"noPrivateKeyAdvice": true,
"noOnrampAdvice": true,
"noSpendBoundary": {
"stripIsFree": true,
"paymentAttemptedByStrip": false,
"paidRouteCalledByStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"buyerAgentCommandCopyAvailable": true,
"buyerAgentCommandCopy": {
"available": true,
"mode": "buyer-agent-command-copy",
"title": "Choose your buyer-run x402 command",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"recommendedCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"pinnedCurrentCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"deprecatedLegacyCommand": "npx awal@2.8.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-2-8\" --max-amount 10000 --json",
"deprecatedLegacyCommandOfferedForPaidUse": false,
"buyerAgentCommandVariants": [
{
"id": "awal-latest",
"label": "Recommended current",
"packageVersion": "latest",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": true,
"pinned": false,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
},
{
"id": "awal-2-12",
"label": "Pinned current",
"packageVersion": "2.12.0",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": false,
"pinned": true,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
}
],
"buyerClientCompatibilityMatrix": [
{
"client": "AWAL CLI",
"status": "recommended-current",
"buyerSideOnly": true,
"goodFor": "Buyer agents using Coinbase Agentic Wallet CLI to make a capped one-cent x402 proof request.",
"commandVariants": [
"awal-latest",
"awal-2-12"
],
"docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/pay-for-service",
"paymentExecutedByApexScout": false
},
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"otherX402CapableBuyerClients": [
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"legacyCommandCopyRoute": "/api/opportunity-check?src=agent-execution-command-copy",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"requestBodyRequired": false,
"walletMustBeAuthenticated": true,
"walletNeedsSufficientUsdc": true,
"apexScoutRunsCommand": false,
"copyingIsPayment": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"sourceBucketCompatibility": {
"oldPacketSourceStillSupported": "agent-execution-proof-packet",
"previousCommandCopySourceStillSupported": "agent-execution-command-copy",
"recommendedCurrentSource": "agent-execution-awal-latest",
"pinnedCurrentSource": "agent-execution-awal-latest",
"previousPinnedSourceStillMeasured": "agent-execution-awal-2-10",
"deprecatedLegacySourceStillMeasured": "agent-execution-awal-2-8",
"unpaidSourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"topSourceTagsCounter": "opportunityCheckGetProofUnpaidTopSourceTags"
},
"prerequisiteCommands": {
"stopOldCompanion": "npx awal@2.12.0 quit --json",
"status": "npx awal@2.12.0 status --json",
"balance": "npx awal@2.12.0 balance --chain base --json",
"details": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json"
},
"buyerClientRuntimePreflight": {
"requiredBeforePaidRetry": true,
"pinnedCliVersion": "2.12.0",
"pinnedCompanionVersion": "2.12.0",
"stopOldCompanionCommand": "npx awal@2.12.0 quit --json",
"restartCurrentCompanionCommand": "npx awal@2.12.0 status --json",
"confirmBaseBalanceCommand": "npx awal@2.12.0 balance --chain base --json",
"parseUnpaidContractCommand": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json",
"versionAlignedCompanionRequired": true,
"discoveryParseAloneIsPaidProof": false,
"paymentAttemptedByPreflight": false,
"paidRouteCalledByPreflight": false,
"automaticRetry": false,
"allowedPaidRetryCountAfterBuyerApproval": 1
},
"microcopy": "Refresh the buyer wallet companion to AWAL 2.12.0, confirm authentication and Base USDC, then parse the unpaid contract before one buyer-approved retry. This can spend up to 10000 atomic USDC only if your wallet approves. ApexScout does not run the command; copying is not payment; unpaid HTTP 402 is not revenue; paid proof means HTTP 200 after a buyer-controlled x402 retry.",
"prerequisites": [
"Stop an older AWAL companion, then start the pinned 2.12.0 companion.",
"Confirm the buyer wallet is authenticated and has enough USDC on Base.",
"Parse the unpaid 402 contract before any buyer-approved retry.",
"Approve only GET /api/opportunity-check with max amount 10000 atomic USDC.",
"Stop if the route, amount, network, or buyer approval differs."
],
"approvalCopy": "This command can spend up to 10000 atomic USDC only if your buyer wallet approves.",
"copyingIsNotPaymentCopy": "Copying this command is not payment.",
"apexScoutRunsCommandCopy": "ApexScout does not run this command.",
"unpaidChallengeCopy": "Unpaid HTTP 402 is expected before payment.",
"paidCompletionCopy": "Paid proof completes only when your buyer-controlled x402 retry returns HTTP 200.",
"placement": {
"x402Proof": "above-proof-detail-sections",
"chatTinyPaymentFlow": "above-chat-flow-detail-sections",
"primaryForWalletCapableAgents": true,
"normalNoSpendPathRemainsPrimary": true
},
"buttons": [
{
"label": "Copy AWAL latest command",
"copies": "command",
"value": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy AWAL 2.12 command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy route only",
"copies": "route",
"value": "/api/opportunity-check?src=agent-execution-awal-latest",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetry": {
"commandCopyTelemetryAdded": false,
"skippedReason": "The release keeps the buttons copy-only and avoids adding a client-side analytics call; the AWAL version source tags are still available when a buyer-run agent command reaches the unpaid 402 route.",
"copyIsRevenue": false,
"copyIsPayment": false,
"unpaidChallengeSourceBucket": "agentExecutionAwalLatest"
},
"noSpendBoundary": {
"copyPanelIsFree": true,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"paidRouteCalledByCopyPanel": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"buyerAgentCommandVariantsAvailable": true,
"buyerAgentCommandVariants": [
{
"id": "awal-latest",
"label": "Recommended current",
"packageVersion": "latest",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": true,
"pinned": false,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
},
{
"id": "awal-2-12",
"label": "Pinned current",
"packageVersion": "2.12.0",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": false,
"pinned": true,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
}
],
"buyerClientCompatibilityMatrixAvailable": true,
"buyerClientCompatibilityMatrix": [
{
"client": "AWAL CLI",
"status": "recommended-current",
"buyerSideOnly": true,
"goodFor": "Buyer agents using Coinbase Agentic Wallet CLI to make a capped one-cent x402 proof request.",
"commandVariants": [
"awal-latest",
"awal-2-12"
],
"docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/pay-for-service",
"paymentExecutedByApexScout": false
},
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"walletMustBeAuthenticated": true,
"walletNeedsSufficientUsdc": true,
"apexScoutRunsCommand": false,
"copyingIsPayment": false,
"paymentExecutedByApexScout": false,
"agentReceiptCloseStripAvailable": true,
"agentReceiptCloseStrip": {
"available": true,
"mode": "agent-receipt-close-strip",
"release": "v2.2.228-live-command-center",
"title": "Receipt rule accepted? Copy the proof command",
"purpose": "Put the Agent Receipt Contract directly beside the buyer-agent payment command so x402-capable clients know the exact proof standard before retrying.",
"sourceTag": "agent-receipt-contract",
"sourceBucket": "agentReceiptContract",
"method": "GET",
"route": "/api/opportunity-check",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"firstScreenPlacement": {
"x402Proof": "before-wallet-command-copy",
"chatTinyPaymentFlow": "before-wallet-command-copy",
"makeReceiptRuleVisibleBeforePaymentCommand": true,
"normalNoSpendPathRemainsPrimary": true
},
"receiptRule": {
"payOnlyIf": "Your buyer agent accepts that only HTTP 200 after a buyer-controlled x402 retry counts as paid proof.",
"rejectIf": "The client treats HTTP 402, copied text, monitor reads, route mismatch, amount mismatch, network mismatch, or repeated retry loops as proof.",
"unpaid402IsNotRevenue": true,
"paidProofRequiresHttp200": true,
"buyerControlsWalletAndRetry": true,
"stopAfterOneSuccessfulPaidResponse": true
},
"visibleBuyerCopy": [
"Accept the receipt rule before copying the command.",
"HTTP 402 is only the unpaid challenge.",
"HTTP 200 after your buyer-controlled retry is the paid proof.",
"ApexScout does not run this command and does not control the wallet."
],
"buttons": [
{
"label": "Copy receipt-bound command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy receipt route",
"copies": "route",
"value": "/api/opportunity-check?src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentReceiptContract",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"successSignal": "agentReceiptContract source bucket moves only when a buyer/client requests the paid proof route with the receipt-contract source tag."
},
"noSpendBoundary": {
"closeStripIsFree": true,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"paymentAttemptedByCloseStrip": false,
"paidRouteCalledByCloseStrip": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"buyerWalletCloseAvailable": true,
"buyerWalletClose": {
"available": true,
"mode": "buyer-wallet-close",
"release": "v2.2.228-live-command-center",
"title": "Can your wallet pay now?",
"purpose": "Separate wallet-ready buyers from buyers who still need setup before the one-cent proof retry.",
"route": "/api/buyer-wallet-close-intent",
"method": "GET",
"routeIsFree": true,
"sourceTags": {
"walletReady": "agent-receipt-contract",
"cannotPayYet": "agent-wallet-skill-pack",
"copyPaidProofCommand": "agent-execution-command-copy",
"copyReceiptBoundCommand": "agent-receipt-contract",
"copyWalletSetupCommand": "agent-wallet-skill-pack"
},
"actions": {
"walletReady": {
"action": "wallet_ready",
"path": "/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"method": "GET",
"sourceTag": "agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
"cannotPayYet": {
"action": "cannot_pay_yet",
"path": "/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"method": "GET",
"sourceTag": "agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
},
"copyPaidProofCommand": {
"action": "copy_paid_proof_command",
"path": "/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"method": "GET",
"sourceTag": "agent-execution-command-copy",
"executesPayment": false,
"opensPaidRoute": false
},
"copyReceiptBoundCommand": {
"action": "copy_receipt_bound_command",
"path": "/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"method": "GET",
"sourceTag": "agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
"copyWalletSetupCommand": {
"action": "copy_wallet_setup_command",
"path": "/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"method": "GET",
"sourceTag": "agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
}
},
"visibleBuyerCopy": [
"Choose the wallet state before copying a command.",
"This signal is a free GET request and does not open the paid route.",
"If the wallet is ready, copy the command and run it only from the buyer-controlled wallet.",
"If the wallet is not ready, stop before payment and fix wallet authentication, balance, route, amount, or network."
],
"paidProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"receiptBoundCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"buttons": [
{
"label": "I can pay now",
"action": "wallet_ready",
"copies": null,
"value": null,
"intentPath": "/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "I can't pay yet",
"action": "cannot_pay_yet",
"copies": null,
"value": null,
"intentPath": "/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy paid proof command",
"action": "copy_paid_proof_command",
"copies": "command",
"value": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy receipt-bound command",
"action": "copy_receipt_bound_command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"action": "copy_wallet_setup_command",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"mode": "aggregate-only-buyer-wallet-close-intent",
"counter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"cannotPayYetCounter": "buyerWalletCloseSignals.cannotPayYet",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"copyWalletSetupCommandCounter": "buyerWalletCloseSignals.copyWalletSetupCommand",
"intentIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"firstScreenPlacement": {
"x402Proof": "before-receipt-and-command-copy",
"chatTinyPaymentFlow": "before-receipt-and-command-copy",
"walletStateVisibleBeforePaymentCommand": true,
"normalNoSpendPathRemainsPrimary": true
},
"noSpendBoundary": {
"panelIsFree": true,
"intentRouteIsFree": true,
"intentRouteMethod": "GET",
"copyingExecutesPayment": false,
"clickingStateExecutesPayment": false,
"clickingStateOpensPaidRoute": false,
"paidRouteCalledByPanel": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"http402ClosePacketAvailable": true,
"http402ClosePacket": {
"available": true,
"mode": "buyer-agent-402-close-packet",
"release": "v2.2.228-live-command-center",
"title": "402 close packet",
"purpose": "Put the buyer-agent close instructions inside the unpaid HTTP 402 response so x402-capable clients can finish the proof without hunting through a page.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"closeMessage": "You reached the ApexScout paid proof gate. To complete the proof, retry this exact GET route from an authenticated x402 wallet/client with max amount 10000 atomic USDC on Base mainnet.",
"buyerAgentInstruction": "If the buyer approved this one-cent proof, run the command exactly once and treat only HTTP 200 as the paid completion. If any route, amount, network, or approval detail differs, stop.",
"whatHttp200Proves": [
"The buyer-controlled x402 retry reached ApexScout's one-cent proof route.",
"The paid route returned structured JSON after payment verification.",
"The aggregate paid proof completion counter is allowed to move only after HTTP 200."
],
"notProofOf": [
"Coinbase, AWS, Stripe, Bazaar, AgentCore, Base, marketplace, or protocol endorsement.",
"Guaranteed revenue, trading results, investment outcome, legal advice, tax advice, lending advice, or compliance approval.",
"Buyer identity, wallet-level activity, secret signing material, or broader permission to spend."
],
"continueIf": [
"The buyer explicitly approved this one-cent proof.",
"The client can attach an x402 payment authorization.",
"The retry route is exactly GET /api/opportunity-check?src=agent-execution-awal-latest.",
"The max amount is exactly 10000 atomic USDC.",
"The network is exactly eip155:8453."
],
"stopIf": [
"The wallet is not authenticated.",
"The wallet has insufficient USDC on Base.",
"The client cannot attach x402 payment.",
"The max amount is lower than 10000 atomic USDC.",
"The network is not eip155:8453.",
"The buyer did not approve this exact spend.",
"The agent plans to retry more than once just to clear a metric."
],
"failureBranches": {
"walletNotAuthenticated": {
"bucket": "wallet_not_authenticated",
"buyerAction": "Authenticate the buyer-controlled x402 wallet/client before retrying.",
"apexScoutAction": "Do nothing automatically."
},
"insufficientBaseUsdc": {
"bucket": "insufficient_base_usdc",
"buyerAction": "Stop until the buyer-controlled wallet has enough Base USDC for the one-cent proof.",
"apexScoutAction": "Do not fund, trade, onramp, or advise funding."
},
"maxAmountTooLow": {
"bucket": "max_amount_too_low",
"buyerAction": "Use max amount 10000 atomic USDC or stop.",
"apexScoutAction": "Do not lower route price or change payment requirements."
},
"wrongNetwork": {
"bucket": "wrong_network",
"buyerAction": "Use eip155:8453 Base mainnet or stop.",
"apexScoutAction": "Do not switch rails."
},
"paymentDeclined": {
"bucket": "payment_declined",
"buyerAction": "Stop unless the buyer explicitly approves another attempt.",
"apexScoutAction": "Do not retry payment for the buyer."
}
},
"telemetryInterpretation": {
"sourceTag": "agent-execution-awal-latest",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionAwalLatest",
"closePacketUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"closePacketIsFree": true,
"closePacketExecutesPayment": false,
"paymentAttemptedByClosePacket": false,
"paidRouteCalledByClosePacket": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"secretSigningMaterialRequested": false
}
},
"buyerProofExecutionCloseoutAvailable": true,
"buyerProofExecutionCloseout": {
"available": true,
"mode": "buyer-proof-execution-closeout",
"release": "v2.2.228-live-command-center",
"title": "Copied? Finish with one buyer-run proof retry",
"purpose": "Close the gap after a buyer agent marks its wallet ready or copies the command: run exactly one buyer-approved proof retry, classify the response, then stop.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"method": "GET",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"primarySourceTag": "agent-receipt-contract",
"primarySourceBucket": "agentReceiptContract",
"commandCopySourceTag": "agent-execution-command-copy",
"commandCopySourceBucket": "agentExecutionCommandCopy",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"firstScreenPlacement": {
"x402Proof": "after-wallet-close-before-receipt-command",
"chatTinyPaymentFlow": "after-wallet-close-before-receipt-command",
"closeoutVisibleBeforeCommandCopy": true,
"normalNoSpendPathRemainsPrimary": true
},
"closeoutRule": {
"ifWalletReadyAndCommandCopied": "Run the receipt-bound command exactly once from the buyer-controlled x402 wallet if the buyer approved the route, amount, and network.",
"ifCannotPayYet": "Do not retry payment. Use the wallet setup note and stop until wallet authentication, Base USDC balance, route, amount, and network match.",
"ifResponseIs402": "Treat the result as unpaid. It is a challenge, not a paid proof, and it should not move revenue.",
"ifResponseIs200": "Treat the result as paid proof only after the buyer-controlled x402 retry returns structured HTTP 200 JSON.",
"ifRetryIsRejected": "Read the sanitized edge failure status once, classify the rejection, and stop before another paid attempt.",
"stopAfter": "one buyer-approved paid retry unless a human operator explicitly approves another capped diagnostic"
},
"buyerAgentChecklist": [
"Wallet is authenticated by the buyer, not ApexScout.",
"Buyer approves GET /api/opportunity-check with source agent-receipt-contract.",
"Maximum spend is exactly 10000 atomic USDC.",
"Network is exactly eip155:8453 Base mainnet.",
"Run one retry, then classify HTTP 402, HTTP 200, or a sanitized edge failure."
],
"copyReadyCommands": {
"receiptBoundProofCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"commandCopyProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"edgeFailureReadCommand": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof."
},
"safeReadouts": {
"edgeHealthPath": "/__apexscout/cloudflare-x402/health",
"edgeLastFailurePath": "/__apexscout/cloudflare-x402/health/last-failure",
"edgeLastFailureUrl": "https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure",
"originLastFailurePath": "/api/cloudflare-x402-edge-failure/last",
"originLastFailureUrl": "https://apexscout.ai/api/cloudflare-x402-edge-failure/last",
"noPaymentAttemptedByRead": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"privateKeysRequested": false
},
"buttons": [
{
"label": "Copy receipt-bound proof command",
"copies": "receipt_bound_command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy edge failure readout",
"copies": "edge_failure_read_command",
"value": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"failureReadoutIsRevenue": false,
"copyIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"newCounterAdded": false,
"reason": "The closeout reuses existing aggregate wallet-close, source-bucket, and paid-completion counters so it improves decision clarity without creating fake movement."
},
"noSpendBoundary": {
"closeoutIsFree": true,
"closeoutExecutesPayment": false,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"failureReadoutExecutesPayment": false,
"failureReadoutCallsPaidRoute": false,
"paymentAttemptedByCloseout": false,
"paidRouteCalledByCloseout": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"productionPostCreated": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareMutationCreated": false,
"apifyActorRunCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"rawPaymentPayloadExposed": false
},
"safetyClaims": {
"guaranteedRevenueClaimed": false,
"officialEndorsementClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareMonetizationGatewayReadinessAvailable": true,
"cloudflareMonetizationGatewayReadiness": {
"available": true,
"mode": "cloudflare-monetization-gateway-readiness",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare live edge status",
"releaseReportingMode": "worker-and-origin-split",
"appRelease": "v2.2.228-live-command-center",
"originRelease": "v2.2.228-live-command-center",
"originReleasePath": "/status",
"workerRelease": "v2.2.228-live-command-center",
"workerSourceVersion": "2.2.228",
"workerHealthReleaseContract": {
"healthPath": "/__apexscout/cloudflare-x402/health",
"releaseFieldMeans": "workerRelease",
"workerReleaseField": "workerRelease",
"originReleaseField": "originRelease",
"originReleasePath": "/status",
"originReleaseReadIsNoSpend": true,
"mismatchIsActionableOnlyWhenWorkerHealthFails": true
},
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"articleUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving x402 payment enforcement toward edge-managed route rules. ApexScout now serves the one-cent proof path through a narrow Cloudflare Worker while keeping Railway as the origin fallback."
},
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"officialCloudflareMonetizationGatewayClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"waitlistOrEarlyAccessRequired": false,
"noDnsChangeMade": false,
"dnsChangedByLiveCutover": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"apexScoutRemainsSourceOfTruth": true,
"candidateRules": [
{
"id": "apexscout-one-cent-proof",
"purpose": "Edge-readable one-cent x402 proof route for wallet-capable buyer agents.",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"displayPrice": "$0.01",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
},
{
"id": "apexscout-agent-revenue-audit",
"purpose": "Higher-value builder monetization audit route.",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"amountAtomicUsdc": "5000000",
"priceUsd": "5.00",
"displayPrice": "$5.00",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
}
],
"migrationPlan": [
"Keep the Cloudflare Worker route narrow and use Railway as the origin fallback.",
"Use these candidate rules as the review checklist before any future official managed-gateway change.",
"Require unpaid HTTP 402 and buyer-controlled HTTP 200 proof for each route after any edge or gateway change.",
"Keep ApexScout aggregate metrics as the public conversion truth source.",
"Roll back to Railway-origin x402 if route, amount, network, or payment proof differs."
],
"operatorChecklist": {
"dnsChangeApproved": true,
"cloudflareApiTokenApproved": true,
"gatewayRuleCreationApproved": true,
"postDeployPaidProofRequiredBeforeClaimingGatewayLive": true,
"originFallbackRequired": true,
"compareGatewayRulesToCandidateRules": true
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"cloudflareApiCalled": false,
"dnsChanged": false,
"dnsAlreadyProxiedThroughCloudflare": true,
"workerAlreadyDeployed": true,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"revenueOutcomeClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
},
"telemetryInterpretation": {
"readinessUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"watchCounters": "If unpaid proof counters move without paid completions, treat it as proof-route interest, not gateway success."
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"agentMonetizationPolicyMatrixAvailable": true,
"agentMonetizationPolicyMatrix": {
"available": true,
"mode": "agent-monetization-policy-matrix",
"release": "v2.2.228-live-command-center",
"title": "Agent monetization policy matrix",
"purpose": "Give crawlers, buyer agents, edge gateways, and MCP clients one clear allow/charge/block map before they touch a paid route.",
"sourceSignals": [
{
"name": "Cloudflare Pay Per Crawl",
"sourceUrl": "https://blog.cloudflare.com/introducing-pay-per-crawl/",
"interpretedAs": "Agents and crawlers need a simple policy choice: free access, charged access, or blocked access."
},
{
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Paid APIs, datasets, pages, and MCP tools can be described as route-level payment rules before any buyer-controlled retry."
}
],
"policyUrl": "https://apexscout.ai/.well-known/apexscout-monetization-policy.json",
"apiPath": "/api/agent-monetization-policy",
"wellKnownPath": "/.well-known/apexscout-monetization-policy.json",
"paidMcpToolsManifest": "https://apexscout.ai/.well-known/apexscout-paid-tools.json",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareDnsProxied": true,
"officialCloudflareEndorsementClaimed": false,
"officialCloudflareMonetizationGatewayClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"cloudflarePayPerCrawlIntegrated": false,
"noCrawlerBillingCreated": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"routePolicyCount": 8,
"defaultPolicy": {
"action": "allow_free_public_metadata",
"appliesTo": "Public ApexScout-owned docs, manifests, readiness pages, and health surfaces.",
"paidRetryRequired": false,
"buyerLevelDataExposed": false
},
"routePolicies": [
{
"id": "public-docs-and-start-pages",
"action": "allow_free",
"routes": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/agent-capabilities.json",
"/.well-known/agent.json",
"/api/public-agent"
],
"reason": "Agents need no-spend discovery and route selection before deciding whether to pay.",
"crawlerPolicy": "allow_public_metadata_only",
"paidRetryRequired": false
},
{
"id": "machine-readable-policy-and-tools",
"action": "allow_free",
"routes": [
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json"
],
"reason": "Payment-aware clients should inspect prices, routes, caps, and guardrails without spending.",
"crawlerPolicy": "allow_agent_metadata",
"paidRetryRequired": false
},
{
"id": "proof-pages-and-payment-education",
"action": "allow_free",
"routes": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow"
],
"reason": "These surfaces explain the one-cent proof and wallet-controlled retry; reading them is not payment.",
"crawlerPolicy": "allow_public_payment_instructions",
"paidRetryRequired": false
},
{
"id": "one-cent-proof",
"action": "charge_x402",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-command-copy",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"crawlerPolicy": "charge_only_when_agent_chooses_paid_resource"
},
{
"id": "agent-revenue-audit",
"action": "charge_x402",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"crawlerPolicy": "charge_paid_builder_audit_only_after_buyer_approval"
},
{
"id": "builder-and-scope-preflight",
"action": "allow_free_preflight",
"routes": [
"/agent-revenue-audit-builder",
"/api/agent-revenue-audit-builder",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/api/buyer-payment-scope-check",
"/buyer-agent-payment-safety",
"/api/buyer-agent-payment-safety"
],
"reason": "Preflight and safety checks reduce accidental spend and do not execute payment.",
"crawlerPolicy": "allow_no_spend_prep_surfaces",
"paidRetryRequired": false
},
{
"id": "admin-and-private-surfaces",
"action": "block_public_access",
"routes": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"crawlerPolicy": "block",
"paidRetryAvailable": false
},
{
"id": "third-party-outreach-and-catalog-crawl",
"action": "not_performed_by_apexscout",
"routes": [],
"reason": "ApexScout does not scrape catalogs, contact third parties, create fake traffic, post, DM, email, or crawl competitors.",
"crawlerPolicy": "blocked_by_operating_boundary",
"paidRetryAvailable": false
}
],
"crawlerAndAgentRules": {
"allow": [
"Read public docs, manifests, policy files, OpenAPI, MCP metadata, proof pages, and no-spend preflight surfaces.",
"Use unpaid HTTP 402 as a route-health/payment-requirements signal, not as revenue."
],
"charge": [
"Charge only the existing one-cent proof route or the existing $5 Agent Revenue Audit route.",
"Require buyer-controlled x402 retry before any paid completion is counted."
],
"block": [
"Block admin/private surfaces from public policy.",
"Do not provide a paid bypass for scraping, third-party discovery, fake traffic, outreach, or buyer-level data."
]
},
"edgeGatewayCandidate": {
"readyToReview": true,
"cloudflareRuleCreated": false,
"firstRuleToMirror": "one-cent-proof",
"secondRuleToMirror": "agent-revenue-audit",
"rollbackRequirement": "Railway-origin x402 remains the fallback until each edge rule proves unpaid 402 and paid 200."
},
"noSpendBoundary": {
"policyIsFree": true,
"paymentAttemptedByPolicy": false,
"paidRouteCalledByPolicy": false,
"cloudflareApiCalled": false,
"crawlerBillingCreated": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"paidMcpToolManifestAvailable": true,
"paidMcpToolManifest": {
"available": true,
"mode": "paid-mcp-tool-manifest",
"release": "v2.2.228-live-command-center",
"title": "ApexScout paid MCP tool manifest",
"purpose": "Make ApexScout's payable resources obvious to MCP-style clients without opening a paid route or simulating payment.",
"apiPath": "/api/paid-mcp-tools",
"wellKnownPath": "/.well-known/apexscout-paid-tools.json",
"policyPath": "/.well-known/apexscout-monetization-policy.json",
"policyUrl": "https://apexscout.ai/.well-known/apexscout-monetization-policy.json",
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"mcpToolPackPath": "/api/mcp-tool-pack",
"mcpManifestPath": "/.well-known/mcp.json",
"openApiPath": "/api/agentcore-openapi.json",
"toolCount": 3,
"paidToolCount": 3,
"freeToolCount": 0,
"tools": [
{
"name": "apexscout_link_native_tiny_paid_proof",
"displayName": "One-cent x402 proof",
"method": "GET",
"path": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-command-copy",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUnits": "10000",
"network": "eip155:8453",
"requestBodyRequired": false,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-command-copy",
"sourceBucket": "agentExecutionCommandCopy",
"buyerControlledRetryOnly": true,
"recommendedFor": "Fastest proof that the buyer agent can complete an x402 payment path."
},
{
"name": "apexscout_opportunity_check",
"displayName": "Opportunity Check",
"method": "POST",
"path": "/api/opportunity-check",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUnits": "10000",
"network": "eip155:8453",
"requestBodyRequired": true,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"inputSchemaSummary": {
"subject": "string",
"goal": "string",
"buyerType": "optional string",
"source": "optional string"
},
"recommendedFor": "Cheapest normal paid trust screen after a buyer chooses a subject and goal."
},
{
"name": "apexscout_agent_revenue_audit",
"displayName": "Agent Revenue Audit",
"method": "POST",
"path": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"price": "$5.00",
"priceUsd": "5.00",
"maxAmountAtomicUnits": "5000000",
"network": "eip155:8453",
"requestBodyRequired": true,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"preflightPath": "/api/agent-revenue-audit-builder/prepare",
"previewPath": "/api/agent-revenue-audit-preview",
"inputSchemaSummary": {
"serviceName": "string",
"currentOffer": "string",
"targetBuyer": "string",
"currentProblem": "string",
"currentPaymentRail": "optional string",
"riskTolerance": "optional string",
"source": "optional string"
},
"recommendedFor": "Paid conversion audit for x402, MCP, and agent API builders."
}
],
"recommendedNoSpendBeforePayment": [
"/docs.json",
"/api/agent-monetization-policy",
"/api/mcp-tool-pack",
"/api/agentcore-openapi.json",
"/api/cloudflare-billing-rules",
"/api/cloudflare-x402-worker-config",
"/api/x402-proof",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-preview",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check"
],
"compatibility": {
"mcpClientsCanDiscoverPaidTools": true,
"x402RequiredForPaidCompletion": true,
"http402ChallengeExpectedBeforePayment": true,
"paymentCredentialIsBuyerControlled": true,
"sellerManagedBuyerWallet": false,
"apiKeysRequiredBeforePayment": false,
"cloudflareGatewayRuleAlreadyCreated": false,
"originStillEnforcesX402": true
},
"noSpendBoundary": {
"manifestIsFree": true,
"paymentAttemptedByManifest": false,
"paidRouteCalledByManifest": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"notClaims": {
"cloudflareEndorsementClaimed": false,
"mcpMarketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"paymentExecutedByReadingManifest": false,
"buyerWalletControlledByApexScout": false
}
},
"sourcePreservingHandoffAvailable": true,
"sourcePreservingHandoff": {
"sourcePreservingHandoffAvailable": true,
"mode": "aggregate-only-source-preserving-handoff",
"purpose": "Preserve owner-approved launch source tags from public entry pages into no-spend proof, Builder, Scope, and paid-intent handoff links.",
"activeSourceTag": null,
"exampleSourceTag": "x-daily-post",
"sourceQueryParam": "src",
"supportedSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"destinationLinks": {
"x402Proof": "/x402-proof?src=x-daily-post",
"x402ProofApi": "/api/x402-proof?src=x-daily-post",
"chatTinyPaymentFlow": "/chat-tiny-payment-flow?src=x-daily-post",
"chatTinyPaymentFlowApi": "/api/chat-tiny-payment-flow?src=x-daily-post",
"tinyPaidProof": "/api/opportunity-check?src=x-daily-post",
"auditBuilderActionPack": "/api/agent-revenue-audit-builder/action-pack?src=x-daily-post",
"auditBuilder": "/agent-revenue-audit-builder?src=x-daily-post",
"scopeCheck": "/buyer-payment-scope-check?src=x-daily-post",
"agentCommerceScenarios": "/agent-commerce-scenarios?src=x-daily-post",
"paymentIntent": "/payment-intent?route=agent-revenue-audit&src=x-daily-post"
},
"destinationUrls": {
"x402Proof": "https://apexscout.ai/x402-proof?src=x-daily-post",
"x402ProofApi": "https://apexscout.ai/api/x402-proof?src=x-daily-post",
"chatTinyPaymentFlow": "https://apexscout.ai/chat-tiny-payment-flow?src=x-daily-post",
"chatTinyPaymentFlowApi": "https://apexscout.ai/api/chat-tiny-payment-flow?src=x-daily-post",
"tinyPaidProof": "https://apexscout.ai/api/opportunity-check?src=x-daily-post",
"auditBuilderActionPack": "https://apexscout.ai/api/agent-revenue-audit-builder/action-pack?src=x-daily-post",
"auditBuilder": "https://apexscout.ai/agent-revenue-audit-builder?src=x-daily-post",
"scopeCheck": "https://apexscout.ai/buyer-payment-scope-check?src=x-daily-post",
"agentCommerceScenarios": "https://apexscout.ai/agent-commerce-scenarios?src=x-daily-post",
"paymentIntent": "https://apexscout.ai/payment-intent?route=agent-revenue-audit&src=x-daily-post"
},
"sourcePreservedOnPageLinks": true,
"sourcePreservedOnCopyCommand": true,
"preservesOnlySafeSourceTags": true,
"unsupportedSourceTagsDropped": true,
"sourcePreservationCreatesTraffic": false,
"sourcePreservationCreatesActionIntent": false,
"sourcePreservationCreatesPrepareRequest": false,
"sourcePreservationCreatesScopeCheck": false,
"sourcePreservationCallsPaidRoute": false,
"sourcePreservationExecutesPayment": false,
"noSpendBoundary": {
"handoffIsFree": true,
"linkRewriteOnly": true,
"paidRouteCalledByHandoff": false,
"productionPostCreated": false,
"actionIntentCreatedByHandoff": false,
"prepareRequestCreatedByHandoff": false,
"scopeCheckCreatedByHandoff": false,
"fakeTrafficCreated": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareRuleChanged": false,
"dnsChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesRequired": false,
"cookiesAddedForHandoff": false,
"sessionTrackingRequired": false,
"sessionTrackingAddedForHandoff": false,
"fingerprintingAdded": false
},
"note": "A safe owner source tag can travel on same-site links and copied proof commands so aggregate proof/source buckets can connect the front door to the next buyer-controlled step. The handoff does not open links or execute payment."
},
"sourcePreservedHref": "/api/opportunity-check?src=x-daily-post",
"sourcePreservedHrefUrl": "https://apexscout.ai/api/opportunity-check?src=x-daily-post",
"sourceAttributionAvailable": true,
"postSettlementConversionAvailable": true,
"postSettlementConversion": {
"available": true,
"mode": "receipt-bound-free-continuation",
"title": "Continue with the included free diagnosis",
"purpose": "Successful paid proof includes one free receipt-bound compatibility diagnosis. It starts only through an explicit action, never navigates or pays automatically, may return no paid recommendation, and requires separate buyer approval for any later paid recommendation.",
"prepaymentPromise": {
"statement": "Successful paid proof includes one free receipt-bound compatibility diagnosis.",
"includedFreeDiagnoses": 1,
"explicitActionRequired": true,
"automaticNavigation": false,
"automaticPayment": false,
"laterPaidRecommendationRequiresSeparateApproval": true,
"noUsefulFindingMayReturnNoPaidRecommendation": true
},
"nextNoSpendRequest": {
"toolName": "apexscout_continue_paid_proof",
"operationId": "apexscoutContinuePaidProof",
"method": "POST",
"endpoint": "/api/paid-proof/continue",
"url": "https://apexscout.ai/api/paid-proof/continue",
"contentType": "application/json",
"openApiUrl": "https://apexscout.ai/api/agentcore-openapi.json",
"mcpManifestUrl": "https://apexscout.ai/.well-known/mcp.json",
"requiredFields": [
"ticket",
"role"
],
"inputSchema": {
"type": "object",
"required": [
"ticket",
"role"
],
"properties": {
"ticket": {
"type": "string",
"description": "Receipt-bound ticket from a paid Opportunity Check HTTP 200."
},
"role": {
"type": "string",
"enum": [
"merchant",
"buyer-client",
"proof-only"
]
},
"resourceUrl": {
"type": "string",
"format": "uri",
"description": "Public HTTPS URL for merchant role only."
},
"client": {
"type": "string",
"enum": [
"awal-latest",
"awal-2.10",
"cloudflare-agents-x402",
"crosshatch-effect-0.0.5",
"generic-x402-fetch",
"metamask-x402",
"agentcash-router-1.18.0",
"awal-2.10.0",
"awal-2.12.0",
"awal-2.8.0",
"generic-x402-v2",
"x402-fetch-2.18.0"
]
},
"clientVersion": {
"type": "string",
"maxLength": 32,
"pattern": "^[a-zA-Z0-9][a-zA-Z0-9._-]{0,31}$"
},
"failureCode": {
"type": "string",
"enum": [
"agentcash-router-compatibility",
"agentcash_router_noncanonical_x_payment_info",
"atomic-amount-type-mismatch",
"buyer-approval-missing",
"buyer-wallet-equals-seller",
"cors-payment-header-contract",
"duplicate-payment-required-headers",
"edge-diagnostic-not-durable",
"facilitator-verify-rejected",
"invalid-payment-required-response",
"paid-post-fields-missing",
"payment-receipt-counter-overwrite",
"rcl-001",
"rcl-002",
"rcl-003",
"rcl-004",
"rcl-005",
"rcl-006",
"rcl-007",
"rcl-008",
"rcl-009",
"rcl-010",
"rcl-011",
"wallet-cap-too-low"
]
},
"failureFamily": {
"type": "string",
"enum": [
"approval_state_missing_or_inferred",
"atomic_amount_type_mismatch",
"buyer_wallet_equals_seller_wallet",
"cors_payment_header_contract",
"duplicate_or_alternate_payment_headers",
"header_body_version_mismatch",
"isolate_local_state_not_durable",
"non_atomic_shared_counter_overwrite",
"noncanonical_mpp_discovery_shape",
"required_body_fields_missing",
"signed_payload_mutation_or_schema_drift",
"wallet_cap_too_low"
]
},
"merchantProfile": {
"type": "string",
"enum": [
"generic-x402-v2",
"agentcash-router-1.18",
"agentcash-router-1.19"
]
},
"channel": {
"type": "string",
"enum": [
"http",
"mcp",
"a2a",
"cli"
],
"description": "Optional aggregate transport attribution. It never identifies a buyer."
}
},
"additionalProperties": false
},
"sampleBody": {
"ticket": "<receipt-bound-ticket-from-paid-response>",
"role": "proof-only"
}
},
"nextPaidRoute": null,
"finalStatuses": [
"completed_no_recommendation",
"completed_paid_recommendation_requires_separate_approval",
"input_required",
"declined",
"canceled",
"expired"
],
"noSpendBoundary": {
"explicitActionRequired": true,
"automaticNavigation": false,
"continuationRequestExecutesPayment": false,
"paidRouteCalledByContract": false,
"automaticSpending": false,
"laterPaidRecommendationRequiresSeparateApproval": true
},
"privacy": {
"aggregateTelemetryOnly": true,
"buyerLevelDataExposed": false,
"payerAddressIncluded": false,
"rawBuyerInputPublic": false
}
},
"sourceTagsStored": "sanitized-aggregate-only",
"supportedSourceTags": [
"front-door-x402-proof-cta",
"action-pack-x402-proof-cta",
"chat-tiny-x402-proof-cta",
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch",
"machine-readable-x402-proof",
"agent-execution-proof-packet",
"agent-execution-command-copy",
"agent-execution-awal-latest",
"agent-execution-awal-2-10",
"agent-execution-awal-2-8",
"agent-wallet-skill-pack",
"agent-receipt-contract"
],
"unpaidSourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"unpaidTopSourceTagsCounter": "opportunityCheckGetProofUnpaidTopSourceTags",
"completionSourceBucketsCounter": "opportunityCheckGetProofCompletionSourceBuckets",
"agentExecutionAwalLatestSourceBucket": "agentExecutionAwalLatest",
"agentExecutionAwal210SourceBucket": "agentExecutionAwal210",
"agentExecutionAwal28SourceBucket": "agentExecutionAwal28",
"agentExecutionCommandCopySourceBucket": "agentExecutionCommandCopy",
"agentReceiptContractSourceBucket": "agentReceiptContract",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"buyerWalletCloseWalletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"buyerWalletCloseCannotPayYetCounter": "buyerWalletCloseSignals.cannotPayYet",
"http402ClosePacketSourceBucket": "agentExecutionAwalLatest",
"buyerProofExecutionCloseoutSourceBucket": "agentReceiptContract",
"agentExecutionCommandCopyTelemetryAdded": false,
"agentExecutionCommandCopyTelemetryReason": "The release keeps the buttons copy-only and avoids adding a client-side analytics call; the AWAL version source tags are still available when a buyer-run agent command reaches the unpaid 402 route.",
"ownerLaunchSourcePreservationCreatesTraffic": false,
"ownerLaunchSourcePreservationCallsPaidRoute": false,
"ownerLaunchSourcePreservationExecutesPayment": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"unpaidChallengeInterpretation": "GET proof CTA clicks that reach unpaid 402 are not revenue. They show a client requested the proof route before payment. A paid completion still requires buyer-controlled x402 retry and HTTP 200.",
"buyerAgentExecutionPacketAvailable": true,
"requiresBuyerControlledX402Retry": true,
"noRequestBodyRequired": true,
"usesExistingPaidResource": true,
"samePaidResourceAs": "POST /api/opportunity-check",
"doesNotAddThirdPaidRoute": false,
"tinyProofReusesExistingOpportunityCheckRoute": true,
"doesNotCallAgentRevenueAudit": true,
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareDnsProxied": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noDnsChangeMade": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"paidCallsMadeByActionSurface": false,
"buyerLevelDataExposed": false,
"publicCopy": "GET /api/opportunity-check is the one-cent x402 proof link. It returns HTTP 402 until a buyer-controlled x402 client retries payment."
},
"linkNativeTinyPaidProof": {
"available": true,
"tinyPaidProofAction": {
"name": "ApexScout link-native tiny paid proof",
"mode": "link-native-tiny-paid-proof",
"method": "GET",
"route": "/api/opportunity-check",
"path": "/api/opportunity-check",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUnits": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"getProofUnpaidChallengeTelemetryAvailable": true,
"getProofUnpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"getProofCompletionCounter": "opportunityCheckGetProofCompletions",
"proofRetryConfidenceAvailable": true,
"proofRetryConfidence": {
"available": true,
"mode": "no-spend-proof-retry-confidence",
"purpose": "Help x402-capable buyers understand that an unpaid 402 is the expected proof challenge and that payment only happens from a buyer-controlled retry.",
"route": "/api/opportunity-check",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"expectedUnpaidMeaning": "HTTP 402 means the proof paywall is reachable and returning x402 payment requirements. It is not a service outage and it is not revenue.",
"expectedPaidMeaning": "HTTP 200 only counts after a buyer-controlled x402 client retries this route with an approved payment.",
"http402ReadinessReceiptAvailable": true,
"http402ReadinessReceipt": {
"available": true,
"mode": "no-spend-http-402-readiness-receipt",
"title": "HTTP 402 Readiness Receipt",
"purpose": "Give x402-capable buyers a compact, unsigned receipt showing what the unpaid proof challenge proves before any buyer-controlled paid retry.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"receiptScope": "GET /api/opportunity-check, $0.01 maximum amount, eip155:8453 Base mainnet x402, one buyer-controlled retry.",
"receiptSummary": "Unpaid HTTP 402 proves the x402 proof route is reachable and returning payment requirements. It does not prove payment, revenue, endorsement, or buyer approval.",
"agentDecision": {
"payOnlyIf": "The buyer explicitly approves the route, max amount, network, and one retry from a wallet-controlled x402 client.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the route or network differs, or HTTP 402 is being treated as a paid completion.",
"nextNoSpendStep": "Stay on ApexScout proof, action-pack, Scope Check, or Builder surfaces until buyer-controlled payment is intentionally approved."
},
"readinessChecks": [
"Route scoped to GET /api/opportunity-check.",
"Amount scoped to $0.01 / 10000 atomic USDC.",
"Network scoped to Base mainnet eip155:8453.",
"HTTP 402 is expected before payment.",
"HTTP 200 is required before paid completion is counted.",
"No request body, cookies, session, or wallet connection is required to read this receipt.",
"No buyer-level data is exposed by this receipt.",
"No automatic payment or paid retry is performed by ApexScout."
],
"publicSafetyCopy": "This is an unsigned no-spend readiness receipt, not AP2 proof, not a signed mandate, not a legal or payment receipt, not an endorsement claim, and not trading, investment, tax, legal, lending, or compliance advice.",
"notClaims": {
"signedReceiptCreated": false,
"ap2ProofCreated": false,
"legalMandateCreated": false,
"paymentReceiptCreated": false,
"walletApprovalCreated": false,
"officialEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false
},
"noSpendBoundary": {
"receiptIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByReceipt": false,
"paidRouteCalledByReceipt": false,
"paidUpstreamCalls": false,
"walletConnectionRequiredForReceipt": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"receiptUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"copyPasteReceiptSummary": "HTTP 402 readiness receipt: GET /api/opportunity-check is reachable, costs max $0.01 on eip155:8453 only after buyer-controlled x402 retry, and counts as paid only when HTTP 200 returns."
},
"proofRetryDecisionStripAvailable": true,
"proofRetryDecisionStrip": {
"available": true,
"mode": "buyer-controlled-proof-retry-decision-strip",
"title": "Buyer-controlled proof retry gate",
"purpose": "Compress the next click after an unpaid 402 into a clear continue/stop decision for x402-capable buyers.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"decisionSummary": "Continue only if buyer approval, x402 wallet capability, exact route, exact amount, and Base mainnet network all match.",
"continueIf": [
"Buyer explicitly approves this exact $0.01 proof.",
"Client can attach x402 payment on Base mainnet eip155:8453.",
"Route is exactly GET /api/opportunity-check.",
"Max amount is exactly 10000 atomic USDC.",
"Buyer understands only HTTP 200 counts as a paid proof completion."
],
"stopIf": [
"Buyer has not approved spend.",
"Client is a normal browser without x402 payment support.",
"Route, amount, or network differs from the receipt.",
"The buyer is treating unpaid HTTP 402 as revenue or completion.",
"The output will not change the buyer's next action."
],
"primaryAction": {
"label": "Request unpaid proof challenge",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"normalBrowserResult": "HTTP 402 JSON with x402 payment requirements",
"x402CapableResult": "HTTP 200 JSON only after buyer-controlled paid retry",
"noPaymentOnClick": true,
"paidRetryRequiresBuyerWallet": true
},
"fallbackNoSpendActions": [
"/x402-proof",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/chat-tiny-payment-flow"
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"decisionStripUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"decisionStripIsFree": true,
"paymentAttemptedByDecisionStrip": false,
"paidRouteCalledByDecisionStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"http402ClosePacketAvailable": true,
"http402ClosePacket": {
"available": true,
"mode": "buyer-agent-402-close-packet",
"release": "v2.2.228-live-command-center",
"title": "402 close packet",
"purpose": "Put the buyer-agent close instructions inside the unpaid HTTP 402 response so x402-capable clients can finish the proof without hunting through a page.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"closeMessage": "You reached the ApexScout paid proof gate. To complete the proof, retry this exact GET route from an authenticated x402 wallet/client with max amount 10000 atomic USDC on Base mainnet.",
"buyerAgentInstruction": "If the buyer approved this one-cent proof, run the command exactly once and treat only HTTP 200 as the paid completion. If any route, amount, network, or approval detail differs, stop.",
"whatHttp200Proves": [
"The buyer-controlled x402 retry reached ApexScout's one-cent proof route.",
"The paid route returned structured JSON after payment verification.",
"The aggregate paid proof completion counter is allowed to move only after HTTP 200."
],
"notProofOf": [
"Coinbase, AWS, Stripe, Bazaar, AgentCore, Base, marketplace, or protocol endorsement.",
"Guaranteed revenue, trading results, investment outcome, legal advice, tax advice, lending advice, or compliance approval.",
"Buyer identity, wallet-level activity, secret signing material, or broader permission to spend."
],
"continueIf": [
"The buyer explicitly approved this one-cent proof.",
"The client can attach an x402 payment authorization.",
"The retry route is exactly GET /api/opportunity-check?src=agent-execution-awal-latest.",
"The max amount is exactly 10000 atomic USDC.",
"The network is exactly eip155:8453."
],
"stopIf": [
"The wallet is not authenticated.",
"The wallet has insufficient USDC on Base.",
"The client cannot attach x402 payment.",
"The max amount is lower than 10000 atomic USDC.",
"The network is not eip155:8453.",
"The buyer did not approve this exact spend.",
"The agent plans to retry more than once just to clear a metric."
],
"failureBranches": {
"walletNotAuthenticated": {
"bucket": "wallet_not_authenticated",
"buyerAction": "Authenticate the buyer-controlled x402 wallet/client before retrying.",
"apexScoutAction": "Do nothing automatically."
},
"insufficientBaseUsdc": {
"bucket": "insufficient_base_usdc",
"buyerAction": "Stop until the buyer-controlled wallet has enough Base USDC for the one-cent proof.",
"apexScoutAction": "Do not fund, trade, onramp, or advise funding."
},
"maxAmountTooLow": {
"bucket": "max_amount_too_low",
"buyerAction": "Use max amount 10000 atomic USDC or stop.",
"apexScoutAction": "Do not lower route price or change payment requirements."
},
"wrongNetwork": {
"bucket": "wrong_network",
"buyerAction": "Use eip155:8453 Base mainnet or stop.",
"apexScoutAction": "Do not switch rails."
},
"paymentDeclined": {
"bucket": "payment_declined",
"buyerAction": "Stop unless the buyer explicitly approves another attempt.",
"apexScoutAction": "Do not retry payment for the buyer."
}
},
"telemetryInterpretation": {
"sourceTag": "agent-execution-awal-latest",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionAwalLatest",
"closePacketUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"closePacketIsFree": true,
"closePacketExecutesPayment": false,
"paymentAttemptedByClosePacket": false,
"paidRouteCalledByClosePacket": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"secretSigningMaterialRequested": false
}
},
"buyerProofExecutionCloseoutAvailable": true,
"buyerProofExecutionCloseout": {
"available": true,
"mode": "buyer-proof-execution-closeout",
"release": "v2.2.228-live-command-center",
"title": "Copied? Finish with one buyer-run proof retry",
"purpose": "Close the gap after a buyer agent marks its wallet ready or copies the command: run exactly one buyer-approved proof retry, classify the response, then stop.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"method": "GET",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"primarySourceTag": "agent-receipt-contract",
"primarySourceBucket": "agentReceiptContract",
"commandCopySourceTag": "agent-execution-command-copy",
"commandCopySourceBucket": "agentExecutionCommandCopy",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"firstScreenPlacement": {
"x402Proof": "after-wallet-close-before-receipt-command",
"chatTinyPaymentFlow": "after-wallet-close-before-receipt-command",
"closeoutVisibleBeforeCommandCopy": true,
"normalNoSpendPathRemainsPrimary": true
},
"closeoutRule": {
"ifWalletReadyAndCommandCopied": "Run the receipt-bound command exactly once from the buyer-controlled x402 wallet if the buyer approved the route, amount, and network.",
"ifCannotPayYet": "Do not retry payment. Use the wallet setup note and stop until wallet authentication, Base USDC balance, route, amount, and network match.",
"ifResponseIs402": "Treat the result as unpaid. It is a challenge, not a paid proof, and it should not move revenue.",
"ifResponseIs200": "Treat the result as paid proof only after the buyer-controlled x402 retry returns structured HTTP 200 JSON.",
"ifRetryIsRejected": "Read the sanitized edge failure status once, classify the rejection, and stop before another paid attempt.",
"stopAfter": "one buyer-approved paid retry unless a human operator explicitly approves another capped diagnostic"
},
"buyerAgentChecklist": [
"Wallet is authenticated by the buyer, not ApexScout.",
"Buyer approves GET /api/opportunity-check with source agent-receipt-contract.",
"Maximum spend is exactly 10000 atomic USDC.",
"Network is exactly eip155:8453 Base mainnet.",
"Run one retry, then classify HTTP 402, HTTP 200, or a sanitized edge failure."
],
"copyReadyCommands": {
"receiptBoundProofCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"commandCopyProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"edgeFailureReadCommand": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof."
},
"safeReadouts": {
"edgeHealthPath": "/__apexscout/cloudflare-x402/health",
"edgeLastFailurePath": "/__apexscout/cloudflare-x402/health/last-failure",
"edgeLastFailureUrl": "https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure",
"originLastFailurePath": "/api/cloudflare-x402-edge-failure/last",
"originLastFailureUrl": "https://apexscout.ai/api/cloudflare-x402-edge-failure/last",
"noPaymentAttemptedByRead": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"privateKeysRequested": false
},
"buttons": [
{
"label": "Copy receipt-bound proof command",
"copies": "receipt_bound_command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy edge failure readout",
"copies": "edge_failure_read_command",
"value": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"failureReadoutIsRevenue": false,
"copyIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"newCounterAdded": false,
"reason": "The closeout reuses existing aggregate wallet-close, source-bucket, and paid-completion counters so it improves decision clarity without creating fake movement."
},
"noSpendBoundary": {
"closeoutIsFree": true,
"closeoutExecutesPayment": false,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"failureReadoutExecutesPayment": false,
"failureReadoutCallsPaidRoute": false,
"paymentAttemptedByCloseout": false,
"paidRouteCalledByCloseout": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"productionPostCreated": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareMutationCreated": false,
"apifyActorRunCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"rawPaymentPayloadExposed": false
},
"safetyClaims": {
"guaranteedRevenueClaimed": false,
"officialEndorsementClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareMonetizationGatewayReadinessAvailable": true,
"cloudflareMonetizationGatewayReadiness": {
"available": true,
"mode": "cloudflare-monetization-gateway-readiness",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare live edge status",
"releaseReportingMode": "worker-and-origin-split",
"appRelease": "v2.2.228-live-command-center",
"originRelease": "v2.2.228-live-command-center",
"originReleasePath": "/status",
"workerRelease": "v2.2.228-live-command-center",
"workerSourceVersion": "2.2.228",
"workerHealthReleaseContract": {
"healthPath": "/__apexscout/cloudflare-x402/health",
"releaseFieldMeans": "workerRelease",
"workerReleaseField": "workerRelease",
"originReleaseField": "originRelease",
"originReleasePath": "/status",
"originReleaseReadIsNoSpend": true,
"mismatchIsActionableOnlyWhenWorkerHealthFails": true
},
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"articleUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving x402 payment enforcement toward edge-managed route rules. ApexScout now serves the one-cent proof path through a narrow Cloudflare Worker while keeping Railway as the origin fallback."
},
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"officialCloudflareMonetizationGatewayClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"waitlistOrEarlyAccessRequired": false,
"noDnsChangeMade": false,
"dnsChangedByLiveCutover": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"apexScoutRemainsSourceOfTruth": true,
"candidateRules": [
{
"id": "apexscout-one-cent-proof",
"purpose": "Edge-readable one-cent x402 proof route for wallet-capable buyer agents.",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"displayPrice": "$0.01",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
},
{
"id": "apexscout-agent-revenue-audit",
"purpose": "Higher-value builder monetization audit route.",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"amountAtomicUsdc": "5000000",
"priceUsd": "5.00",
"displayPrice": "$5.00",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
}
],
"migrationPlan": [
"Keep the Cloudflare Worker route narrow and use Railway as the origin fallback.",
"Use these candidate rules as the review checklist before any future official managed-gateway change.",
"Require unpaid HTTP 402 and buyer-controlled HTTP 200 proof for each route after any edge or gateway change.",
"Keep ApexScout aggregate metrics as the public conversion truth source.",
"Roll back to Railway-origin x402 if route, amount, network, or payment proof differs."
],
"operatorChecklist": {
"dnsChangeApproved": true,
"cloudflareApiTokenApproved": true,
"gatewayRuleCreationApproved": true,
"postDeployPaidProofRequiredBeforeClaimingGatewayLive": true,
"originFallbackRequired": true,
"compareGatewayRulesToCandidateRules": true
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"cloudflareApiCalled": false,
"dnsChanged": false,
"dnsAlreadyProxiedThroughCloudflare": true,
"workerAlreadyDeployed": true,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"revenueOutcomeClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
},
"telemetryInterpretation": {
"readinessUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"watchCounters": "If unpaid proof counters move without paid completions, treat it as proof-route interest, not gateway success."
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"retryDecision": {
"recommendedOnlyForX402CapableClients": true,
"payOnlyIf": "The buyer wants the cheapest live x402 proof and approves the route, $0.01 maximum amount, Base mainnet network, and one retry.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the network is not eip155:8453, or the output will not change the next action.",
"ifUnsure": "Stay on the no-spend proof and action-pack surfaces. Do not retry payment just to clear the counter."
},
"approvalChecklist": [
"Buyer approves GET /api/opportunity-check as the route.",
"Buyer approves the $0.01 maximum spend.",
"Buyer approves Base mainnet x402 on eip155:8453.",
"Buyer controls the wallet and chooses whether to retry.",
"Buyer expects HTTP 200 JSON only after the paid retry succeeds."
],
"copyPasteAgentNote": "Unpaid 402 is expected. If the buyer approves a one-cent proof, retry GET /api/opportunity-check with an x402-capable client, max amount 10000 atomic USDC on eip155:8453, and treat only HTTP 200 as completion.",
"paidRetryCommandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof\" \\\n --max-amount 10000 \\\n --json",
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"ifUnpaidRisesWithoutCompletion": "Treat this as proof-route interest without payment. Inspect retry clarity only after repeated windows; do not add another paid route.",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"confidencePacketIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByConfidencePacket": false,
"walletConnectionRequiredForConfidencePacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"http402ReadinessReceiptAvailable": true,
"http402ReadinessReceipt": {
"available": true,
"mode": "no-spend-http-402-readiness-receipt",
"title": "HTTP 402 Readiness Receipt",
"purpose": "Give x402-capable buyers a compact, unsigned receipt showing what the unpaid proof challenge proves before any buyer-controlled paid retry.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"receiptScope": "GET /api/opportunity-check, $0.01 maximum amount, eip155:8453 Base mainnet x402, one buyer-controlled retry.",
"receiptSummary": "Unpaid HTTP 402 proves the x402 proof route is reachable and returning payment requirements. It does not prove payment, revenue, endorsement, or buyer approval.",
"agentDecision": {
"payOnlyIf": "The buyer explicitly approves the route, max amount, network, and one retry from a wallet-controlled x402 client.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the route or network differs, or HTTP 402 is being treated as a paid completion.",
"nextNoSpendStep": "Stay on ApexScout proof, action-pack, Scope Check, or Builder surfaces until buyer-controlled payment is intentionally approved."
},
"readinessChecks": [
"Route scoped to GET /api/opportunity-check.",
"Amount scoped to $0.01 / 10000 atomic USDC.",
"Network scoped to Base mainnet eip155:8453.",
"HTTP 402 is expected before payment.",
"HTTP 200 is required before paid completion is counted.",
"No request body, cookies, session, or wallet connection is required to read this receipt.",
"No buyer-level data is exposed by this receipt.",
"No automatic payment or paid retry is performed by ApexScout."
],
"publicSafetyCopy": "This is an unsigned no-spend readiness receipt, not AP2 proof, not a signed mandate, not a legal or payment receipt, not an endorsement claim, and not trading, investment, tax, legal, lending, or compliance advice.",
"notClaims": {
"signedReceiptCreated": false,
"ap2ProofCreated": false,
"legalMandateCreated": false,
"paymentReceiptCreated": false,
"walletApprovalCreated": false,
"officialEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false
},
"noSpendBoundary": {
"receiptIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByReceipt": false,
"paidRouteCalledByReceipt": false,
"paidUpstreamCalls": false,
"walletConnectionRequiredForReceipt": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"receiptUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"copyPasteReceiptSummary": "HTTP 402 readiness receipt: GET /api/opportunity-check is reachable, costs max $0.01 on eip155:8453 only after buyer-controlled x402 retry, and counts as paid only when HTTP 200 returns."
},
"proofRetryDecisionStripAvailable": true,
"proofRetryDecisionStrip": {
"available": true,
"mode": "buyer-controlled-proof-retry-decision-strip",
"title": "Buyer-controlled proof retry gate",
"purpose": "Compress the next click after an unpaid 402 into a clear continue/stop decision for x402-capable buyers.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"decisionSummary": "Continue only if buyer approval, x402 wallet capability, exact route, exact amount, and Base mainnet network all match.",
"continueIf": [
"Buyer explicitly approves this exact $0.01 proof.",
"Client can attach x402 payment on Base mainnet eip155:8453.",
"Route is exactly GET /api/opportunity-check.",
"Max amount is exactly 10000 atomic USDC.",
"Buyer understands only HTTP 200 counts as a paid proof completion."
],
"stopIf": [
"Buyer has not approved spend.",
"Client is a normal browser without x402 payment support.",
"Route, amount, or network differs from the receipt.",
"The buyer is treating unpaid HTTP 402 as revenue or completion.",
"The output will not change the buyer's next action."
],
"primaryAction": {
"label": "Request unpaid proof challenge",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"normalBrowserResult": "HTTP 402 JSON with x402 payment requirements",
"x402CapableResult": "HTTP 200 JSON only after buyer-controlled paid retry",
"noPaymentOnClick": true,
"paidRetryRequiresBuyerWallet": true
},
"fallbackNoSpendActions": [
"/x402-proof",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/chat-tiny-payment-flow"
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"decisionStripUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"decisionStripIsFree": true,
"paymentAttemptedByDecisionStrip": false,
"paidRouteCalledByDecisionStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofCtaAvailable": true,
"agentExecutionProofCta": {
"available": true,
"mode": "promoted-buyer-executable-proof-cta",
"title": "Buyer-run proof packet",
"label": "Run with buyer-approved x402 wallet",
"copy": "Wallet-capable buyers can use the exact one-cent proof packet now. ApexScout only exposes the packet; the buyer wallet decides whether to pay.",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"method": "GET",
"route": "/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"conversionBet": "Promote the already-safe buyer-execution packet above passive proof copy so x402-capable clients have one obvious next action.",
"successMetric": "opportunityCheckGetProofCompletions",
"unpaidSourceBucket": "agentExecutionProofPacket",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerDecision": {
"continueOnlyIf": "The buyer approves the route, amount, network, and one retry from an x402-capable wallet runtime.",
"stopIf": "Approval is missing, the client cannot attach x402 payment, or the route/amount/network differs."
},
"noSpendBoundary": {
"ctaIsFreeToRead": true,
"normalBrowserGetsUnpaid402": true,
"paymentAttemptedByCta": false,
"paidRouteCalledByApexScout": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"walletReadinessStripAvailable": true,
"walletReadinessStrip": {
"available": true,
"mode": "buyer-wallet-readiness-strip",
"title": "Before you run the command",
"checklist": [
"Your x402 wallet/client is authenticated.",
"Your wallet has at least $0.01 USDC available on Base.",
"You approve the route: GET /api/opportunity-check.",
"You approve the max amount: 10000 atomic USDC.",
"You understand unpaid HTTP 402 is not revenue.",
"You understand paid proof means HTTP 200 after your own wallet retry."
],
"copy": "ApexScout does not run this command for you. Your buyer-controlled wallet decides whether to spend.",
"route": "/api/opportunity-check",
"method": "GET",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"network": "eip155:8453",
"noFundingAdvice": true,
"noTradingAdvice": true,
"noPrivateKeyAdvice": true,
"noOnrampAdvice": true,
"noSpendBoundary": {
"stripIsFree": true,
"paymentAttemptedByStrip": false,
"paidRouteCalledByStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"buyerAgentCommandCopyAvailable": true,
"buyerAgentCommandCopy": {
"available": true,
"mode": "buyer-agent-command-copy",
"title": "Choose your buyer-run x402 command",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"recommendedCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"pinnedCurrentCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"deprecatedLegacyCommand": "npx awal@2.8.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-2-8\" --max-amount 10000 --json",
"deprecatedLegacyCommandOfferedForPaidUse": false,
"buyerAgentCommandVariants": [
{
"id": "awal-latest",
"label": "Recommended current",
"packageVersion": "latest",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": true,
"pinned": false,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
},
{
"id": "awal-2-12",
"label": "Pinned current",
"packageVersion": "2.12.0",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": false,
"pinned": true,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
}
],
"buyerClientCompatibilityMatrix": [
{
"client": "AWAL CLI",
"status": "recommended-current",
"buyerSideOnly": true,
"goodFor": "Buyer agents using Coinbase Agentic Wallet CLI to make a capped one-cent x402 proof request.",
"commandVariants": [
"awal-latest",
"awal-2-12"
],
"docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/pay-for-service",
"paymentExecutedByApexScout": false
},
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"otherX402CapableBuyerClients": [
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"legacyCommandCopyRoute": "/api/opportunity-check?src=agent-execution-command-copy",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"requestBodyRequired": false,
"walletMustBeAuthenticated": true,
"walletNeedsSufficientUsdc": true,
"apexScoutRunsCommand": false,
"copyingIsPayment": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"sourceBucketCompatibility": {
"oldPacketSourceStillSupported": "agent-execution-proof-packet",
"previousCommandCopySourceStillSupported": "agent-execution-command-copy",
"recommendedCurrentSource": "agent-execution-awal-latest",
"pinnedCurrentSource": "agent-execution-awal-latest",
"previousPinnedSourceStillMeasured": "agent-execution-awal-2-10",
"deprecatedLegacySourceStillMeasured": "agent-execution-awal-2-8",
"unpaidSourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"topSourceTagsCounter": "opportunityCheckGetProofUnpaidTopSourceTags"
},
"prerequisiteCommands": {
"stopOldCompanion": "npx awal@2.12.0 quit --json",
"status": "npx awal@2.12.0 status --json",
"balance": "npx awal@2.12.0 balance --chain base --json",
"details": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json"
},
"buyerClientRuntimePreflight": {
"requiredBeforePaidRetry": true,
"pinnedCliVersion": "2.12.0",
"pinnedCompanionVersion": "2.12.0",
"stopOldCompanionCommand": "npx awal@2.12.0 quit --json",
"restartCurrentCompanionCommand": "npx awal@2.12.0 status --json",
"confirmBaseBalanceCommand": "npx awal@2.12.0 balance --chain base --json",
"parseUnpaidContractCommand": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json",
"versionAlignedCompanionRequired": true,
"discoveryParseAloneIsPaidProof": false,
"paymentAttemptedByPreflight": false,
"paidRouteCalledByPreflight": false,
"automaticRetry": false,
"allowedPaidRetryCountAfterBuyerApproval": 1
},
"microcopy": "Refresh the buyer wallet companion to AWAL 2.12.0, confirm authentication and Base USDC, then parse the unpaid contract before one buyer-approved retry. This can spend up to 10000 atomic USDC only if your wallet approves. ApexScout does not run the command; copying is not payment; unpaid HTTP 402 is not revenue; paid proof means HTTP 200 after a buyer-controlled x402 retry.",
"prerequisites": [
"Stop an older AWAL companion, then start the pinned 2.12.0 companion.",
"Confirm the buyer wallet is authenticated and has enough USDC on Base.",
"Parse the unpaid 402 contract before any buyer-approved retry.",
"Approve only GET /api/opportunity-check with max amount 10000 atomic USDC.",
"Stop if the route, amount, network, or buyer approval differs."
],
"approvalCopy": "This command can spend up to 10000 atomic USDC only if your buyer wallet approves.",
"copyingIsNotPaymentCopy": "Copying this command is not payment.",
"apexScoutRunsCommandCopy": "ApexScout does not run this command.",
"unpaidChallengeCopy": "Unpaid HTTP 402 is expected before payment.",
"paidCompletionCopy": "Paid proof completes only when your buyer-controlled x402 retry returns HTTP 200.",
"placement": {
"x402Proof": "above-proof-detail-sections",
"chatTinyPaymentFlow": "above-chat-flow-detail-sections",
"primaryForWalletCapableAgents": true,
"normalNoSpendPathRemainsPrimary": true
},
"buttons": [
{
"label": "Copy AWAL latest command",
"copies": "command",
"value": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy AWAL 2.12 command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy route only",
"copies": "route",
"value": "/api/opportunity-check?src=agent-execution-awal-latest",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetry": {
"commandCopyTelemetryAdded": false,
"skippedReason": "The release keeps the buttons copy-only and avoids adding a client-side analytics call; the AWAL version source tags are still available when a buyer-run agent command reaches the unpaid 402 route.",
"copyIsRevenue": false,
"copyIsPayment": false,
"unpaidChallengeSourceBucket": "agentExecutionAwalLatest"
},
"noSpendBoundary": {
"copyPanelIsFree": true,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"paidRouteCalledByCopyPanel": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"buyerAgentCommandVariantsAvailable": true,
"buyerAgentCommandVariants": [
{
"id": "awal-latest",
"label": "Recommended current",
"packageVersion": "latest",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": true,
"pinned": false,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
},
{
"id": "awal-2-12",
"label": "Pinned current",
"packageVersion": "2.12.0",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": false,
"pinned": true,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
}
],
"buyerClientCompatibilityMatrixAvailable": true,
"buyerClientCompatibilityMatrix": [
{
"client": "AWAL CLI",
"status": "recommended-current",
"buyerSideOnly": true,
"goodFor": "Buyer agents using Coinbase Agentic Wallet CLI to make a capped one-cent x402 proof request.",
"commandVariants": [
"awal-latest",
"awal-2-12"
],
"docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/pay-for-service",
"paymentExecutedByApexScout": false
},
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"walletMustBeAuthenticated": true,
"walletNeedsSufficientUsdc": true,
"apexScoutRunsCommand": false,
"copyingIsPayment": false,
"paymentExecutedByApexScout": false,
"agentReceiptCloseStripAvailable": true,
"agentReceiptCloseStrip": {
"available": true,
"mode": "agent-receipt-close-strip",
"release": "v2.2.228-live-command-center",
"title": "Receipt rule accepted? Copy the proof command",
"purpose": "Put the Agent Receipt Contract directly beside the buyer-agent payment command so x402-capable clients know the exact proof standard before retrying.",
"sourceTag": "agent-receipt-contract",
"sourceBucket": "agentReceiptContract",
"method": "GET",
"route": "/api/opportunity-check",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"firstScreenPlacement": {
"x402Proof": "before-wallet-command-copy",
"chatTinyPaymentFlow": "before-wallet-command-copy",
"makeReceiptRuleVisibleBeforePaymentCommand": true,
"normalNoSpendPathRemainsPrimary": true
},
"receiptRule": {
"payOnlyIf": "Your buyer agent accepts that only HTTP 200 after a buyer-controlled x402 retry counts as paid proof.",
"rejectIf": "The client treats HTTP 402, copied text, monitor reads, route mismatch, amount mismatch, network mismatch, or repeated retry loops as proof.",
"unpaid402IsNotRevenue": true,
"paidProofRequiresHttp200": true,
"buyerControlsWalletAndRetry": true,
"stopAfterOneSuccessfulPaidResponse": true
},
"visibleBuyerCopy": [
"Accept the receipt rule before copying the command.",
"HTTP 402 is only the unpaid challenge.",
"HTTP 200 after your buyer-controlled retry is the paid proof.",
"ApexScout does not run this command and does not control the wallet."
],
"buttons": [
{
"label": "Copy receipt-bound command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy receipt route",
"copies": "route",
"value": "/api/opportunity-check?src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentReceiptContract",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"successSignal": "agentReceiptContract source bucket moves only when a buyer/client requests the paid proof route with the receipt-contract source tag."
},
"noSpendBoundary": {
"closeStripIsFree": true,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"paymentAttemptedByCloseStrip": false,
"paidRouteCalledByCloseStrip": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"buyerWalletCloseAvailable": true,
"buyerWalletClose": {
"available": true,
"mode": "buyer-wallet-close",
"release": "v2.2.228-live-command-center",
"title": "Can your wallet pay now?",
"purpose": "Separate wallet-ready buyers from buyers who still need setup before the one-cent proof retry.",
"route": "/api/buyer-wallet-close-intent",
"method": "GET",
"routeIsFree": true,
"sourceTags": {
"walletReady": "agent-receipt-contract",
"cannotPayYet": "agent-wallet-skill-pack",
"copyPaidProofCommand": "agent-execution-command-copy",
"copyReceiptBoundCommand": "agent-receipt-contract",
"copyWalletSetupCommand": "agent-wallet-skill-pack"
},
"actions": {
"walletReady": {
"action": "wallet_ready",
"path": "/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"method": "GET",
"sourceTag": "agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
"cannotPayYet": {
"action": "cannot_pay_yet",
"path": "/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"method": "GET",
"sourceTag": "agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
},
"copyPaidProofCommand": {
"action": "copy_paid_proof_command",
"path": "/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"method": "GET",
"sourceTag": "agent-execution-command-copy",
"executesPayment": false,
"opensPaidRoute": false
},
"copyReceiptBoundCommand": {
"action": "copy_receipt_bound_command",
"path": "/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"method": "GET",
"sourceTag": "agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
"copyWalletSetupCommand": {
"action": "copy_wallet_setup_command",
"path": "/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"method": "GET",
"sourceTag": "agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
}
},
"visibleBuyerCopy": [
"Choose the wallet state before copying a command.",
"This signal is a free GET request and does not open the paid route.",
"If the wallet is ready, copy the command and run it only from the buyer-controlled wallet.",
"If the wallet is not ready, stop before payment and fix wallet authentication, balance, route, amount, or network."
],
"paidProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"receiptBoundCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"buttons": [
{
"label": "I can pay now",
"action": "wallet_ready",
"copies": null,
"value": null,
"intentPath": "/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "I can't pay yet",
"action": "cannot_pay_yet",
"copies": null,
"value": null,
"intentPath": "/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy paid proof command",
"action": "copy_paid_proof_command",
"copies": "command",
"value": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy receipt-bound command",
"action": "copy_receipt_bound_command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"action": "copy_wallet_setup_command",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"mode": "aggregate-only-buyer-wallet-close-intent",
"counter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"cannotPayYetCounter": "buyerWalletCloseSignals.cannotPayYet",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"copyWalletSetupCommandCounter": "buyerWalletCloseSignals.copyWalletSetupCommand",
"intentIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"firstScreenPlacement": {
"x402Proof": "before-receipt-and-command-copy",
"chatTinyPaymentFlow": "before-receipt-and-command-copy",
"walletStateVisibleBeforePaymentCommand": true,
"normalNoSpendPathRemainsPrimary": true
},
"noSpendBoundary": {
"panelIsFree": true,
"intentRouteIsFree": true,
"intentRouteMethod": "GET",
"copyingExecutesPayment": false,
"clickingStateExecutesPayment": false,
"clickingStateOpensPaidRoute": false,
"paidRouteCalledByPanel": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"http402ClosePacketAvailable": true,
"http402ClosePacket": {
"available": true,
"mode": "buyer-agent-402-close-packet",
"release": "v2.2.228-live-command-center",
"title": "402 close packet",
"purpose": "Put the buyer-agent close instructions inside the unpaid HTTP 402 response so x402-capable clients can finish the proof without hunting through a page.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"closeMessage": "You reached the ApexScout paid proof gate. To complete the proof, retry this exact GET route from an authenticated x402 wallet/client with max amount 10000 atomic USDC on Base mainnet.",
"buyerAgentInstruction": "If the buyer approved this one-cent proof, run the command exactly once and treat only HTTP 200 as the paid completion. If any route, amount, network, or approval detail differs, stop.",
"whatHttp200Proves": [
"The buyer-controlled x402 retry reached ApexScout's one-cent proof route.",
"The paid route returned structured JSON after payment verification.",
"The aggregate paid proof completion counter is allowed to move only after HTTP 200."
],
"notProofOf": [
"Coinbase, AWS, Stripe, Bazaar, AgentCore, Base, marketplace, or protocol endorsement.",
"Guaranteed revenue, trading results, investment outcome, legal advice, tax advice, lending advice, or compliance approval.",
"Buyer identity, wallet-level activity, secret signing material, or broader permission to spend."
],
"continueIf": [
"The buyer explicitly approved this one-cent proof.",
"The client can attach an x402 payment authorization.",
"The retry route is exactly GET /api/opportunity-check?src=agent-execution-awal-latest.",
"The max amount is exactly 10000 atomic USDC.",
"The network is exactly eip155:8453."
],
"stopIf": [
"The wallet is not authenticated.",
"The wallet has insufficient USDC on Base.",
"The client cannot attach x402 payment.",
"The max amount is lower than 10000 atomic USDC.",
"The network is not eip155:8453.",
"The buyer did not approve this exact spend.",
"The agent plans to retry more than once just to clear a metric."
],
"failureBranches": {
"walletNotAuthenticated": {
"bucket": "wallet_not_authenticated",
"buyerAction": "Authenticate the buyer-controlled x402 wallet/client before retrying.",
"apexScoutAction": "Do nothing automatically."
},
"insufficientBaseUsdc": {
"bucket": "insufficient_base_usdc",
"buyerAction": "Stop until the buyer-controlled wallet has enough Base USDC for the one-cent proof.",
"apexScoutAction": "Do not fund, trade, onramp, or advise funding."
},
"maxAmountTooLow": {
"bucket": "max_amount_too_low",
"buyerAction": "Use max amount 10000 atomic USDC or stop.",
"apexScoutAction": "Do not lower route price or change payment requirements."
},
"wrongNetwork": {
"bucket": "wrong_network",
"buyerAction": "Use eip155:8453 Base mainnet or stop.",
"apexScoutAction": "Do not switch rails."
},
"paymentDeclined": {
"bucket": "payment_declined",
"buyerAction": "Stop unless the buyer explicitly approves another attempt.",
"apexScoutAction": "Do not retry payment for the buyer."
}
},
"telemetryInterpretation": {
"sourceTag": "agent-execution-awal-latest",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionAwalLatest",
"closePacketUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"closePacketIsFree": true,
"closePacketExecutesPayment": false,
"paymentAttemptedByClosePacket": false,
"paidRouteCalledByClosePacket": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"secretSigningMaterialRequested": false
}
},
"buyerProofExecutionCloseoutAvailable": true,
"buyerProofExecutionCloseout": {
"available": true,
"mode": "buyer-proof-execution-closeout",
"release": "v2.2.228-live-command-center",
"title": "Copied? Finish with one buyer-run proof retry",
"purpose": "Close the gap after a buyer agent marks its wallet ready or copies the command: run exactly one buyer-approved proof retry, classify the response, then stop.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"method": "GET",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"primarySourceTag": "agent-receipt-contract",
"primarySourceBucket": "agentReceiptContract",
"commandCopySourceTag": "agent-execution-command-copy",
"commandCopySourceBucket": "agentExecutionCommandCopy",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"firstScreenPlacement": {
"x402Proof": "after-wallet-close-before-receipt-command",
"chatTinyPaymentFlow": "after-wallet-close-before-receipt-command",
"closeoutVisibleBeforeCommandCopy": true,
"normalNoSpendPathRemainsPrimary": true
},
"closeoutRule": {
"ifWalletReadyAndCommandCopied": "Run the receipt-bound command exactly once from the buyer-controlled x402 wallet if the buyer approved the route, amount, and network.",
"ifCannotPayYet": "Do not retry payment. Use the wallet setup note and stop until wallet authentication, Base USDC balance, route, amount, and network match.",
"ifResponseIs402": "Treat the result as unpaid. It is a challenge, not a paid proof, and it should not move revenue.",
"ifResponseIs200": "Treat the result as paid proof only after the buyer-controlled x402 retry returns structured HTTP 200 JSON.",
"ifRetryIsRejected": "Read the sanitized edge failure status once, classify the rejection, and stop before another paid attempt.",
"stopAfter": "one buyer-approved paid retry unless a human operator explicitly approves another capped diagnostic"
},
"buyerAgentChecklist": [
"Wallet is authenticated by the buyer, not ApexScout.",
"Buyer approves GET /api/opportunity-check with source agent-receipt-contract.",
"Maximum spend is exactly 10000 atomic USDC.",
"Network is exactly eip155:8453 Base mainnet.",
"Run one retry, then classify HTTP 402, HTTP 200, or a sanitized edge failure."
],
"copyReadyCommands": {
"receiptBoundProofCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"commandCopyProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"edgeFailureReadCommand": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof."
},
"safeReadouts": {
"edgeHealthPath": "/__apexscout/cloudflare-x402/health",
"edgeLastFailurePath": "/__apexscout/cloudflare-x402/health/last-failure",
"edgeLastFailureUrl": "https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure",
"originLastFailurePath": "/api/cloudflare-x402-edge-failure/last",
"originLastFailureUrl": "https://apexscout.ai/api/cloudflare-x402-edge-failure/last",
"noPaymentAttemptedByRead": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"privateKeysRequested": false
},
"buttons": [
{
"label": "Copy receipt-bound proof command",
"copies": "receipt_bound_command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy edge failure readout",
"copies": "edge_failure_read_command",
"value": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"failureReadoutIsRevenue": false,
"copyIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"newCounterAdded": false,
"reason": "The closeout reuses existing aggregate wallet-close, source-bucket, and paid-completion counters so it improves decision clarity without creating fake movement."
},
"noSpendBoundary": {
"closeoutIsFree": true,
"closeoutExecutesPayment": false,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"failureReadoutExecutesPayment": false,
"failureReadoutCallsPaidRoute": false,
"paymentAttemptedByCloseout": false,
"paidRouteCalledByCloseout": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"productionPostCreated": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareMutationCreated": false,
"apifyActorRunCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"rawPaymentPayloadExposed": false
},
"safetyClaims": {
"guaranteedRevenueClaimed": false,
"officialEndorsementClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareMonetizationGatewayReadinessAvailable": true,
"cloudflareMonetizationGatewayReadiness": {
"available": true,
"mode": "cloudflare-monetization-gateway-readiness",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare live edge status",
"releaseReportingMode": "worker-and-origin-split",
"appRelease": "v2.2.228-live-command-center",
"originRelease": "v2.2.228-live-command-center",
"originReleasePath": "/status",
"workerRelease": "v2.2.228-live-command-center",
"workerSourceVersion": "2.2.228",
"workerHealthReleaseContract": {
"healthPath": "/__apexscout/cloudflare-x402/health",
"releaseFieldMeans": "workerRelease",
"workerReleaseField": "workerRelease",
"originReleaseField": "originRelease",
"originReleasePath": "/status",
"originReleaseReadIsNoSpend": true,
"mismatchIsActionableOnlyWhenWorkerHealthFails": true
},
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"articleUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving x402 payment enforcement toward edge-managed route rules. ApexScout now serves the one-cent proof path through a narrow Cloudflare Worker while keeping Railway as the origin fallback."
},
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"officialCloudflareMonetizationGatewayClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"waitlistOrEarlyAccessRequired": false,
"noDnsChangeMade": false,
"dnsChangedByLiveCutover": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"apexScoutRemainsSourceOfTruth": true,
"candidateRules": [
{
"id": "apexscout-one-cent-proof",
"purpose": "Edge-readable one-cent x402 proof route for wallet-capable buyer agents.",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"displayPrice": "$0.01",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
},
{
"id": "apexscout-agent-revenue-audit",
"purpose": "Higher-value builder monetization audit route.",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"amountAtomicUsdc": "5000000",
"priceUsd": "5.00",
"displayPrice": "$5.00",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
}
],
"migrationPlan": [
"Keep the Cloudflare Worker route narrow and use Railway as the origin fallback.",
"Use these candidate rules as the review checklist before any future official managed-gateway change.",
"Require unpaid HTTP 402 and buyer-controlled HTTP 200 proof for each route after any edge or gateway change.",
"Keep ApexScout aggregate metrics as the public conversion truth source.",
"Roll back to Railway-origin x402 if route, amount, network, or payment proof differs."
],
"operatorChecklist": {
"dnsChangeApproved": true,
"cloudflareApiTokenApproved": true,
"gatewayRuleCreationApproved": true,
"postDeployPaidProofRequiredBeforeClaimingGatewayLive": true,
"originFallbackRequired": true,
"compareGatewayRulesToCandidateRules": true
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"cloudflareApiCalled": false,
"dnsChanged": false,
"dnsAlreadyProxiedThroughCloudflare": true,
"workerAlreadyDeployed": true,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"revenueOutcomeClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
},
"telemetryInterpretation": {
"readinessUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"watchCounters": "If unpaid proof counters move without paid completions, treat it as proof-route interest, not gateway success."
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"agentMonetizationPolicyMatrixAvailable": true,
"agentMonetizationPolicyMatrix": {
"available": true,
"mode": "agent-monetization-policy-matrix",
"release": "v2.2.228-live-command-center",
"title": "Agent monetization policy matrix",
"purpose": "Give crawlers, buyer agents, edge gateways, and MCP clients one clear allow/charge/block map before they touch a paid route.",
"sourceSignals": [
{
"name": "Cloudflare Pay Per Crawl",
"sourceUrl": "https://blog.cloudflare.com/introducing-pay-per-crawl/",
"interpretedAs": "Agents and crawlers need a simple policy choice: free access, charged access, or blocked access."
},
{
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Paid APIs, datasets, pages, and MCP tools can be described as route-level payment rules before any buyer-controlled retry."
}
],
"policyUrl": "https://apexscout.ai/.well-known/apexscout-monetization-policy.json",
"apiPath": "/api/agent-monetization-policy",
"wellKnownPath": "/.well-known/apexscout-monetization-policy.json",
"paidMcpToolsManifest": "https://apexscout.ai/.well-known/apexscout-paid-tools.json",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareDnsProxied": true,
"officialCloudflareEndorsementClaimed": false,
"officialCloudflareMonetizationGatewayClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"cloudflarePayPerCrawlIntegrated": false,
"noCrawlerBillingCreated": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"routePolicyCount": 8,
"defaultPolicy": {
"action": "allow_free_public_metadata",
"appliesTo": "Public ApexScout-owned docs, manifests, readiness pages, and health surfaces.",
"paidRetryRequired": false,
"buyerLevelDataExposed": false
},
"routePolicies": [
{
"id": "public-docs-and-start-pages",
"action": "allow_free",
"routes": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/agent-capabilities.json",
"/.well-known/agent.json",
"/api/public-agent"
],
"reason": "Agents need no-spend discovery and route selection before deciding whether to pay.",
"crawlerPolicy": "allow_public_metadata_only",
"paidRetryRequired": false
},
{
"id": "machine-readable-policy-and-tools",
"action": "allow_free",
"routes": [
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json"
],
"reason": "Payment-aware clients should inspect prices, routes, caps, and guardrails without spending.",
"crawlerPolicy": "allow_agent_metadata",
"paidRetryRequired": false
},
{
"id": "proof-pages-and-payment-education",
"action": "allow_free",
"routes": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow"
],
"reason": "These surfaces explain the one-cent proof and wallet-controlled retry; reading them is not payment.",
"crawlerPolicy": "allow_public_payment_instructions",
"paidRetryRequired": false
},
{
"id": "one-cent-proof",
"action": "charge_x402",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-command-copy",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"crawlerPolicy": "charge_only_when_agent_chooses_paid_resource"
},
{
"id": "agent-revenue-audit",
"action": "charge_x402",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"crawlerPolicy": "charge_paid_builder_audit_only_after_buyer_approval"
},
{
"id": "builder-and-scope-preflight",
"action": "allow_free_preflight",
"routes": [
"/agent-revenue-audit-builder",
"/api/agent-revenue-audit-builder",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/api/buyer-payment-scope-check",
"/buyer-agent-payment-safety",
"/api/buyer-agent-payment-safety"
],
"reason": "Preflight and safety checks reduce accidental spend and do not execute payment.",
"crawlerPolicy": "allow_no_spend_prep_surfaces",
"paidRetryRequired": false
},
{
"id": "admin-and-private-surfaces",
"action": "block_public_access",
"routes": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"crawlerPolicy": "block",
"paidRetryAvailable": false
},
{
"id": "third-party-outreach-and-catalog-crawl",
"action": "not_performed_by_apexscout",
"routes": [],
"reason": "ApexScout does not scrape catalogs, contact third parties, create fake traffic, post, DM, email, or crawl competitors.",
"crawlerPolicy": "blocked_by_operating_boundary",
"paidRetryAvailable": false
}
],
"crawlerAndAgentRules": {
"allow": [
"Read public docs, manifests, policy files, OpenAPI, MCP metadata, proof pages, and no-spend preflight surfaces.",
"Use unpaid HTTP 402 as a route-health/payment-requirements signal, not as revenue."
],
"charge": [
"Charge only the existing one-cent proof route or the existing $5 Agent Revenue Audit route.",
"Require buyer-controlled x402 retry before any paid completion is counted."
],
"block": [
"Block admin/private surfaces from public policy.",
"Do not provide a paid bypass for scraping, third-party discovery, fake traffic, outreach, or buyer-level data."
]
},
"edgeGatewayCandidate": {
"readyToReview": true,
"cloudflareRuleCreated": false,
"firstRuleToMirror": "one-cent-proof",
"secondRuleToMirror": "agent-revenue-audit",
"rollbackRequirement": "Railway-origin x402 remains the fallback until each edge rule proves unpaid 402 and paid 200."
},
"noSpendBoundary": {
"policyIsFree": true,
"paymentAttemptedByPolicy": false,
"paidRouteCalledByPolicy": false,
"cloudflareApiCalled": false,
"crawlerBillingCreated": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"paidMcpToolManifestAvailable": true,
"paidMcpToolManifest": {
"available": true,
"mode": "paid-mcp-tool-manifest",
"release": "v2.2.228-live-command-center",
"title": "ApexScout paid MCP tool manifest",
"purpose": "Make ApexScout's payable resources obvious to MCP-style clients without opening a paid route or simulating payment.",
"apiPath": "/api/paid-mcp-tools",
"wellKnownPath": "/.well-known/apexscout-paid-tools.json",
"policyPath": "/.well-known/apexscout-monetization-policy.json",
"policyUrl": "https://apexscout.ai/.well-known/apexscout-monetization-policy.json",
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"mcpToolPackPath": "/api/mcp-tool-pack",
"mcpManifestPath": "/.well-known/mcp.json",
"openApiPath": "/api/agentcore-openapi.json",
"toolCount": 3,
"paidToolCount": 3,
"freeToolCount": 0,
"tools": [
{
"name": "apexscout_link_native_tiny_paid_proof",
"displayName": "One-cent x402 proof",
"method": "GET",
"path": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-command-copy",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUnits": "10000",
"network": "eip155:8453",
"requestBodyRequired": false,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-command-copy",
"sourceBucket": "agentExecutionCommandCopy",
"buyerControlledRetryOnly": true,
"recommendedFor": "Fastest proof that the buyer agent can complete an x402 payment path."
},
{
"name": "apexscout_opportunity_check",
"displayName": "Opportunity Check",
"method": "POST",
"path": "/api/opportunity-check",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUnits": "10000",
"network": "eip155:8453",
"requestBodyRequired": true,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"inputSchemaSummary": {
"subject": "string",
"goal": "string",
"buyerType": "optional string",
"source": "optional string"
},
"recommendedFor": "Cheapest normal paid trust screen after a buyer chooses a subject and goal."
},
{
"name": "apexscout_agent_revenue_audit",
"displayName": "Agent Revenue Audit",
"method": "POST",
"path": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"price": "$5.00",
"priceUsd": "5.00",
"maxAmountAtomicUnits": "5000000",
"network": "eip155:8453",
"requestBodyRequired": true,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"preflightPath": "/api/agent-revenue-audit-builder/prepare",
"previewPath": "/api/agent-revenue-audit-preview",
"inputSchemaSummary": {
"serviceName": "string",
"currentOffer": "string",
"targetBuyer": "string",
"currentProblem": "string",
"currentPaymentRail": "optional string",
"riskTolerance": "optional string",
"source": "optional string"
},
"recommendedFor": "Paid conversion audit for x402, MCP, and agent API builders."
}
],
"recommendedNoSpendBeforePayment": [
"/docs.json",
"/api/agent-monetization-policy",
"/api/mcp-tool-pack",
"/api/agentcore-openapi.json",
"/api/cloudflare-billing-rules",
"/api/cloudflare-x402-worker-config",
"/api/x402-proof",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-preview",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check"
],
"compatibility": {
"mcpClientsCanDiscoverPaidTools": true,
"x402RequiredForPaidCompletion": true,
"http402ChallengeExpectedBeforePayment": true,
"paymentCredentialIsBuyerControlled": true,
"sellerManagedBuyerWallet": false,
"apiKeysRequiredBeforePayment": false,
"cloudflareGatewayRuleAlreadyCreated": false,
"originStillEnforcesX402": true
},
"noSpendBoundary": {
"manifestIsFree": true,
"paymentAttemptedByManifest": false,
"paidRouteCalledByManifest": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"notClaims": {
"cloudflareEndorsementClaimed": false,
"mcpMarketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"paymentExecutedByReadingManifest": false,
"buyerWalletControlledByApexScout": false
}
},
"sourcePreservingHandoffAvailable": true,
"sourcePreservingHandoff": {
"sourcePreservingHandoffAvailable": true,
"mode": "aggregate-only-source-preserving-handoff",
"purpose": "Preserve owner-approved launch source tags from public entry pages into no-spend proof, Builder, Scope, and paid-intent handoff links.",
"activeSourceTag": null,
"exampleSourceTag": "x-daily-post",
"sourceQueryParam": "src",
"supportedSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"destinationLinks": {
"x402Proof": "/x402-proof?src=x-daily-post",
"x402ProofApi": "/api/x402-proof?src=x-daily-post",
"chatTinyPaymentFlow": "/chat-tiny-payment-flow?src=x-daily-post",
"chatTinyPaymentFlowApi": "/api/chat-tiny-payment-flow?src=x-daily-post",
"tinyPaidProof": "/api/opportunity-check?src=x-daily-post",
"auditBuilderActionPack": "/api/agent-revenue-audit-builder/action-pack?src=x-daily-post",
"auditBuilder": "/agent-revenue-audit-builder?src=x-daily-post",
"scopeCheck": "/buyer-payment-scope-check?src=x-daily-post",
"agentCommerceScenarios": "/agent-commerce-scenarios?src=x-daily-post",
"paymentIntent": "/payment-intent?route=agent-revenue-audit&src=x-daily-post"
},
"destinationUrls": {
"x402Proof": "https://apexscout.ai/x402-proof?src=x-daily-post",
"x402ProofApi": "https://apexscout.ai/api/x402-proof?src=x-daily-post",
"chatTinyPaymentFlow": "https://apexscout.ai/chat-tiny-payment-flow?src=x-daily-post",
"chatTinyPaymentFlowApi": "https://apexscout.ai/api/chat-tiny-payment-flow?src=x-daily-post",
"tinyPaidProof": "https://apexscout.ai/api/opportunity-check?src=x-daily-post",
"auditBuilderActionPack": "https://apexscout.ai/api/agent-revenue-audit-builder/action-pack?src=x-daily-post",
"auditBuilder": "https://apexscout.ai/agent-revenue-audit-builder?src=x-daily-post",
"scopeCheck": "https://apexscout.ai/buyer-payment-scope-check?src=x-daily-post",
"agentCommerceScenarios": "https://apexscout.ai/agent-commerce-scenarios?src=x-daily-post",
"paymentIntent": "https://apexscout.ai/payment-intent?route=agent-revenue-audit&src=x-daily-post"
},
"sourcePreservedOnPageLinks": true,
"sourcePreservedOnCopyCommand": true,
"preservesOnlySafeSourceTags": true,
"unsupportedSourceTagsDropped": true,
"sourcePreservationCreatesTraffic": false,
"sourcePreservationCreatesActionIntent": false,
"sourcePreservationCreatesPrepareRequest": false,
"sourcePreservationCreatesScopeCheck": false,
"sourcePreservationCallsPaidRoute": false,
"sourcePreservationExecutesPayment": false,
"noSpendBoundary": {
"handoffIsFree": true,
"linkRewriteOnly": true,
"paidRouteCalledByHandoff": false,
"productionPostCreated": false,
"actionIntentCreatedByHandoff": false,
"prepareRequestCreatedByHandoff": false,
"scopeCheckCreatedByHandoff": false,
"fakeTrafficCreated": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareRuleChanged": false,
"dnsChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesRequired": false,
"cookiesAddedForHandoff": false,
"sessionTrackingRequired": false,
"sessionTrackingAddedForHandoff": false,
"fingerprintingAdded": false
},
"note": "A safe owner source tag can travel on same-site links and copied proof commands so aggregate proof/source buckets can connect the front door to the next buyer-controlled step. The handoff does not open links or execute payment."
},
"sourcePreservedHref": "/api/opportunity-check?src=x-daily-post",
"sourcePreservedHrefUrl": "https://apexscout.ai/api/opportunity-check?src=x-daily-post",
"sourceAttributionAvailable": true,
"postSettlementConversionAvailable": true,
"postSettlementConversion": {
"available": true,
"mode": "receipt-bound-free-continuation",
"title": "Continue with the included free diagnosis",
"purpose": "Successful paid proof includes one free receipt-bound compatibility diagnosis. It starts only through an explicit action, never navigates or pays automatically, may return no paid recommendation, and requires separate buyer approval for any later paid recommendation.",
"prepaymentPromise": {
"statement": "Successful paid proof includes one free receipt-bound compatibility diagnosis.",
"includedFreeDiagnoses": 1,
"explicitActionRequired": true,
"automaticNavigation": false,
"automaticPayment": false,
"laterPaidRecommendationRequiresSeparateApproval": true,
"noUsefulFindingMayReturnNoPaidRecommendation": true
},
"nextNoSpendRequest": {
"toolName": "apexscout_continue_paid_proof",
"operationId": "apexscoutContinuePaidProof",
"method": "POST",
"endpoint": "/api/paid-proof/continue",
"url": "https://apexscout.ai/api/paid-proof/continue",
"contentType": "application/json",
"openApiUrl": "https://apexscout.ai/api/agentcore-openapi.json",
"mcpManifestUrl": "https://apexscout.ai/.well-known/mcp.json",
"requiredFields": [
"ticket",
"role"
],
"inputSchema": {
"type": "object",
"required": [
"ticket",
"role"
],
"properties": {
"ticket": {
"type": "string",
"description": "Receipt-bound ticket from a paid Opportunity Check HTTP 200."
},
"role": {
"type": "string",
"enum": [
"merchant",
"buyer-client",
"proof-only"
]
},
"resourceUrl": {
"type": "string",
"format": "uri",
"description": "Public HTTPS URL for merchant role only."
},
"client": {
"type": "string",
"enum": [
"awal-latest",
"awal-2.10",
"cloudflare-agents-x402",
"crosshatch-effect-0.0.5",
"generic-x402-fetch",
"metamask-x402",
"agentcash-router-1.18.0",
"awal-2.10.0",
"awal-2.12.0",
"awal-2.8.0",
"generic-x402-v2",
"x402-fetch-2.18.0"
]
},
"clientVersion": {
"type": "string",
"maxLength": 32,
"pattern": "^[a-zA-Z0-9][a-zA-Z0-9._-]{0,31}$"
},
"failureCode": {
"type": "string",
"enum": [
"agentcash-router-compatibility",
"agentcash_router_noncanonical_x_payment_info",
"atomic-amount-type-mismatch",
"buyer-approval-missing",
"buyer-wallet-equals-seller",
"cors-payment-header-contract",
"duplicate-payment-required-headers",
"edge-diagnostic-not-durable",
"facilitator-verify-rejected",
"invalid-payment-required-response",
"paid-post-fields-missing",
"payment-receipt-counter-overwrite",
"rcl-001",
"rcl-002",
"rcl-003",
"rcl-004",
"rcl-005",
"rcl-006",
"rcl-007",
"rcl-008",
"rcl-009",
"rcl-010",
"rcl-011",
"wallet-cap-too-low"
]
},
"failureFamily": {
"type": "string",
"enum": [
"approval_state_missing_or_inferred",
"atomic_amount_type_mismatch",
"buyer_wallet_equals_seller_wallet",
"cors_payment_header_contract",
"duplicate_or_alternate_payment_headers",
"header_body_version_mismatch",
"isolate_local_state_not_durable",
"non_atomic_shared_counter_overwrite",
"noncanonical_mpp_discovery_shape",
"required_body_fields_missing",
"signed_payload_mutation_or_schema_drift",
"wallet_cap_too_low"
]
},
"merchantProfile": {
"type": "string",
"enum": [
"generic-x402-v2",
"agentcash-router-1.18",
"agentcash-router-1.19"
]
},
"channel": {
"type": "string",
"enum": [
"http",
"mcp",
"a2a",
"cli"
],
"description": "Optional aggregate transport attribution. It never identifies a buyer."
}
},
"additionalProperties": false
},
"sampleBody": {
"ticket": "<receipt-bound-ticket-from-paid-response>",
"role": "proof-only"
}
},
"nextPaidRoute": null,
"finalStatuses": [
"completed_no_recommendation",
"completed_paid_recommendation_requires_separate_approval",
"input_required",
"declined",
"canceled",
"expired"
],
"noSpendBoundary": {
"explicitActionRequired": true,
"automaticNavigation": false,
"continuationRequestExecutesPayment": false,
"paidRouteCalledByContract": false,
"automaticSpending": false,
"laterPaidRecommendationRequiresSeparateApproval": true
},
"privacy": {
"aggregateTelemetryOnly": true,
"buyerLevelDataExposed": false,
"payerAddressIncluded": false,
"rawBuyerInputPublic": false
}
},
"sourceTagsStored": "sanitized-aggregate-only",
"supportedSourceTags": [
"front-door-x402-proof-cta",
"action-pack-x402-proof-cta",
"chat-tiny-x402-proof-cta",
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch",
"machine-readable-x402-proof",
"agent-execution-proof-packet",
"agent-execution-command-copy",
"agent-execution-awal-latest",
"agent-execution-awal-2-10",
"agent-execution-awal-2-8",
"agent-wallet-skill-pack",
"agent-receipt-contract"
],
"unpaidSourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"unpaidTopSourceTagsCounter": "opportunityCheckGetProofUnpaidTopSourceTags",
"completionSourceBucketsCounter": "opportunityCheckGetProofCompletionSourceBuckets",
"agentExecutionAwalLatestSourceBucket": "agentExecutionAwalLatest",
"agentExecutionAwal210SourceBucket": "agentExecutionAwal210",
"agentExecutionAwal28SourceBucket": "agentExecutionAwal28",
"agentExecutionCommandCopySourceBucket": "agentExecutionCommandCopy",
"agentReceiptContractSourceBucket": "agentReceiptContract",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"buyerWalletCloseWalletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"buyerWalletCloseCannotPayYetCounter": "buyerWalletCloseSignals.cannotPayYet",
"http402ClosePacketSourceBucket": "agentExecutionAwalLatest",
"buyerProofExecutionCloseoutSourceBucket": "agentReceiptContract",
"agentExecutionCommandCopyTelemetryAdded": false,
"agentExecutionCommandCopyTelemetryReason": "The release keeps the buttons copy-only and avoids adding a client-side analytics call; the AWAL version source tags are still available when a buyer-run agent command reaches the unpaid 402 route.",
"ownerLaunchSourcePreservationCreatesTraffic": false,
"ownerLaunchSourcePreservationCallsPaidRoute": false,
"ownerLaunchSourcePreservationExecutesPayment": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"unpaidChallengeInterpretation": "GET proof CTA clicks that reach unpaid 402 are not revenue. They show a client requested the proof route before payment. A paid completion still requires buyer-controlled x402 retry and HTTP 200.",
"buyerAgentExecutionPacketAvailable": true,
"requiresBuyerControlledX402Retry": true,
"noRequestBodyRequired": true,
"usesExistingPaidResource": true,
"samePaidResourceAs": "POST /api/opportunity-check",
"doesNotAddThirdPaidRoute": false,
"tinyProofReusesExistingOpportunityCheckRoute": true,
"doesNotCallAgentRevenueAudit": true,
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareDnsProxied": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noDnsChangeMade": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"paidCallsMadeByActionSurface": false,
"buyerLevelDataExposed": false,
"publicCopy": "GET /api/opportunity-check is the one-cent x402 proof link. It returns HTTP 402 until a buyer-controlled x402 client retries payment."
},
"getProofUnpaidChallengeTelemetryAvailable": true,
"getProofCompletionCounter": "opportunityCheckGetProofCompletions",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"usesExistingPaidResource": true,
"doesNotAddThirdPaidRoute": false,
"tinyProofReusesExistingOpportunityCheckRoute": true,
"buyerControlledX402RetryOnly": true,
"noRequestBodyRequired": true,
"agentExecutionProofCtaAvailable": true,
"agentExecutionProofCta": {
"available": true,
"mode": "promoted-buyer-executable-proof-cta",
"title": "Buyer-run proof packet",
"label": "Run with buyer-approved x402 wallet",
"copy": "Wallet-capable buyers can use the exact one-cent proof packet now. ApexScout only exposes the packet; the buyer wallet decides whether to pay.",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"method": "GET",
"route": "/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"conversionBet": "Promote the already-safe buyer-execution packet above passive proof copy so x402-capable clients have one obvious next action.",
"successMetric": "opportunityCheckGetProofCompletions",
"unpaidSourceBucket": "agentExecutionProofPacket",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerDecision": {
"continueOnlyIf": "The buyer approves the route, amount, network, and one retry from an x402-capable wallet runtime.",
"stopIf": "Approval is missing, the client cannot attach x402 payment, or the route/amount/network differs."
},
"noSpendBoundary": {
"ctaIsFreeToRead": true,
"normalBrowserGetsUnpaid402": true,
"paymentAttemptedByCta": false,
"paidRouteCalledByApexScout": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"walletReadinessStripAvailable": true,
"walletReadinessStrip": {
"available": true,
"mode": "buyer-wallet-readiness-strip",
"title": "Before you run the command",
"checklist": [
"Your x402 wallet/client is authenticated.",
"Your wallet has at least $0.01 USDC available on Base.",
"You approve the route: GET /api/opportunity-check.",
"You approve the max amount: 10000 atomic USDC.",
"You understand unpaid HTTP 402 is not revenue.",
"You understand paid proof means HTTP 200 after your own wallet retry."
],
"copy": "ApexScout does not run this command for you. Your buyer-controlled wallet decides whether to spend.",
"route": "/api/opportunity-check",
"method": "GET",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"network": "eip155:8453",
"noFundingAdvice": true,
"noTradingAdvice": true,
"noPrivateKeyAdvice": true,
"noOnrampAdvice": true,
"noSpendBoundary": {
"stripIsFree": true,
"paymentAttemptedByStrip": false,
"paidRouteCalledByStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"buyerAgentCommandCopyAvailable": true,
"buyerAgentCommandCopy": {
"available": true,
"mode": "buyer-agent-command-copy",
"title": "Choose your buyer-run x402 command",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"recommendedCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"pinnedCurrentCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"deprecatedLegacyCommand": "npx awal@2.8.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-2-8\" --max-amount 10000 --json",
"deprecatedLegacyCommandOfferedForPaidUse": false,
"buyerAgentCommandVariants": [
{
"id": "awal-latest",
"label": "Recommended current",
"packageVersion": "latest",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": true,
"pinned": false,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
},
{
"id": "awal-2-12",
"label": "Pinned current",
"packageVersion": "2.12.0",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": false,
"pinned": true,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
}
],
"buyerClientCompatibilityMatrix": [
{
"client": "AWAL CLI",
"status": "recommended-current",
"buyerSideOnly": true,
"goodFor": "Buyer agents using Coinbase Agentic Wallet CLI to make a capped one-cent x402 proof request.",
"commandVariants": [
"awal-latest",
"awal-2-12"
],
"docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/pay-for-service",
"paymentExecutedByApexScout": false
},
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"otherX402CapableBuyerClients": [
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"legacyCommandCopyRoute": "/api/opportunity-check?src=agent-execution-command-copy",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"requestBodyRequired": false,
"walletMustBeAuthenticated": true,
"walletNeedsSufficientUsdc": true,
"apexScoutRunsCommand": false,
"copyingIsPayment": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"sourceBucketCompatibility": {
"oldPacketSourceStillSupported": "agent-execution-proof-packet",
"previousCommandCopySourceStillSupported": "agent-execution-command-copy",
"recommendedCurrentSource": "agent-execution-awal-latest",
"pinnedCurrentSource": "agent-execution-awal-latest",
"previousPinnedSourceStillMeasured": "agent-execution-awal-2-10",
"deprecatedLegacySourceStillMeasured": "agent-execution-awal-2-8",
"unpaidSourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"topSourceTagsCounter": "opportunityCheckGetProofUnpaidTopSourceTags"
},
"prerequisiteCommands": {
"stopOldCompanion": "npx awal@2.12.0 quit --json",
"status": "npx awal@2.12.0 status --json",
"balance": "npx awal@2.12.0 balance --chain base --json",
"details": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json"
},
"buyerClientRuntimePreflight": {
"requiredBeforePaidRetry": true,
"pinnedCliVersion": "2.12.0",
"pinnedCompanionVersion": "2.12.0",
"stopOldCompanionCommand": "npx awal@2.12.0 quit --json",
"restartCurrentCompanionCommand": "npx awal@2.12.0 status --json",
"confirmBaseBalanceCommand": "npx awal@2.12.0 balance --chain base --json",
"parseUnpaidContractCommand": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json",
"versionAlignedCompanionRequired": true,
"discoveryParseAloneIsPaidProof": false,
"paymentAttemptedByPreflight": false,
"paidRouteCalledByPreflight": false,
"automaticRetry": false,
"allowedPaidRetryCountAfterBuyerApproval": 1
},
"microcopy": "Refresh the buyer wallet companion to AWAL 2.12.0, confirm authentication and Base USDC, then parse the unpaid contract before one buyer-approved retry. This can spend up to 10000 atomic USDC only if your wallet approves. ApexScout does not run the command; copying is not payment; unpaid HTTP 402 is not revenue; paid proof means HTTP 200 after a buyer-controlled x402 retry.",
"prerequisites": [
"Stop an older AWAL companion, then start the pinned 2.12.0 companion.",
"Confirm the buyer wallet is authenticated and has enough USDC on Base.",
"Parse the unpaid 402 contract before any buyer-approved retry.",
"Approve only GET /api/opportunity-check with max amount 10000 atomic USDC.",
"Stop if the route, amount, network, or buyer approval differs."
],
"approvalCopy": "This command can spend up to 10000 atomic USDC only if your buyer wallet approves.",
"copyingIsNotPaymentCopy": "Copying this command is not payment.",
"apexScoutRunsCommandCopy": "ApexScout does not run this command.",
"unpaidChallengeCopy": "Unpaid HTTP 402 is expected before payment.",
"paidCompletionCopy": "Paid proof completes only when your buyer-controlled x402 retry returns HTTP 200.",
"placement": {
"x402Proof": "above-proof-detail-sections",
"chatTinyPaymentFlow": "above-chat-flow-detail-sections",
"primaryForWalletCapableAgents": true,
"normalNoSpendPathRemainsPrimary": true
},
"buttons": [
{
"label": "Copy AWAL latest command",
"copies": "command",
"value": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy AWAL 2.12 command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy route only",
"copies": "route",
"value": "/api/opportunity-check?src=agent-execution-awal-latest",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetry": {
"commandCopyTelemetryAdded": false,
"skippedReason": "The release keeps the buttons copy-only and avoids adding a client-side analytics call; the AWAL version source tags are still available when a buyer-run agent command reaches the unpaid 402 route.",
"copyIsRevenue": false,
"copyIsPayment": false,
"unpaidChallengeSourceBucket": "agentExecutionAwalLatest"
},
"noSpendBoundary": {
"copyPanelIsFree": true,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"paidRouteCalledByCopyPanel": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"http402ClosePacketAvailable": true,
"http402ClosePacket": {
"available": true,
"mode": "buyer-agent-402-close-packet",
"release": "v2.2.228-live-command-center",
"title": "402 close packet",
"purpose": "Put the buyer-agent close instructions inside the unpaid HTTP 402 response so x402-capable clients can finish the proof without hunting through a page.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"closeMessage": "You reached the ApexScout paid proof gate. To complete the proof, retry this exact GET route from an authenticated x402 wallet/client with max amount 10000 atomic USDC on Base mainnet.",
"buyerAgentInstruction": "If the buyer approved this one-cent proof, run the command exactly once and treat only HTTP 200 as the paid completion. If any route, amount, network, or approval detail differs, stop.",
"whatHttp200Proves": [
"The buyer-controlled x402 retry reached ApexScout's one-cent proof route.",
"The paid route returned structured JSON after payment verification.",
"The aggregate paid proof completion counter is allowed to move only after HTTP 200."
],
"notProofOf": [
"Coinbase, AWS, Stripe, Bazaar, AgentCore, Base, marketplace, or protocol endorsement.",
"Guaranteed revenue, trading results, investment outcome, legal advice, tax advice, lending advice, or compliance approval.",
"Buyer identity, wallet-level activity, secret signing material, or broader permission to spend."
],
"continueIf": [
"The buyer explicitly approved this one-cent proof.",
"The client can attach an x402 payment authorization.",
"The retry route is exactly GET /api/opportunity-check?src=agent-execution-awal-latest.",
"The max amount is exactly 10000 atomic USDC.",
"The network is exactly eip155:8453."
],
"stopIf": [
"The wallet is not authenticated.",
"The wallet has insufficient USDC on Base.",
"The client cannot attach x402 payment.",
"The max amount is lower than 10000 atomic USDC.",
"The network is not eip155:8453.",
"The buyer did not approve this exact spend.",
"The agent plans to retry more than once just to clear a metric."
],
"failureBranches": {
"walletNotAuthenticated": {
"bucket": "wallet_not_authenticated",
"buyerAction": "Authenticate the buyer-controlled x402 wallet/client before retrying.",
"apexScoutAction": "Do nothing automatically."
},
"insufficientBaseUsdc": {
"bucket": "insufficient_base_usdc",
"buyerAction": "Stop until the buyer-controlled wallet has enough Base USDC for the one-cent proof.",
"apexScoutAction": "Do not fund, trade, onramp, or advise funding."
},
"maxAmountTooLow": {
"bucket": "max_amount_too_low",
"buyerAction": "Use max amount 10000 atomic USDC or stop.",
"apexScoutAction": "Do not lower route price or change payment requirements."
},
"wrongNetwork": {
"bucket": "wrong_network",
"buyerAction": "Use eip155:8453 Base mainnet or stop.",
"apexScoutAction": "Do not switch rails."
},
"paymentDeclined": {
"bucket": "payment_declined",
"buyerAction": "Stop unless the buyer explicitly approves another attempt.",
"apexScoutAction": "Do not retry payment for the buyer."
}
},
"telemetryInterpretation": {
"sourceTag": "agent-execution-awal-latest",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionAwalLatest",
"closePacketUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"closePacketIsFree": true,
"closePacketExecutesPayment": false,
"paymentAttemptedByClosePacket": false,
"paidRouteCalledByClosePacket": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"secretSigningMaterialRequested": false
}
},
"buyerProofExecutionCloseoutAvailable": true,
"buyerProofExecutionCloseout": {
"available": true,
"mode": "buyer-proof-execution-closeout",
"release": "v2.2.228-live-command-center",
"title": "Copied? Finish with one buyer-run proof retry",
"purpose": "Close the gap after a buyer agent marks its wallet ready or copies the command: run exactly one buyer-approved proof retry, classify the response, then stop.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"method": "GET",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"primarySourceTag": "agent-receipt-contract",
"primarySourceBucket": "agentReceiptContract",
"commandCopySourceTag": "agent-execution-command-copy",
"commandCopySourceBucket": "agentExecutionCommandCopy",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"firstScreenPlacement": {
"x402Proof": "after-wallet-close-before-receipt-command",
"chatTinyPaymentFlow": "after-wallet-close-before-receipt-command",
"closeoutVisibleBeforeCommandCopy": true,
"normalNoSpendPathRemainsPrimary": true
},
"closeoutRule": {
"ifWalletReadyAndCommandCopied": "Run the receipt-bound command exactly once from the buyer-controlled x402 wallet if the buyer approved the route, amount, and network.",
"ifCannotPayYet": "Do not retry payment. Use the wallet setup note and stop until wallet authentication, Base USDC balance, route, amount, and network match.",
"ifResponseIs402": "Treat the result as unpaid. It is a challenge, not a paid proof, and it should not move revenue.",
"ifResponseIs200": "Treat the result as paid proof only after the buyer-controlled x402 retry returns structured HTTP 200 JSON.",
"ifRetryIsRejected": "Read the sanitized edge failure status once, classify the rejection, and stop before another paid attempt.",
"stopAfter": "one buyer-approved paid retry unless a human operator explicitly approves another capped diagnostic"
},
"buyerAgentChecklist": [
"Wallet is authenticated by the buyer, not ApexScout.",
"Buyer approves GET /api/opportunity-check with source agent-receipt-contract.",
"Maximum spend is exactly 10000 atomic USDC.",
"Network is exactly eip155:8453 Base mainnet.",
"Run one retry, then classify HTTP 402, HTTP 200, or a sanitized edge failure."
],
"copyReadyCommands": {
"receiptBoundProofCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"commandCopyProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"edgeFailureReadCommand": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof."
},
"safeReadouts": {
"edgeHealthPath": "/__apexscout/cloudflare-x402/health",
"edgeLastFailurePath": "/__apexscout/cloudflare-x402/health/last-failure",
"edgeLastFailureUrl": "https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure",
"originLastFailurePath": "/api/cloudflare-x402-edge-failure/last",
"originLastFailureUrl": "https://apexscout.ai/api/cloudflare-x402-edge-failure/last",
"noPaymentAttemptedByRead": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"privateKeysRequested": false
},
"buttons": [
{
"label": "Copy receipt-bound proof command",
"copies": "receipt_bound_command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy edge failure readout",
"copies": "edge_failure_read_command",
"value": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"failureReadoutIsRevenue": false,
"copyIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"newCounterAdded": false,
"reason": "The closeout reuses existing aggregate wallet-close, source-bucket, and paid-completion counters so it improves decision clarity without creating fake movement."
},
"noSpendBoundary": {
"closeoutIsFree": true,
"closeoutExecutesPayment": false,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"failureReadoutExecutesPayment": false,
"failureReadoutCallsPaidRoute": false,
"paymentAttemptedByCloseout": false,
"paidRouteCalledByCloseout": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"productionPostCreated": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareMutationCreated": false,
"apifyActorRunCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"rawPaymentPayloadExposed": false
},
"safetyClaims": {
"guaranteedRevenueClaimed": false,
"officialEndorsementClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareMonetizationGatewayReadinessAvailable": true,
"cloudflareMonetizationGatewayReadiness": {
"available": true,
"mode": "cloudflare-monetization-gateway-readiness",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare live edge status",
"releaseReportingMode": "worker-and-origin-split",
"appRelease": "v2.2.228-live-command-center",
"originRelease": "v2.2.228-live-command-center",
"originReleasePath": "/status",
"workerRelease": "v2.2.228-live-command-center",
"workerSourceVersion": "2.2.228",
"workerHealthReleaseContract": {
"healthPath": "/__apexscout/cloudflare-x402/health",
"releaseFieldMeans": "workerRelease",
"workerReleaseField": "workerRelease",
"originReleaseField": "originRelease",
"originReleasePath": "/status",
"originReleaseReadIsNoSpend": true,
"mismatchIsActionableOnlyWhenWorkerHealthFails": true
},
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"articleUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving x402 payment enforcement toward edge-managed route rules. ApexScout now serves the one-cent proof path through a narrow Cloudflare Worker while keeping Railway as the origin fallback."
},
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"officialCloudflareMonetizationGatewayClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"waitlistOrEarlyAccessRequired": false,
"noDnsChangeMade": false,
"dnsChangedByLiveCutover": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"apexScoutRemainsSourceOfTruth": true,
"candidateRules": [
{
"id": "apexscout-one-cent-proof",
"purpose": "Edge-readable one-cent x402 proof route for wallet-capable buyer agents.",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"displayPrice": "$0.01",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
},
{
"id": "apexscout-agent-revenue-audit",
"purpose": "Higher-value builder monetization audit route.",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"amountAtomicUsdc": "5000000",
"priceUsd": "5.00",
"displayPrice": "$5.00",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
}
],
"migrationPlan": [
"Keep the Cloudflare Worker route narrow and use Railway as the origin fallback.",
"Use these candidate rules as the review checklist before any future official managed-gateway change.",
"Require unpaid HTTP 402 and buyer-controlled HTTP 200 proof for each route after any edge or gateway change.",
"Keep ApexScout aggregate metrics as the public conversion truth source.",
"Roll back to Railway-origin x402 if route, amount, network, or payment proof differs."
],
"operatorChecklist": {
"dnsChangeApproved": true,
"cloudflareApiTokenApproved": true,
"gatewayRuleCreationApproved": true,
"postDeployPaidProofRequiredBeforeClaimingGatewayLive": true,
"originFallbackRequired": true,
"compareGatewayRulesToCandidateRules": true
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"cloudflareApiCalled": false,
"dnsChanged": false,
"dnsAlreadyProxiedThroughCloudflare": true,
"workerAlreadyDeployed": true,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"revenueOutcomeClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
},
"telemetryInterpretation": {
"readinessUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"watchCounters": "If unpaid proof counters move without paid completions, treat it as proof-route interest, not gateway success."
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"agentMonetizationPolicyMatrixAvailable": true,
"agentMonetizationPolicyMatrix": {
"available": true,
"mode": "agent-monetization-policy-matrix",
"release": "v2.2.228-live-command-center",
"title": "Agent monetization policy matrix",
"purpose": "Give crawlers, buyer agents, edge gateways, and MCP clients one clear allow/charge/block map before they touch a paid route.",
"sourceSignals": [
{
"name": "Cloudflare Pay Per Crawl",
"sourceUrl": "https://blog.cloudflare.com/introducing-pay-per-crawl/",
"interpretedAs": "Agents and crawlers need a simple policy choice: free access, charged access, or blocked access."
},
{
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Paid APIs, datasets, pages, and MCP tools can be described as route-level payment rules before any buyer-controlled retry."
}
],
"policyUrl": "https://apexscout.ai/.well-known/apexscout-monetization-policy.json",
"apiPath": "/api/agent-monetization-policy",
"wellKnownPath": "/.well-known/apexscout-monetization-policy.json",
"paidMcpToolsManifest": "https://apexscout.ai/.well-known/apexscout-paid-tools.json",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareDnsProxied": true,
"officialCloudflareEndorsementClaimed": false,
"officialCloudflareMonetizationGatewayClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"cloudflarePayPerCrawlIntegrated": false,
"noCrawlerBillingCreated": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"routePolicyCount": 8,
"defaultPolicy": {
"action": "allow_free_public_metadata",
"appliesTo": "Public ApexScout-owned docs, manifests, readiness pages, and health surfaces.",
"paidRetryRequired": false,
"buyerLevelDataExposed": false
},
"routePolicies": [
{
"id": "public-docs-and-start-pages",
"action": "allow_free",
"routes": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/agent-capabilities.json",
"/.well-known/agent.json",
"/api/public-agent"
],
"reason": "Agents need no-spend discovery and route selection before deciding whether to pay.",
"crawlerPolicy": "allow_public_metadata_only",
"paidRetryRequired": false
},
{
"id": "machine-readable-policy-and-tools",
"action": "allow_free",
"routes": [
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json"
],
"reason": "Payment-aware clients should inspect prices, routes, caps, and guardrails without spending.",
"crawlerPolicy": "allow_agent_metadata",
"paidRetryRequired": false
},
{
"id": "proof-pages-and-payment-education",
"action": "allow_free",
"routes": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow"
],
"reason": "These surfaces explain the one-cent proof and wallet-controlled retry; reading them is not payment.",
"crawlerPolicy": "allow_public_payment_instructions",
"paidRetryRequired": false
},
{
"id": "one-cent-proof",
"action": "charge_x402",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-command-copy",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"crawlerPolicy": "charge_only_when_agent_chooses_paid_resource"
},
{
"id": "agent-revenue-audit",
"action": "charge_x402",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"crawlerPolicy": "charge_paid_builder_audit_only_after_buyer_approval"
},
{
"id": "builder-and-scope-preflight",
"action": "allow_free_preflight",
"routes": [
"/agent-revenue-audit-builder",
"/api/agent-revenue-audit-builder",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/api/buyer-payment-scope-check",
"/buyer-agent-payment-safety",
"/api/buyer-agent-payment-safety"
],
"reason": "Preflight and safety checks reduce accidental spend and do not execute payment.",
"crawlerPolicy": "allow_no_spend_prep_surfaces",
"paidRetryRequired": false
},
{
"id": "admin-and-private-surfaces",
"action": "block_public_access",
"routes": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"crawlerPolicy": "block",
"paidRetryAvailable": false
},
{
"id": "third-party-outreach-and-catalog-crawl",
"action": "not_performed_by_apexscout",
"routes": [],
"reason": "ApexScout does not scrape catalogs, contact third parties, create fake traffic, post, DM, email, or crawl competitors.",
"crawlerPolicy": "blocked_by_operating_boundary",
"paidRetryAvailable": false
}
],
"crawlerAndAgentRules": {
"allow": [
"Read public docs, manifests, policy files, OpenAPI, MCP metadata, proof pages, and no-spend preflight surfaces.",
"Use unpaid HTTP 402 as a route-health/payment-requirements signal, not as revenue."
],
"charge": [
"Charge only the existing one-cent proof route or the existing $5 Agent Revenue Audit route.",
"Require buyer-controlled x402 retry before any paid completion is counted."
],
"block": [
"Block admin/private surfaces from public policy.",
"Do not provide a paid bypass for scraping, third-party discovery, fake traffic, outreach, or buyer-level data."
]
},
"edgeGatewayCandidate": {
"readyToReview": true,
"cloudflareRuleCreated": false,
"firstRuleToMirror": "one-cent-proof",
"secondRuleToMirror": "agent-revenue-audit",
"rollbackRequirement": "Railway-origin x402 remains the fallback until each edge rule proves unpaid 402 and paid 200."
},
"noSpendBoundary": {
"policyIsFree": true,
"paymentAttemptedByPolicy": false,
"paidRouteCalledByPolicy": false,
"cloudflareApiCalled": false,
"crawlerBillingCreated": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"paidMcpToolManifestAvailable": true,
"paidMcpToolManifest": {
"available": true,
"mode": "paid-mcp-tool-manifest",
"release": "v2.2.228-live-command-center",
"title": "ApexScout paid MCP tool manifest",
"purpose": "Make ApexScout's payable resources obvious to MCP-style clients without opening a paid route or simulating payment.",
"apiPath": "/api/paid-mcp-tools",
"wellKnownPath": "/.well-known/apexscout-paid-tools.json",
"policyPath": "/.well-known/apexscout-monetization-policy.json",
"policyUrl": "https://apexscout.ai/.well-known/apexscout-monetization-policy.json",
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"mcpToolPackPath": "/api/mcp-tool-pack",
"mcpManifestPath": "/.well-known/mcp.json",
"openApiPath": "/api/agentcore-openapi.json",
"toolCount": 3,
"paidToolCount": 3,
"freeToolCount": 0,
"tools": [
{
"name": "apexscout_link_native_tiny_paid_proof",
"displayName": "One-cent x402 proof",
"method": "GET",
"path": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-command-copy",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUnits": "10000",
"network": "eip155:8453",
"requestBodyRequired": false,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-command-copy",
"sourceBucket": "agentExecutionCommandCopy",
"buyerControlledRetryOnly": true,
"recommendedFor": "Fastest proof that the buyer agent can complete an x402 payment path."
},
{
"name": "apexscout_opportunity_check",
"displayName": "Opportunity Check",
"method": "POST",
"path": "/api/opportunity-check",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUnits": "10000",
"network": "eip155:8453",
"requestBodyRequired": true,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"inputSchemaSummary": {
"subject": "string",
"goal": "string",
"buyerType": "optional string",
"source": "optional string"
},
"recommendedFor": "Cheapest normal paid trust screen after a buyer chooses a subject and goal."
},
{
"name": "apexscout_agent_revenue_audit",
"displayName": "Agent Revenue Audit",
"method": "POST",
"path": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"price": "$5.00",
"priceUsd": "5.00",
"maxAmountAtomicUnits": "5000000",
"network": "eip155:8453",
"requestBodyRequired": true,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"preflightPath": "/api/agent-revenue-audit-builder/prepare",
"previewPath": "/api/agent-revenue-audit-preview",
"inputSchemaSummary": {
"serviceName": "string",
"currentOffer": "string",
"targetBuyer": "string",
"currentProblem": "string",
"currentPaymentRail": "optional string",
"riskTolerance": "optional string",
"source": "optional string"
},
"recommendedFor": "Paid conversion audit for x402, MCP, and agent API builders."
}
],
"recommendedNoSpendBeforePayment": [
"/docs.json",
"/api/agent-monetization-policy",
"/api/mcp-tool-pack",
"/api/agentcore-openapi.json",
"/api/cloudflare-billing-rules",
"/api/cloudflare-x402-worker-config",
"/api/x402-proof",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-preview",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check"
],
"compatibility": {
"mcpClientsCanDiscoverPaidTools": true,
"x402RequiredForPaidCompletion": true,
"http402ChallengeExpectedBeforePayment": true,
"paymentCredentialIsBuyerControlled": true,
"sellerManagedBuyerWallet": false,
"apiKeysRequiredBeforePayment": false,
"cloudflareGatewayRuleAlreadyCreated": false,
"originStillEnforcesX402": true
},
"noSpendBoundary": {
"manifestIsFree": true,
"paymentAttemptedByManifest": false,
"paidRouteCalledByManifest": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"notClaims": {
"cloudflareEndorsementClaimed": false,
"mcpMarketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"paymentExecutedByReadingManifest": false,
"buyerWalletControlledByApexScout": false
}
},
"agentExecutionCommandCopySourceBucket": "agentExecutionCommandCopy",
"http402ClosePacketSourceBucket": "agentExecutionAwalLatest"
},
"agentMonetizationPolicyMatrixAvailable": true,
"agentMonetizationPolicyMatrix": {
"available": true,
"mode": "agent-monetization-policy-matrix",
"release": "v2.2.228-live-command-center",
"title": "Agent monetization policy matrix",
"purpose": "Give crawlers, buyer agents, edge gateways, and MCP clients one clear allow/charge/block map before they touch a paid route.",
"sourceSignals": [
{
"name": "Cloudflare Pay Per Crawl",
"sourceUrl": "https://blog.cloudflare.com/introducing-pay-per-crawl/",
"interpretedAs": "Agents and crawlers need a simple policy choice: free access, charged access, or blocked access."
},
{
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Paid APIs, datasets, pages, and MCP tools can be described as route-level payment rules before any buyer-controlled retry."
}
],
"policyUrl": "https://apexscout.ai/.well-known/apexscout-monetization-policy.json",
"apiPath": "/api/agent-monetization-policy",
"wellKnownPath": "/.well-known/apexscout-monetization-policy.json",
"paidMcpToolsManifest": "https://apexscout.ai/.well-known/apexscout-paid-tools.json",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareDnsProxied": true,
"officialCloudflareEndorsementClaimed": false,
"officialCloudflareMonetizationGatewayClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"cloudflarePayPerCrawlIntegrated": false,
"noCrawlerBillingCreated": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"routePolicyCount": 8,
"defaultPolicy": {
"action": "allow_free_public_metadata",
"appliesTo": "Public ApexScout-owned docs, manifests, readiness pages, and health surfaces.",
"paidRetryRequired": false,
"buyerLevelDataExposed": false
},
"routePolicies": [
{
"id": "public-docs-and-start-pages",
"action": "allow_free",
"routes": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/agent-capabilities.json",
"/.well-known/agent.json",
"/api/public-agent"
],
"reason": "Agents need no-spend discovery and route selection before deciding whether to pay.",
"crawlerPolicy": "allow_public_metadata_only",
"paidRetryRequired": false
},
{
"id": "machine-readable-policy-and-tools",
"action": "allow_free",
"routes": [
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json"
],
"reason": "Payment-aware clients should inspect prices, routes, caps, and guardrails without spending.",
"crawlerPolicy": "allow_agent_metadata",
"paidRetryRequired": false
},
{
"id": "proof-pages-and-payment-education",
"action": "allow_free",
"routes": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow"
],
"reason": "These surfaces explain the one-cent proof and wallet-controlled retry; reading them is not payment.",
"crawlerPolicy": "allow_public_payment_instructions",
"paidRetryRequired": false
},
{
"id": "one-cent-proof",
"action": "charge_x402",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-command-copy",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"crawlerPolicy": "charge_only_when_agent_chooses_paid_resource"
},
{
"id": "agent-revenue-audit",
"action": "charge_x402",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"crawlerPolicy": "charge_paid_builder_audit_only_after_buyer_approval"
},
{
"id": "builder-and-scope-preflight",
"action": "allow_free_preflight",
"routes": [
"/agent-revenue-audit-builder",
"/api/agent-revenue-audit-builder",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/api/buyer-payment-scope-check",
"/buyer-agent-payment-safety",
"/api/buyer-agent-payment-safety"
],
"reason": "Preflight and safety checks reduce accidental spend and do not execute payment.",
"crawlerPolicy": "allow_no_spend_prep_surfaces",
"paidRetryRequired": false
},
{
"id": "admin-and-private-surfaces",
"action": "block_public_access",
"routes": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"crawlerPolicy": "block",
"paidRetryAvailable": false
},
{
"id": "third-party-outreach-and-catalog-crawl",
"action": "not_performed_by_apexscout",
"routes": [],
"reason": "ApexScout does not scrape catalogs, contact third parties, create fake traffic, post, DM, email, or crawl competitors.",
"crawlerPolicy": "blocked_by_operating_boundary",
"paidRetryAvailable": false
}
],
"crawlerAndAgentRules": {
"allow": [
"Read public docs, manifests, policy files, OpenAPI, MCP metadata, proof pages, and no-spend preflight surfaces.",
"Use unpaid HTTP 402 as a route-health/payment-requirements signal, not as revenue."
],
"charge": [
"Charge only the existing one-cent proof route or the existing $5 Agent Revenue Audit route.",
"Require buyer-controlled x402 retry before any paid completion is counted."
],
"block": [
"Block admin/private surfaces from public policy.",
"Do not provide a paid bypass for scraping, third-party discovery, fake traffic, outreach, or buyer-level data."
]
},
"edgeGatewayCandidate": {
"readyToReview": true,
"cloudflareRuleCreated": false,
"firstRuleToMirror": "one-cent-proof",
"secondRuleToMirror": "agent-revenue-audit",
"rollbackRequirement": "Railway-origin x402 remains the fallback until each edge rule proves unpaid 402 and paid 200."
},
"noSpendBoundary": {
"policyIsFree": true,
"paymentAttemptedByPolicy": false,
"paidRouteCalledByPolicy": false,
"cloudflareApiCalled": false,
"crawlerBillingCreated": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"paidMcpToolManifestAvailable": true,
"paidMcpToolManifest": {
"available": true,
"mode": "paid-mcp-tool-manifest",
"release": "v2.2.228-live-command-center",
"title": "ApexScout paid MCP tool manifest",
"purpose": "Make ApexScout's payable resources obvious to MCP-style clients without opening a paid route or simulating payment.",
"apiPath": "/api/paid-mcp-tools",
"wellKnownPath": "/.well-known/apexscout-paid-tools.json",
"policyPath": "/.well-known/apexscout-monetization-policy.json",
"policyUrl": "https://apexscout.ai/.well-known/apexscout-monetization-policy.json",
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"mcpToolPackPath": "/api/mcp-tool-pack",
"mcpManifestPath": "/.well-known/mcp.json",
"openApiPath": "/api/agentcore-openapi.json",
"toolCount": 3,
"paidToolCount": 3,
"freeToolCount": 0,
"tools": [
{
"name": "apexscout_link_native_tiny_paid_proof",
"displayName": "One-cent x402 proof",
"method": "GET",
"path": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-command-copy",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUnits": "10000",
"network": "eip155:8453",
"requestBodyRequired": false,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-command-copy",
"sourceBucket": "agentExecutionCommandCopy",
"buyerControlledRetryOnly": true,
"recommendedFor": "Fastest proof that the buyer agent can complete an x402 payment path."
},
{
"name": "apexscout_opportunity_check",
"displayName": "Opportunity Check",
"method": "POST",
"path": "/api/opportunity-check",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUnits": "10000",
"network": "eip155:8453",
"requestBodyRequired": true,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"inputSchemaSummary": {
"subject": "string",
"goal": "string",
"buyerType": "optional string",
"source": "optional string"
},
"recommendedFor": "Cheapest normal paid trust screen after a buyer chooses a subject and goal."
},
{
"name": "apexscout_agent_revenue_audit",
"displayName": "Agent Revenue Audit",
"method": "POST",
"path": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"price": "$5.00",
"priceUsd": "5.00",
"maxAmountAtomicUnits": "5000000",
"network": "eip155:8453",
"requestBodyRequired": true,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"preflightPath": "/api/agent-revenue-audit-builder/prepare",
"previewPath": "/api/agent-revenue-audit-preview",
"inputSchemaSummary": {
"serviceName": "string",
"currentOffer": "string",
"targetBuyer": "string",
"currentProblem": "string",
"currentPaymentRail": "optional string",
"riskTolerance": "optional string",
"source": "optional string"
},
"recommendedFor": "Paid conversion audit for x402, MCP, and agent API builders."
}
],
"recommendedNoSpendBeforePayment": [
"/docs.json",
"/api/agent-monetization-policy",
"/api/mcp-tool-pack",
"/api/agentcore-openapi.json",
"/api/cloudflare-billing-rules",
"/api/cloudflare-x402-worker-config",
"/api/x402-proof",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-preview",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check"
],
"compatibility": {
"mcpClientsCanDiscoverPaidTools": true,
"x402RequiredForPaidCompletion": true,
"http402ChallengeExpectedBeforePayment": true,
"paymentCredentialIsBuyerControlled": true,
"sellerManagedBuyerWallet": false,
"apiKeysRequiredBeforePayment": false,
"cloudflareGatewayRuleAlreadyCreated": false,
"originStillEnforcesX402": true
},
"noSpendBoundary": {
"manifestIsFree": true,
"paymentAttemptedByManifest": false,
"paidRouteCalledByManifest": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"notClaims": {
"cloudflareEndorsementClaimed": false,
"mcpMarketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"paymentExecutedByReadingManifest": false,
"buyerWalletControlledByApexScout": false
}
},
"agentWalletSkillPackAvailable": true,
"agentWalletSkillPack": {
"available": true,
"mode": "agent-wallet-skill-pack",
"release": "v2.2.228-live-command-center",
"path": "/agent-wallet-skill-pack",
"apiPath": "/api/agent-wallet-skill-pack",
"wellKnownPath": "/.well-known/apexscout-agent-wallet-skill.json",
"markdownPath": "/apexscout-agent-wallet-skill.md",
"markdownWellKnownPath": "/.well-known/apexscout-agent-wallet-skill.md",
"title": "ApexScout Agent Wallet Skill Pack",
"purpose": "Give wallet-capable buyer agents a compact, machine-readable way to inspect ApexScout, run the one-cent proof only with buyer approval, and stop before malformed paid retries.",
"sourceTag": "agent-wallet-skill-pack",
"sourceBucket": "agentWalletSkillPack",
"buyerAgentUse": {
"primaryInstruction": "Inspect this free skill pack first. Run a paid command only from the buyer-controlled wallet after route, amount, network, and approval match exactly.",
"firstPaidProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-wallet-skill-pack\" --max-amount 10000 --json",
"copyPasteCommandIsPayment": false,
"apexScoutRunsCommand": false,
"stopAfterOnePaidHttp200": true,
"unpaidHttp402IsExpected": true,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"routeContracts": [
{
"id": "one-cent-proof",
"label": "One-cent x402 proof",
"method": "GET",
"route": "/api/opportunity-check",
"href": "/api/opportunity-check?src=agent-wallet-skill-pack",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-wallet-skill-pack",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"requestBodyRequired": false,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-wallet-skill-pack",
"sourceBucket": "agentWalletSkillPack",
"buyerApprovalRequired": true,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-wallet-skill-pack\" --max-amount 10000 --json"
},
{
"id": "agent-revenue-audit",
"label": "Agent Revenue Audit",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"price": "$5.00",
"priceUsd": "5.00",
"maxAmountAtomicUsdc": "5000000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"requestBodyRequired": true,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerApprovalRequired": true,
"prepareFirst": true,
"noSpendPrepSurface": "/agent-revenue-audit-builder",
"noSpendPrepApi": "/api/agent-revenue-audit-builder/action-pack",
"command": null,
"commandOmittedReason": "The $5 route needs a buyer-specific JSON body. The skill pack publishes the contract but does not create a generic spend command."
}
],
"prerequisites": [
"Buyer-controlled x402 wallet/client is authenticated.",
"The buyer approves the exact route, method, amount, and Base mainnet network.",
"The buyer understands HTTP 402 is a normal unpaid challenge, not revenue.",
"The buyer stops after one successful HTTP 200 unless they explicitly approve another payment.",
"No private key, wallet seed, or secret signing material is shared with ApexScout."
],
"stopRules": [
"Stop if approval is missing.",
"Stop if the route, method, amount, or network differs.",
"Stop if the client cannot attach an x402 payment.",
"Stop if the route would require buyer-specific private data that has not been approved.",
"Stop if the agent would retry only to move a metric."
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidProofCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceTag": "agent-wallet-skill-pack",
"sourceBucket": "agentWalletSkillPack",
"unpaidChallengeIsRevenue": false,
"copyIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"relatedSurfaces": {
"x402ProofPage": "https://apexscout.ai/x402-proof",
"chatTinyPaymentFlow": "https://apexscout.ai/chat-tiny-payment-flow",
"cashRegister": "https://apexscout.ai/api/cash-register",
"metrics": "https://apexscout.ai/api/metrics",
"docs": "https://apexscout.ai/docs.json",
"mcpToolPack": "https://apexscout.ai/api/mcp-tool-pack",
"openApi": "https://apexscout.ai/api/agentcore-openapi.json",
"paidTools": "https://apexscout.ai/.well-known/apexscout-paid-tools.json"
},
"noSpendBoundary": {
"skillPackIsFree": true,
"paymentAttemptedBySkillPack": false,
"paidRouteCalledBySkillPack": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"outreachCreated": false,
"scrapingPerformed": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"apifyX402UpstreamReadinessAvailable": true,
"apifyX402UpstreamReadiness": {
"available": true,
"mode": "apify-x402-upstream-readiness",
"release": "v2.2.228-live-command-center",
"path": "/apify-x402-upstream-readiness",
"apiPath": "/api/apify-x402-upstream-readiness",
"wellKnownPath": "/.well-known/apexscout-apify-x402-upstream.json",
"title": "Apify x402 Upstream Readiness",
"purpose": "Prepare ApexScout for a future operator-approved paid upstream Actor run while keeping production no-spend by default.",
"sourceSignal": {
"name": "Apify x402 Actors",
"summary": "Apify now exposes eligible Actors over x402 so agents can pay with USDC on Base and run tools without an Apify account.",
"blogUrl": "https://blog.apify.com/introducing-x402-agentic-payments/",
"docsUrl": "https://docs.apify.com/platform/integrations/x402",
"changeLogUrl": "https://apify.com/change-log/pay-for-apify-actors-with-x402",
"interpretedForApexScout": "The useful pattern is buyer-agent paid tool execution over HTTP 402. ApexScout can publish readiness and operator gates now, but should not run upstream scraping or paid Actors without a scoped budget."
},
"integrationStatus": "prepared-disabled",
"upstreamSpendEnabled": false,
"apifyAccountRequiredForX402Flow": false,
"apifyPrepaidTokenCreated": false,
"apifyActorRunExecuted": false,
"paidUpstreamCallsMade": false,
"productionPostMade": false,
"scrapingPerformed": false,
"buyerLevelDataExposed": false,
"defaultPolicy": {
"totalBudgetUsd": 0,
"maxPerRunUsd": 0,
"allowedActorIds": [],
"allowedPurposes": [],
"denySocialScrapingByDefault": true,
"denyPersonalDataCollectionByDefault": true,
"requireOperatorReviewBeforeEnable": true,
"requireResultPrivacyReviewBeforePublishing": true,
"tokenStorage": "not-created",
"tokenMayBePrintedOrLogged": false
},
"enablementRequirements": [
"Operator supplies an explicit upstream budget.",
"Operator selects an exact Actor ID and allowed data purpose.",
"The Actor is eligible for x402, pay-per-event, limited-permission execution, and not Standby.",
"The request avoids scraping, outreach, private personal data, and competitor inspection unless separately approved.",
"The buyer/operator wallet is authenticated and funded outside ApexScout's public surfaces.",
"The returned prepaid token is treated as a secret and never exposed in public logs, docs, metrics, or reports."
],
"disabledCommandTemplates": {
"buyOneDollarPrepaidToken": "npx awal x402 pay 'https://agi.apify.com/protocols/x402/prepaid-tokens?amount=1¤cy=usd' --max-amount 1000000 --json",
"disabledReason": "This command is documented for future operator-approved setup only. ApexScout did not run it, fund a wallet, create a token, or call Apify.",
"tokenHandling": "If approved later, capture the token only in a secret store. Never paste it into public docs, reports, metrics, or chat."
},
"proposedApexScoutUseCases": [
{
"id": "market-context-snapshot",
"label": "Market context snapshot",
"status": "requires-operator-actor-selection",
"why": "Useful when ApexScout needs a paid upstream data point to enrich a buyer-facing report after a human approves cost and target."
},
{
"id": "seller-route-evidence-check",
"label": "Seller route evidence check",
"status": "requires-budget-and-privacy-review",
"why": "Could help validate public route claims when the target source explicitly allows collection and the result stays private until reviewed."
}
],
"publicSurfacePolicy": {
"publishReadinessOnly": true,
"doNotClaimApifyEndorsement": true,
"doNotClaimCoinbaseEndorsement": true,
"doNotClaimGuaranteedRevenue": true,
"doNotCallApifyFromPublicPage": true,
"doNotExposePrepaidToken": true,
"aggregateOnlyMetrics": true
},
"links": {
"agentWalletSkillPack": "https://apexscout.ai/agent-wallet-skill-pack",
"agentWalletSkillPackApi": "https://apexscout.ai/api/agent-wallet-skill-pack",
"docs": "https://apexscout.ai/docs.json",
"cashRegister": "https://apexscout.ai/api/cash-register",
"metrics": "https://apexscout.ai/api/metrics",
"mcpToolPack": "https://apexscout.ai/api/mcp-tool-pack",
"openApi": "https://apexscout.ai/api/agentcore-openapi.json"
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"apifyApiCalled": false,
"apifyActorRunCreated": false,
"apifyPrepaidTokenCreated": false,
"apifyAccountCreated": false,
"walletFunded": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"outreachCreated": false,
"scrapingPerformed": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"apifyTokenExposed": false,
"rawUpstreamResultPublished": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false
}
},
"cloudflareMonetizationGatewayRuleExportAvailable": true,
"cloudflareMonetizationGatewayRuleExport": {
"available": true,
"mode": "cloudflare-monetization-gateway-rule-export",
"release": "v2.2.228-live-command-center",
"path": "/cloudflare-monetization-gateway-rules",
"apiPath": "/api/cloudflare-monetization-gateway-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"title": "Cloudflare Monetization Gateway Rule Export",
"purpose": "Publish ApexScout's intended Cloudflare Monetization Gateway rule model in a machine-readable form without mutating Cloudflare, changing DNS, or calling paid routes.",
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedForApexScout": "Cloudflare is moving toward first-party payment rules for APIs, pages, datasets, and MCP tools. ApexScout can expose a clean rules export now while keeping the live custom Worker bridge as the current implementation."
},
"integrationStatus": "export-ready-custom-worker-live",
"officialCloudflareMonetizationGatewayRulesCreated": false,
"cloudflareApiCalledByExporter": false,
"terraformAppliedByExporter": false,
"dashboardRuleCreatedByExporter": false,
"liveWorkerStillAuthoritative": true,
"liveWorkerHealthPath": "/__apexscout/cloudflare-x402/health",
"ruleSummary": {
"freeAllowRuleCount": 2,
"paidRuleCount": 4,
"blockRuleCount": 1,
"variablePriceRuleCount": 1,
"totalExportedRuleCount": 8
},
"ruleExport": {
"schemaVersion": "apexscout.cloudflare-monetization-gateway.rules.v1",
"generatedFor": "cloudflare-monetization-gateway",
"currentImplementation": "apexscout-cloudflare-x402-billing-proxy-worker",
"serviceUrl": "https://apexscout.ai",
"stablecoinSettlement": {
"protocol": "x402",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"sellerWalletChanged": false
},
"freeRules": [
{
"id": "apexscout-free-agent-metadata",
"action": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"action": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"action": "charge_x402",
"method": "GET",
"path": "/api/opportunity-check",
"expression": "http.request.method == \"GET\" and http.request.uri.path == \"/api/opportunity-check\"",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"action": "charge_x402",
"method": "GET",
"path": "/api/agent-commerce-reliability-ledger",
"expression": "http.request.method == \"GET\" and http.request.uri.path == \"/api/agent-commerce-reliability-ledger\"",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"action": "charge_x402",
"method": "GET",
"path": "/api/x402-compatibility-witness",
"expression": "http.request.method == \"GET\" and http.request.uri.path == \"/api/x402-compatibility-witness\"",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"action": "charge_x402",
"method": "POST",
"path": "/api/agent-revenue-audit",
"expression": "http.request.method == \"POST\" and http.request.uri.path == \"/api/agent-revenue-audit\"",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization"
}
],
"variablePriceRules": [
{
"id": "apexscout-apify-upstream-budget-capsule",
"action": "disabled_variable_price_placeholder",
"status": "disabled-until-operator-budget-and-actor-selection",
"maxAmountUsd": 0,
"appliesTo": "/api/apify-x402-upstream-readiness",
"purpose": "Reserve a future rule shape for approved upstream Actor runs without enabling upstream spend today.",
"paidUpstreamCallsMade": false,
"apifyActorRunExecuted": false,
"apifyPrepaidTokenCreated": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"action": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
]
},
"operatorApplyPlan": [
"Keep the current Worker bridge live until Cloudflare's managed Monetization Gateway API is available to this account.",
"Use this export as the review checklist for future Cloudflare dashboard, API, or Terraform rules.",
"Apply free allow rules before paid rules so docs, MCP, OpenAPI, policy, receipt, and readiness pages stay readable.",
"Apply the one-cent proof rule before any higher-value POST route.",
"Keep the Agent Revenue Audit POST origin-authoritative until pre-charge body validation exists.",
"Keep variable upstream pricing disabled until an operator supplies a budget, an allowed Actor, and a result privacy plan."
],
"noSpendBoundary": {
"ruleExportIsFree": true,
"cloudflareApiCalledByExporter": false,
"cloudflareDashboardChangedByExporter": false,
"cloudflareTerraformAppliedByExporter": false,
"dnsChangedByExporter": false,
"workerChangedByExporter": false,
"paymentAttemptedByExporter": false,
"paidRouteCalledByExporter": false,
"paidUpstreamCalls": false,
"apifyActorRunExecuted": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"officialCloudflareEndorsementClaimed": false,
"officialCoinbaseEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"agentReceiptContractAvailable": true,
"agentReceiptContract": {
"available": true,
"mode": "agent-receipt-contract",
"release": "v2.2.228-live-command-center",
"path": "/agent-receipt-contract",
"apiPath": "/api/agent-receipt-contract",
"wellKnownPath": "/.well-known/apexscout-agent-receipt-contract.json",
"title": "ApexScout Agent Receipt Contract",
"purpose": "Tell buyer agents exactly what must be true before and after a buyer-controlled x402 retry can count as paid proof.",
"sourceTag": "agent-receipt-contract",
"sourceBucket": "agentReceiptContract",
"oneCentProof": {
"method": "GET",
"route": "/api/opportunity-check",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json"
},
"higherValueRoute": {
"method": "POST",
"route": "/api/agent-revenue-audit",
"price": "$5.00",
"priceUsd": "5.00",
"maxAmountAtomicUsdc": "5000000",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"prepareFirst": true,
"noSpendPrepSurface": "/agent-revenue-audit-builder",
"commandPublished": false,
"commandOmittedReason": "The $5 route needs buyer-specific JSON and should not be paid before a no-spend prepare/ready-to-pay result."
},
"receiptAcceptanceContract": {
"paidProofRequiresHttp200": true,
"unpaid402IsNotRevenue": true,
"buyerMustApproveRouteMethodNetworkAndAmount": true,
"retryMustUseBuyerControlledWallet": true,
"maxAmountMustNotExceedAtomicUsdc": "10000",
"acceptedReceiptEvidence": [
"HTTP 200 from the same route after a valid x402 retry.",
"Client-visible x402 payment response or receipt metadata if the buyer wallet exposes it.",
"ApexScout aggregate paid completion counter moves only after the paid retry succeeds."
],
"rejectedReceiptEvidence": [
"HTTP 402 challenge only.",
"Copying a command without running it from a buyer wallet.",
"GET route reads from monitors, crawlers, or deployment checks.",
"Any retry with a different route, method, price, network, or source tag."
]
},
"stopRules": [
"Stop if the buyer has not approved spend.",
"Stop if max amount, network, route, method, or source tag differs from this contract.",
"Stop if the client cannot show the unpaid 402 challenge before payment.",
"Stop if a paid retry would be used only to move a metric.",
"Stop after one successful paid HTTP 200 unless the buyer explicitly approves another payment."
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidProofCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceTag": "agent-receipt-contract",
"sourceBucket": "agentReceiptContract",
"unpaidChallengeIsRevenue": false,
"receiptContractReadIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"links": {
"proofPage": "https://apexscout.ai/x402-proof",
"proofApi": "https://apexscout.ai/api/x402-proof",
"cashRegister": "https://apexscout.ai/api/cash-register",
"metrics": "https://apexscout.ai/api/metrics",
"dashboard": "https://apexscout.ai/api/dashboard",
"paidTools": "https://apexscout.ai/.well-known/apexscout-paid-tools.json",
"monetizationGatewayRuleExport": "https://apexscout.ai/cloudflare-monetization-gateway-rules"
},
"noSpendBoundary": {
"contractIsFree": true,
"paymentAttemptedByContract": false,
"paidRouteCalledByContract": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"outreachCreated": false,
"scrapingPerformed": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawReceiptStored": false,
"rawPaymentPayloadStored": false,
"fullWalletAddressPublished": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false
}
},
"x402scanDiscoveryAvailable": true,
"x402scanDiscovery": {
"available": true,
"mode": "x402scan-discovery-readiness",
"release": "v2.2.228-live-command-center",
"generatedAt": "2026-07-15T21:34:22.000Z",
"validUntil": "2026-07-22T21:34:22.000Z",
"contentDigest": "sha256:e667e981877a2cc7467980e4e0a98ea0fed68fabf9d6cba5a36d49d0ce7e6fd6",
"path": "/x402scan-discovery",
"apiPath": "/api/x402scan-discovery",
"openApiPath": "/openapi.json",
"wellKnownPath": "/.well-known/x402",
"title": "ApexScout x402scan Discovery",
"purpose": "Expose ApexScout's paid x402 routes in a crawler-friendly shape while keeping discovery free, read-only, and buyer-controlled.",
"standardSignals": {
"openApiFirstAvailable": true,
"openApiUrl": "https://apexscout.ai/openapi.json",
"agentCoreOpenApiAlias": "https://apexscout.ai/api/agentcore-openapi.json",
"wellKnownX402Available": true,
"wellKnownX402Url": "https://apexscout.ai/.well-known/x402",
"runtime402Authoritative": true,
"paidOperationsDeclarePaymentInfo": true,
"endpointOnlyFallbackSupported": true
},
"resources": [
{
"id": "x402-compatibility-witness",
"label": "ApexScout x402 Compatibility Witness",
"description": "Buy one expiring x402 buyer-client compatibility witness after a valid free preflight match.",
"method": "GET",
"path": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"protocol": "x402",
"protocols": [
"x402"
],
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"input": {
"requestBodyRequired": false,
"queryParameters": [
{
"name": "matchId",
"required": true,
"type": "string"
}
]
},
"output": {
"contentType": "application/json",
"schema": {
"type": "object",
"required": [
"product",
"witnessId",
"matchId",
"targetResourceUrl",
"testedMethod",
"generatedAt",
"validUntil",
"contentDigest",
"compatibilityVerdict",
"merchantProfile",
"merchantProfileAssessment",
"verifiableBuyerPolicy",
"trustChainEvidence",
"buyerClientMatrix",
"contractFindings",
"failureCodes",
"verifiedMitigationSteps",
"reliabilityLedger",
"attestationStatus",
"signedOfferReceiptStatus",
"paymentIdentifierStatus"
],
"properties": {
"product": {
"type": "string",
"const": "x402-compatibility-witness"
},
"witnessId": {
"type": "string"
},
"matchId": {
"type": "string"
},
"targetResourceUrl": {
"type": "string",
"format": "uri"
},
"testedMethod": {
"type": "string",
"const": "GET"
},
"generatedAt": {
"type": "string",
"format": "date-time"
},
"validUntil": {
"type": "string",
"format": "date-time"
},
"contentDigest": {
"type": "string",
"pattern": "^sha256:[0-9a-f]{64}$"
},
"compatibilityVerdict": {
"type": "string"
},
"merchantProfile": {
"type": "string",
"enum": [
"generic-x402-v2",
"agentcash-router-1.18",
"agentcash-router-1.19"
]
},
"merchantProfileAssessment": {
"type": "object"
},
"verifiableBuyerPolicy": {
"type": "object"
},
"trustChainEvidence": {
"type": "object"
},
"buyerClientMatrix": {
"type": "array",
"items": {
"type": "object"
}
},
"contractFindings": {
"type": "array",
"items": {
"type": "object"
}
},
"failureCodes": {
"type": "array",
"items": {
"type": "string"
}
},
"verifiedMitigationSteps": {
"type": "array",
"items": {
"type": "object"
}
},
"reliabilityLedger": {
"type": "object"
},
"attestationStatus": {
"type": "string",
"const": "not_enabled"
},
"signedOfferReceiptStatus": {
"type": "string",
"const": "eip712_privacy_safe"
},
"paymentIdentifierStatus": {
"type": "string",
"const": "optional_request_fingerprint_bound"
}
}
}
},
"storefront": {
"job": "Buy one expiring x402 buyer-client compatibility witness after a valid free preflight match.",
"input": "No request body.",
"price": "$0.25",
"result": "One JSON response after successful payment.",
"oneJob": true,
"oneInputContract": true,
"oneFixedPrice": true,
"oneResult": true
},
"paymentInfo": {
"protocol": "x402",
"protocols": [
{
"x402": {}
}
],
"rail": "Base mainnet x402 exact payment",
"network": "eip155:8453",
"asset": "USDC",
"currency": "USDC",
"currencyDisplay": "USD",
"price": {
"mode": "fixed",
"currency": "USD",
"amount": "0.25",
"display": "$0.25"
},
"amountAtomicUnits": "250000",
"amountAtomicUsdc": "250000",
"route": "/api/x402-compatibility-witness",
"method": "GET",
"requestBodyRequired": false,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"unpaidResponseIsAuthoritative": true,
"buyerApprovalRequired": true,
"buyerWalletManagedBy": "Buyer-controlled payment-protocol client",
"sellerWalletPublicInSpec": false,
"payToSource": "runtime HTTP 402 payment challenge",
"automaticSpendingByApexScout": false
}
},
{
"id": "agent-commerce-reliability-ledger",
"label": "ApexScout Agent Commerce Reliability Ledger",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"method": "GET",
"path": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"protocol": "x402",
"protocols": [
"x402",
"mpp"
],
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"input": {
"requestBodyRequired": false,
"queryParameters": [
{
"name": "src",
"required": false,
"type": "string",
"aggregateOnly": true
}
]
},
"output": {
"contentType": "application/json",
"schema": {
"type": "object",
"required": [
"product",
"schemaVersion",
"release",
"generatedAt",
"validUntil",
"previousDigest",
"contentDigest",
"editionDelta",
"coverage",
"compatibilityMatrix",
"failureSignatures",
"verifiedFixes",
"buyerRecipes",
"bazaarMcpBuyerRecipe",
"buyerRuntimeRecipes",
"evidencePolicy",
"privacy"
],
"properties": {
"product": {
"type": "string",
"const": "agent-commerce-reliability-ledger"
},
"schemaVersion": {
"type": "string",
"const": "1.3.0"
},
"release": {
"type": "string"
},
"generatedAt": {
"type": "string",
"format": "date-time"
},
"validUntil": {
"type": "string",
"format": "date-time"
},
"previousDigest": {
"type": "string",
"pattern": "^sha256:[0-9a-f]{64}$"
},
"contentDigest": {
"type": "string",
"pattern": "^sha256:[0-9a-f]{64}$"
},
"editionDelta": {
"type": "object"
},
"coverage": {
"type": "object",
"properties": {
"buyerClients": {
"type": "integer"
},
"clientVersions": {
"type": "integer"
},
"failureSignatures": {
"type": "integer"
},
"verifiedMitigations": {
"type": "integer"
}
}
},
"compatibilityMatrix": {
"type": "array",
"items": {
"type": "object"
}
},
"failureSignatures": {
"type": "array",
"items": {
"type": "object"
}
},
"verifiedFixes": {
"type": "array",
"items": {
"type": "object"
}
},
"buyerRecipes": {
"type": "array",
"items": {
"type": "object"
}
},
"bazaarMcpBuyerRecipe": {
"type": "object"
},
"buyerRuntimeRecipes": {
"type": "array",
"minItems": 5,
"maxItems": 5,
"items": {
"type": "object"
}
},
"evidencePolicy": {
"type": "object"
},
"privacy": {
"type": "object"
}
}
}
},
"storefront": {
"job": "Diagnose x402 buyer-client failures with a current compatibility and remediation ledger.",
"input": "No request body; optional allowlisted aggregate source tag only.",
"price": "$0.10",
"result": "One deterministic JSON Ledger with compatibility, failure signatures, verified fixes, digest, and freshness window.",
"oneJob": true,
"oneInputContract": true,
"oneFixedPrice": true,
"oneResult": true
},
"paymentInfo": {
"protocol": "x402",
"protocols": [
{
"x402": {}
},
{
"mpp": {
"method": "tempo",
"intent": "charge",
"network": "eip155:4217",
"currency": "0x20C000000000000000000000b9537d11c60E8b50",
"challengeHeader": "WWW-Authenticate",
"credentialHeader": "Authorization: Payment",
"receiptHeader": "Payment-Receipt"
}
}
],
"rail": "Base mainnet x402 exact payment",
"network": "eip155:8453",
"asset": "USDC",
"currency": "USDC",
"currencyDisplay": "USD",
"price": {
"mode": "fixed",
"currency": "USD",
"amount": "0.10",
"display": "$0.10"
},
"amountAtomicUnits": "100000",
"amountAtomicUsdc": "100000",
"route": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"requestBodyRequired": false,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"unpaidResponseIsAuthoritative": true,
"buyerApprovalRequired": true,
"buyerWalletManagedBy": "Buyer-controlled payment-protocol client",
"sellerWalletPublicInSpec": false,
"payToSource": "runtime HTTP 402 payment challenge",
"automaticSpendingByApexScout": false
}
},
{
"id": "one-cent-proof",
"label": "One-cent x402 proof",
"description": "Return one one-cent x402 payment proof after buyer-controlled settlement. Successful paid proof includes one free receipt-bound compatibility diagnosis. It requires explicit action, never navigates or pays automatically, may return no paid recommendation, and requires separate buyer approval for any later paid recommendation.",
"method": "GET",
"path": "/api/opportunity-check",
"route": "/api/opportunity-check",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"protocol": "x402",
"protocols": [
"x402"
],
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"input": {
"requestBodyRequired": false,
"queryParameters": [
{
"name": "src",
"required": false,
"type": "string"
}
]
},
"output": {
"contentType": "application/json",
"schema": {
"type": "object"
}
},
"storefront": {
"job": "Complete one one-cent x402 payment proof with an included receipt-bound free diagnosis.",
"input": "No request body; optional allowlisted aggregate source tag only.",
"price": "$0.01",
"result": "One paid proof JSON response plus one explicit, no-auto-navigation, no-auto-pay receipt-bound free diagnosis that may return no paid recommendation.",
"oneJob": true,
"oneInputContract": true,
"oneFixedPrice": true,
"oneResult": true
},
"sourceTag": "agent-receipt-contract",
"paymentInfo": {
"protocol": "x402",
"protocols": [
{
"x402": {}
}
],
"rail": "Base mainnet x402 exact payment",
"network": "eip155:8453",
"asset": "USDC",
"currency": "USDC",
"currencyDisplay": "USD",
"price": {
"mode": "fixed",
"currency": "USD",
"amount": "0.01",
"display": "$0.01"
},
"amountAtomicUnits": "10000",
"amountAtomicUsdc": "10000",
"route": "/api/opportunity-check",
"method": "GET",
"requestBodyRequired": false,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"unpaidResponseIsAuthoritative": true,
"buyerApprovalRequired": true,
"buyerWalletManagedBy": "Buyer-controlled payment-protocol client",
"sellerWalletPublicInSpec": false,
"payToSource": "runtime HTTP 402 payment challenge",
"automaticSpendingByApexScout": false
},
"successfulPaidProofBenefit": {
"statement": "Successful paid proof includes one free receipt-bound compatibility diagnosis.",
"includedFreeDiagnoses": 1,
"explicitActionRequired": true,
"automaticNavigation": false,
"automaticPayment": false,
"laterPaidRecommendationRequiresSeparateApproval": true,
"noUsefulFindingMayReturnNoPaidRecommendation": true
}
},
{
"id": "agent-revenue-audit",
"label": "Agent Revenue Audit",
"description": "Return an Agent Revenue Audit for a buyer-provided service brief after buyer-controlled x402 payment.",
"method": "POST",
"path": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"protocol": "x402",
"protocols": [
"x402"
],
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"input": {
"requestBodyRequired": true,
"contentType": "application/json",
"authorizationHeader": "x-apexscout-audit-authorization",
"authorizationRequired": true,
"schema": {
"type": "object",
"additionalProperties": false,
"properties": {
"serviceName": {
"type": "string",
"description": "Buyer-owned service, agent, API, or paid route being audited."
},
"currentOffer": {
"type": "string",
"description": "What the buyer currently sells or intends to sell."
},
"targetBuyer": {
"type": "string",
"description": "Who the buyer wants the paid route to convert."
},
"currentProblem": {
"type": "string",
"description": "The buyer's current monetization or conversion problem."
},
"currentPaymentRail": {
"type": "string"
},
"riskTolerance": {
"type": "string"
},
"source": {
"type": "string"
}
},
"required": [
"serviceName",
"currentOffer",
"targetBuyer",
"currentProblem"
]
}
},
"output": {
"contentType": "application/json",
"schema": {
"type": "object"
}
},
"storefront": {
"job": "Return an Agent Revenue Audit for a buyer-provided service brief after buyer-controlled x402 payment.",
"input": "One JSON request body.",
"price": "$5.00",
"result": "One JSON response after successful payment.",
"oneJob": true,
"oneInputContract": true,
"oneFixedPrice": true,
"oneResult": true
},
"noSpendPaymentIntent": "/agent-revenue-audit-builder",
"noSpendPaymentIntentApi": "/api/agent-revenue-audit-builder/action-pack",
"paymentInfo": {
"protocol": "x402",
"protocols": [
{
"x402": {}
}
],
"rail": "Base mainnet x402 exact payment",
"network": "eip155:8453",
"asset": "USDC",
"currency": "USDC",
"currencyDisplay": "USD",
"price": {
"mode": "fixed",
"currency": "USD",
"amount": "5.00",
"display": "$5.00"
},
"amountAtomicUnits": "5000000",
"amountAtomicUsdc": "5000000",
"route": "/api/agent-revenue-audit",
"method": "POST",
"requestBodyRequired": true,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"unpaidResponseIsAuthoritative": true,
"buyerApprovalRequired": true,
"buyerWalletManagedBy": "Buyer-controlled payment-protocol client",
"sellerWalletPublicInSpec": false,
"payToSource": "runtime HTTP 402 payment challenge",
"noSpendPaymentIntent": "/agent-revenue-audit-builder",
"noSpendPaymentIntentApi": "/api/agent-revenue-audit-builder/action-pack",
"automaticSpendingByApexScout": false
}
}
],
"agentCommerceReliabilityLedger": {
"id": "agent-commerce-reliability-ledger",
"title": "ApexScout Agent Commerce Reliability Ledger",
"release": "v2.2.228-live-command-center",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"storefront": {
"job": "Diagnose x402 buyer-client failures with current compatibility and remediation evidence.",
"input": "No request body; optional allowlisted aggregate source tag only.",
"price": "$0.10",
"result": "One deterministic JSON Ledger with compatibility, failure signatures, verified fixes, digest, and freshness window.",
"oneJob": true,
"oneInputContract": true,
"oneFixedPrice": true,
"oneResult": true
},
"searchQueries": [
"x402 buyer compatibility",
"AWAL payment error",
"invalid payment required response",
"Cloudflare x402 failure",
"agent payment troubleshooting",
"x402 wallet compatibility",
"payment required header mismatch",
"agent commerce reliability data",
"x402 retry failure",
"buyer agent payment diagnostics",
"x402 remediation guidance",
"agent payment failure signatures"
],
"freePreview": {
"page": "https://apexscout.ai/agent-commerce-reliability-ledger",
"api": "https://apexscout.ai/api/agent-commerce-reliability-ledger/preview",
"fullDatasetExposed": false,
"noSpend": true
},
"paidResource": {
"method": "GET",
"path": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": null,
"priceUsd": "0.10",
"displayPrice": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"scheme": "exact",
"rail": "Base mainnet x402",
"canonicalPaymentProtocol": "x402",
"paymentProtocols": [
{
"protocol": "x402",
"network": "eip155:8453",
"rail": "Base mainnet x402",
"challengeHeader": "PAYMENT-REQUIRED",
"receiptHeader": "PAYMENT-RESPONSE"
},
{
"protocol": "mpp",
"method": "tempo",
"intent": "charge",
"network": "eip155:4217",
"rail": "Tempo mainnet MPP",
"currency": "0x20C000000000000000000000b9537d11c60E8b50",
"challengeHeader": "WWW-Authenticate",
"credentialHeader": "Authorization: Payment",
"receiptHeader": "Payment-Receipt",
"durableReplayProtection": true
}
],
"requestBodyRequired": false,
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerControlledPaymentOnly": true,
"paymentIdentifier": {
"supported": true,
"required": false,
"requestFingerprintBound": true,
"duplicatePaymentProcessingPrevented": true,
"cacheTtlSeconds": 86400,
"expiryPolicy": "After the cache TTL expires, the identifier may be processed as a new request and therefore requires fresh explicit buyer approval."
}
},
"responseSchema": {
"type": "object",
"required": [
"product",
"schemaVersion",
"release",
"generatedAt",
"validUntil",
"previousDigest",
"contentDigest",
"editionDelta",
"coverage",
"compatibilityMatrix",
"failureSignatures",
"verifiedFixes",
"buyerRecipes",
"bazaarMcpBuyerRecipe",
"buyerRuntimeRecipes",
"evidencePolicy",
"privacy"
],
"properties": {
"product": {
"type": "string",
"const": "agent-commerce-reliability-ledger"
},
"schemaVersion": {
"type": "string",
"const": "1.3.0"
},
"release": {
"type": "string"
},
"generatedAt": {
"type": "string",
"format": "date-time"
},
"validUntil": {
"type": "string",
"format": "date-time"
},
"previousDigest": {
"type": "string",
"pattern": "^sha256:[0-9a-f]{64}$"
},
"contentDigest": {
"type": "string",
"pattern": "^sha256:[0-9a-f]{64}$"
},
"editionDelta": {
"type": "object"
},
"coverage": {
"type": "object",
"properties": {
"buyerClients": {
"type": "integer"
},
"clientVersions": {
"type": "integer"
},
"failureSignatures": {
"type": "integer"
},
"verifiedMitigations": {
"type": "integer"
}
}
},
"compatibilityMatrix": {
"type": "array",
"items": {
"type": "object"
}
},
"failureSignatures": {
"type": "array",
"items": {
"type": "object"
}
},
"verifiedFixes": {
"type": "array",
"items": {
"type": "object"
}
},
"buyerRecipes": {
"type": "array",
"items": {
"type": "object"
}
},
"bazaarMcpBuyerRecipe": {
"type": "object"
},
"buyerRuntimeRecipes": {
"type": "array",
"minItems": 5,
"maxItems": 5,
"items": {
"type": "object"
}
},
"evidencePolicy": {
"type": "object"
},
"privacy": {
"type": "object"
}
}
},
"responseExample": {
"product": "agent-commerce-reliability-ledger",
"schemaVersion": "1.3.0",
"release": "v2.2.228-live-command-center",
"generatedAt": "2026-07-15T21:34:22.000Z",
"validUntil": "2026-07-22T21:34:22.000Z",
"previousDigest": "sha256:eaa5b5f44de23836adf144850860d019b77c9d07afdd9a75f31d0874d8d44080",
"contentDigest": "sha256:e667e981877a2cc7467980e4e0a98ea0fed68fabf9d6cba5a36d49d0ce7e6fd6",
"editionDelta": {
"summary": "Added a public-safe AgentCash Router 1.18.0 discovery-shape failure signature and canonical offers[] remediation evidence.",
"entriesAdded": [
"agentcash_router_noncanonical_x_payment_info",
"FIX-007"
],
"entriesChanged": [
"agentcash-router-1.18-profile",
"mpp-discovery-validation"
],
"entriesRetired": [],
"compatibilityEntriesAdded": 0,
"failureSignaturesAdded": 1,
"fullPaidDatasetExposed": false
},
"coverage": {
"buyerClients": 4,
"clientVersions": 6,
"failureSignatures": 12,
"verifiedMitigations": 7
},
"compatibilityMatrix": "full paid array",
"failureSignatures": "full paid array",
"verifiedFixes": "full paid array",
"buyerRecipes": "full paid array",
"bazaarMcpBuyerRecipe": {
"searchQueries": [
"agent commerce reliability data",
"x402 buyer compatibility",
"agent payment failure signatures",
"x402 remediation guidance"
],
"searchTool": "search_resources",
"purchaseTool": "proxy_tool_call",
"buyerControlledPayment": true,
"apexScoutPaysForBuyer": false,
"paidCompletionDefinition": "settled buyer-controlled payment followed by full Ledger delivery"
},
"buyerRuntimeRecipes": [
{
"id": "RUNTIME-A",
"runtime": "x402scan Composer / AgentCash",
"sourceTags": [
"x402scan-composer",
"x402scan-composer-preview",
"x402scan-composer-ledger",
"agentcash-skill",
"agentcash-skill-preview",
"agentcash-skill-ledger"
],
"discover": [
"Use Composer resource search or `npx -y agentcash@latest discover https://apexscout.ai`.",
"Read GET /api/agent-commerce-reliability-ledger/preview with src=x402scan-composer-preview or src=agentcash-skill-preview before considering payment."
],
"inspectPrice": [
"Run `npx -y agentcash@latest check https://apexscout.ai/api/agent-commerce-reliability-ledger` or inspect the Composer resource price.",
"Require GET, 0.10 USD, Base eip155:8453, and no request body."
],
"setMaximumSpend": [
"Set or retain a buyer-controlled maximum of $0.10 / 100000 atomic USDC for this task.",
"Allow at most one paid Ledger call for the task."
],
"approval": [
"Explain what the full Ledger adds beyond the preview.",
"Ask the buyer to explicitly approve the exact route, $0.10 amount, Base network, and single call."
],
"purchaseOnce": [
"Only after approval, call GET /api/agent-commerce-reliability-ledger once with src=x402scan-composer-ledger or src=agentcash-skill-ledger.",
"Do not retry automatically after any failure or HTTP 402."
],
"verifyDelivery": [
"Require HTTP 200 and the complete Ledger fields: edition delta, compatibility matrix, failure signatures, verified fixes, generatedAt, validUntil, and contentDigest.",
"Treat HTTP 402, search, preview, or resource selection as unpaid interest rather than revenue."
],
"stop": [
"Stop after one paid call, any rejection, a price or network mismatch, missing approval, or incomplete delivery.",
"Never request wallet secrets, private keys, seed phrases, signatures, or raw payment payloads."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-B",
"runtime": "Coinbase Agentic Wallet Payments MCP",
"sourceTags": [
"coinbase-payments-mcp"
],
"discover": [
"Install the official buyer runtime with `npx @coinbase/payments-mcp` and use its service discovery against apexscout.ai.",
"Read the free preview first at /api/agent-commerce-reliability-ledger/preview?src=coinbase-payments-mcp."
],
"inspectPrice": [
"Inspect the discovered Ledger contract and require GET, 0.10 USD, Base eip155:8453, and no request body.",
"Do not treat wallet funding, service discovery, or HTTP 402 as a purchase."
],
"setMaximumSpend": [
"In the buyer wallet UI, set max per call to $0.10 and keep the task/session allowance limited to one Ledger call.",
"The buyer, not ApexScout, controls wallet sign-in, funding, and limits."
],
"approval": [
"Show the route, price, network, freshness window, and one-call maximum.",
"Ask for explicit buyer approval before the MCP runtime is allowed to pay."
],
"purchaseOnce": [
"After approval, instruct Payments MCP to fetch /api/agent-commerce-reliability-ledger?src=coinbase-payments-mcp once.",
"Do not ask the runtime to retry automatically."
],
"verifyDelivery": [
"Require HTTP 200, a paid response receipt, the complete Ledger arrays, generatedAt, validUntil, and contentDigest.",
"Reject a response that remains HTTP 402 or omits the full paid dataset boundary."
],
"stop": [
"Stop after one paid call or any mismatch, rejection, or incomplete response.",
"Never paste email OTPs, wallet secrets, private keys, or payment payloads into ApexScout."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-C",
"runtime": "AWS AgentCore Gateway with Coinbase Bazaar MCP",
"sourceTags": [
"agentcore-bazaar"
],
"discover": [
"Add the official Coinbase Bazaar MCP target https://api.cdp.coinbase.com/platform/v2/x402/discovery/mcp to an owner-controlled AgentCore Gateway with no outbound authorization.",
"Search for ApexScout Agent Commerce Reliability Ledger, then read the free preview with src=agentcore-bazaar."
],
"inspectPrice": [
"Inspect the Bazaar result and runtime challenge; require GET, 0.10 USD / 100000 atomic USDC, and Base eip155:8453.",
"Do not select a similarly named resource or a route with different terms."
],
"setMaximumSpend": [
"Configure the owner-controlled AgentCore payment policy for a maximum $0.10 single call and one call for the task.",
"Do not enable an unbounded PaymentManager session."
],
"approval": [
"Show the exact selected resource, amount, network, and one-call policy.",
"Require explicit buyer or operator approval before the payment plugin handles the 402."
],
"purchaseOnce": [
"After approval, invoke the selected Ledger tool once through the Gateway using src=agentcore-bazaar when the runtime permits the query tag.",
"Do not issue a second tool call to repair telemetry or indexing."
],
"verifyDelivery": [
"Require successful tool delivery containing the complete Ledger, generatedAt, validUntil, and contentDigest.",
"Count a paid completion only after buyer-controlled settlement and full HTTP 200/tool delivery."
],
"stop": [
"Stop after one paid call, any policy denial, resource mismatch, 402 loop, or incomplete delivery.",
"ApexScout never receives the buyer's AgentCore credentials, payment instrument, or wallet secrets."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-D",
"runtime": "MPP Tempo buyer",
"sourceTags": [
"mpp-tempo"
],
"discover": [
"Read the free preview, then fetch the Ledger route without a credential and parse its WWW-Authenticate Payment challenge.",
"Use src=mpp-tempo only as an aggregate protocol source tag; it does not identify the buyer."
],
"inspectPrice": [
"Require tempo/charge, 0.10 USD / 100000 atomic USDC, Tempo eip155:4217, and no request body.",
"Read the recipient and expiry from the signed MPP challenge instead of static page copy."
],
"setMaximumSpend": [
"Keep the buyer-controlled maximum at $0.10 and allow one Ledger call for the task.",
"Do not reuse a credential or bypass the atomic replay guard."
],
"approval": [
"Show the exact Ledger route, amount, Tempo network, recipient, and one-call limit.",
"Require explicit buyer approval before creating the Payment credential."
],
"purchaseOnce": [
"After approval, retry GET /api/agent-commerce-reliability-ledger?src=mpp-tempo once with Authorization: Payment.",
"Do not retry after rejection, timeout, or incomplete delivery."
],
"verifyDelivery": [
"Require HTTP 200, Payment-Receipt, the complete Ledger arrays, generatedAt, validUntil, and contentDigest.",
"Treat the unpaid challenge as discovery and not as revenue."
],
"stop": [
"Stop after one paid call or any route, amount, network, recipient, expiry, or delivery mismatch.",
"Never send the MPP credential to the origin or expose it on aggregate surfaces."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-E",
"runtime": "Solana Agent Registry",
"sourceTags": [
"solana-agent-registry"
],
"discover": [
"Resolve the finalized ApexScout onchain identity, then read the public Registry metadata and free Commerce Explorer with src=solana-agent-registry.",
"Read the free Ledger preview with src=solana-agent-registry before considering the paid route."
],
"inspectPrice": [
"Require the existing GET Ledger route, paymentNetwork=solana, exact scheme, 0.10 USD / 100000 atomic USDC, Solana mainnet, and the published USDC mint.",
"Confirm the Registry identity proof and seller recipient from public metadata without requesting a wallet secret."
],
"setMaximumSpend": [
"Keep the buyer-controlled maximum at $0.10 and permit one Ledger call for the task.",
"A Registry entry, metadata read, preview, or HTTP 402 is not purchase approval."
],
"approval": [
"Show the exact route, Solana network, recipient, amount, edition digest, and one-call maximum.",
"Ask the buyer to explicitly approve the selected Solana Ledger call."
],
"purchaseOnce": [
"Only after approval, call GET /api/agent-commerce-reliability-ledger?paymentNetwork=solana&src=solana-agent-registry once with the buyer-controlled wallet.",
"Never pay or retry automatically."
],
"verifyDelivery": [
"Require buyer-controlled settlement, HTTP 200, a protocol-native receipt, and the complete Ledger with generatedAt, validUntil, and contentDigest.",
"Keep the onchain identity transaction separate from a paid Ledger completion."
],
"stop": [
"Stop after one paid call or any identity, route, price, network, asset, recipient, expiry, receipt, or delivery mismatch.",
"Never request private keys, seed phrases, wallet exports, signatures, or raw payment payloads."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
}
]
},
"freshnessPolicy": {
"cadence": "weekly evidence-gated edition with a seven-day maximum age",
"staleAfter": "2026-07-22T21:34:22.000Z",
"buyerRule": "Do not use the artifact as current after validUntil; fetch a new paid copy.",
"compatibilityEntryStaleAfterDays": 30,
"refreshRule": "Only ApexScout-owned public-safe evidence or approved official protocol documentation may change entries."
},
"privacyPolicy": {
"aggregateOnlyMetrics": true,
"buyerLevelDataExposed": false,
"rawBuyerInputExposed": false,
"rawLogsExposed": false,
"rawUserAgentsExposed": false,
"ipAddressesExposed": false,
"fullWalletAddressesExposed": false,
"paymentSignaturesExposed": false,
"rawPaymentPayloadsExposed": false,
"secretsExposed": false,
"requestBodyRequired": false,
"accountRequired": false,
"apiKeyRequired": false
},
"paidCompletionDefinition": "buyer-controlled x402 or MPP payment followed by HTTP 200 full-ledger delivery",
"bazaarMcpBuyerRecipe": {
"searchQueries": [
"agent commerce reliability data",
"x402 buyer compatibility",
"agent payment failure signatures",
"x402 remediation guidance"
],
"searchTool": "search_resources",
"purchaseTool": "proxy_tool_call",
"buyerControlledPayment": true,
"apexScoutPaysForBuyer": false,
"paidCompletionDefinition": "settled buyer-controlled payment followed by full Ledger delivery"
},
"mppMarketplaceBuyerRecipe": {
"id": "mpp-native-ledger-purchase",
"status": "prepared-pending-owner-controlled-directory-publication",
"discoverySources": [
"MPPScan",
"mpp.dev"
],
"steps": [
"Discover ApexScout through MPPScan or the mpp.dev catalog after an owner-controlled listing is public; until then use the canonical ApexScout preview and docs.",
"Inspect GET /api/agent-commerce-reliability-ledger and confirm the fixed $0.10 charge.",
"Verify tempo/charge, Tempo eip155:4217, 100000 atomic USDC, recipient, issuedAt, and expiresAt from the live challenge.",
"Confirm the current Ledger edition and content digest on the free preview.",
"Ask for explicit buyer approval for one $0.10 call.",
"Pay once with the buyer's own MPP client. ApexScout never operates the buyer wallet.",
"Require Payment-Receipt, HTTP 200, and the complete Ledger delivery.",
"Stop after delivery or any mismatch, expiry, rejection, or incomplete response; never pay or retry automatically."
],
"expiryRule": "If the Commerce Intent expires before payment begins, fetch one fresh unpaid challenge without a payment credential, verify identical terms, and ask for fresh approval. The refresh is stateless and a settled intent can never refresh into another charge.",
"maximumPaidCalls": 1,
"apexScoutOperatesBuyerWallet": false,
"externalListingClaimed": false
},
"buyerRuntimeRecipes": [
{
"id": "RUNTIME-A",
"runtime": "x402scan Composer / AgentCash",
"sourceTags": [
"x402scan-composer",
"x402scan-composer-preview",
"x402scan-composer-ledger",
"agentcash-skill",
"agentcash-skill-preview",
"agentcash-skill-ledger"
],
"discover": [
"Use Composer resource search or `npx -y agentcash@latest discover https://apexscout.ai`.",
"Read GET /api/agent-commerce-reliability-ledger/preview with src=x402scan-composer-preview or src=agentcash-skill-preview before considering payment."
],
"inspectPrice": [
"Run `npx -y agentcash@latest check https://apexscout.ai/api/agent-commerce-reliability-ledger` or inspect the Composer resource price.",
"Require GET, 0.10 USD, Base eip155:8453, and no request body."
],
"setMaximumSpend": [
"Set or retain a buyer-controlled maximum of $0.10 / 100000 atomic USDC for this task.",
"Allow at most one paid Ledger call for the task."
],
"approval": [
"Explain what the full Ledger adds beyond the preview.",
"Ask the buyer to explicitly approve the exact route, $0.10 amount, Base network, and single call."
],
"purchaseOnce": [
"Only after approval, call GET /api/agent-commerce-reliability-ledger once with src=x402scan-composer-ledger or src=agentcash-skill-ledger.",
"Do not retry automatically after any failure or HTTP 402."
],
"verifyDelivery": [
"Require HTTP 200 and the complete Ledger fields: edition delta, compatibility matrix, failure signatures, verified fixes, generatedAt, validUntil, and contentDigest.",
"Treat HTTP 402, search, preview, or resource selection as unpaid interest rather than revenue."
],
"stop": [
"Stop after one paid call, any rejection, a price or network mismatch, missing approval, or incomplete delivery.",
"Never request wallet secrets, private keys, seed phrases, signatures, or raw payment payloads."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-B",
"runtime": "Coinbase Agentic Wallet Payments MCP",
"sourceTags": [
"coinbase-payments-mcp"
],
"discover": [
"Install the official buyer runtime with `npx @coinbase/payments-mcp` and use its service discovery against apexscout.ai.",
"Read the free preview first at /api/agent-commerce-reliability-ledger/preview?src=coinbase-payments-mcp."
],
"inspectPrice": [
"Inspect the discovered Ledger contract and require GET, 0.10 USD, Base eip155:8453, and no request body.",
"Do not treat wallet funding, service discovery, or HTTP 402 as a purchase."
],
"setMaximumSpend": [
"In the buyer wallet UI, set max per call to $0.10 and keep the task/session allowance limited to one Ledger call.",
"The buyer, not ApexScout, controls wallet sign-in, funding, and limits."
],
"approval": [
"Show the route, price, network, freshness window, and one-call maximum.",
"Ask for explicit buyer approval before the MCP runtime is allowed to pay."
],
"purchaseOnce": [
"After approval, instruct Payments MCP to fetch /api/agent-commerce-reliability-ledger?src=coinbase-payments-mcp once.",
"Do not ask the runtime to retry automatically."
],
"verifyDelivery": [
"Require HTTP 200, a paid response receipt, the complete Ledger arrays, generatedAt, validUntil, and contentDigest.",
"Reject a response that remains HTTP 402 or omits the full paid dataset boundary."
],
"stop": [
"Stop after one paid call or any mismatch, rejection, or incomplete response.",
"Never paste email OTPs, wallet secrets, private keys, or payment payloads into ApexScout."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-C",
"runtime": "AWS AgentCore Gateway with Coinbase Bazaar MCP",
"sourceTags": [
"agentcore-bazaar"
],
"discover": [
"Add the official Coinbase Bazaar MCP target https://api.cdp.coinbase.com/platform/v2/x402/discovery/mcp to an owner-controlled AgentCore Gateway with no outbound authorization.",
"Search for ApexScout Agent Commerce Reliability Ledger, then read the free preview with src=agentcore-bazaar."
],
"inspectPrice": [
"Inspect the Bazaar result and runtime challenge; require GET, 0.10 USD / 100000 atomic USDC, and Base eip155:8453.",
"Do not select a similarly named resource or a route with different terms."
],
"setMaximumSpend": [
"Configure the owner-controlled AgentCore payment policy for a maximum $0.10 single call and one call for the task.",
"Do not enable an unbounded PaymentManager session."
],
"approval": [
"Show the exact selected resource, amount, network, and one-call policy.",
"Require explicit buyer or operator approval before the payment plugin handles the 402."
],
"purchaseOnce": [
"After approval, invoke the selected Ledger tool once through the Gateway using src=agentcore-bazaar when the runtime permits the query tag.",
"Do not issue a second tool call to repair telemetry or indexing."
],
"verifyDelivery": [
"Require successful tool delivery containing the complete Ledger, generatedAt, validUntil, and contentDigest.",
"Count a paid completion only after buyer-controlled settlement and full HTTP 200/tool delivery."
],
"stop": [
"Stop after one paid call, any policy denial, resource mismatch, 402 loop, or incomplete delivery.",
"ApexScout never receives the buyer's AgentCore credentials, payment instrument, or wallet secrets."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-D",
"runtime": "MPP Tempo buyer",
"sourceTags": [
"mpp-tempo"
],
"discover": [
"Read the free preview, then fetch the Ledger route without a credential and parse its WWW-Authenticate Payment challenge.",
"Use src=mpp-tempo only as an aggregate protocol source tag; it does not identify the buyer."
],
"inspectPrice": [
"Require tempo/charge, 0.10 USD / 100000 atomic USDC, Tempo eip155:4217, and no request body.",
"Read the recipient and expiry from the signed MPP challenge instead of static page copy."
],
"setMaximumSpend": [
"Keep the buyer-controlled maximum at $0.10 and allow one Ledger call for the task.",
"Do not reuse a credential or bypass the atomic replay guard."
],
"approval": [
"Show the exact Ledger route, amount, Tempo network, recipient, and one-call limit.",
"Require explicit buyer approval before creating the Payment credential."
],
"purchaseOnce": [
"After approval, retry GET /api/agent-commerce-reliability-ledger?src=mpp-tempo once with Authorization: Payment.",
"Do not retry after rejection, timeout, or incomplete delivery."
],
"verifyDelivery": [
"Require HTTP 200, Payment-Receipt, the complete Ledger arrays, generatedAt, validUntil, and contentDigest.",
"Treat the unpaid challenge as discovery and not as revenue."
],
"stop": [
"Stop after one paid call or any route, amount, network, recipient, expiry, or delivery mismatch.",
"Never send the MPP credential to the origin or expose it on aggregate surfaces."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
},
{
"id": "RUNTIME-E",
"runtime": "Solana Agent Registry",
"sourceTags": [
"solana-agent-registry"
],
"discover": [
"Resolve the finalized ApexScout onchain identity, then read the public Registry metadata and free Commerce Explorer with src=solana-agent-registry.",
"Read the free Ledger preview with src=solana-agent-registry before considering the paid route."
],
"inspectPrice": [
"Require the existing GET Ledger route, paymentNetwork=solana, exact scheme, 0.10 USD / 100000 atomic USDC, Solana mainnet, and the published USDC mint.",
"Confirm the Registry identity proof and seller recipient from public metadata without requesting a wallet secret."
],
"setMaximumSpend": [
"Keep the buyer-controlled maximum at $0.10 and permit one Ledger call for the task.",
"A Registry entry, metadata read, preview, or HTTP 402 is not purchase approval."
],
"approval": [
"Show the exact route, Solana network, recipient, amount, edition digest, and one-call maximum.",
"Ask the buyer to explicitly approve the selected Solana Ledger call."
],
"purchaseOnce": [
"Only after approval, call GET /api/agent-commerce-reliability-ledger?paymentNetwork=solana&src=solana-agent-registry once with the buyer-controlled wallet.",
"Never pay or retry automatically."
],
"verifyDelivery": [
"Require buyer-controlled settlement, HTTP 200, a protocol-native receipt, and the complete Ledger with generatedAt, validUntil, and contentDigest.",
"Keep the onchain identity transaction separate from a paid Ledger completion."
],
"stop": [
"Stop after one paid call or any identity, route, price, network, asset, recipient, expiry, receipt, or delivery mismatch.",
"Never request private keys, seed phrases, wallet exports, signatures, or raw payment payloads."
],
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"apexScoutOperatesBuyerWallet": false
}
],
"mcp": {
"toolName": "apexscout_agent_commerce_reliability_ledger",
"status": "bazaar-mcp-proxy-purchase-available",
"bazaarMcpServer": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/mcp",
"bazaarMcpBuyerRecipe": {
"searchQueries": [
"agent commerce reliability data",
"x402 buyer compatibility",
"agent payment failure signatures",
"x402 remediation guidance"
],
"searchTool": "search_resources",
"purchaseTool": "proxy_tool_call",
"buyerControlledPayment": true,
"apexScoutPaysForBuyer": false,
"paidCompletionDefinition": "settled buyer-controlled payment followed by full Ledger delivery"
},
"directApexScoutRemoteMcpActive": false,
"remotePaidToolRuntimeActive": false,
"note": "The official Bazaar MCP server can discover and proxy-purchase the indexed HTTP Ledger. ApexScout does not claim a separate direct remote paid MCP runtime."
},
"noPaidUpstreamService": true,
"noRequestBody": true
},
"compatibilityWitness": {
"id": "x402-compatibility-witness",
"title": "ApexScout x402 Compatibility Witness",
"release": "v2.2.228-live-command-center",
"description": "Check a public x402 paid endpoint against known buyer-client contract requirements and buy a full remediation Witness only when ApexScout has a verified finding.",
"humanPage": "https://apexscout.ai/x402-compatibility-witness",
"freePreflight": {
"method": "GET",
"url": "https://apexscout.ai/api/x402-compatibility-witness/preflight",
"paymentRequired": false,
"exactlyOneUnpaidTargetRequest": true,
"paidUpstreamCalls": false,
"trustChainVerdicts": [
"safe_to_consider",
"manual_review",
"stop",
"unsupported",
"unreachable"
],
"checks": [
"all payment choices",
"signed offer validity and accepts binding",
"signing identity discovery",
"terms hash and legal-context level",
"Builder Code declaration and support evidence",
"Payment Identifier declaration",
"signed receipt and privacy policy",
"request binding and paid-response evidence policy",
"optional merchant-profile markers and protocol-negotiation shape"
]
},
"paidResource": {
"method": "GET",
"path": "/api/x402-compatibility-witness",
"urlTemplate": "https://apexscout.ai/api/x402-compatibility-witness?matchId={matchId}",
"priceUsd": "0.25",
"displayPrice": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"scheme": "exact",
"requestBodyRequired": false,
"validUnexpiredMatchRequiredBeforePayment": true,
"noSecondTargetRequest": true,
"buyerControlledPaymentOnly": true,
"paymentIdentifier": {
"supported": true,
"required": false,
"requestFingerprintBound": true,
"duplicatePaymentProcessingPrevented": true,
"cacheTtlSeconds": 86400,
"expiryPolicy": "After 86400 seconds the identifier expires; a new payment attempt requires fresh explicit buyer approval."
}
},
"verifiableBuyerPolicy": {
"schemaVersion": "1.0",
"autoSpend": false,
"explicitApprovalRequired": true,
"offerVerificationRequired": true,
"termsHashVerificationRequired": true,
"receiptVerificationRequired": true,
"paymentIdentifierPreferred": true,
"maxPaidCallsPerTask": 1,
"stages": [
"Fetch the commerce-trust manifest.",
"Fetch the legal-context manifest.",
"Verify the exact terms bytes against the Agentic Transaction Receipt hash.",
"Request the paid route without payment.",
"Verify the signed offer and its payment-choice binding.",
"Confirm the route, method, amount, network, recipient, Builder Code policy, and maximum spend.",
"Generate and retain a Payment-Identifier when the route supports it.",
"Ask for explicit buyer approval.",
"Pay at most once.",
"Require HTTP 200, a valid signed receipt, the same terms hash, and the delivered content digest.",
"Stop on any mismatch."
],
"decisionOrder": [
"Inspect every advertised payment choice before selecting one.",
"Verify method, resource URL, scheme, network, asset, amount, recipient, and expiry against buyer policy.",
"Verify the signed offer and its signing identity when the route declares one.",
"Verify the exact terms bytes against the advertised Agentic Transaction Receipt hash.",
"Require direct buyer approval before one capped payment retry.",
"Treat HTTP 402, verification failure, or settlement failure as unpaid.",
"Treat HTTP 200 as paid delivery only when PAYMENT-RESPONSE evidence and the signed receipt policy validate."
],
"stopConditions": [
"A payment choice differs from the buyer's approved method, network, asset, amount, recipient, or resource.",
"The signed offer is missing, invalid, expired, or bound to a different payment choice.",
"The exact terms bytes do not match the advertised hash.",
"The buyer did not explicitly approve the retry.",
"A second automatic paid retry would be required."
],
"compatibility": {
"paymentIdentifierOptional": true,
"olderClientsRemainSupported": true,
"siwxRequired": false
},
"evidenceBoundary": {
"signedOfferIsNotSettlementProof": true,
"signedReceiptIsIssuedOnlyAfterLegitimatePaidHttp200": true,
"builderCodeDeclarationIsNotAttributedSettlementProof": true,
"legalContextHashIsNotLegalAdviceOrGuaranteedEnforceability": true
},
"privacy": {
"aggregateOnlyPublicMetrics": true,
"buyerIdentityPublic": false,
"rawPaymentPayloadPublic": false,
"rawTransactionDataPublic": false
}
},
"supportedClients": [
"awal-latest",
"awal-2.10",
"cloudflare-agents-x402",
"crosshatch-effect-0.0.5",
"generic-x402-fetch",
"metamask-x402"
],
"defaultMerchantProfile": "generic-x402-v2",
"merchantProfiles": [
{
"id": "generic-x402-v2",
"label": "Generic x402 v2 paid resource",
"referenceVersion": "x402 v2 contract",
"independentlyAssessed": true,
"officialAgentCashEndorsement": false,
"headerOnlyChallengeExpected": false
},
{
"id": "agentcash-router-1.18",
"label": "@agentcash/router merchant",
"referenceVersion": "@agentcash/router 1.18.0",
"independentlyAssessed": true,
"officialAgentCashEndorsement": false,
"headerOnlyChallengeExpected": true
},
{
"id": "agentcash-router-1.19",
"label": "@agentcash/router merchant",
"referenceVersion": "@agentcash/router 1.19.0",
"independentlyAssessed": true,
"officialAgentCashEndorsement": false,
"headerOnlyChallengeExpected": true
}
],
"agentCashRouterProfile": {
"id": "agentcash-router-1.19",
"package": "@agentcash/router",
"referenceVersion": "1.19.0",
"legacyProfileRetained": "agentcash-router-1.18",
"independentlyAssessed": true,
"officialAgentCashEndorsement": false,
"runtimeDependencyInstalled": false,
"existingApexScoutPaymentCoreReplaced": false,
"x402ReferenceVersion": "2.18.x",
"mppxReferenceVersion": "0.8.9",
"freePreflightUrlTemplate": "https://apexscout.ai/api/x402-compatibility-witness/preflight?resourceUrl={resourceUrl}&client={client}&network=eip155:8453&merchantProfile=agentcash-router-1.19",
"scope": "one-unpaid-get-exact-x402",
"capabilitiesChecked": [
"x402 v2 PAYMENT-REQUIRED header structure",
"payment-only header challenge behavior and SIWX body/header equivalence",
"optional X-Agent-Identity envelope, nonce, domain, route, expiry, and DID privacy",
"canonical OpenAPI x-payment-info offers[] shape when public discovery is returned",
"dynamic and tiered pricing declarations with max-price evidence",
"x402 2.18 merchant output compatibility with x402 2.18 clients",
"null fields, multiple payment choices, dual-protocol challenge, and secret-free output"
],
"capabilitiesNotChecked": [
"separate OpenAPI or llms.txt documents not returned by the one-request preflight",
"private pre-payment body-validation configuration",
"private SIWX entitlement-store readiness",
"private MPP replay, operator/payee, fee-payer, session, and streaming configuration",
"facilitator settlement or paid delivery"
],
"privateConfigurationChecks": {
"prePaymentBodyValidation": "not_tested_requires_local_evidence",
"siwxEntitlementStoreProductionReadiness": "not_tested_requires_local_evidence",
"mppReplayStoreProductionReadiness": "not_tested_requires_local_evidence",
"mppOperatorKeyPayeeEquality": "not_tested_requires_local_evidence",
"mppFeePayerOperatorSeparation": "not_tested_requires_local_evidence",
"mppSessionAndStreamingConfiguration": "not_tested_requires_local_evidence",
"secretAndPrivateKeyConfiguration": "not_tested_requires_local_evidence"
}
},
"crosshatchCompatibility": {
"package": "crosshatch",
"version": "0.0.5",
"runtime": "Effect",
"parser": "RequiredFromBase64JsonString",
"paymentRequiredParserVerified": true,
"canonicalAtomicAmountType": "decimal-string",
"paidCallExecuted": false,
"replacesApexScoutX402Server": false
},
"supportedNetworks": [
"eip155:8453"
],
"searchConcepts": [
"x402 compatibility test",
"AWAL invalid payment required response",
"x402 PAYMENT-REQUIRED validator",
"x402 buyer-client compatibility",
"Cloudflare x402 contract check",
"x402 wallet compatibility",
"x402 CORS validator",
"payment-required header body mismatch",
"x402 remediation report",
"agent payment compatibility certificate",
"AgentCash Router merchant compatibility",
"@agentcash/router x402 readiness",
"AgentCash X-Agent-Identity challenge",
"x402 MPP protocol negotiation"
],
"responseSchema": {
"type": "object",
"required": [
"product",
"witnessId",
"matchId",
"targetResourceUrl",
"testedMethod",
"generatedAt",
"validUntil",
"contentDigest",
"compatibilityVerdict",
"merchantProfile",
"merchantProfileAssessment",
"verifiableBuyerPolicy",
"trustChainEvidence",
"buyerClientMatrix",
"contractFindings",
"failureCodes",
"verifiedMitigationSteps",
"reliabilityLedger",
"attestationStatus",
"signedOfferReceiptStatus",
"paymentIdentifierStatus"
],
"properties": {
"product": {
"type": "string",
"const": "x402-compatibility-witness"
},
"witnessId": {
"type": "string"
},
"matchId": {
"type": "string"
},
"targetResourceUrl": {
"type": "string",
"format": "uri"
},
"testedMethod": {
"type": "string",
"const": "GET"
},
"generatedAt": {
"type": "string",
"format": "date-time"
},
"validUntil": {
"type": "string",
"format": "date-time"
},
"contentDigest": {
"type": "string",
"pattern": "^sha256:[0-9a-f]{64}$"
},
"compatibilityVerdict": {
"type": "string"
},
"merchantProfile": {
"type": "string",
"enum": [
"generic-x402-v2",
"agentcash-router-1.18",
"agentcash-router-1.19"
]
},
"merchantProfileAssessment": {
"type": "object"
},
"verifiableBuyerPolicy": {
"type": "object"
},
"trustChainEvidence": {
"type": "object"
},
"buyerClientMatrix": {
"type": "array",
"items": {
"type": "object"
}
},
"contractFindings": {
"type": "array",
"items": {
"type": "object"
}
},
"failureCodes": {
"type": "array",
"items": {
"type": "string"
}
},
"verifiedMitigationSteps": {
"type": "array",
"items": {
"type": "object"
}
},
"reliabilityLedger": {
"type": "object"
},
"attestationStatus": {
"type": "string",
"const": "not_enabled"
},
"signedOfferReceiptStatus": {
"type": "string",
"const": "eip712_privacy_safe"
},
"paymentIdentifierStatus": {
"type": "string",
"const": "optional_request_fingerprint_bound"
}
}
},
"extensionStatus": {
"paymentIdentifier": "optional_request_fingerprint_bound",
"signedAttestation": "not_enabled",
"signedOfferReceipt": "eip712_privacy_safe",
"siwx": "deferred"
},
"apiHubStatus": "active_mixed_listing_apihub_billed_quick_answers",
"apiHubRequiredApproval": null,
"apiHubDistribution": {
"providerListingActive": true,
"listingSlug": "apexscout-agent-commerce",
"listingUrl": "https://apihub.io/marketplace/apexscout-agent-commerce",
"mode": "native_free_entry_points_with_apihub_billed_quick_answers_and_direct_x402_full_products",
"listedFreeEndpoints": [
"/api/agent-commerce-reliability-ledger/preview",
"/api/x402-compatibility-witness/preflight"
],
"listedPaidQuickAnswers": [
{
"method": "GET",
"path": "/api/apihub/reliability-ledger/failure-match",
"priceUsd": "$0.005"
},
{
"method": "GET",
"path": "/api/apihub/reliability-ledger/fix-card",
"priceUsd": "$0.01"
},
{
"method": "GET",
"path": "/api/apihub/reliability-ledger/edition-delta",
"priceUsd": "$0.005"
}
],
"paidRoutesProxiedThroughApiHub": true,
"paidRoutesProxiedThroughApiHubScope": "quick_answers_only",
"fullPaidProductsProxiedThroughApiHub": false,
"paidRoutesRemainDirectX402": true,
"fullLedgerAndWitnessRemainDirectX402": true,
"apiHubPaymentConfigured": true,
"apiHubHandlesBuyerPaymentOnce": true,
"originIssuesSecondPaywall": false,
"providerTestRun": false,
"providerTestPaidCallMade": false,
"doubleChargePrevented": true
},
"indexingSettlementStatus": "owner_approved_settlement_completed",
"indexingSettlementRequiredApproval": null,
"privacy": {
"buyerLevelDataExposed": false,
"rawTargetBodiesStored": false,
"fullWalletAddressesExposed": false,
"paymentSignaturesExposed": false,
"cookiesRequired": false
}
},
"registrationStatus": {
"x402scan": "registered",
"x402scanMerchantPage": "https://www.x402scan.com/server/1ed2be5a-b882-4c66-82a7-d6f614dd48a5",
"registeredResourceCount": 3,
"registeredResource": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"registeredResources": [
"https://apexscout.ai/api/agent-commerce-reliability-ledger",
"https://apexscout.ai/api/opportunity-check"
],
"registeredResourcesFieldMeaning": "Legacy unique URL list. Use registeredResourceContracts for the three method-specific registrations.",
"registeredResourceContracts": [
{
"externalId": "b156db61-5c2d-4688-9a2e-8f7843572e42",
"method": "GET",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"requestBodyRequired": false,
"active": true
},
{
"externalId": "3a2ad79e-2ff0-4a15-add5-2532831c9e34",
"method": "GET",
"route": "/api/opportunity-check",
"url": "https://apexscout.ai/api/opportunity-check",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"requestBodyRequired": false,
"active": true
},
{
"externalId": "3fdde89d-1539-411c-9a85-dfc4f7b253fa",
"method": "POST",
"route": "/api/opportunity-check",
"url": "https://apexscout.ai/api/opportunity-check",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"requestBodyRequired": true,
"active": true
}
],
"agentRevenueAudit": "not_registered",
"agentRevenueAuditReason": "The live route requires the exact four-field JSON body and a short-lived payload-bound authorization ticket, so it is not represented as a direct marketplace purchase.",
"compatibilityWitness": "not_registered_preflight_match_required",
"compatibilityWitnessReason": "The paid route requires a valid, unexpired matchId from the free preflight and is not represented as a direct marketplace purchase.",
"compatibilityWitnessUrl": "https://apexscout.ai/api/x402-compatibility-witness",
"methodProbeAmbiguity": {
"presentOnExternalRenderedListing": true,
"scope": "GET and POST /api/opportunity-check share one URL",
"canonicalContractSource": "https://apexscout.ai/openapi.json",
"canonicalGetRequestBodyRequired": false,
"canonicalPostRequestBodyRequired": true,
"ApexScoutContractDriftDetected": false
},
"originRegistration": {
"endpoint": "https://www.x402scan.com/api/x402/registry/register-origin",
"origin": "https://apexscout.ai",
"authentication": "SIWX wallet ownership proof",
"openApiDiscoveryUrl": "https://apexscout.ai/openapi.json",
"expectedDiscoverableResources": 4,
"status": "completed_owner_approved_siwx_no_spend_contact_email_detected",
"completedAt": "2026-07-15T01:26:32.414Z",
"registered": 3,
"activePublicResources": 3,
"failed": 0,
"skipped": 40,
"deprecated": 0,
"source": "openapi",
"contactEmailDetected": true,
"publicRoleContactEmail": "support@apexscout.ai",
"privateForwardingDestinationPublished": false,
"paidCallRequired": false,
"paidCallMade": false,
"buyerLevelDataExposed": false
},
"poncho": {
"merchantUrl": "https://tryponcho.com/m/apexscout.ai",
"paymentPageUrl": "https://tryponcho.com/p/apexscout.ai",
"partnerDashboardUrl": "https://tryponcho.com/p/apexscout.ai",
"paymentPageUrlFieldMeaning": "legacy alias for the Poncho partner dashboard, not an ApexScout paid route",
"activationState": "active_public_merchant_and_partner_pages",
"currentHttpStatus": 200,
"lastCheckedAt": "2026-07-15T01:33:43.000Z",
"ownerContactEmailPublished": false,
"ownerContactEmailFieldMeaning": "personal owner address",
"ownerPersonalEmailPublished": false,
"publicRoleContactEmail": "support@apexscout.ai",
"publicRoleContactEmailPublished": true,
"privateForwardingDestinationPublished": false,
"emailRouting": {
"provider": "Cloudflare Email Routing",
"enabled": true,
"routeVerified": true,
"dnsReady": true,
"spfPublished": true,
"dkimPublished": true
},
"reason": "x402scan accepted the refreshed OpenAPI registration, detected the dedicated public role address, and persisted three active resources. Fresh cache-bypassed Poncho merchant and partner-page reads both return HTTP 200 with ApexScout loaded.",
"ApexScoutControlsPoncho": false
},
"paySh": "prepared_network_incompatible",
"reason": "The free x402scan refresh registered three current ApexScout resources from OpenAPI with zero failures and detected the public role address. The x402scan merchant record is current, and the Poncho merchant and partner pages are publicly active. The current pay.sh public provider contract requires Solana mainnet while the canonical x402 resources settle on Base.",
"automaticSubmissionPerformed": false,
"manualPublicSubmissionPerformed": true
},
"marketplaceSourceAttributionAvailable": false,
"marketplaceSourceAttribution": {
"available": false,
"reason": "No stable, privacy-safe Poncho or x402scan referral signal is present in the current buyer contract. Unclassified reads must not be labeled as marketplace demand.",
"inventedSourceBuckets": false,
"rawReferrerStored": false,
"rawUserAgentStored": false,
"ipAddressStored": false,
"cookiesUsed": false,
"buyerLevelDataExposed": false
},
"crawlerInstructions": [
"Read /openapi.json first and prefer operations with x-payment-info.",
"Use /.well-known/x402 for a compact paid-resource list.",
"Treat HTTP 402 from the live route as the authoritative payment challenge.",
"Do not treat unpaid 402 reads as revenue or paid proof.",
"Never retry with payment unless the buyer wallet explicitly approves the exact route, amount, and network."
],
"apexAlpha": {
"exposureMove": "Make ApexScout legible to x402-native scanners without waiting for directory submission.",
"conversionMove": "Pair the discovery packet with a risk-before-payment packet so cautious buyer agents can approve or stop faster.",
"closePath": [
"Crawler discovers paid routes.",
"Buyer agent imports the OpenAPI payment metadata.",
"Buyer agent reads the risk packet and unpaid 402 challenge.",
"Buyer agent optionally risk-checks the payTo from its own 402 challenge.",
"Buyer agent pays only after matching route, network, amount, and policy."
]
},
"noSpendBoundary": {
"discoveryPacketIsFree": true,
"paymentAttemptedByDiscovery": false,
"paidRouteCalledByDiscovery": false,
"paidUpstreamCalls": false,
"productionPostMade": false,
"fakeTrafficCreated": false,
"directorySubmissionPerformed": false,
"crawlerTrafficCreatedByApexScout": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"pricingChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"sellerWalletPublishedInStaticDiscovery": false,
"payToAvailableFromBuyerControlled402Challenge": true,
"privateKeysRequested": false,
"walletPayloadsExposed": false
},
"safetyClaims": {
"officialX402scanEndorsementClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"officialMistTrackEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingAdviceClaimed": false,
"investmentAdviceClaimed": false
}
},
"mistTrackRiskReadinessAvailable": true,
"mistTrackRiskReadiness": {
"available": true,
"mode": "misttrack-risk-readiness",
"release": "v2.2.228-live-command-center",
"path": "/misttrack-risk-readiness",
"apiPath": "/api/misttrack-risk-readiness",
"wellKnownPath": "/.well-known/apexscout-misttrack-risk-readiness.json",
"title": "ApexScout MistTrack Risk Readiness",
"purpose": "Give buyer agents a no-spend rule for checking the payment recipient from their own 402 challenge before approving an x402 payment.",
"sourceSignal": {
"name": "SlowMist MistTrack Skills",
"sourceUrl": "https://github.com/slowmist/misttrack-skills",
"docsUrl": "https://docs.misttrack.io/openapi/introduction",
"interpretedForApexScout": "The useful pattern is buyer-controlled address risk screening before transfer. ApexScout should publish the workflow but should not call MistTrack or expose buyer payment payloads.",
"x402PaymentSupportedBySource": true,
"apiKeyNotRequiredWhenUsingSourceX402Flow": true,
"officialPartnershipClaimed": false
},
"buyerAgentRiskRule": {
"policyName": "challenge-payTo-risk-before-payment",
"sellerPayToStaticPublished": false,
"payToSource": "buyer-controlled unpaid HTTP 402 payment challenge",
"proofRoute": "/api/opportunity-check",
"proofUrl": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"amountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"proceedOnlyIf": [
"Buyer explicitly approves the payment.",
"The unpaid 402 challenge route, method, amount, and network match ApexScout's published contract.",
"The payTo address is read from the buyer's own 402 challenge.",
"Any buyer-required risk check returns acceptable under the buyer's policy.",
"The client will stop after one HTTP 200 paid proof."
],
"stopIf": [
"The payTo address is copied from an untrusted page instead of the live 402 challenge.",
"Route, method, amount, or network differs.",
"Risk screen is unavailable and buyer policy requires it.",
"The agent would retry only to move a metric.",
"The client cannot attach x402 payment cleanly."
]
},
"copyableBuyerPrompt": "Before paying ApexScout, read the unpaid 402 challenge for GET /api/opportunity-check, extract payTo from that challenge, and if your policy requires AML screening, run a MistTrack address risk check from your own wallet/client. Do not pay if the risk result, route, amount, or network differs.",
"relatedDiscovery": {
"x402scanDiscovery": "https://apexscout.ai/api/x402scan-discovery",
"openApi": "https://apexscout.ai/openapi.json",
"wellKnownX402": "https://apexscout.ai/.well-known/x402",
"proofPage": "https://apexscout.ai/x402-proof",
"proofApi": "https://apexscout.ai/api/x402-proof"
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"mistTrackApiCalled": false,
"paymentAttemptedByReadiness": false,
"paidRouteCalledByReadiness": false,
"paidUpstreamCalls": false,
"productionPostMade": false,
"fakeTrafficCreated": false,
"outreachCreated": false,
"scrapingPerformed": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"pricingChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"rawRiskReportStored": false,
"sellerWalletPublishedInStaticReadiness": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false
},
"safetyClaims": {
"officialMistTrackEndorsementClaimed": false,
"guaranteedCleanAddressClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingAdviceClaimed": false,
"investmentAdviceClaimed": false
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"paymentMandatePreviewAvailable": true,
"paymentMandatePreview": {
"paymentMandatePreview": true,
"mode": "free-no-spend-payment-mandate-preview",
"releaseGoal": "v2.2.151-payment-mandate-preview",
"title": "Payment Mandate Preview",
"copy": "Preview the buyer-approved route, price, budget, retry limit, network, and evidence before any buyer-controlled x402 retry.",
"route": "/api/agent-revenue-audit",
"routeLabel": "Agent Revenue Audit",
"priceUsd": "5.00",
"maxBudgetUsd": "5.00",
"walletPerRequestCapUsd": "5.00",
"amountAtomicUnits": "5000000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"allowedRetryCount": 1,
"expectedPaidSuccessCondition": "buyer-controlled x402 paid retry returns HTTP 200",
"buyerApprovedMandateFields": {
"buyerApprovedRoute": "/api/agent-revenue-audit",
"routeLabel": "Agent Revenue Audit",
"priceUsd": "5.00",
"maxBudgetUsd": "5.00",
"walletPerRequestCapUsd": "5.00",
"maxAmountAtomicUsdc": "5000000",
"allowedRetryCount": 1,
"network": "eip155:8453",
"expectedOutput": "Agent Revenue Audit JSON after buyer-controlled paid retry",
"expectedPaidSuccessCondition": "HTTP 200 from the paid route after the buyer-approved retry"
},
"requiredBuyerApproval": [
"Buyer approves the paid route.",
"Buyer approves the exact payload or prepared request.",
"Buyer approves a $5.00 max budget and wallet per-request cap.",
"Buyer approves one x402 retry on Base mainnet.",
"Buyer understands the expected post-payment response evidence."
],
"prePaymentEvidence": [
"Action-pack read or intent is pre-revenue.",
"Free Builder prepare can create ready_to_pay, but ready_to_pay is not payment.",
"Free Scope Check can return approved_to_retry, but approved_to_retry is not payment.",
"Cash Register preview can show the route and price, but preview is not payment."
],
"postPaymentEvidence": [
"Buyer-controlled x402 paid retry returns HTTP 200.",
"Payment response evidence appears after the paid retry when the client exposes it.",
"The paid route JSON is available only after the buyer-approved retry succeeds."
],
"noSpendBoundary": {
"previewIsFree": true,
"paymentAttemptedByPreview": false,
"walletConnectionRequiredForPreview": false,
"signedMandateCreated": false,
"signedReceiptCreated": false,
"receiptCreated": false,
"paidRouteCalled": false,
"paidUpstreamCallsMade": false,
"paymentExecuted": false,
"prepareRequestCreated": false,
"actionIntentCreated": false,
"approvedToRetryIsPayment": false,
"readyToPayIsPayment": false,
"fakeTrafficCreated": false,
"outreachPerformed": false,
"scrapingPerformed": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"walletDataExposed": false,
"paidResponseBodyExposed": false
},
"buyerControlledNextStep": "Run the free Scope Check, then retry the paid route only if the buyer explicitly approves the route, payload, budget, wallet cap, network, and x402 retry.",
"notPaymentCopy": "This is not a signed mandate, receipt, payment, wallet approval, paid route call, or x402 retry.",
"links": {
"scopeCheck": "https://apexscout.ai/buyer-payment-scope-check?route=agent-revenue-audit&src=payment-mandate-preview",
"paymentIntentPreview": "https://apexscout.ai/api/payment-intent?route=agent-revenue-audit&src=payment-mandate-preview",
"paidRoute": "https://apexscout.ai/api/agent-revenue-audit"
}
},
"unsignedMandatePacketAvailable": true,
"unsignedMandatePacketIsSigned": false,
"ap2ProofCreated": false,
"walletApprovalCreated": false,
"paymentExecutedByPacket": false,
"receiptCreatedByPacket": false,
"inlineNoSpendActionRemainsPrimary": true,
"noAutoSubmit": true,
"noPaymentExecution": true,
"noPaidRouteCall": true,
"countersRemainActionOnly": true,
"buyerLevelDataExposed": false,
"unsignedMandatePacket": {
"unsignedMandatePacket": true,
"unsignedMandatePacketAvailable": true,
"unsignedMandatePacketIsSigned": false,
"ap2ProofCreated": false,
"walletApprovalCreated": false,
"paymentExecutedByPacket": false,
"receiptCreatedByPacket": false,
"inlineNoSpendActionRemainsPrimary": true,
"noAutoSubmit": true,
"noPaymentExecution": true,
"noPaidRouteCall": true,
"countersRemainActionOnly": true,
"buyerLevelDataExposed": false,
"mode": "free-no-spend-unsigned-buyer-mandate-packet",
"releaseGoal": "v2.2.153-unsigned-mandate-action-placement",
"title": "Unsigned Buyer Mandate Packet",
"copy": "Review the exact buyer authorization facts before Scope Check or any buyer-controlled x402 retry.",
"purpose": "Compress action-pack intent into a clear no-spend approval packet: what route, price, budget, network, retry count, and evidence the buyer would authorize later.",
"route": "/api/agent-revenue-audit",
"routeLabel": "Agent Revenue Audit",
"priceUsd": "5.00",
"maxBudgetUsd": "5.00",
"walletPerRequestCapUsd": "5.00",
"amountAtomicUnits": "5000000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"allowedRetryCount": 1,
"expectedPaidSuccessCondition": "buyer-controlled x402 paid retry returns HTTP 200",
"expectedPostPaymentEvidence": [
"HTTP 200 from the paid route.",
"Payment response evidence when the buyer client exposes it.",
"Agent Revenue Audit JSON returned only after the buyer-approved paid retry succeeds."
],
"buyerAuthorizationFacts": {
"buyerApprovesRoute": "/api/agent-revenue-audit",
"buyerApprovesPayloadOrPreparedRequest": "required before any paid retry",
"buyerApprovesMaxBudgetUsd": "5.00",
"buyerApprovesWalletPerRequestCapUsd": "5.00",
"buyerApprovesMaxAmountAtomicUsdc": "5000000",
"buyerApprovesNetwork": "eip155:8453",
"buyerApprovesAllowedRetryCount": 1,
"buyerApprovesExpectedOutput": "Agent Revenue Audit JSON with route ladder, pricing logic, and buyer-agent payment handoff guidance.",
"buyerApprovesPostPaymentEvidence": "HTTP 200 plus payment response or receipt evidence when supported by the buyer client."
},
"buyerApprovalChecklist": [
"I approve the paid route: /api/agent-revenue-audit.",
"I approve the exact prepared payload before payment.",
"I approve a $5.00 maximum budget and $5.00 wallet per-request cap.",
"I approve one buyer-controlled x402 retry on Base mainnet.",
"I understand that HTTP 200 from the paid route is the conversion proof.",
"I understand this packet is unsigned and does not move money."
],
"scopeCheckBridge": {
"nextStep": "Run free Scope Check",
"href": "https://apexscout.ai/buyer-payment-scope-check?route=agent-revenue-audit&src=unsigned-mandate-packet",
"scopeCheckIsFree": true,
"scopeCheckCreatesPayment": false,
"approvedToRetryIsPayment": false,
"buyerControlledRetryStillRequired": true
},
"protocolPositioning": {
"inspiredByAgentPaymentControlPatterns": true,
"ap2CompatibleClaimed": false,
"officialAp2MandateClaimed": false,
"officialVisaMastercardCoinbaseStripeGoogleAwsEndorsementClaimed": false,
"signedVerifiableCredentialCreated": false,
"cryptographicSignatureCreated": false,
"legalMandateCreated": false,
"tradingInvestmentTaxLegalLendingComplianceAdvice": false
},
"noSpendBoundary": {
"packetIsFree": true,
"signedMandateCreated": false,
"walletApprovalCreated": false,
"walletConnectionRequiredForPacket": false,
"paymentAttemptedByPacket": false,
"paidRouteCalled": false,
"paidUpstreamCallsMade": false,
"paymentExecuted": false,
"prepareRequestCreated": false,
"scopeCheckCreatedByRead": false,
"actionIntentCreatedByRead": false,
"readyToPayIsPayment": false,
"approvedToRetryIsPayment": false,
"receiptCreated": false,
"paymentResponseCreated": false,
"fakeTrafficCreated": false,
"outreachPerformed": false,
"scrapingPerformed": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"walletDataExposed": false,
"paidResponseBodyExposed": false
},
"publicSafetyCopy": "Unsigned packet only. Not a signed mandate, not AP2 proof, not a receipt, not wallet approval, not payment, and not a platform approval claim.",
"noSpendApprovalReviewCopy": "This is a no-spend approval review packet. Payment only happens later if a buyer-controlled x402 wallet retries the paid route after explicit buyer approval.",
"buyerControlledNextStep": "Run the free Scope Check, then retry the paid route only if the buyer explicitly approves the route, payload, budget, wallet cap, network, and x402 retry.",
"links": {
"scopeCheck": "https://apexscout.ai/buyer-payment-scope-check?route=agent-revenue-audit&src=unsigned-mandate-packet",
"paymentIntentPreview": "https://apexscout.ai/api/payment-intent?route=agent-revenue-audit&src=unsigned-mandate-packet",
"paidRoute": "https://apexscout.ai/api/agent-revenue-audit"
}
},
"noPrepareExecutionFromRail": true,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"agentStartHereNow": {
"mode": "public-agent-no-spend-start-path",
"firstRead": "/api/agent-revenue-audit-builder/action-pack",
"firstReadUrl": "https://apexscout.ai/api/agent-revenue-audit-builder/action-pack",
"secondRead": "/api/agent-commerce-scenarios",
"secondReadUrl": "https://apexscout.ai/api/agent-commerce-scenarios",
"scenarioPage": "/agent-commerce-scenarios",
"scenarioPageUrl": "https://apexscout.ai/agent-commerce-scenarios",
"fallbackIfUnsure": "/agent-spend-passport",
"prepareOnlyAfterBuyerApproval": "/api/agent-revenue-audit-builder/prepare",
"paidRouteOnlyAfterReadyToPay": "/api/agent-revenue-audit",
"scenarioCount": 7,
"coreValueProposition": "ApexScout helps agent builders and buyer agents check whether an x402 paid action is ready, scoped, safe, and worth routing toward buyer-controlled payment.",
"qualifiedBuyerProfiles": [
{
"id": "x402-api-builder",
"label": "x402 API builder",
"copy": "You have a paid endpoint and need buyers to understand what to do before paying."
},
{
"id": "mcp-paid-tool-builder",
"label": "MCP paid tool builder",
"copy": "You want agents to discover your tool and route through a safe no-spend check before payment."
},
{
"id": "agentcore-payment-builder",
"label": "AgentCore payment builder",
"copy": "You need a clean handoff from discovery/import into buyer-approved x402 payment."
},
{
"id": "agentic-trading-defi-tool-builder",
"label": "Agentic trading / DeFi tool builder",
"copy": "You are building wallet-enabled trading, DeFi, market-data, or automation tools and need payment readiness, budget caps, metadata hygiene, and buyer-controlled x402 handoff. ApexScout does not give trading or investment advice.",
"noTradingAdvice": true
},
{
"id": "buyer-agent-operator",
"label": "Buyer-agent operator",
"copy": "You need to decide whether a paid route is safe to inspect, prepare, scope-check, and maybe pay."
}
],
"whatApexScoutChecks": [
"Route clarity",
"Buyer path",
"Metadata hygiene",
"Budget and scope boundaries",
"Payment handoff readiness",
"Buyer-controlled x402 retry fit"
],
"whatApexScoutDoesNotDo": [
"No paid calls from the action pack or scenario doors",
"No automatic payment execution",
"No production prepare from a read",
"No guaranteed revenue claims",
"No outreach, posting, scraping, directory submission, or competitor inspection",
"No trading, investment, tax, legal, lending, or compliance advice",
"No buyer-level data exposure"
],
"agenticTradingPaymentReadinessDisclaimer": "This is payment-readiness only. ApexScout does not give trading, investment, tax, legal, lending, or compliance advice.",
"scenarioDoorsAvailable": true,
"scenarioDoorCount": 7,
"scenarioDoorTelemetryAdded": false,
"scenarioDoorTelemetryReason": "hrefs-only, no extra tracking",
"agentMonetizationPolicy": "/.well-known/apexscout-monetization-policy.json",
"agentMonetizationPolicyApi": "/api/agent-monetization-policy",
"paidMcpToolsManifest": "/.well-known/apexscout-paid-tools.json",
"paidMcpToolsManifestApi": "/api/paid-mcp-tools",
"agentWalletSkillPack": "/.well-known/apexscout-agent-wallet-skill.json",
"agentWalletSkillPackApi": "/api/agent-wallet-skill-pack",
"agentWalletSkillMarkdown": "/apexscout-agent-wallet-skill.md",
"apifyX402UpstreamReadiness": "/.well-known/apexscout-apify-x402-upstream.json",
"apifyX402UpstreamReadinessApi": "/api/apify-x402-upstream-readiness",
"x402scanOpenApi": "/openapi.json",
"x402scanDiscovery": "/.well-known/x402",
"x402scanDiscoveryApi": "/api/x402scan-discovery",
"mistTrackRiskReadiness": "/.well-known/apexscout-misttrack-risk-readiness.json",
"mistTrackRiskReadinessApi": "/api/misttrack-risk-readiness",
"cloudflareMonetizationGatewayRuleExport": "/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"cloudflareMonetizationGatewayRuleExportApi": "/api/cloudflare-monetization-gateway-rules",
"agentReceiptContract": "/.well-known/apexscout-agent-receipt-contract.json",
"agentReceiptContractApi": "/api/agent-receipt-contract",
"cloudflareBillingRules": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareBillingRulesApi": "/api/cloudflare-billing-rules",
"cloudflareX402WorkerConfig": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareX402WorkerConfigApi": "/api/cloudflare-x402-worker-config",
"scenarioDoorInterpretation": "Scenario doors are no-spend routing links. They do not mean prepare happened, ready_to_pay happened, or payment happened.",
"primaryNoSpendActions": [
{
"intent": "proof",
"href": "/action-pack/go/proof",
"url": "https://apexscout.ai/action-pack/go/proof",
"label": "Test the cheapest x402 proof path",
"copy": "Use this when you only need the trust/proof flow.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/chat-tiny-payment-flow?src=action-pack-proof-intent-link",
"nextActionLabel": "Inspect unpaid proof instructions",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": {
"method": "GET",
"route": "/api/opportunity-check",
"href": "/api/opportunity-check?src=front-door-x402-proof-cta",
"url": "https://apexscout.ai/api/opportunity-check?src=front-door-x402-proof-cta",
"sourceTag": "front-door-x402-proof-cta",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"requiresBuyerControlledX402Retry": true,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"secondaryToNoSpend": true,
"noAutoOpen": true,
"noPaymentExecution": true,
"buyerLevelDataExposed": false,
"proofRetryConfidence": {
"available": true,
"mode": "no-spend-proof-retry-confidence",
"purpose": "Help x402-capable buyers understand that an unpaid 402 is the expected proof challenge and that payment only happens from a buyer-controlled retry.",
"route": "/api/opportunity-check",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"expectedUnpaidMeaning": "HTTP 402 means the proof paywall is reachable and returning x402 payment requirements. It is not a service outage and it is not revenue.",
"expectedPaidMeaning": "HTTP 200 only counts after a buyer-controlled x402 client retries this route with an approved payment.",
"http402ReadinessReceiptAvailable": true,
"http402ReadinessReceipt": {
"available": true,
"mode": "no-spend-http-402-readiness-receipt",
"title": "HTTP 402 Readiness Receipt",
"purpose": "Give x402-capable buyers a compact, unsigned receipt showing what the unpaid proof challenge proves before any buyer-controlled paid retry.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"receiptScope": "GET /api/opportunity-check, $0.01 maximum amount, eip155:8453 Base mainnet x402, one buyer-controlled retry.",
"receiptSummary": "Unpaid HTTP 402 proves the x402 proof route is reachable and returning payment requirements. It does not prove payment, revenue, endorsement, or buyer approval.",
"agentDecision": {
"payOnlyIf": "The buyer explicitly approves the route, max amount, network, and one retry from a wallet-controlled x402 client.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the route or network differs, or HTTP 402 is being treated as a paid completion.",
"nextNoSpendStep": "Stay on ApexScout proof, action-pack, Scope Check, or Builder surfaces until buyer-controlled payment is intentionally approved."
},
"readinessChecks": [
"Route scoped to GET /api/opportunity-check.",
"Amount scoped to $0.01 / 10000 atomic USDC.",
"Network scoped to Base mainnet eip155:8453.",
"HTTP 402 is expected before payment.",
"HTTP 200 is required before paid completion is counted.",
"No request body, cookies, session, or wallet connection is required to read this receipt.",
"No buyer-level data is exposed by this receipt.",
"No automatic payment or paid retry is performed by ApexScout."
],
"publicSafetyCopy": "This is an unsigned no-spend readiness receipt, not AP2 proof, not a signed mandate, not a legal or payment receipt, not an endorsement claim, and not trading, investment, tax, legal, lending, or compliance advice.",
"notClaims": {
"signedReceiptCreated": false,
"ap2ProofCreated": false,
"legalMandateCreated": false,
"paymentReceiptCreated": false,
"walletApprovalCreated": false,
"officialEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false
},
"noSpendBoundary": {
"receiptIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByReceipt": false,
"paidRouteCalledByReceipt": false,
"paidUpstreamCalls": false,
"walletConnectionRequiredForReceipt": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"receiptUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"copyPasteReceiptSummary": "HTTP 402 readiness receipt: GET /api/opportunity-check is reachable, costs max $0.01 on eip155:8453 only after buyer-controlled x402 retry, and counts as paid only when HTTP 200 returns."
},
"proofRetryDecisionStripAvailable": true,
"proofRetryDecisionStrip": {
"available": true,
"mode": "buyer-controlled-proof-retry-decision-strip",
"title": "Buyer-controlled proof retry gate",
"purpose": "Compress the next click after an unpaid 402 into a clear continue/stop decision for x402-capable buyers.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"decisionSummary": "Continue only if buyer approval, x402 wallet capability, exact route, exact amount, and Base mainnet network all match.",
"continueIf": [
"Buyer explicitly approves this exact $0.01 proof.",
"Client can attach x402 payment on Base mainnet eip155:8453.",
"Route is exactly GET /api/opportunity-check.",
"Max amount is exactly 10000 atomic USDC.",
"Buyer understands only HTTP 200 counts as a paid proof completion."
],
"stopIf": [
"Buyer has not approved spend.",
"Client is a normal browser without x402 payment support.",
"Route, amount, or network differs from the receipt.",
"The buyer is treating unpaid HTTP 402 as revenue or completion.",
"The output will not change the buyer's next action."
],
"primaryAction": {
"label": "Request unpaid proof challenge",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"normalBrowserResult": "HTTP 402 JSON with x402 payment requirements",
"x402CapableResult": "HTTP 200 JSON only after buyer-controlled paid retry",
"noPaymentOnClick": true,
"paidRetryRequiresBuyerWallet": true
},
"fallbackNoSpendActions": [
"/x402-proof",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/chat-tiny-payment-flow"
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"decisionStripUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"decisionStripIsFree": true,
"paymentAttemptedByDecisionStrip": false,
"paidRouteCalledByDecisionStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"http402ClosePacketAvailable": true,
"http402ClosePacket": {
"available": true,
"mode": "buyer-agent-402-close-packet",
"release": "v2.2.228-live-command-center",
"title": "402 close packet",
"purpose": "Put the buyer-agent close instructions inside the unpaid HTTP 402 response so x402-capable clients can finish the proof without hunting through a page.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"closeMessage": "You reached the ApexScout paid proof gate. To complete the proof, retry this exact GET route from an authenticated x402 wallet/client with max amount 10000 atomic USDC on Base mainnet.",
"buyerAgentInstruction": "If the buyer approved this one-cent proof, run the command exactly once and treat only HTTP 200 as the paid completion. If any route, amount, network, or approval detail differs, stop.",
"whatHttp200Proves": [
"The buyer-controlled x402 retry reached ApexScout's one-cent proof route.",
"The paid route returned structured JSON after payment verification.",
"The aggregate paid proof completion counter is allowed to move only after HTTP 200."
],
"notProofOf": [
"Coinbase, AWS, Stripe, Bazaar, AgentCore, Base, marketplace, or protocol endorsement.",
"Guaranteed revenue, trading results, investment outcome, legal advice, tax advice, lending advice, or compliance approval.",
"Buyer identity, wallet-level activity, secret signing material, or broader permission to spend."
],
"continueIf": [
"The buyer explicitly approved this one-cent proof.",
"The client can attach an x402 payment authorization.",
"The retry route is exactly GET /api/opportunity-check?src=agent-execution-awal-latest.",
"The max amount is exactly 10000 atomic USDC.",
"The network is exactly eip155:8453."
],
"stopIf": [
"The wallet is not authenticated.",
"The wallet has insufficient USDC on Base.",
"The client cannot attach x402 payment.",
"The max amount is lower than 10000 atomic USDC.",
"The network is not eip155:8453.",
"The buyer did not approve this exact spend.",
"The agent plans to retry more than once just to clear a metric."
],
"failureBranches": {
"walletNotAuthenticated": {
"bucket": "wallet_not_authenticated",
"buyerAction": "Authenticate the buyer-controlled x402 wallet/client before retrying.",
"apexScoutAction": "Do nothing automatically."
},
"insufficientBaseUsdc": {
"bucket": "insufficient_base_usdc",
"buyerAction": "Stop until the buyer-controlled wallet has enough Base USDC for the one-cent proof.",
"apexScoutAction": "Do not fund, trade, onramp, or advise funding."
},
"maxAmountTooLow": {
"bucket": "max_amount_too_low",
"buyerAction": "Use max amount 10000 atomic USDC or stop.",
"apexScoutAction": "Do not lower route price or change payment requirements."
},
"wrongNetwork": {
"bucket": "wrong_network",
"buyerAction": "Use eip155:8453 Base mainnet or stop.",
"apexScoutAction": "Do not switch rails."
},
"paymentDeclined": {
"bucket": "payment_declined",
"buyerAction": "Stop unless the buyer explicitly approves another attempt.",
"apexScoutAction": "Do not retry payment for the buyer."
}
},
"telemetryInterpretation": {
"sourceTag": "agent-execution-awal-latest",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionAwalLatest",
"closePacketUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"closePacketIsFree": true,
"closePacketExecutesPayment": false,
"paymentAttemptedByClosePacket": false,
"paidRouteCalledByClosePacket": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"secretSigningMaterialRequested": false
}
},
"buyerProofExecutionCloseoutAvailable": true,
"buyerProofExecutionCloseout": {
"available": true,
"mode": "buyer-proof-execution-closeout",
"release": "v2.2.228-live-command-center",
"title": "Copied? Finish with one buyer-run proof retry",
"purpose": "Close the gap after a buyer agent marks its wallet ready or copies the command: run exactly one buyer-approved proof retry, classify the response, then stop.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"method": "GET",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"primarySourceTag": "agent-receipt-contract",
"primarySourceBucket": "agentReceiptContract",
"commandCopySourceTag": "agent-execution-command-copy",
"commandCopySourceBucket": "agentExecutionCommandCopy",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"firstScreenPlacement": {
"x402Proof": "after-wallet-close-before-receipt-command",
"chatTinyPaymentFlow": "after-wallet-close-before-receipt-command",
"closeoutVisibleBeforeCommandCopy": true,
"normalNoSpendPathRemainsPrimary": true
},
"closeoutRule": {
"ifWalletReadyAndCommandCopied": "Run the receipt-bound command exactly once from the buyer-controlled x402 wallet if the buyer approved the route, amount, and network.",
"ifCannotPayYet": "Do not retry payment. Use the wallet setup note and stop until wallet authentication, Base USDC balance, route, amount, and network match.",
"ifResponseIs402": "Treat the result as unpaid. It is a challenge, not a paid proof, and it should not move revenue.",
"ifResponseIs200": "Treat the result as paid proof only after the buyer-controlled x402 retry returns structured HTTP 200 JSON.",
"ifRetryIsRejected": "Read the sanitized edge failure status once, classify the rejection, and stop before another paid attempt.",
"stopAfter": "one buyer-approved paid retry unless a human operator explicitly approves another capped diagnostic"
},
"buyerAgentChecklist": [
"Wallet is authenticated by the buyer, not ApexScout.",
"Buyer approves GET /api/opportunity-check with source agent-receipt-contract.",
"Maximum spend is exactly 10000 atomic USDC.",
"Network is exactly eip155:8453 Base mainnet.",
"Run one retry, then classify HTTP 402, HTTP 200, or a sanitized edge failure."
],
"copyReadyCommands": {
"receiptBoundProofCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"commandCopyProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"edgeFailureReadCommand": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof."
},
"safeReadouts": {
"edgeHealthPath": "/__apexscout/cloudflare-x402/health",
"edgeLastFailurePath": "/__apexscout/cloudflare-x402/health/last-failure",
"edgeLastFailureUrl": "https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure",
"originLastFailurePath": "/api/cloudflare-x402-edge-failure/last",
"originLastFailureUrl": "https://apexscout.ai/api/cloudflare-x402-edge-failure/last",
"noPaymentAttemptedByRead": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"privateKeysRequested": false
},
"buttons": [
{
"label": "Copy receipt-bound proof command",
"copies": "receipt_bound_command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy edge failure readout",
"copies": "edge_failure_read_command",
"value": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"failureReadoutIsRevenue": false,
"copyIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"newCounterAdded": false,
"reason": "The closeout reuses existing aggregate wallet-close, source-bucket, and paid-completion counters so it improves decision clarity without creating fake movement."
},
"noSpendBoundary": {
"closeoutIsFree": true,
"closeoutExecutesPayment": false,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"failureReadoutExecutesPayment": false,
"failureReadoutCallsPaidRoute": false,
"paymentAttemptedByCloseout": false,
"paidRouteCalledByCloseout": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"productionPostCreated": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareMutationCreated": false,
"apifyActorRunCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"rawPaymentPayloadExposed": false
},
"safetyClaims": {
"guaranteedRevenueClaimed": false,
"officialEndorsementClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareMonetizationGatewayReadinessAvailable": true,
"cloudflareMonetizationGatewayReadiness": {
"available": true,
"mode": "cloudflare-monetization-gateway-readiness",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare live edge status",
"releaseReportingMode": "worker-and-origin-split",
"appRelease": "v2.2.228-live-command-center",
"originRelease": "v2.2.228-live-command-center",
"originReleasePath": "/status",
"workerRelease": "v2.2.228-live-command-center",
"workerSourceVersion": "2.2.228",
"workerHealthReleaseContract": {
"healthPath": "/__apexscout/cloudflare-x402/health",
"releaseFieldMeans": "workerRelease",
"workerReleaseField": "workerRelease",
"originReleaseField": "originRelease",
"originReleasePath": "/status",
"originReleaseReadIsNoSpend": true,
"mismatchIsActionableOnlyWhenWorkerHealthFails": true
},
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"articleUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving x402 payment enforcement toward edge-managed route rules. ApexScout now serves the one-cent proof path through a narrow Cloudflare Worker while keeping Railway as the origin fallback."
},
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"officialCloudflareMonetizationGatewayClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"waitlistOrEarlyAccessRequired": false,
"noDnsChangeMade": false,
"dnsChangedByLiveCutover": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"apexScoutRemainsSourceOfTruth": true,
"candidateRules": [
{
"id": "apexscout-one-cent-proof",
"purpose": "Edge-readable one-cent x402 proof route for wallet-capable buyer agents.",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"displayPrice": "$0.01",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
},
{
"id": "apexscout-agent-revenue-audit",
"purpose": "Higher-value builder monetization audit route.",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"amountAtomicUsdc": "5000000",
"priceUsd": "5.00",
"displayPrice": "$5.00",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
}
],
"migrationPlan": [
"Keep the Cloudflare Worker route narrow and use Railway as the origin fallback.",
"Use these candidate rules as the review checklist before any future official managed-gateway change.",
"Require unpaid HTTP 402 and buyer-controlled HTTP 200 proof for each route after any edge or gateway change.",
"Keep ApexScout aggregate metrics as the public conversion truth source.",
"Roll back to Railway-origin x402 if route, amount, network, or payment proof differs."
],
"operatorChecklist": {
"dnsChangeApproved": true,
"cloudflareApiTokenApproved": true,
"gatewayRuleCreationApproved": true,
"postDeployPaidProofRequiredBeforeClaimingGatewayLive": true,
"originFallbackRequired": true,
"compareGatewayRulesToCandidateRules": true
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"cloudflareApiCalled": false,
"dnsChanged": false,
"dnsAlreadyProxiedThroughCloudflare": true,
"workerAlreadyDeployed": true,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"revenueOutcomeClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
},
"telemetryInterpretation": {
"readinessUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"watchCounters": "If unpaid proof counters move without paid completions, treat it as proof-route interest, not gateway success."
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"retryDecision": {
"recommendedOnlyForX402CapableClients": true,
"payOnlyIf": "The buyer wants the cheapest live x402 proof and approves the route, $0.01 maximum amount, Base mainnet network, and one retry.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the network is not eip155:8453, or the output will not change the next action.",
"ifUnsure": "Stay on the no-spend proof and action-pack surfaces. Do not retry payment just to clear the counter."
},
"approvalChecklist": [
"Buyer approves GET /api/opportunity-check as the route.",
"Buyer approves the $0.01 maximum spend.",
"Buyer approves Base mainnet x402 on eip155:8453.",
"Buyer controls the wallet and chooses whether to retry.",
"Buyer expects HTTP 200 JSON only after the paid retry succeeds."
],
"copyPasteAgentNote": "Unpaid 402 is expected. If the buyer approves a one-cent proof, retry GET /api/opportunity-check with an x402-capable client, max amount 10000 atomic USDC on eip155:8453, and treat only HTTP 200 as completion.",
"paidRetryCommandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof\" \\\n --max-amount 10000 \\\n --json",
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"ifUnpaidRisesWithoutCompletion": "Treat this as proof-route interest without payment. Inspect retry clarity only after repeated windows; do not add another paid route.",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"confidencePacketIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByConfidencePacket": false,
"walletConnectionRequiredForConfidencePacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"http402ReadinessReceiptAvailable": true,
"http402ReadinessReceipt": {
"available": true,
"mode": "no-spend-http-402-readiness-receipt",
"title": "HTTP 402 Readiness Receipt",
"purpose": "Give x402-capable buyers a compact, unsigned receipt showing what the unpaid proof challenge proves before any buyer-controlled paid retry.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"receiptScope": "GET /api/opportunity-check, $0.01 maximum amount, eip155:8453 Base mainnet x402, one buyer-controlled retry.",
"receiptSummary": "Unpaid HTTP 402 proves the x402 proof route is reachable and returning payment requirements. It does not prove payment, revenue, endorsement, or buyer approval.",
"agentDecision": {
"payOnlyIf": "The buyer explicitly approves the route, max amount, network, and one retry from a wallet-controlled x402 client.",
"stopIf": "The buyer has not approved spend, the client cannot attach x402 payment, the route or network differs, or HTTP 402 is being treated as a paid completion.",
"nextNoSpendStep": "Stay on ApexScout proof, action-pack, Scope Check, or Builder surfaces until buyer-controlled payment is intentionally approved."
},
"readinessChecks": [
"Route scoped to GET /api/opportunity-check.",
"Amount scoped to $0.01 / 10000 atomic USDC.",
"Network scoped to Base mainnet eip155:8453.",
"HTTP 402 is expected before payment.",
"HTTP 200 is required before paid completion is counted.",
"No request body, cookies, session, or wallet connection is required to read this receipt.",
"No buyer-level data is exposed by this receipt.",
"No automatic payment or paid retry is performed by ApexScout."
],
"publicSafetyCopy": "This is an unsigned no-spend readiness receipt, not AP2 proof, not a signed mandate, not a legal or payment receipt, not an endorsement claim, and not trading, investment, tax, legal, lending, or compliance advice.",
"notClaims": {
"signedReceiptCreated": false,
"ap2ProofCreated": false,
"legalMandateCreated": false,
"paymentReceiptCreated": false,
"walletApprovalCreated": false,
"officialEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false
},
"noSpendBoundary": {
"receiptIsFree": true,
"opensPaidRouteByItself": false,
"paymentAttemptedByReceipt": false,
"paidRouteCalledByReceipt": false,
"paidUpstreamCalls": false,
"walletConnectionRequiredForReceipt": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"receiptUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"copyPasteReceiptSummary": "HTTP 402 readiness receipt: GET /api/opportunity-check is reachable, costs max $0.01 on eip155:8453 only after buyer-controlled x402 retry, and counts as paid only when HTTP 200 returns."
},
"proofRetryDecisionStripAvailable": true,
"proofRetryDecisionStrip": {
"available": true,
"mode": "buyer-controlled-proof-retry-decision-strip",
"title": "Buyer-controlled proof retry gate",
"purpose": "Compress the next click after an unpaid 402 into a clear continue/stop decision for x402-capable buyers.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"decisionSummary": "Continue only if buyer approval, x402 wallet capability, exact route, exact amount, and Base mainnet network all match.",
"continueIf": [
"Buyer explicitly approves this exact $0.01 proof.",
"Client can attach x402 payment on Base mainnet eip155:8453.",
"Route is exactly GET /api/opportunity-check.",
"Max amount is exactly 10000 atomic USDC.",
"Buyer understands only HTTP 200 counts as a paid proof completion."
],
"stopIf": [
"Buyer has not approved spend.",
"Client is a normal browser without x402 payment support.",
"Route, amount, or network differs from the receipt.",
"The buyer is treating unpaid HTTP 402 as revenue or completion.",
"The output will not change the buyer's next action."
],
"primaryAction": {
"label": "Request unpaid proof challenge",
"href": "/api/opportunity-check?src=machine-readable-x402-proof",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=machine-readable-x402-proof",
"normalBrowserResult": "HTTP 402 JSON with x402 payment requirements",
"x402CapableResult": "HTTP 200 JSON only after buyer-controlled paid retry",
"noPaymentOnClick": true,
"paidRetryRequiresBuyerWallet": true
},
"fallbackNoSpendActions": [
"/x402-proof",
"/api/agent-revenue-audit-builder/action-pack",
"/buyer-payment-scope-check",
"/chat-tiny-payment-flow"
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"decisionStripUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"decisionStripIsFree": true,
"paymentAttemptedByDecisionStrip": false,
"paidRouteCalledByDecisionStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofPacketAvailable": true,
"agentExecutionProofPacket": {
"available": true,
"mode": "buyer-controlled-agent-execution-proof-packet",
"title": "Agent execution packet",
"purpose": "Give wallet-capable buyer agents the exact one-cent x402 proof retry without adding a new paid route, changing price, or requiring buyer data.",
"route": "/api/opportunity-check",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"hrefUrl": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"executionContract": {
"buyerApprovalRequired": true,
"x402CapableClientRequired": true,
"routeMustMatch": "/api/opportunity-check",
"methodMustMatch": "GET",
"maxAmountMustMatchAtomicUsdc": "10000",
"networkMustMatch": "eip155:8453",
"stopAfterOnePaidResponse": true,
"successOnlyWhenHttp200": true,
"automaticSpendingByApexScout": false
},
"successCriteria": [
"Buyer-controlled x402 retry returns HTTP 200.",
"Response is JSON from GET /api/opportunity-check.",
"The paid proof counter increments only after the paid retry succeeds."
],
"abortIf": [
"Buyer approval is missing.",
"The client cannot attach x402 payment.",
"Route, method, amount, or network differs.",
"The unpaid HTTP 402 challenge is being treated as revenue."
],
"telemetryInterpretation": {
"sourceTag": "agent-execution-proof-packet",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionProofPacket",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"packetIsFree": true,
"packetExecutesPayment": false,
"paidRouteCalledByPacket": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"agentExecutionProofCtaAvailable": true,
"agentExecutionProofCta": {
"available": true,
"mode": "promoted-buyer-executable-proof-cta",
"title": "Buyer-run proof packet",
"label": "Run with buyer-approved x402 wallet",
"copy": "Wallet-capable buyers can use the exact one-cent proof packet now. ApexScout only exposes the packet; the buyer wallet decides whether to pay.",
"href": "/api/opportunity-check?src=agent-execution-proof-packet",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"sourceTag": "agent-execution-proof-packet",
"method": "GET",
"route": "/api/opportunity-check",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"commandShape": "Do not run unless the buyer wallet is approved for this one-cent proof.\nnpx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" \\\n --max-amount 10000 \\\n --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet\" --max-amount 10000 --json",
"machineReadablePaymentRequest": {
"protocol": "x402",
"method": "GET",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-proof-packet",
"route": "/api/opportunity-check",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"sourceTag": "agent-execution-proof-packet"
},
"conversionBet": "Promote the already-safe buyer-execution packet above passive proof copy so x402-capable clients have one obvious next action.",
"successMetric": "opportunityCheckGetProofCompletions",
"unpaidSourceBucket": "agentExecutionProofPacket",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"buyerDecision": {
"continueOnlyIf": "The buyer approves the route, amount, network, and one retry from an x402-capable wallet runtime.",
"stopIf": "Approval is missing, the client cannot attach x402 payment, or the route/amount/network differs."
},
"noSpendBoundary": {
"ctaIsFreeToRead": true,
"normalBrowserGetsUnpaid402": true,
"paymentAttemptedByCta": false,
"paidRouteCalledByApexScout": false,
"automaticSpending": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"walletReadinessStripAvailable": true,
"walletReadinessStrip": {
"available": true,
"mode": "buyer-wallet-readiness-strip",
"title": "Before you run the command",
"checklist": [
"Your x402 wallet/client is authenticated.",
"Your wallet has at least $0.01 USDC available on Base.",
"You approve the route: GET /api/opportunity-check.",
"You approve the max amount: 10000 atomic USDC.",
"You understand unpaid HTTP 402 is not revenue.",
"You understand paid proof means HTTP 200 after your own wallet retry."
],
"copy": "ApexScout does not run this command for you. Your buyer-controlled wallet decides whether to spend.",
"route": "/api/opportunity-check",
"method": "GET",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"network": "eip155:8453",
"noFundingAdvice": true,
"noTradingAdvice": true,
"noPrivateKeyAdvice": true,
"noOnrampAdvice": true,
"noSpendBoundary": {
"stripIsFree": true,
"paymentAttemptedByStrip": false,
"paidRouteCalledByStrip": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
}
},
"buyerAgentCommandCopyAvailable": true,
"buyerAgentCommandCopy": {
"available": true,
"mode": "buyer-agent-command-copy",
"title": "Choose your buyer-run x402 command",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"recommendedCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"pinnedCurrentCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"deprecatedLegacyCommand": "npx awal@2.8.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-2-8\" --max-amount 10000 --json",
"deprecatedLegacyCommandOfferedForPaidUse": false,
"buyerAgentCommandVariants": [
{
"id": "awal-latest",
"label": "Recommended current",
"packageVersion": "latest",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": true,
"pinned": false,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
},
{
"id": "awal-2-12",
"label": "Pinned current",
"packageVersion": "2.12.0",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": false,
"pinned": true,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
}
],
"buyerClientCompatibilityMatrix": [
{
"client": "AWAL CLI",
"status": "recommended-current",
"buyerSideOnly": true,
"goodFor": "Buyer agents using Coinbase Agentic Wallet CLI to make a capped one-cent x402 proof request.",
"commandVariants": [
"awal-latest",
"awal-2-12"
],
"docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/pay-for-service",
"paymentExecutedByApexScout": false
},
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"otherX402CapableBuyerClients": [
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"legacyCommandCopyRoute": "/api/opportunity-check?src=agent-execution-command-copy",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"requestBodyRequired": false,
"walletMustBeAuthenticated": true,
"walletNeedsSufficientUsdc": true,
"apexScoutRunsCommand": false,
"copyingIsPayment": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"sourceBucketCompatibility": {
"oldPacketSourceStillSupported": "agent-execution-proof-packet",
"previousCommandCopySourceStillSupported": "agent-execution-command-copy",
"recommendedCurrentSource": "agent-execution-awal-latest",
"pinnedCurrentSource": "agent-execution-awal-latest",
"previousPinnedSourceStillMeasured": "agent-execution-awal-2-10",
"deprecatedLegacySourceStillMeasured": "agent-execution-awal-2-8",
"unpaidSourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"topSourceTagsCounter": "opportunityCheckGetProofUnpaidTopSourceTags"
},
"prerequisiteCommands": {
"stopOldCompanion": "npx awal@2.12.0 quit --json",
"status": "npx awal@2.12.0 status --json",
"balance": "npx awal@2.12.0 balance --chain base --json",
"details": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json"
},
"buyerClientRuntimePreflight": {
"requiredBeforePaidRetry": true,
"pinnedCliVersion": "2.12.0",
"pinnedCompanionVersion": "2.12.0",
"stopOldCompanionCommand": "npx awal@2.12.0 quit --json",
"restartCurrentCompanionCommand": "npx awal@2.12.0 status --json",
"confirmBaseBalanceCommand": "npx awal@2.12.0 balance --chain base --json",
"parseUnpaidContractCommand": "npx awal@2.12.0 x402 details \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --json",
"versionAlignedCompanionRequired": true,
"discoveryParseAloneIsPaidProof": false,
"paymentAttemptedByPreflight": false,
"paidRouteCalledByPreflight": false,
"automaticRetry": false,
"allowedPaidRetryCountAfterBuyerApproval": 1
},
"microcopy": "Refresh the buyer wallet companion to AWAL 2.12.0, confirm authentication and Base USDC, then parse the unpaid contract before one buyer-approved retry. This can spend up to 10000 atomic USDC only if your wallet approves. ApexScout does not run the command; copying is not payment; unpaid HTTP 402 is not revenue; paid proof means HTTP 200 after a buyer-controlled x402 retry.",
"prerequisites": [
"Stop an older AWAL companion, then start the pinned 2.12.0 companion.",
"Confirm the buyer wallet is authenticated and has enough USDC on Base.",
"Parse the unpaid 402 contract before any buyer-approved retry.",
"Approve only GET /api/opportunity-check with max amount 10000 atomic USDC.",
"Stop if the route, amount, network, or buyer approval differs."
],
"approvalCopy": "This command can spend up to 10000 atomic USDC only if your buyer wallet approves.",
"copyingIsNotPaymentCopy": "Copying this command is not payment.",
"apexScoutRunsCommandCopy": "ApexScout does not run this command.",
"unpaidChallengeCopy": "Unpaid HTTP 402 is expected before payment.",
"paidCompletionCopy": "Paid proof completes only when your buyer-controlled x402 retry returns HTTP 200.",
"placement": {
"x402Proof": "above-proof-detail-sections",
"chatTinyPaymentFlow": "above-chat-flow-detail-sections",
"primaryForWalletCapableAgents": true,
"normalNoSpendPathRemainsPrimary": true
},
"buttons": [
{
"label": "Copy AWAL latest command",
"copies": "command",
"value": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy AWAL 2.12 command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy route only",
"copies": "route",
"value": "/api/opportunity-check?src=agent-execution-awal-latest",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetry": {
"commandCopyTelemetryAdded": false,
"skippedReason": "The release keeps the buttons copy-only and avoids adding a client-side analytics call; the AWAL version source tags are still available when a buyer-run agent command reaches the unpaid 402 route.",
"copyIsRevenue": false,
"copyIsPayment": false,
"unpaidChallengeSourceBucket": "agentExecutionAwalLatest"
},
"noSpendBoundary": {
"copyPanelIsFree": true,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"paidRouteCalledByCopyPanel": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"buyerAgentCommandVariantsAvailable": true,
"buyerAgentCommandVariants": [
{
"id": "awal-latest",
"label": "Recommended current",
"packageVersion": "latest",
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": true,
"pinned": false,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
},
{
"id": "awal-2-12",
"label": "Pinned current",
"packageVersion": "2.12.0",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"recommended": false,
"pinned": true,
"legacyFallbackOnly": false,
"executesPaymentWhenCopied": false,
"apexScoutRunsCommand": false,
"copyingIsPayment": false
}
],
"buyerClientCompatibilityMatrixAvailable": true,
"buyerClientCompatibilityMatrix": [
{
"client": "AWAL CLI",
"status": "recommended-current",
"buyerSideOnly": true,
"goodFor": "Buyer agents using Coinbase Agentic Wallet CLI to make a capped one-cent x402 proof request.",
"commandVariants": [
"awal-latest",
"awal-2-12"
],
"docsUrl": "https://docs.cdp.coinbase.com/agentic-wallet/cli/skills/pay-for-service",
"paymentExecutedByApexScout": false
},
{
"client": "Cloudflare Agents x402 client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Cloudflare Agents SDK buyers that wrap paid tools or resources with an x402-capable client.",
"commandVariants": [],
"docsUrl": "https://developers.cloudflare.com/agents/tools/payments/x402/",
"paymentExecutedByApexScout": false
},
{
"client": "MetaMask / x402 fetch client",
"status": "informational-only",
"buyerSideOnly": true,
"goodFor": "Delegated smart-account buyers that use x402-compatible fetch wrappers to handle a protected API route.",
"commandVariants": [],
"docsUrl": "https://docs.metamask.io/smart-accounts-kit/development/guides/x402/buyer/delegations/",
"paymentExecutedByApexScout": false
}
],
"walletMustBeAuthenticated": true,
"walletNeedsSufficientUsdc": true,
"apexScoutRunsCommand": false,
"copyingIsPayment": false,
"paymentExecutedByApexScout": false,
"agentReceiptCloseStripAvailable": true,
"agentReceiptCloseStrip": {
"available": true,
"mode": "agent-receipt-close-strip",
"release": "v2.2.228-live-command-center",
"title": "Receipt rule accepted? Copy the proof command",
"purpose": "Put the Agent Receipt Contract directly beside the buyer-agent payment command so x402-capable clients know the exact proof standard before retrying.",
"sourceTag": "agent-receipt-contract",
"sourceBucket": "agentReceiptContract",
"method": "GET",
"route": "/api/opportunity-check",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"command": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"firstScreenPlacement": {
"x402Proof": "before-wallet-command-copy",
"chatTinyPaymentFlow": "before-wallet-command-copy",
"makeReceiptRuleVisibleBeforePaymentCommand": true,
"normalNoSpendPathRemainsPrimary": true
},
"receiptRule": {
"payOnlyIf": "Your buyer agent accepts that only HTTP 200 after a buyer-controlled x402 retry counts as paid proof.",
"rejectIf": "The client treats HTTP 402, copied text, monitor reads, route mismatch, amount mismatch, network mismatch, or repeated retry loops as proof.",
"unpaid402IsNotRevenue": true,
"paidProofRequiresHttp200": true,
"buyerControlsWalletAndRetry": true,
"stopAfterOneSuccessfulPaidResponse": true
},
"visibleBuyerCopy": [
"Accept the receipt rule before copying the command.",
"HTTP 402 is only the unpaid challenge.",
"HTTP 200 after your buyer-controlled retry is the paid proof.",
"ApexScout does not run this command and does not control the wallet."
],
"buttons": [
{
"label": "Copy receipt-bound command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy receipt route",
"copies": "route",
"value": "/api/opportunity-check?src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentReceiptContract",
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"successSignal": "agentReceiptContract source bucket moves only when a buyer/client requests the paid proof route with the receipt-contract source tag."
},
"noSpendBoundary": {
"closeStripIsFree": true,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"paymentAttemptedByCloseStrip": false,
"paidRouteCalledByCloseStrip": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"buyerWalletCloseAvailable": true,
"buyerWalletClose": {
"available": true,
"mode": "buyer-wallet-close",
"release": "v2.2.228-live-command-center",
"title": "Can your wallet pay now?",
"purpose": "Separate wallet-ready buyers from buyers who still need setup before the one-cent proof retry.",
"route": "/api/buyer-wallet-close-intent",
"method": "GET",
"routeIsFree": true,
"sourceTags": {
"walletReady": "agent-receipt-contract",
"cannotPayYet": "agent-wallet-skill-pack",
"copyPaidProofCommand": "agent-execution-command-copy",
"copyReceiptBoundCommand": "agent-receipt-contract",
"copyWalletSetupCommand": "agent-wallet-skill-pack"
},
"actions": {
"walletReady": {
"action": "wallet_ready",
"path": "/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"method": "GET",
"sourceTag": "agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
"cannotPayYet": {
"action": "cannot_pay_yet",
"path": "/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"method": "GET",
"sourceTag": "agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
},
"copyPaidProofCommand": {
"action": "copy_paid_proof_command",
"path": "/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"method": "GET",
"sourceTag": "agent-execution-command-copy",
"executesPayment": false,
"opensPaidRoute": false
},
"copyReceiptBoundCommand": {
"action": "copy_receipt_bound_command",
"path": "/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"method": "GET",
"sourceTag": "agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
"copyWalletSetupCommand": {
"action": "copy_wallet_setup_command",
"path": "/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"url": "https://apexscout.ai/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"method": "GET",
"sourceTag": "agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
}
},
"visibleBuyerCopy": [
"Choose the wallet state before copying a command.",
"This signal is a free GET request and does not open the paid route.",
"If the wallet is ready, copy the command and run it only from the buyer-controlled wallet.",
"If the wallet is not ready, stop before payment and fix wallet authentication, balance, route, amount, or network."
],
"paidProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"receiptBoundCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"buttons": [
{
"label": "I can pay now",
"action": "wallet_ready",
"copies": null,
"value": null,
"intentPath": "/api/buyer-wallet-close-intent?action=wallet_ready&src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "I can't pay yet",
"action": "cannot_pay_yet",
"copies": null,
"value": null,
"intentPath": "/api/buyer-wallet-close-intent?action=cannot_pay_yet&src=agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy paid proof command",
"action": "copy_paid_proof_command",
"copies": "command",
"value": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_paid_proof_command&src=agent-execution-command-copy",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy receipt-bound command",
"action": "copy_receipt_bound_command",
"copies": "command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_receipt_bound_command&src=agent-receipt-contract",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"action": "copy_wallet_setup_command",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"intentPath": "/api/buyer-wallet-close-intent?action=copy_wallet_setup_command&src=agent-wallet-skill-pack",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"mode": "aggregate-only-buyer-wallet-close-intent",
"counter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"cannotPayYetCounter": "buyerWalletCloseSignals.cannotPayYet",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"copyWalletSetupCommandCounter": "buyerWalletCloseSignals.copyWalletSetupCommand",
"intentIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"firstScreenPlacement": {
"x402Proof": "before-receipt-and-command-copy",
"chatTinyPaymentFlow": "before-receipt-and-command-copy",
"walletStateVisibleBeforePaymentCommand": true,
"normalNoSpendPathRemainsPrimary": true
},
"noSpendBoundary": {
"panelIsFree": true,
"intentRouteIsFree": true,
"intentRouteMethod": "GET",
"copyingExecutesPayment": false,
"clickingStateExecutesPayment": false,
"clickingStateOpensPaidRoute": false,
"paidRouteCalledByPanel": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false
}
},
"http402ClosePacketAvailable": true,
"http402ClosePacket": {
"available": true,
"mode": "buyer-agent-402-close-packet",
"release": "v2.2.228-live-command-center",
"title": "402 close packet",
"purpose": "Put the buyer-agent close instructions inside the unpaid HTTP 402 response so x402-capable clients can finish the proof without hunting through a page.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"method": "GET",
"href": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"maxAmountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"command": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"oneLineCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"closeMessage": "You reached the ApexScout paid proof gate. To complete the proof, retry this exact GET route from an authenticated x402 wallet/client with max amount 10000 atomic USDC on Base mainnet.",
"buyerAgentInstruction": "If the buyer approved this one-cent proof, run the command exactly once and treat only HTTP 200 as the paid completion. If any route, amount, network, or approval detail differs, stop.",
"whatHttp200Proves": [
"The buyer-controlled x402 retry reached ApexScout's one-cent proof route.",
"The paid route returned structured JSON after payment verification.",
"The aggregate paid proof completion counter is allowed to move only after HTTP 200."
],
"notProofOf": [
"Coinbase, AWS, Stripe, Bazaar, AgentCore, Base, marketplace, or protocol endorsement.",
"Guaranteed revenue, trading results, investment outcome, legal advice, tax advice, lending advice, or compliance approval.",
"Buyer identity, wallet-level activity, secret signing material, or broader permission to spend."
],
"continueIf": [
"The buyer explicitly approved this one-cent proof.",
"The client can attach an x402 payment authorization.",
"The retry route is exactly GET /api/opportunity-check?src=agent-execution-awal-latest.",
"The max amount is exactly 10000 atomic USDC.",
"The network is exactly eip155:8453."
],
"stopIf": [
"The wallet is not authenticated.",
"The wallet has insufficient USDC on Base.",
"The client cannot attach x402 payment.",
"The max amount is lower than 10000 atomic USDC.",
"The network is not eip155:8453.",
"The buyer did not approve this exact spend.",
"The agent plans to retry more than once just to clear a metric."
],
"failureBranches": {
"walletNotAuthenticated": {
"bucket": "wallet_not_authenticated",
"buyerAction": "Authenticate the buyer-controlled x402 wallet/client before retrying.",
"apexScoutAction": "Do nothing automatically."
},
"insufficientBaseUsdc": {
"bucket": "insufficient_base_usdc",
"buyerAction": "Stop until the buyer-controlled wallet has enough Base USDC for the one-cent proof.",
"apexScoutAction": "Do not fund, trade, onramp, or advise funding."
},
"maxAmountTooLow": {
"bucket": "max_amount_too_low",
"buyerAction": "Use max amount 10000 atomic USDC or stop.",
"apexScoutAction": "Do not lower route price or change payment requirements."
},
"wrongNetwork": {
"bucket": "wrong_network",
"buyerAction": "Use eip155:8453 Base mainnet or stop.",
"apexScoutAction": "Do not switch rails."
},
"paymentDeclined": {
"bucket": "payment_declined",
"buyerAction": "Stop unless the buyer explicitly approves another attempt.",
"apexScoutAction": "Do not retry payment for the buyer."
}
},
"telemetryInterpretation": {
"sourceTag": "agent-execution-awal-latest",
"unpaidChallengeCounter": "opportunityCheckGetProofUnpaidChallenges",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"sourceBucketsCounter": "opportunityCheckGetProofUnpaidSourceBuckets",
"sourceBucket": "agentExecutionAwalLatest",
"closePacketUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200"
},
"noSpendBoundary": {
"closePacketIsFree": true,
"closePacketExecutesPayment": false,
"paymentAttemptedByClosePacket": false,
"paidRouteCalledByClosePacket": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"secretSigningMaterialRequested": false
}
},
"buyerProofExecutionCloseoutAvailable": true,
"buyerProofExecutionCloseout": {
"available": true,
"mode": "buyer-proof-execution-closeout",
"release": "v2.2.228-live-command-center",
"title": "Copied? Finish with one buyer-run proof retry",
"purpose": "Close the gap after a buyer agent marks its wallet ready or copies the command: run exactly one buyer-approved proof retry, classify the response, then stop.",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-receipt-contract",
"method": "GET",
"href": "/api/opportunity-check?src=agent-receipt-contract",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract",
"price": "$0.01",
"priceUsd": "0.01",
"maxAmountAtomicUsdc": "10000",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"rail": "Base mainnet x402 exact payment",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"primarySourceTag": "agent-receipt-contract",
"primarySourceBucket": "agentReceiptContract",
"commandCopySourceTag": "agent-execution-command-copy",
"commandCopySourceBucket": "agentExecutionCommandCopy",
"buyerWalletCloseSignalCounter": "buyerWalletCloseSignals.walletCloseIntentEvents",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"firstScreenPlacement": {
"x402Proof": "after-wallet-close-before-receipt-command",
"chatTinyPaymentFlow": "after-wallet-close-before-receipt-command",
"closeoutVisibleBeforeCommandCopy": true,
"normalNoSpendPathRemainsPrimary": true
},
"closeoutRule": {
"ifWalletReadyAndCommandCopied": "Run the receipt-bound command exactly once from the buyer-controlled x402 wallet if the buyer approved the route, amount, and network.",
"ifCannotPayYet": "Do not retry payment. Use the wallet setup note and stop until wallet authentication, Base USDC balance, route, amount, and network match.",
"ifResponseIs402": "Treat the result as unpaid. It is a challenge, not a paid proof, and it should not move revenue.",
"ifResponseIs200": "Treat the result as paid proof only after the buyer-controlled x402 retry returns structured HTTP 200 JSON.",
"ifRetryIsRejected": "Read the sanitized edge failure status once, classify the rejection, and stop before another paid attempt.",
"stopAfter": "one buyer-approved paid retry unless a human operator explicitly approves another capped diagnostic"
},
"buyerAgentChecklist": [
"Wallet is authenticated by the buyer, not ApexScout.",
"Buyer approves GET /api/opportunity-check with source agent-receipt-contract.",
"Maximum spend is exactly 10000 atomic USDC.",
"Network is exactly eip155:8453 Base mainnet.",
"Run one retry, then classify HTTP 402, HTTP 200, or a sanitized edge failure."
],
"copyReadyCommands": {
"receiptBoundProofCommand": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"commandCopyProofCommand": "npx awal@latest x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest\" --max-amount 10000 --json",
"edgeFailureReadCommand": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"walletSetupNote": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof."
},
"safeReadouts": {
"edgeHealthPath": "/__apexscout/cloudflare-x402/health",
"edgeLastFailurePath": "/__apexscout/cloudflare-x402/health/last-failure",
"edgeLastFailureUrl": "https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure",
"originLastFailurePath": "/api/cloudflare-x402-edge-failure/last",
"originLastFailureUrl": "https://apexscout.ai/api/cloudflare-x402-edge-failure/last",
"noPaymentAttemptedByRead": true,
"buyerLevelDataExposed": false,
"rawPaymentPayloadExposed": false,
"privateKeysRequested": false
},
"buttons": [
{
"label": "Copy receipt-bound proof command",
"copies": "receipt_bound_command",
"value": "npx awal@2.12.0 x402 pay \"https://apexscout.ai/api/opportunity-check?src=agent-receipt-contract\" --max-amount 10000 --json",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy edge failure readout",
"copies": "edge_failure_read_command",
"value": "curl -s \"https://apexscout.ai/__apexscout/cloudflare-x402/health/last-failure\"",
"executesPayment": false,
"opensPaidRoute": false
},
{
"label": "Copy wallet setup note",
"copies": "wallet_setup_note",
"value": "Authenticate your own x402 wallet/client. Confirm the buyer approves GET /api/opportunity-check. Confirm max spend is 10000 atomic USDC on eip155:8453. Run the paid proof command only from the buyer-controlled wallet. Treat HTTP 402 as unpaid and HTTP 200 as paid proof.",
"executesPayment": false,
"opensPaidRoute": false
}
],
"telemetryInterpretation": {
"walletReadyCounter": "buyerWalletCloseSignals.walletReadyIntent",
"copyPaidProofCommandCounter": "buyerWalletCloseSignals.copyPaidProofCommand",
"copyReceiptBoundCommandCounter": "buyerWalletCloseSignals.copyReceiptBoundCommand",
"paidCompletionCounter": "opportunityCheckGetProofCompletions",
"failureReadoutIsRevenue": false,
"copyIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"newCounterAdded": false,
"reason": "The closeout reuses existing aggregate wallet-close, source-bucket, and paid-completion counters so it improves decision clarity without creating fake movement."
},
"noSpendBoundary": {
"closeoutIsFree": true,
"closeoutExecutesPayment": false,
"copyingExecutesPayment": false,
"copyingOpensPaidRoute": false,
"failureReadoutExecutesPayment": false,
"failureReadoutCallsPaidRoute": false,
"paymentAttemptedByCloseout": false,
"paidRouteCalledByCloseout": false,
"apexScoutRunsCommand": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"productionPostCreated": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false,
"cloudflareMutationCreated": false,
"apifyActorRunCreated": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawCommandStored": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"privateKeysRequested": false,
"walletPayloadsExposed": false,
"livePaymentPayloadsExposed": false,
"rawPaymentPayloadExposed": false
},
"safetyClaims": {
"guaranteedRevenueClaimed": false,
"officialEndorsementClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareMonetizationGatewayReadinessAvailable": true,
"cloudflareMonetizationGatewayReadiness": {
"available": true,
"mode": "cloudflare-monetization-gateway-readiness",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare live edge status",
"releaseReportingMode": "worker-and-origin-split",
"appRelease": "v2.2.228-live-command-center",
"originRelease": "v2.2.228-live-command-center",
"originReleasePath": "/status",
"workerRelease": "v2.2.228-live-command-center",
"workerSourceVersion": "2.2.228",
"workerHealthReleaseContract": {
"healthPath": "/__apexscout/cloudflare-x402/health",
"releaseFieldMeans": "workerRelease",
"workerReleaseField": "workerRelease",
"originReleaseField": "originRelease",
"originReleasePath": "/status",
"originReleaseReadIsNoSpend": true,
"mismatchIsActionableOnlyWhenWorkerHealthFails": true
},
"sourceSignal": {
"name": "Cloudflare Monetization Gateway",
"sourceUrl": "https://blog.cloudflare.com/monetization-gateway/",
"articleUrl": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving x402 payment enforcement toward edge-managed route rules. ApexScout now serves the one-cent proof path through a narrow Cloudflare Worker while keeping Railway as the origin fallback."
},
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"officialCloudflareMonetizationGatewayClaimed": false,
"officialCloudflareEndorsementClaimed": false,
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPath": "/api/cloudflare-billing-rules",
"cloudflareBillingRulesWellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfigPath": "/api/cloudflare-x402-worker-config",
"cloudflareX402WorkerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"waitlistOrEarlyAccessRequired": false,
"noDnsChangeMade": false,
"dnsChangedByLiveCutover": true,
"noCloudflareApiCallMade": false,
"noCloudflareApiCallMadeByRead": true,
"noPaymentRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"noPaidRouteChanged": true,
"noPriceChanged": true,
"noSellerWalletChanged": true,
"noPaymentRailChanged": true,
"apexScoutRemainsSourceOfTruth": true,
"candidateRules": [
{
"id": "apexscout-one-cent-proof",
"purpose": "Edge-readable one-cent x402 proof route for wallet-capable buyer agents.",
"method": "GET",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"amountAtomicUsdc": "10000",
"priceUsd": "0.01",
"displayPrice": "$0.01",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
},
{
"id": "apexscout-agent-revenue-audit",
"purpose": "Higher-value builder monetization audit route.",
"method": "POST",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"amountAtomicUsdc": "5000000",
"priceUsd": "5.00",
"displayPrice": "$5.00",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerApprovalRequired": true,
"currentOriginStillEnforcesX402": true,
"gatewayCanMirrorButNotOverrideOrigin": true
}
],
"migrationPlan": [
"Keep the Cloudflare Worker route narrow and use Railway as the origin fallback.",
"Use these candidate rules as the review checklist before any future official managed-gateway change.",
"Require unpaid HTTP 402 and buyer-controlled HTTP 200 proof for each route after any edge or gateway change.",
"Keep ApexScout aggregate metrics as the public conversion truth source.",
"Roll back to Railway-origin x402 if route, amount, network, or payment proof differs."
],
"operatorChecklist": {
"dnsChangeApproved": true,
"cloudflareApiTokenApproved": true,
"gatewayRuleCreationApproved": true,
"postDeployPaidProofRequiredBeforeClaimingGatewayLive": true,
"originFallbackRequired": true,
"compareGatewayRulesToCandidateRules": true
},
"noSpendBoundary": {
"readinessPacketIsFree": true,
"paymentAttemptedByReadinessPacket": false,
"paidRouteCalledByReadinessPacket": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerRouteCreated": true,
"cloudflareApiCalled": false,
"dnsChanged": false,
"dnsAlreadyProxiedThroughCloudflare": true,
"workerAlreadyDeployed": true,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"revenueOutcomeClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
},
"telemetryInterpretation": {
"readinessUsageIsRevenue": false,
"unpaidChallengeIsRevenue": false,
"paidCompletionDefinition": "buyer-controlled x402 retry returns HTTP 200",
"watchCounters": "If unpaid proof counters move without paid completions, treat it as proof-route interest, not gateway success."
}
},
"cloudflareBillingRulesPackAvailable": true,
"cloudflareBillingRulesPack": {
"available": true,
"mode": "cloudflare-billing-rules-pack",
"release": "v2.2.228-live-command-center",
"title": "Cloudflare billing rules pack",
"purpose": "Document ApexScout's live Cloudflare edge Worker route and existing x402 paid-route policy without changing price, seller wallet, or buyer-controlled payment rules.",
"apiPath": "/api/cloudflare-billing-rules",
"wellKnownPath": "/.well-known/apexscout-cloudflare-billing-rules.json",
"workerConfigPath": "/api/cloudflare-x402-worker-config",
"workerConfigWellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceSignals": [
{
"name": "Cloudflare Monetization Gateway",
"url": "https://blog.cloudflare.com/monetization-gateway/",
"interpretedAs": "Cloudflare is moving toward edge-managed payment rules, including route-level x402 enforcement."
},
{
"name": "Cloudflare x402 proxy",
"url": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"interpretedAs": "A Cloudflare Worker can sit in front of an existing HTTP origin, return 402, verify x402 payment, and forward the approved request."
},
{
"name": "Cloudflare Pay Per Crawl",
"url": "https://developers.cloudflare.com/ai-crawl-control/features/pay-per-crawl/what-is-pay-per-crawl/",
"interpretedAs": "Cloudflare's crawler billing direction reinforces clear allow, charge, and block rules for automated clients."
}
],
"integrationStatus": "live-edge-worker-proxied",
"currentServingLayer": "Cloudflare edge Worker + Railway origin",
"cloudflareGatewayIntegrated": true,
"cloudflareEdgeWorkerIntegrated": true,
"cloudflareEdgeWorkerDeployed": true,
"cloudflareDnsProxied": true,
"cloudflareEdgeSettlementBridgeLive": true,
"cloudflareEdgeHealthPath": "/__apexscout/cloudflare-x402/health",
"expectedUnpaidEdgeHeader": "x-apexscout-cloudflare-x402=edge-unpaid-402",
"cloudflareWorkerConfigPrepared": true,
"cloudflareRulesCreated": true,
"cloudflareWorkerRouteCreated": true,
"officialCloudflareGatewayRulesCreated": false,
"officialCloudflareEndorsementClaimed": false,
"monetizationGatewayApiPubliclyAvailable": false,
"monetizationGatewayApiStatus": "planned-or-early-access",
"currentDeployableOption": "cloudflare-x402-edge-settlement-worker",
"originFallbackRequired": true,
"originStillEnforcesX402": true,
"originEdgeSettlementBridgePrepared": true,
"edgeSettlementEligiblePaidRuleCount": 4,
"originAuthoritativePaidRuleCount": 0,
"billingRuleCount": 7,
"paidBillingRuleCount": 4,
"freeAllowRuleCount": 2,
"blockRuleCount": 1,
"paidRules": [
{
"id": "apexscout-one-cent-proof",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/opportunity-check",
"route": "/api/opportunity-check",
"routeWithSource": "/api/opportunity-check?src=agent-execution-awal-latest",
"url": "https://apexscout.ai/api/opportunity-check?src=agent-execution-awal-latest",
"sourceTag": "agent-execution-awal-latest",
"sourceBucket": "agentExecutionAwalLatest",
"price": "$0.01",
"priceUsd": "0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/agent-commerce-reliability-ledger",
"route": "/api/agent-commerce-reliability-ledger",
"url": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"sourceTag": "agent-commerce-reliability-ledger",
"sourceBucket": "reliabilityLedger",
"price": "$0.10",
"priceUsd": "0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-signed-origin-bridge"
},
{
"id": "apexscout-x402-compatibility-witness",
"type": "charge_x402",
"method": "GET",
"pattern": "/api/x402-compatibility-witness",
"route": "/api/x402-compatibility-witness",
"url": "https://apexscout.ai/api/x402-compatibility-witness",
"sourceTag": "x402-compatibility-witness",
"sourceBucket": "compatibilityWitness",
"price": "$0.25",
"priceUsd": "0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": false,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-prepayment-match-gate"
},
{
"id": "apexscout-agent-revenue-audit",
"type": "charge_x402",
"method": "POST",
"pattern": "/api/agent-revenue-audit",
"route": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"sourceTag": "agent-revenue-audit-authorization-ticket",
"sourceBucket": "auditAuthorizationTicket",
"price": "$5.00",
"priceUsd": "5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"requestBodyRequired": true,
"buyerControlledRetryOnly": true,
"edgeSettlementEligible": true,
"originEdgeSettlementBypassRequired": true,
"originStillEnforcesX402": false,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"authorizationGate": {
"required": true,
"header": "x-apexscout-audit-authorization",
"issuedBy": "/api/buyer-payment-scope-check/check",
"payloadBound": true,
"expiresAfterMinutes": 15,
"allowedPaidRetryCount": 1,
"rejectedBeforePaymentWhenInvalid": true,
"consumedAfterPaidHttp200": true,
"rawTokenStored": false,
"rawPreparedRequestStored": false
}
}
],
"allowRules": [
{
"id": "apexscout-free-agent-metadata",
"type": "allow_free",
"patterns": [
"/",
"/docs.json",
"/llms.txt",
"/skill.md",
"/.well-known/agent.json",
"/agent-capabilities.json",
"/api/public-agent",
"/mcp-tool-pack",
"/api/mcp-tool-pack",
"/.well-known/mcp.json",
"/api/agentcore-openapi.json",
"/.well-known/apexscout-monetization-policy.json",
"/api/agent-monetization-policy",
"/.well-known/apexscout-paid-tools.json",
"/api/paid-mcp-tools",
"/agent-commerce-reliability-ledger",
"/api/agent-commerce-reliability-ledger/preview",
"/x402-compatibility-witness",
"/api/x402-compatibility-witness/preflight",
"/agent-wallet-skill-pack",
"/api/agent-wallet-skill-pack",
"/.well-known/apexscout-agent-wallet-skill.json",
"/apexscout-agent-wallet-skill.md",
"/.well-known/apexscout-agent-wallet-skill.md",
"/apify-x402-upstream-readiness",
"/api/apify-x402-upstream-readiness",
"/.well-known/apexscout-apify-x402-upstream.json",
"/cloudflare-monetization-gateway-rules",
"/api/cloudflare-monetization-gateway-rules",
"/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"/agent-receipt-contract",
"/api/agent-receipt-contract",
"/.well-known/apexscout-agent-receipt-contract.json",
"/api/cloudflare-billing-rules",
"/.well-known/apexscout-cloudflare-billing-rules.json",
"/api/cloudflare-x402-worker-config",
"/.well-known/apexscout-cloudflare-x402-worker.json"
],
"reason": "Payment-aware agents should inspect policy, prices, and route caps before spend.",
"paidRetryRequired": false
},
{
"id": "apexscout-free-proof-and-preflight",
"type": "allow_free",
"patterns": [
"/x402-proof",
"/api/x402-proof",
"/chat-tiny-payment-flow",
"/api/chat-tiny-payment-flow",
"/api/agent-revenue-audit-builder/action-pack",
"/api/buyer-payment-scope-check",
"/api/buyer-agent-payment-safety",
"/api/x402-security-readiness"
],
"reason": "No-spend proof, preflight, Builder, Scope, and payment-safety surfaces should stay readable.",
"paidRetryRequired": false
}
],
"blockRules": [
{
"id": "apexscout-private-operator-surfaces",
"type": "block_public_access",
"patterns": [
"/admin/*",
"/api/admin/*"
],
"reason": "Private operator surfaces are not public buyer-agent resources.",
"paidRetryAvailable": false
}
],
"workerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"operatorApplyPlan": [
"Confirm the ApexScout zone remains active on Cloudflare and the route remains proxied.",
"Set APEXSCOUT_X402_PAY_TO to the existing ApexScout x402 seller payTo address in Cloudflare secrets or vars.",
"Set APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET as the same shared secret in Cloudflare and Railway.",
"Review cloudflare/x402-proxy/wrangler.jsonc against this API response.",
"Keep Worker changes inside explicit Cloudflare deployment windows.",
"Run unpaid 402 checks first, then one buyer-approved paid 200 proof for the one-cent proof rule when a paid proof is explicitly authorized.",
"Keep Railway-origin x402 as rollback until both edge rules match route, method, price, network, and paid proof."
],
"blockedUntil": [
"One buyer-approved paid HTTP 200 proof is still required before calling the proof route commercially converted.",
"Official Cloudflare managed Monetization Gateway rules are not claimed or required for the current Worker bridge."
],
"safeDryRunCommands": [
"npm run cloudflare:billing-rules:print",
"npm run cloudflare:x402-proxy:smoke",
"npm run cloudflare:x402-proxy:typecheck"
],
"liveApplyCommandTemplate": "npm --prefix cloudflare/x402-proxy run deploy",
"postIntegrationVerificationPlan": [
"GET /status and confirm the current ApexScout release.",
"GET /api/cloudflare-billing-rules and confirm the same paid rule count.",
"GET /api/cloudflare-x402-worker-config and confirm protected pattern prices.",
"Unpaid-check the protected route and confirm HTTP 402 only after an explicit deploy window.",
"Run one buyer-approved paid x402 proof only after the unpaid challenge matches."
],
"noSpendBoundary": {
"packIsFree": true,
"paymentAttemptedByPack": false,
"paidRouteCalledByPack": false,
"cloudflareApiCalledByApexScout": false,
"cloudflareGatewayRuleCreated": true,
"officialCloudflareGatewayRuleCreated": false,
"cloudflareWorkerDeployedByApexScout": true,
"dnsChangedByApexScout": true,
"packReadChangesCloudflare": false,
"packReadChangesDns": false,
"automaticSpending": false,
"paidUpstreamCalls": false,
"createsPrepareRequest": false,
"createsScopeCheck": false,
"createsActionIntent": false,
"fakeTrafficCreated": false,
"newPaidRouteAdded": false,
"pricingChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"privacy": {
"aggregateOnly": true,
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawGeneratedPayloadStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"cloudflareVisitorDataPublished": false
},
"safetyClaims": {
"cloudflareEndorsementClaimed": false,
"marketplaceEndorsementClaimed": false,
"guaranteedRevenueClaimed": false,
"tradingOrInvestmentAdvice": false,
"buyerPaymentDelegatedToApexScout": false
}
},
"cloudflareX402WorkerConfigAvailable": true,
"cloudflareX402WorkerConfig": {
"available": true,
"mode": "cloudflare-x402-worker-config",
"release": "v2.2.228-live-command-center",
"apiPath": "/api/cloudflare-x402-worker-config",
"wellKnownPath": "/.well-known/apexscout-cloudflare-x402-worker.json",
"sourceDocs": {
"cloudflareX402Proxy": "https://developers.cloudflare.com/agents/tools/payments/x402/charge-for-http-content/",
"cloudflareMonetizationGateway": "https://blog.cloudflare.com/monetization-gateway/"
},
"wranglerConfig": {
"name": "apexscout-x402-billing-proxy",
"main": "src/index.ts",
"compatibility_date": "2026-07-01",
"compatibility_flags": [
"nodejs_compat"
],
"kv_namespaces": [
{
"binding": "RELIABILITY_LEDGER_METRICS",
"purpose": "aggregate-only Reliability Ledger unpaid and paid counters",
"buyerLevelDataStored": false
}
],
"vars": {
"ORIGIN_URL": "https://agent-research-brief-api-production.up.railway.app",
"PUBLIC_SERVICE_URL": "https://apexscout.ai",
"PAY_TO": "${APEXSCOUT_X402_PAY_TO}",
"NETWORK": "eip155:8453",
"CLOUDFLARE_NETWORK_ALIAS": "base",
"FACILITATOR_URL": "https://api.cdp.coinbase.com/platform/v2/x402",
"PROTECTED_PATTERNS": [
{
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-execution-awal-latest"
},
{
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"sourceTag": "agent-commerce-reliability-ledger"
},
{
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"sourceTag": "x402-compatibility-witness"
},
{
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlement": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"sourceTag": "agent-revenue-audit-authorization-ticket"
}
]
}
},
"protectedPatterns": [
{
"id": "apexscout-one-cent-proof",
"pattern": "/api/opportunity-check",
"method": "GET",
"price": "$0.01",
"amountAtomicUsdc": "10000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout one-cent x402 proof. Buyer-controlled GET retry only; unpaid 402 is not revenue.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-commerce-reliability-ledger",
"pattern": "/api/agent-commerce-reliability-ledger",
"method": "GET",
"price": "$0.10",
"amountAtomicUsdc": "100000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout Agent Commerce Reliability Ledger: x402 payment troubleshooting for AWAL and buyer agents, with wallet/client compatibility, invalid PAYMENT-REQUIRED and Cloudflare failure signatures, verified remediation, and safe retry guidance.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-signed-origin-bridge",
"originStillEnforcesX402": false
},
{
"id": "apexscout-x402-compatibility-witness",
"pattern": "/api/x402-compatibility-witness",
"method": "GET",
"price": "$0.25",
"amountAtomicUsdc": "250000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout x402 Compatibility Witness. A valid unexpired free-preflight match is required before the edge returns a payment challenge.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-prepayment-match-gate",
"originStillEnforcesX402": false
},
{
"id": "apexscout-agent-revenue-audit",
"pattern": "/api/agent-revenue-audit",
"method": "POST",
"price": "$5.00",
"amountAtomicUsdc": "5000000",
"network": "eip155:8453",
"cloudflareNetwork": "base",
"description": "ApexScout paid Agent Revenue Audit. Buyer-controlled POST retry only after an approved free Scope Check issues a short-lived payload-bound authorization.",
"edgeSettlementEligible": true,
"liveRuleMode": "edge-settled-with-payload-bound-authorization",
"originStillEnforcesX402": false
}
],
"envRequiredBeforeDeploy": [
"CLOUDFLARE_API_TOKEN",
"CLOUDFLARE_ACCOUNT_ID",
"CLOUDFLARE_ZONE_ID",
"APEXSCOUT_X402_PAY_TO",
"APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"CDP facilitator key id",
"CDP facilitator key secret"
],
"deployCommand": "npm --prefix cloudflare/x402-proxy run deploy",
"noSpendBoundary": {
"configIsFree": true,
"cloudflareApiCalledByApexScout": false,
"cloudflareWorkerDeployedByApexScout": false,
"dnsChangedByApexScout": false,
"paymentAttemptedByConfig": false,
"paidRouteCalledByConfig": false,
"paidUpstreamCalls": false,
"fakeTrafficCreated": false,
"priceChanged": false,
"sellerWalletChanged": false,
"settlementRailChanged": false
},
"edgeSettlementBridge": {
"originUrl": "https://agent-research-brief-api-production.up.railway.app",
"publicUrl": "https://apexscout.ai",
"facilitatorUrl": "https://api.cdp.coinbase.com/platform/v2/x402",
"signedOriginBridgePrepared": true,
"edgeSettlementEligibleRuleCount": 4,
"originAuthoritativeRuleCount": 0,
"sharedSecretEnv": "APEXSCOUT_CLOUDFLARE_EDGE_PAYMENT_SECRET",
"doubleChargeGuardPrepared": true,
"postBodyChargeRiskAvoided": true,
"reliabilityLedgerProtectedAtEdge": true,
"reliabilityLedgerOriginRequestBeforePayment": false,
"reliabilityLedgerAggregateKvMetrics": true,
"reliabilityLedgerMetricsPath": "/__apexscout/cloudflare-x402/reliability-ledger-metrics",
"reliabilityLedgerEdgeCacheableAfterAuthorization": true,
"agentRevenueAuditPayloadAuthorizationRequired": true,
"agentRevenueAuditInvalidAuthorizationRejectedBeforePayment": true,
"agentRevenueAuditOriginRequestBeforePayment": false
}
},
"label": "x402-capable agent?",
"linkText": "Request GET /api/opportunity-check",
"copy": "Request the one-cent paid proof directly. It returns HTTP 402 until your own approved x402 wallet retries payment.",
"microcopy": "Opening this without a wallet returns an unpaid 402 challenge. Unpaid 402 is not revenue."
},
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false
},
{
"intent": "audit",
"href": "/action-pack/go/audit",
"url": "https://apexscout.ai/action-pack/go/audit",
"label": "Check my $5 audit request for free",
"copy": "Use this when you want ApexScout to check whether your Agent Revenue Audit request is ready before payment.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=search-checkout&src=action-pack-audit-intent-link",
"nextActionLabel": "Check my audit request for free",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": null,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false
},
{
"intent": "agentic-trading",
"href": "/action-pack/go/agentic-trading",
"url": "https://apexscout.ai/action-pack/go/agentic-trading",
"label": "Check payment readiness for an agentic trading or DeFi tool",
"copy": "Use this for wallet-enabled agent tools, DeFi workflows, market-data products, or trading automation payment boundaries. ApexScout does not give trading or investment advice.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/agent-revenue-audit-builder?template=agentic-trading-payment-safety&src=action-pack-agentic-trading-intent-link",
"nextActionLabel": "Check payment readiness for free",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": null,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false,
"agenticTradingPaymentReadinessDisclaimer": "This is payment-readiness only. ApexScout does not give trading, investment, tax, legal, lending, or compliance advice.",
"advice": "Payment-readiness only. Not trading or investment advice.",
"noTradingAdvice": true
},
{
"intent": "scope",
"href": "/action-pack/go/scope",
"url": "https://apexscout.ai/action-pack/go/scope",
"label": "Check buyer payment scope",
"copy": "Use this after ready_to_pay before a buyer-controlled x402 wallet retries payment.",
"noSpend": true,
"paymentExecuted": false,
"prepareExecuted": false,
"recordsAggregateIntentOnClick": true,
"redirectsToNoSpendTarget": true,
"noSpendTarget": "/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"noSpendTargetUrl": "https://apexscout.ai/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"destinationHandoffExpected": true,
"destinationHandoffRoute": "/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"destinationHandoffRouteUrl": "https://apexscout.ai/buyer-payment-scope-check?route=agent-revenue-audit&src=action-pack-scope-intent-link",
"nextActionLabel": "Run free scope check",
"noAutoPrepare": true,
"noPaymentExecution": true,
"noPrepareExecutionFromRail": true,
"buyerLevelDataExposed": false,
"optionalX402ProofCta": null,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionTrackingAdded": false,
"sourcePropagationSupported": true,
"sourcePropagationEnabled": true,
"ownerLaunchLandingAttributionAvailable": true,
"actionIntentSourcePropagationAvailable": true,
"safeSourceTags": [
"x-profile",
"x-pinned-post",
"x-daily-post",
"owner-public-launch"
],
"aggregateOnlySourceAttribution": true,
"noCookiesForAttribution": true,
"noSessionTrackingForAttribution": true,
"rawSourceStored": false,
"sourceAttributionRawUserAgentsStored": false,
"sourceAttributionIpAddressesStored": false,
"sourceAttributionBuyerLevelDataExposed": false
}
],
"frontDoorActionRailAvailable": true,
"instruction": "Fetch the no-spend Builder action pack, then read the scenario router. Do not prepare or pay unless a real buyer approves the route, payload, budget cap, and x402 retry.",
"readingCreatesPrepareRequest": false,
"readingCreatesActionIntent": false,
"readingExecutesPayment": false,
"readingCountsAsRevenue": false,
"buyerLevelDataExposed": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false
},
"freeHelp": {
"docs": "/docs.json",
"start": "/start",
"instantX402": "/instant-x402",
"rescue": "/402-rescue",
"buyerAgentChallenge": "/buyer-agent-challenge",
"interactiveX402Onboarding": "/x402-onboarding",
"interactiveX402OnboardingApi": "/api/x402-onboarding",
"x402Proof": "/x402-proof",
"x402SellerReadiness": "/x402-seller-readiness",
"discoveryReadiness": "/discovery-readiness",
"discoveryIndexingStatus": "/api/discovery-indexing-status",
"directoryReadiness": "/directory-readiness",
"directoryReadinessApi": "/api/directory-readiness",
"mcpToolPack": "/mcp-tool-pack",
"mcpToolPackApi": "/api/mcp-tool-pack",
"mcpManifest": "/.well-known/mcp.json",
"agentCoreReadiness": "/agentcore-readiness",
"agentCoreReadinessApi": "/api/agentcore-readiness",
"agentCoreGateway": "/agentcore-gateway",
"agentCoreGatewayApi": "/api/agentcore-gateway",
"agentCoreOpenApi": "/api/agentcore-openapi.json",
"agentCorePaymentsPolicy": "/agentcore-payments-policy",
"agentCorePaymentsPolicyApi": "/api/agentcore-payments-policy",
"agentCorePaymentsPolicyWellKnown": "/.well-known/apexscout-spend-policy.json",
"agentCoreBuyerStart": "/agentcore-buyer-start",
"agentCoreBuyerStartApi": "/api/agentcore-buyer-start",
"agentPaymentAlpha": "/agent-payment-alpha",
"agentPaymentAlphaApi": "/api/agent-payment-alpha",
"x402BatchSettlementReadiness": "/x402-batch-settlement",
"x402BatchSettlementReadinessApi": "/api/x402-batch-settlement",
"x402MetadataPreflight": "/x402-metadata-preflight",
"x402MetadataPreflightApi": "/api/x402-metadata-preflight",
"x402MetadataPreflightCheckApi": "/api/x402-metadata-preflight/check",
"agentSafetyPosture": "/agent-safety-posture",
"agentSafetyPostureApi": "/api/agent-safety-posture",
"agentWonderlandReadiness": "/agent-wonderland-readiness",
"agentWonderlandReadinessApi": "/api/agent-wonderland-readiness",
"circleAgentStackReadiness": "/circle-agent-stack-readiness",
"circleAgentStackReadinessApi": "/api/circle-agent-stack-readiness",
"agenticPaymentsMarketSignal": "/agentic-payments-market-signal",
"agenticPaymentsMarketSignalApi": "/api/agentic-payments-market-signal",
"whyApexScoutAgenticPayments": "/why-apexscout-agentic-payments",
"whyApexScoutAgenticPaymentsApi": "/api/why-apexscout-agentic-payments",
"hubSpotAgentReadiness": "/hubspot-agent-readiness",
"hubSpotAgentReadinessApi": "/api/hubspot-agent-readiness",
"adReadinessApi": "/api/ad-readiness",
"routeAdvisor": "/api/first-buy-advisor or /api/route-advisor",
"agentSpendPassport": "/agent-spend-passport",
"agentSpendPassportApi": "/api/agent-spend-passport",
"agentSpendPassportPrepareApi": "/api/agent-spend-passport/prepare",
"agentRevenueAuditBuilder": "/agent-revenue-audit-builder",
"agentRevenueAuditBuilderApi": "/api/agent-revenue-audit-builder",
"agentRevenueAuditBuilderActionPackApi": "/api/agent-revenue-audit-builder/action-pack",
"agentRevenueAuditBuilderPrepareApi": "/api/agent-revenue-audit-builder/prepare",
"agentCommerceScenarioReadiness": "/agent-commerce-scenarios",
"agentCommerceScenarioReadinessApi": "/api/agent-commerce-scenarios",
"agentRevenueAuditFastPathIntent": "/api/payment-intent?route=agent-revenue-audit&src=audit-builder-agent-fast-path",
"agentCommerceReliabilityLedger": "/agent-commerce-reliability-ledger",
"agentCommerceReliabilityLedgerPreviewApi": "/api/agent-commerce-reliability-ledger/preview",
"agentCommerceReliabilityLedgerPaidApi": "/api/agent-commerce-reliability-ledger",
"compatibilityWitness": "/x402-compatibility-witness",
"compatibilityWitnessPreflightApi": "/api/x402-compatibility-witness/preflight",
"compatibilityWitnessPaidApi": "/api/x402-compatibility-witness"
},
"recommendedNoSpendPreflight": {
"path": "/api/agent-spend-passport/prepare",
"page": "/agent-spend-passport",
"api": "/api/agent-spend-passport",
"beforePaidRoutes": true,
"cta": "Not sure what to buy? Generate a free Agent Spend Passport before paying.",
"explanation": "The Passport does not spend money. It recommends the right route, checks budget fit, warns about sensitive fields, and gives a safe copy-paste paid-call payload.",
"buyerPath": [
"Inspect /x402-proof.",
"Generate a free /agent-spend-passport.",
"If the Passport recommends the $5 audit, preview /agent-revenue-audit-preview before paying.",
"If the Passport recommends the $5 audit, build a valid request at /agent-revenue-audit-builder before paying.",
"Run the free /x402-metadata-preflight before any paid retry if the buyer metadata includes a resource URL, payment description, reason string, or payload preview.",
"If Passport recommends /api/opportunity-check, use the $0.01 route.",
"If Passport recommends /api/agent-revenue-audit, use the $5 route only with approved budget.",
"Stop if Passport says stop."
],
"noSpendGuarantee": {
"routeIsFree": true,
"paidCallsMadeByPassport": false,
"paidUpstreamCalls": false,
"storesBuyerLevelDataPublicly": false,
"exposesRawBuyerGoalsPublicly": false,
"guaranteesRevenue": false
}
},
"agentRevenueAuditFastPath": {
"purpose": "Direct no-spend payment-intent handoff for buyer agents that already know the $5 Agent Revenue Audit is the right route.",
"sourceTag": "audit-builder-agent-fast-path",
"route": "/api/agent-revenue-audit",
"price": "$5.00",
"maxAmountAtomicUnits": "5000000",
"page": "/payment-intent?route=agent-revenue-audit&src=audit-builder-agent-fast-path",
"api": "/api/payment-intent?route=agent-revenue-audit&src=audit-builder-agent-fast-path",
"noJavascriptRequired": true,
"executesPayment": false,
"paymentConfigChange": false,
"endpointPathChange": false,
"fallback": "/agent-revenue-audit-builder",
"guardrails": [
"Inspect the payment intent before payment.",
"Run the paid retry only from a buyer-controlled x402 wallet runtime.",
"Do not use this route unless the buyer wants monetization guidance for their own agent, API, x402 service, or paid route."
]
},
"agentCommerceScenarioReadiness": {
"url": "https://apexscout.ai/agent-commerce-scenarios",
"api": "https://apexscout.ai/api/agent-commerce-scenarios",
"mode": "no-spend-agent-commerce-scenario-readiness",
"scenarioCount": 7,
"coreValueProposition": "ApexScout helps agent builders and buyer agents check whether an x402 paid action is ready, scoped, safe, and worth routing toward buyer-controlled payment.",
"qualifiedBuyerProfiles": [
{
"id": "x402-api-builder",
"label": "x402 API builder",
"copy": "You have a paid endpoint and need buyers to understand what to do before paying."
},
{
"id": "mcp-paid-tool-builder",
"label": "MCP paid tool builder",
"copy": "You want agents to discover your tool and route through a safe no-spend check before payment."
},
{
"id": "agentcore-payment-builder",
"label": "AgentCore payment builder",
"copy": "You need a clean handoff from discovery/import into buyer-approved x402 payment."
},
{
"id": "agentic-trading-defi-tool-builder",
"label": "Agentic trading / DeFi tool builder",
"copy": "You are building wallet-enabled trading, DeFi, market-data, or automation tools and need payment readiness, budget caps, metadata hygiene, and buyer-controlled x402 handoff. ApexScout does not give trading or investment advice.",
"noTradingAdvice": true
},
{
"id": "buyer-agent-operator",
"label": "Buyer-agent operator",
"copy": "You need to decide whether a paid route is safe to inspect, prepare, scope-check, and maybe pay."
}
],
"whatApexScoutChecks": [
"Route clarity",
"Buyer path",
"Metadata hygiene",
"Budget and scope boundaries",
"Payment handoff readiness",
"Buyer-controlled x402 retry fit"
],
"whatApexScoutDoesNotDo": [
"No paid calls from the action pack or scenario doors",
"No automatic payment execution",
"No production prepare from a read",
"No guaranteed revenue claims",
"No outreach, posting, scraping, directory submission, or competitor inspection",
"No trading, investment, tax, legal, lending, or compliance advice",
"No buyer-level data exposure"
],
"agenticTradingPaymentReadinessDisclaimer": "This is payment-readiness only. ApexScout does not give trading, investment, tax, legal, lending, or compliance advice.",
"scenarioDoorsAvailable": true,
"scenarioDoorCount": 7,
"scenarioDoorApi": "/api/agent-commerce-scenarios",
"scenarioDoorHumanRoute": "/agent-commerce-scenarios",
"noSpendScenarioDoors": true,
"scenarioDoorTelemetryAdded": false,
"scenarioDoorTelemetryReason": "hrefs-only, no extra tracking",
"scenarioDoorInterpretation": "Scenario doors are no-spend routing links. They do not mean prepare happened, ready_to_pay happened, or payment happened.",
"firstSafeSequence": [
"/api/agent-revenue-audit-builder/action-pack",
"/api/agent-commerce-scenarios",
"/agent-spend-passport",
"/agent-revenue-audit-builder?template=api-monetization&src=agent-commerce-scenario-readiness",
"/api/agent-revenue-audit-builder/prepare",
"/buyer-agent-payment-safety",
"/x402-metadata-preflight"
],
"watchSignals": [
"auditBuilderActionPackBuyerLikeReads > 0",
"auditBuilderActionIntentEvents > 0 while auditBuilderOneClickPrepareRequests remains 0",
"actionIntentCopyNoSpendActionPack > 0",
"auditBuilderOneClickPrepareRequests > 0",
"auditBuilderOrganicReadyToPay > 0",
"buyerPaymentScopeCheck.scopeChecks > 0",
"paidCompletions > 15 with source attribution reviewed before claiming organic revenue"
],
"noSpendBoundary": {
"paidCallsMade": false,
"paidUpstreamCallsMade": false,
"paymentExecuted": false,
"productionPreparePostMadeByThisEndpoint": false,
"actionIntentRecordedByGet": false,
"fakeTrafficCreated": false,
"outreachPerformed": false,
"scrapingPerformed": false,
"competitorInspectionPerformed": false,
"directorySubmissionPerformed": false,
"scenarioDoorClicksCreatePrepareRequest": false,
"scenarioDoorClicksCallPaidRoute": false,
"scenarioDoorClicksExecutePayment": false
},
"privacy": {
"buyerLevelDataExposed": false,
"rawBuyerInputStored": false,
"rawUserAgentsStored": false,
"ipAddressesStored": false,
"cookiesAdded": false,
"sessionsAdded": false,
"fingerprintingAdded": false,
"walletDataExposed": false
},
"guardrails": [
"Reading this route is free and no-spend.",
"This route does not create prepare requests, action-intent events, paid calls, payment attempts, revenue, outreach, or fake buyer traffic.",
"Scenario doors are no-spend routing links. They do not mean prepare happened, ready_to_pay happened, or payment happened.",
"Use the Builder prepare path only when a real buyer or owner-approved local QA explicitly chooses it.",
"Do not add a new paid route until organic action-intent, prepare, ready_to_pay, payment-scope, or paid-completion signal justifies it.",
"No guaranteed revenue promise or official Coinbase, AWS, Bazaar, AgentCore, or marketplace endorsement."
],
"note": "ApexScout exposes the scenario router so buyer agents can choose the right safe path before preparing or paying for the $5 audit."
},
"x402MetadataPreflight": {
"url": "https://apexscout.ai/x402-metadata-preflight",
"api": "https://apexscout.ai/api/x402-metadata-preflight",
"checkApi": "https://apexscout.ai/api/x402-metadata-preflight/check",
"mode": "free-no-spend-privacy-preflight",
"recommendedBeforePaidRetry": true,
"noSpendGuarantee": {
"routeIsFree": true,
"paidCallsMadeByPreflight": false,
"paidUpstreamCalls": false,
"storesRawMetadataPublicly": false,
"returnsRawPayloadPreviewPublicly": false,
"buyerLevelDataExposed": false,
"settlementRailChanged": false,
"sellerWalletChanged": false
},
"note": "Buyer agents can check x402 resource URLs, descriptions, reason strings, and payload previews before retrying with payment."
},
"adReadiness": {
"api": "https://apexscout.ai/api/ad-readiness",
"mode": "ad-readiness-only",
"adsLaunched": false,
"recommendedLandingPage": "/x402-proof",
"recommendedLandingPageUrl": "https://apexscout.ai/x402-proof",
"note": "ApexScout is ad-ready, not ad-launched. Recommended copy centers trust checks and builder route strategy while avoiding crypto-forward or financial-services framing."
},
"directoryReadiness": {
"url": "https://apexscout.ai/directory-readiness",
"api": "https://apexscout.ai/api/directory-readiness",
"mode": "zero-post-directory-exposure",
"readyForDirectorySubmission": true,
"recommendedProofUrl": "https://apexscout.ai/x402-proof",
"recommendedBuyerAgentChallengeUrl": "https://apexscout.ai/buyer-agent-challenge",
"candidateCount": 8,
"guardrails": [
"No X posts",
"No DMs",
"No tags",
"No email outreach",
"No manual messages",
"No scraping",
"No fake traffic",
"No fake payments",
"No paid calls during listing prep",
"Use only official directory submission forms when the owner manually submits."
]
},
"mcpToolPack": {
"url": "https://apexscout.ai/mcp-tool-pack",
"api": "https://apexscout.ai/api/mcp-tool-pack",
"manifest": "https://apexscout.ai/.well-known/mcp.json",
"manifestApi": "https://apexscout.ai/api/mcp-manifest",
"status": "tool-metadata-readiness",
"mode": "inbound-only",
"recommendedFirstPaidCall": {
"name": "apexscout_opportunity_check",
"method": "POST",
"path": "/api/opportunity-check",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"maxAmountAtomicUnits": "10000",
"description": "Cheapest paid x402 trust check, payment proof, light opportunity check, buyer-agent route evaluation, vendor/API/company trust check, and agent payment safety check. Successful paid proof includes one free receipt-bound compatibility diagnosis. It requires explicit action, never navigates or pays automatically, may return no paid recommendation, and requires separate buyer approval for any later paid recommendation.",
"successfulPaidProofBenefit": {
"statement": "Successful paid proof includes one free receipt-bound compatibility diagnosis.",
"includedFreeDiagnoses": 1,
"explicitActionRequired": true,
"automaticNavigation": false,
"automaticPayment": false,
"laterPaidRecommendationRequiresSeparateApproval": true,
"noUsefulFindingMayReturnNoPaidRecommendation": true
},
"inputSchema": {
"subject": "string",
"goal": "string",
"buyerType": "optional string",
"source": "optional string"
},
"samplePayload": {
"subject": "Example API or company",
"goal": "Decide whether this is worth deeper review.",
"buyerType": "mcp-buyer-agent",
"source": "mcp-tool-pack"
},
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"agentCoreCompatible": true
},
"guardrails": [
"Inbound only",
"No scraping",
"No third-party discovery",
"No automated outreach",
"No manual messages, posts, DMs, or emails",
"No paid upstream calls",
"No buyer-level public data"
],
"note": "ApexScout exposes MCP-style tool metadata for inbound buyer agents; actual paid calls still go through x402 protected HTTP routes."
},
"interactiveX402Onboarding": {
"url": "https://apexscout.ai/x402-onboarding",
"api": "https://apexscout.ai/api/x402-onboarding",
"mode": "no-spend-interactive-onboarding",
"liveMode": "zero-contact-inbound-only",
"firstPaidRoute": "/api/opportunity-check",
"firstPaidRoutePrice": "$0.01",
"builderMonetizationRoute": "/api/agent-revenue-audit",
"builderMonetizationRoutePrice": "$5.00",
"paymentExecutedByThisPage": false,
"paidCallsMadeByThisPage": false,
"paidUpstreamCallsMadeByThisPage": false,
"guardrails": [
"No paid call is made by this page.",
"No paid upstream call is made by this page.",
"No fake traffic, fake feedback, or fake paid completion is created.",
"No subscription: pay once, get JSON once.",
"Buyer agents self-serve through owned ApexScout pages and metadata.",
"No posts, DMs, emails, manual messages, scraping, or third-party discovery.",
"No endpoint scanning or external service inspection.",
"No investment, legal, tax, compliance, lending, or trading advice.",
"No guaranteed revenue claim.",
"No official Coinbase, Base, Agentic Market, Agent Wonderland, AWS, Stripe, or marketplace endorsement claim.",
"Base mainnet x402 remains the production rail.",
"Buyer wallet setup, budget controls, and payment authorization stay buyer-controlled.",
"Public metrics remain aggregate-only.",
"Buyer-level data is not public."
],
"note": "ApexScout exposes an owned simulated terminal so buyer agents can understand service discovery, 402 challenge shape, and buyer-controlled paid retry before spending."
},
"agentCoreReadiness": {
"url": "https://apexscout.ai/agentcore-readiness",
"api": "https://apexscout.ai/api/agentcore-readiness",
"mode": "seller-side-readiness",
"readyForAgentCoreStyleBuyerAgents": true,
"firstPaidCall": {
"path": "/api/opportunity-check",
"price": "$0.01",
"maxAmountAtomicUnits": "10000",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200
},
"builderMonetizationAudit": {
"path": "/api/agent-revenue-audit",
"price": "$5.00",
"maxAmountAtomicUnits": "5000000",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200
},
"guardrails": [
"Seller-side readiness only",
"Zero-contact and inbound-only",
"No official AWS, Coinbase, or Stripe endorsement claim",
"No AWS wallet integration added by ApexScout",
"No automatic buyer spending",
"No scraping",
"No third-party discovery",
"No outreach automation",
"No manual messages, posts, DMs, or emails",
"No paid upstream calls",
"No fake traction",
"No buyer-level public data",
"No settlement rail change",
"No seller wallet change"
],
"note": "ApexScout is seller-side ready for AgentCore-style x402 buyers. Buyer-side wallet, budget, and payment authorization remain outside ApexScout."
},
"agentCoreGateway": {
"url": "https://apexscout.ai/agentcore-gateway",
"api": "https://apexscout.ai/api/agentcore-gateway",
"openApi": "https://apexscout.ai/api/agentcore-openapi.json",
"mode": "agentcore-gateway-import-readiness",
"importFormat": "OpenAPI 3.1 JSON",
"firstPaidCall": {
"path": "/api/opportunity-check",
"price": "$0.01",
"maxAmountAtomicUnits": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"role": "first paid test"
},
"builderMonetizationAudit": {
"path": "/api/agent-revenue-audit",
"price": "$5.00",
"maxAmountAtomicUnits": "5000000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"role": "builder monetization audit"
},
"guardrails": [
"Seller-side import metadata only",
"Zero-contact and inbound-only",
"No official AWS, Coinbase, or Stripe endorsement claim",
"No AWS wallet integration added by ApexScout",
"No automatic buyer spending",
"No scraping",
"No third-party discovery",
"No outreach automation",
"No manual messages, posts, DMs, or emails",
"No paid upstream calls",
"No fake traction",
"No buyer-level public data",
"No settlement rail change",
"No seller wallet change"
],
"note": "ApexScout publishes a safe OpenAPI import surface for AgentCore-style gateways; buyer wallet setup and budget controls remain outside ApexScout."
},
"agentCorePaymentsPolicy": {
"url": "https://apexscout.ai/agentcore-payments-policy",
"api": "https://apexscout.ai/api/agentcore-payments-policy",
"wellKnown": "https://apexscout.ai/.well-known/apexscout-spend-policy.json",
"mode": "buyer-agent-spend-policy",
"recommendedSessionCapUsd": "5.01",
"recommendedFirstPaidCapUsd": "0.01",
"recommendedBuilderAuditCapUsd": "5.00",
"allowedPaidRouteCount": 2,
"automaticBuyerSpendingAdded": false,
"buyerWalletManagedByApexScout": false,
"buyerLevelDataPublic": false,
"guardrails": [
"No scraping",
"No third-party discovery",
"No outreach automation",
"No manual messages, posts, DMs, or emails",
"No paid upstream calls",
"No automatic buyer spending",
"No automatic paid retry loop",
"No automatic escalation from $0.01 to $5.00",
"No buyer wallet custody",
"No AWS wallet or budget management",
"No settlement rail change",
"No seller wallet change",
"No fake traction",
"No buyer-level public data",
"No official AWS, Coinbase, or Stripe endorsement claim"
],
"note": "ApexScout publishes buyer-agent spend guidance for its owned x402 routes, while actual wallet authorization and budget enforcement remain outside ApexScout."
},
"agentCoreBuyerStart": {
"url": "https://apexscout.ai/agentcore-buyer-start",
"api": "https://apexscout.ai/api/agentcore-buyer-start",
"mode": "agentcore-buyer-start",
"recommendedFirstPath": "/agent-spend-passport",
"importTarget": "/api/agentcore-openapi.json",
"firstPaidRoute": {
"step": 7,
"label": "Run unpaid 402 preflight",
"path": "/api/opportunity-check",
"method": "POST",
"expectedStatus": 402,
"expectedCost": "free",
"buyerAction": "Send an unpaid POST and verify Base mainnet x402 requirements before spending."
},
"noSpendByThisPage": true,
"automaticBuyerSpendingAdded": false,
"buyerLevelDataPublic": false,
"guardrails": [
"No automatic buyer spending",
"No buyer wallet custody",
"No automatic paid retry loop",
"No automatic escalation from $0.01 to $5.00",
"No paid upstream calls",
"No scraping",
"No third-party discovery",
"No outreach automation",
"No manual messages, posts, DMs, or emails",
"No seller wallet change",
"No settlement rail change",
"No buyer-level public data",
"No official AWS, Coinbase, or Stripe endorsement claim"
],
"note": "ApexScout now provides one AgentCore-style buyer start path from policy to import metadata to unpaid 402 verification without spending or exposing buyer-level data."
},
"agentPaymentAlpha": {
"url": "https://apexscout.ai/agent-payment-alpha",
"api": "https://apexscout.ai/api/agent-payment-alpha",
"mode": "zero-contact-inbound-only",
"safeLayerScore": {
"implemented": 10,
"possible": 10,
"status": "safe-to-ship-owned-surface"
},
"productionBoundary": {
"activeRail": "Base mainnet x402",
"network": "eip155:8453",
"baseX402Active": true,
"facilitator": "https://api.cdp.coinbase.com/platform/v2/x402",
"firstPaidRoute": "/api/opportunity-check",
"firstPaidRoutePrice": "$0.01",
"firstPaidRouteAmountAtomicUnits": "10000",
"builderMonetizationRoute": "/api/agent-revenue-audit",
"builderMonetizationRoutePrice": "$5.00",
"builderMonetizationRouteAmountAtomicUnits": "5000000",
"settlementRailChanged": false,
"sellerWalletChanged": false,
"batchSettlementEnabled": false,
"escrowEnabled": false,
"offChainVouchersAccepted": false,
"facilitatorSponsoredGasEnabled": false,
"paidUpstreamCallsAdded": false,
"automaticBuyerSpendingAdded": false,
"officialAwsCoinbaseStripeEndorsementClaimed": false
},
"metadataPrivacyAndPolicyControls": {
"status": "active-owned-control-layer",
"controlScore": {
"implemented": 6,
"possible": 6,
"status": "privacy-and-policy-ready-owned-metadata"
},
"sourceUrls": {
"metadataHardening": "https://arxiv.org/abs/2604.11430",
"policyPaymentExecution": "https://arxiv.org/abs/2604.02023",
"complianceAwareAgenticPayments": "https://arxiv.org/abs/2605.00071",
"agenticRiskStandard": "https://arxiv.org/abs/2604.03976"
},
"prePaymentMetadataChecklist": [
{
"id": "route-minimum",
"rule": "Show only the route, method, price, network, and high-level purpose needed for an agent to decide whether to pay.",
"publicSafe": true
},
{
"id": "no-buyer-prompts",
"rule": "Do not put buyer prompts, buyer uploaded content, watched subjects, raw request bodies, or private comments into public payment metadata.",
"publicSafe": true
},
{
"id": "no-wallet-history",
"rule": "Do not publish full wallet addresses, wallet histories, buyer identities, or buyer-level retry behavior in public packets.",
"publicSafe": true
},
{
"id": "aggregate-register-only",
"rule": "Keep Cash Register metrics at route-level aggregates: paid completions, unpaid 402 challenges, estimated gross revenue, and feedback count.",
"publicSafe": true
},
{
"id": "no-paid-body-leak",
"rule": "Do not expose paid response bodies, raw feedback text, full x402 payment payloads, or facilitator responses in public metadata.",
"publicSafe": true
},
{
"id": "human-readable-boundary",
"rule": "State clearly when ApexScout is publishing compatibility/readiness metadata rather than claiming official listing, endorsement, or compliance enforcement.",
"publicSafe": true
}
],
"policyControls": [
{
"id": "buyer-controlled-spend",
"status": "compatible-not-custodial",
"rule": "Buyer-side wallets, budgets, and authorization policies remain under the buyer or buyer agent runtime.",
"apexBoundary": "ApexScout only publishes the route price, network, amount, and payment requirement."
},
{
"id": "retry-idempotency",
"status": "documented-boundary",
"rule": "Unpaid retries should stay payment-gated and paid retries should be treated as buyer-controlled x402 attempts.",
"apexBoundary": "ApexScout does not auto-retry paid requests or spend on behalf of buyers."
},
{
"id": "compliance-non-claim",
"status": "explicit-non-claim",
"rule": "Compliance-aware payment research is treated as a design input, not as a claim that ApexScout performs regulated screening.",
"apexBoundary": "No KYC, sanctions, lending, tax, legal, investment, or regulated compliance determination is performed by this packet."
},
{
"id": "audit-safe-observability",
"status": "aggregate-only",
"rule": "Public observability should prove the route is alive without exposing individual buyers or paid outputs.",
"apexBoundary": "The public Cash Register stays aggregate-only."
}
],
"nonClaims": [
"No AWS, Coinbase, Circle, Cloudflare, Stripe, Visa, Mastercard, Base, or Linux Foundation endorsement claim.",
"No official marketplace listing claim unless a listing is manually verified.",
"No regulated compliance, KYC, sanctions, lending, legal, tax, investment, trading, or insurance advice.",
"No buyer wallet custody, buyer budget management, or automatic buyer spending.",
"No revenue guarantee, conversion guarantee, or proof of external buyer source without attribution."
],
"agentReadableSummary": "ApexScout can be inspected by buyer agents as a privacy-safe, policy-aware x402 seller surface: public metadata is minimal, Cash Register metrics are aggregate-only, buyer spend remains buyer-controlled, and compliance/endorsement claims are explicitly not made."
},
"paymentGateExpectations": {
"opportunityCheck": {
"path": "/api/opportunity-check",
"expectedUnpaidStatus": 402,
"price": "$0.01",
"amountAtomicUnits": "10000",
"network": "eip155:8453"
},
"agentRevenueAudit": {
"path": "/api/agent-revenue-audit",
"expectedUnpaidStatus": 402,
"price": "$5.00",
"amountAtomicUnits": "5000000",
"network": "eip155:8453"
}
},
"guardrails": [
"Zero-contact and inbound-only.",
"No scraping or third-party endpoint discovery.",
"No posts, DMs, emails, manual messages, or contact campaigns.",
"No paid calls or paid upstream calls from this packet.",
"No fake traffic, fake feedback, or fake paid completions.",
"No settlement rail change.",
"No seller wallet change.",
"No batch settlement, escrow, off-chain voucher acceptance, or facilitator-sponsored gas claim.",
"No raw x402 resource URLs, reason strings, payload previews, full wallet addresses, secrets, or buyer-level metadata should be sent before the free metadata preflight passes.",
"No official AWS, Coinbase, or Stripe endorsement claim.",
"No official standards-body endorsement claim.",
"No guaranteed revenue claim.",
"No buyer wallet custody, buyer budget management, or automatic paid retry.",
"No regulated compliance enforcement claim.",
"No investment, legal, tax, compliance, lending, or trading advice.",
"No buyer-level public data."
],
"note": "ApexScout turns public x402, MCP, AgentCore, Bazaar, network, ERC-20, Stripe MPP, privacy, and policy-control signals into safe owned metadata without changing payment rails or exposing buyer-level data."
},
"x402BatchSettlementReadiness": {
"url": "https://apexscout.ai/x402-batch-settlement",
"api": "https://apexscout.ai/api/x402-batch-settlement",
"mode": "readiness-only-no-spend",
"sourceSignal": {
"source": "Coinbase Developer Platform x402 batch settlement update",
"sourceUrl": "https://x.com/CoinbaseDev/status/2054241284651676074",
"detailUrl": "https://x.com/Jnix2007/status/2054233052872872194",
"observedCapability": "x402 batch settlement lets agents use off-chain vouchers and one final settlement instead of settling every API call individually.",
"apexScoutInterpretation": "This is useful future infrastructure for high-volume buyer agents, but ApexScout should not change its live rail until facilitator, seller, privacy, and accounting behavior are explicitly approved."
},
"currentProductionBoundary": {
"activeRail": "Base mainnet x402",
"network": "eip155:8453",
"baseX402Active": true,
"facilitator": "https://api.cdp.coinbase.com/platform/v2/x402",
"firstPaidRoute": "/api/opportunity-check",
"firstPaidRoutePrice": "$0.01",
"builderMonetizationRoute": "/api/agent-revenue-audit",
"builderMonetizationRoutePrice": "$5.00",
"batchSettlementEnabled": false,
"escrowEnabled": false,
"offChainVouchersAccepted": false,
"facilitatorSponsoredGasEnabled": false,
"settlementRailChanged": false,
"sellerWalletChanged": false,
"automaticBuyerSpendingAdded": false,
"paidCallsMadeByThisSurface": false,
"paidUpstreamCalls": false
},
"buyerAgentGuidance": {
"recommendedFirstStep": "/agent-spend-passport",
"normalLowVolumeFlow": [
"Inspect /x402-proof.",
"Generate a free /agent-spend-passport.",
"Use /api/opportunity-check for the $0.01 proof route when the buyer only needs a cheap rail test.",
"Use /api/agent-revenue-audit for the $5 builder monetization route only with approved budget.",
"Stop if Passport says stop."
],
"batchSettlementPosition": "Batch settlement is future compatibility context. Do not assume ApexScout accepts vouchers or escrowed batch payment today."
},
"guardrails": [
"No paid calls are made by this readiness surface.",
"No escrow, voucher acceptance, or batch settlement is enabled.",
"No facilitator-sponsored gas claim is made for ApexScout production traffic.",
"No settlement rail or seller wallet change is made.",
"No buyer wallet custody, buyer budget management, or automatic buyer spending is added.",
"No buyer-level data, full wallet addresses, full payment payloads, voucher histories, or paid response bodies are public.",
"No revenue, conversion, endorsement, compliance, legal, tax, investment, lending, or trading guarantee is made.",
"No scraping, posting, DMs, email, outreach, third-party discovery, fake traffic, or fake feedback is added."
],
"note": "ApexScout is aware of x402 batch settlement, but batch settlement, escrow, voucher acceptance, seller wallet changes, and rail changes are not enabled."
},
"agentSafetyPosture": {
"url": "https://apexscout.ai/agent-safety-posture",
"api": "https://apexscout.ai/api/agent-safety-posture",
"mode": "zero-contact-inbound-only",
"controlScore": {
"implemented": 6,
"possible": 6,
"status": "owned-safety-surface"
},
"productionBoundary": {
"activeRail": "Base mainnet x402",
"protocol": "x402",
"network": "eip155:8453",
"baseX402Active": true,
"facilitator": "https://api.cdp.coinbase.com/platform/v2/x402",
"firstPaidRoute": "/api/opportunity-check",
"firstPaidRoutePrice": "$0.01",
"firstPaidRouteAmountAtomicUnits": "10000",
"builderMonetizationRoute": "/api/agent-revenue-audit",
"builderMonetizationRoutePrice": "$5.00",
"builderMonetizationRouteAmountAtomicUnits": "5000000",
"paidCallsMadeByThisPage": false,
"paidUpstreamCallsAdded": false,
"settlementRailChanged": false,
"sellerWalletChanged": false,
"automaticBuyerSpendingAdded": false
},
"guardrails": [
"Inbound-only",
"Zero-contact mode",
"No scraping",
"No third-party discovery",
"No outreach automation",
"No manual messages, posts, DMs, or emails",
"No paid calls by this readiness surface",
"No paid upstream calls",
"No fake traffic, fake feedback, or fake paid completions",
"No buyer-level public data",
"No partner or endorsement claim is made",
"No investment, legal, tax, trading, or revenue guarantee advice"
],
"privacy": {
"publicMetrics": "aggregate-only",
"aggregateOnly": true,
"buyerLevelDataPublic": false,
"buyerPromptsPublic": false,
"paidResponsesPublic": false,
"walletHistoriesPublic": false,
"rawFeedbackPublic": false,
"fullWalletAddressesPublic": false,
"fullPaymentPayloadsPublic": false,
"cdpKeysPublic": false
},
"note": "ApexScout publishes a no-spend safety posture so buyer agents can inspect boundaries, approval gates, credential privacy, and audit-safe aggregate metrics before paid x402 retries."
},
"agentWonderlandReadiness": {
"url": "https://apexscout.ai/agent-wonderland-readiness",
"api": "https://apexscout.ai/api/agent-wonderland-readiness",
"mode": "readiness-only-owned-surface",
"liveMode": "zero-contact-inbound-only",
"readyForAgentWonderlandStyleDiscovery": true,
"packageName": "@agentwonderland/mcp",
"packageVersionObserved": "0.1.46",
"firstPaidRoute": "/api/opportunity-check",
"builderMonetizationRoute": "/api/agent-revenue-audit",
"agentWonderlandPackageInstalled": false,
"agentWonderlandSetupRun": false,
"listingSubmitted": false,
"openWalletConnected": false,
"stripeConnectAdded": false,
"mppSettlementEnabled": false,
"mppSettlementFieldScope": "Agent Wonderland-managed integration only",
"existingApexScoutMppLedgerPreserved": true,
"tokenActionTaken": false,
"settlementRailChanged": false,
"sellerWalletChanged": false,
"guardrails": [
"Readiness-only owned surface.",
"Zero-contact and inbound-only.",
"No Agent Wonderland package install or setup command.",
"No Agent Wonderland listing submission.",
"No OpenWallet connection.",
"No Agent Wonderland-managed MPP, Stripe Connect, Solana, or Tempo settlement integration enabled; ApexScout's independent optional Tempo MPP path for the Reliability Ledger remains available.",
"No token purchase, token recommendation, token-gated route, or treasury action.",
"No paid calls or paid upstream calls.",
"No scraping, third-party discovery, endpoint scanning, or lead harvesting.",
"No posts, DMs, emails, manual messages, or contact campaigns.",
"No official Agent Wonderland, AWS, Coinbase, Stripe, Base, Solana, Tempo, or OpenWallet endorsement claim.",
"No guaranteed revenue claim.",
"No buyer-level public data.",
"No settlement rail change.",
"No seller wallet change."
],
"note": "ApexScout is ready for Agent Wonderland-style discovery through owned MCP and x402 surfaces only; no Agent Wonderland package setup, listing, wallet change, Stripe Connect, managed MPP integration, Solana, Tempo, or token action is performed. ApexScout's independent optional Tempo MPP path for the Reliability Ledger remains available."
},
"circleAgentStackReadiness": {
"url": "https://apexscout.ai/circle-agent-stack-readiness",
"api": "https://apexscout.ai/api/circle-agent-stack-readiness",
"mode": "readiness-only-owned-surface",
"liveMode": "zero-contact-inbound-only",
"readyForCircleAgentStackStyleBuyers": true,
"firstPaidRoute": "/api/opportunity-check",
"builderMonetizationRoute": "/api/agent-revenue-audit",
"circleAgentWalletCreatedByApexScout": false,
"circleCliInstalled": false,
"circleSkillsInstalled": false,
"circleGatewayNanopaymentsEnabled": false,
"circleMarketplaceSubmitted": false,
"circleWalletCustodyAdded": false,
"circleWalletFundingAdded": false,
"settlementRailChanged": false,
"sellerWalletChanged": false,
"guardrails": [
"Readiness-only owned surface.",
"Zero-contact and inbound-only.",
"No Circle Agent Wallet creation, funding, custody, or wallet management by ApexScout.",
"No Circle CLI command run and no Circle Skill installed.",
"No Circle Gateway nanopayment integration or settlement rail switch.",
"No Circle Agent Marketplace submission.",
"No official Circle endorsement, partnership, listing, or approval claim.",
"No paid calls or paid upstream calls.",
"No scraping, third-party discovery, endpoint scanning, or lead harvesting.",
"No posts, DMs, emails, manual messages, or contact campaigns.",
"No fake traffic, fake feedback, or fake paid completions.",
"No guaranteed revenue claim.",
"No buyer-level public data.",
"No settlement rail change.",
"No seller wallet change."
],
"privacy": {
"publicMetrics": "aggregate-only",
"buyerLevelDataPublic": false,
"buyerPromptsPublic": false,
"walletHistoriesPublic": false,
"paidResponsesPublic": false,
"rawFeedbackPublic": false,
"fullWalletAddressesPublic": false,
"fullPaymentPayloadsPublic": false
},
"note": "ApexScout is ready for Circle Agent Stack-style paid API buyers through owned x402, MCP, and proof surfaces only; no Circle wallet, CLI, Skill, Gateway nanopayment, marketplace submission, or endorsement claim is performed by ApexScout."
},
"agenticPaymentsMarketSignal": {
"url": "https://apexscout.ai/agentic-payments-market-signal",
"api": "https://apexscout.ai/api/agentic-payments-market-signal",
"mode": "market-context-owned-surface",
"source": "Token Terminal",
"sourceUrl": "https://x.com/tokenterminal/status/2053895358405652592",
"monthlyActiveAgenticSenders": "~177.5k",
"marketContextOnly": true,
"apexScoutTractionClaim": false,
"revenueClaim": false,
"note": "The Token Terminal chart is useful market context for agentic payments and Base, but it is not an ApexScout traction, endorsement, or revenue claim."
},
"whyApexScoutAgenticPayments": {
"url": "https://apexscout.ai/why-apexscout-agentic-payments",
"api": "https://apexscout.ai/api/why-apexscout-agentic-payments",
"mode": "public-positioning-owned-surface",
"headline": "ApexScout is already shaped like an agent-paid API: inspect, challenge, pay once, get JSON once.",
"bestMachineRead": "/api/why-apexscout-agentic-payments",
"primaryBuilderRoute": "/api/agent-revenue-audit",
"guardrails": [
"No Token Terminal endorsement claim.",
"No ApexScout traction claim from this chart.",
"No guaranteed revenue claim.",
"No third-party scraping or outreach.",
"No paid calls.",
"No fake traffic, feedback, paid completions, or revenue.",
"No buyer-level public data.",
"No settlement rail change.",
"No seller wallet change."
]
},
"conversionClose": {
"mode": "zero-contact-inbound-only",
"primaryRoute": {
"label": "Agent Revenue Audit",
"page": "https://apexscout.ai/agent-revenue-audit",
"paymentIntent": "https://apexscout.ai/payment-intent?route=agent-revenue-audit&src=conversion-close",
"path": "/api/agent-revenue-audit",
"price": "$5.00",
"amountAtomicUnits": "5000000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"paymentModel": "Pay once, get JSON once."
},
"qualifierRoute": {
"label": "Opportunity Check",
"path": "/api/opportunity-check",
"page": "https://apexscout.ai/first-paid-call?route=opportunity-check&src=conversion-close",
"price": "$0.01",
"amountAtomicUnits": "10000",
"network": "eip155:8453",
"expectedUnpaidStatus": 402,
"role": "Use this only when the buyer wants the cheapest payment proof before considering the $5 audit."
},
"buyerQuestion": "Will this help me turn my agent, API, MCP tool, or x402 route into paid demand?",
"whyBuyNow": [
"You already have an agent, API, MCP tool, or x402 service and need a sharper paid offer.",
"You are seeing 402 pressure, page visits, or buyer questions but not enough paid retries.",
"You need route pricing, first paid action, and buyer-agent retry instructions in one JSON response."
],
"notFor": [
"Investment, legal, tax, lending, compliance, trading, or guaranteed revenue decisions.",
"Buyers who only need to test payment plumbing; use the $0.01 Opportunity Check instead.",
"Anyone expecting ApexScout to scrape leads, contact people, inspect third-party domains, or make paid upstream calls."
],
"guardrails": [
"Zero-contact and inbound-only.",
"No posts, DMs, emails, manual messages, or contact campaigns.",
"No scraping, third-party discovery, endpoint scanning, or lead harvesting.",
"No paid calls, paid upstream calls, self-payment proofs, or automatic buyer spending from this packet.",
"No official AWS, Coinbase, Stripe, AgentCore, or marketplace endorsement claim.",
"No guaranteed revenue claim.",
"No buyer-level public data, full payment payloads, raw feedback, or full wallet addresses.",
"No settlement rail change and no seller wallet change."
],
"privacy": {
"publicMetrics": "aggregate-only",
"buyerLevelDataPublic": false,
"buyerPromptsPublic": false,
"paidResponsesPublic": false,
"rawFeedbackPublic": false,
"fullWalletAddressesPublic": false,
"fullPaymentPayloadsPublic": false
},
"note": "Qualified inbound builders should inspect /agent-revenue-audit and its no-spend payment intent before deciding whether a buyer-controlled x402 retry is worth $5."
},
"agentSpendPassport": {
"url": "https://apexscout.ai/agent-spend-passport",
"api": "https://apexscout.ai/api/agent-spend-passport",
"prepareApi": "https://apexscout.ai/api/agent-spend-passport/prepare",
"mode": "free-no-spend-preflight",
"publicCopy": "Not sure what to buy? Generate a free Agent Spend Passport before paying.",
"explanation": "The Passport does not spend money. It recommends the right route, checks budget fit, warns about sensitive fields, and gives a safe copy-paste paid-call payload.",
"routeIsFree": true,
"paidCallsMadeByPassport": false,
"paidUpstreamCalls": false,
"buyerLevelDataExposed": false,
"note": "Buyer agents should generate this free Passport before selecting /api/opportunity-check or /api/agent-revenue-audit."
},
"hubSpotAgentReadinessUrl": "/hubspot-agent-readiness",
"hubSpotAgentReadinessApi": "/api/hubspot-agent-readiness",
"hubSpotAgentReadiness": {
"url": "https://apexscout.ai/hubspot-agent-readiness",
"api": "https://apexscout.ai/api/hubspot-agent-readiness",
"positioning": "External x402 trust and monetization intelligence API for HubSpot-oriented agent builders and buyer agents.",
"integrationStatus": "readiness-only",
"recommendedFirstPaidCall": {
"path": "/api/opportunity-check",
"url": "https://apexscout.ai/api/opportunity-check",
"price": "$0.01",
"maxAmountAtomicUnits": "10000"
},
"recommendedBuilderAudit": {
"path": "/api/agent-revenue-audit",
"url": "https://apexscout.ai/api/agent-revenue-audit",
"price": "$5.00",
"maxAmountAtomicUnits": "5000000"
},
"notes": [
"HubSpot-oriented builders: ApexScout can be evaluated as an external x402 trust and monetization API.",
"This release does not connect to HubSpot CRM or use HubSpot OAuth.",
"ApexScout is not an official HubSpot app and does not claim HubSpot endorsement."
]
},
"buyerAgentChallengeUrl": "/buyer-agent-challenge",
"buyerAgentChallengeApi": "/api/buyer-agent-challenge",
"buyerAgentChallenge": {
"url": "https://apexscout.ai/buyer-agent-challenge",
"api": "https://apexscout.ai/api/buyer-agent-challenge",
"recommendedFirstPaidCall": {
"path": "/api/opportunity-check",
"price": "$0.01",
"maxAmountAtomicUnits": "10000"
},
"notes": [
"Buyer may be a human operator or an authorized buyer agent.",
"ApexScout is zero-contact and inbound-only. It does not contact agents, post, DM, email, scrape, or manually message people."
]
},
"x402SellerReadiness": {
"url": "https://apexscout.ai/x402-seller-readiness",
"api": "https://apexscout.ai/api/x402-seller-readiness",
"purpose": "Help x402 API sellers prove their paid service is understandable, testable, privacy-safe, and buyer-agent ready before they ask buyers to pay.",
"recommendedFor": [
"x402 API sellers",
"agent-tool builders",
"AI service operators",
"API founders packaging a pay-per-call route"
],
"firstPaidRoute": "/api/opportunity-check",
"firstPaidPrice": "$0.01",
"notes": [
"ApexScout helps x402 sellers prove their route is understandable before asking buyer agents to pay.",
"ApexScout does not inspect third-party endpoints or contact agents."
]
},
"zeroPostDiscoveryIndexing": {
"mode": "zero-post-discovery-indexing",
"url": "https://apexscout.ai/discovery-readiness",
"api": "https://apexscout.ai/api/discovery-readiness",
"statusApi": "https://apexscout.ai/api/discovery-indexing-status",
"discoveryMetadataRoutes": [
{
"path": "/api/opportunity-check",
"price": "$0.01",
"bazaarMetadataConfigured": true,
"discoveryReadiness": "ready"
},
{
"path": "/api/agent-revenue-audit",
"price": "$5.00",
"bazaarMetadataConfigured": true,
"discoveryReadiness": "ready"
},
{
"path": "/api/agent-commerce-reliability-ledger",
"price": "$0.10",
"bazaarMetadataConfigured": true,
"discoveryReadiness": "ready"
},
{
"path": "/api/x402-compatibility-witness",
"price": "$0.25",
"bazaarMetadataConfigured": true,
"discoveryReadiness": "ready"
}
],
"notes": [
"ApexScout is in zero-post discovery mode.",
"The next exposure path is x402 settlement plus discovery metadata, not posts or DMs.",
"ApexScout is zero-contact and inbound-only. It does not contact agents, post, DM, email, scrape, or manually message people."
]
},
"buyerTrustPacket": {
"name": "ApexScout Buyer Trust Packet",
"mode": "inbound-only-manual-test-kit",
"updatedAt": "2026-05-04",
"summary": "ApexScout is an inbound-only SaaS/API surface for buyer agents and operators that want to inspect the product, choose a small first route, see the expected HTTP 402 challenge, and decide whether to retry with their own x402 client.",
"buyerPromise": [
"Inspect the public agent card, docs, pricing, guardrails, and sample payloads before paying.",
"No subscription is required: Pay once and get one JSON response once.",
"Inspect schemas and the expected unpaid HTTP 402 challenge before deciding whether to pay.",
"Start with a free helper or the cheapest useful protected route instead of guessing from the whole route list.",
"Treat unpaid HTTP 402 as the expected pre-payment checkpoint, not as a broken-service error.",
"Retry with x402 only from a buyer-controlled wallet/client after the route can change a real next decision.",
"Avoid high-value routes for vague or high-stakes decisions unless you already have outside verification and a specific decision to make."
],
"whoItIsFor": [
"Buyer agents choosing which ApexScout route to buy first.",
"Human operators checking the API before spending.",
"Agent/API builders deciding whether the $5 Agent Revenue Audit can improve their own paid route."
],
"whatCanBeTestedBeforePaying": [
"/public-agent explains the product, prices, guardrails, and first-buy ladder.",
"/docs.json exposes schemas, sample payloads, route metadata, and the buyer trust packet.",
"/start and /api/agent-message-intake can help choose a route without payment.",
"Protected paid routes can be sent unpaid first to confirm the expected HTTP 402 payment challenge."
],
"manualTestPlan": [
{
"step": 1,
"label": "Read the public card",
"path": "/public-agent",
"expected": "Buyer sees what ApexScout does, the inbound-only boundary, prices, and no-auto-spend guardrails."
},
{
"step": 2,
"label": "Inspect machine docs",
"path": "/docs.json",
"expected": "Buyer sees schemas, example payloads, route prices, trust boundaries, and payment expectations."
},
{
"step": 3,
"label": "Ask for a free route recommendation",
"path": "/api/agent-message-intake",
"expected": "Buyer gets a safe next-route answer with no payment, no outbound message, and no paid upstream call."
},
{
"step": 4,
"label": "Run the unpaid protected probe",
"path": "/api/opportunity-check",
"expected": "Buyer receives HTTP 402 with the listed $0.01 price and retry instructions."
},
{
"step": 5,
"label": "Use the rescue or testbench before paying",
"path": "/instant-x402",
"expected": "Buyer can copy the payload, confirm the route, and choose whether a paid retry is justified."
},
{
"step": 6,
"label": "Retry paid only when ready",
"path": "/402-rescue",
"expected": "Buyer pays through their own x402 client on Base mainnet only if the output can change the next action."
}
],
"safeManualProbe": {
"method": "POST",
"path": "/api/opportunity-check",
"expectedUnpaidStatus": 402,
"expectedPaidStatus": 200,
"price": "$0.01",
"whyFirst": "This is the cheapest useful paid test. Use it unless the buyer already knows they need a named-company route or the $5 agent/API monetization audit.",
"samplePayload": {
"subject": "Example vendor or agent service",
"buyer": "operator evaluating whether to spend more time",
"goal": "Decide whether this subject deserves deeper diligence.",
"knownContext": "Manually supplied context only. Do not scrape or discover third-party targets."
}
},
"protectedRouteBehavior": {
"noSubscription": true,
"paymentModel": "Pay once, get JSON once.",
"unpaidBehavior": "Unpaid protected POST routes return HTTP 402 with x402 payment requirements.",
"paidBehavior": "After buyer-controlled x402 payment, the same route should return one structured JSON result.",
"buyerControlsPayment": true,
"codexShouldSpendMoney": false
},
"firstBuyLadder": [
{
"path": "/api/opportunity-check",
"price": "$0.01",
"useWhen": "The buyer wants the cheapest useful paid proof or is unsure whether deeper work is justified."
},
{
"path": "/api/company-intel",
"price": "$0.05",
"useWhen": "The buyer already has one named company and wants a first-pass trust snapshot."
},
{
"path": "/api/agent-revenue-audit",
"price": "$5.00",
"useWhen": "The buyer is a builder/operator asking how to package, price, or improve their own paid agent/API route."
}
],
"routeResultGuide": [
{
"path": "/api/opportunity-check",
"title": "Opportunity Check",
"price": "$0.01",
"returns": "Opportunity Check returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/research-brief",
"title": "Research Brief",
"price": "$0.05",
"returns": "Research Brief returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/company-intel",
"title": "Company Intel",
"price": "$0.05",
"returns": "Company Intel returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/company-watch",
"title": "Company Watch",
"price": "$0.20",
"returns": "Company Watch returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/source-check",
"title": "Source Check",
"price": "$0.05",
"returns": "Source Check returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/vendor-risk",
"title": "Vendor Risk",
"price": "$0.05",
"returns": "Vendor Risk returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/deep-diligence",
"title": "Deep Diligence",
"price": "$0.50",
"returns": "Deep Diligence returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/lead-brief",
"title": "Lead Brief",
"price": "$0.05",
"returns": "Lead Brief returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/agentic-market-brief",
"title": "ApexScout Agentic Market Brief",
"price": "$0.25",
"returns": "ApexScout Agentic Market Brief returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/agentic-service-scorecard",
"title": "ApexScout Service Scorecard",
"price": "$0.05",
"returns": "ApexScout Service Scorecard returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/agentic-route-forge",
"title": "ApexScout RouteForge",
"price": "$0.25",
"returns": "ApexScout RouteForge returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/agentic-market-watch",
"title": "ApexScout Market Watch",
"price": "$0.01",
"returns": "ApexScout Market Watch returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/agentic-launch-plan",
"title": "ApexScout Launch Plan",
"price": "$0.50",
"returns": "ApexScout Launch Plan returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/agent-revenue-audit",
"title": "Agent Revenue Audit",
"price": "$5.00",
"returns": "Agent Revenue Audit returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/agent-commerce-reliability-ledger/failure-match",
"title": "Reliability Ledger Failure Match",
"price": "$0.005",
"returns": "Reliability Ledger Failure Match returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/agent-commerce-reliability-ledger/fix-card",
"title": "Reliability Ledger Verified Fix Card",
"price": "$0.01",
"returns": "Reliability Ledger Verified Fix Card returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/agent-commerce-reliability-ledger/edition-delta",
"title": "Reliability Ledger Edition Delta",
"price": "$0.005",
"returns": "Reliability Ledger Edition Delta returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
},
{
"path": "/api/agent-commerce-reliability-ledger",
"title": "Agent Commerce Reliability Ledger",
"price": "$0.10",
"returns": "Agent Commerce Reliability Ledger returns one structured JSON result for the submitted request. Public examples are synthetic and do not expose real buyer history."
}
],
"recommendedFirstRoute": {
"path": "/api/opportunity-check",
"price": "$0.01",
"reason": "It is the cheapest useful protected route and is safest when the buyer is still deciding whether deeper work is justified."
},
"ifPaymentBreaks": [
"Open /402-rescue and compare the expected unpaid HTTP 402 body with the actual response.",
"Check /status and /health locally before assuming payment is broken.",
"Use /api/agent-message-intake or /api/first-buy-advisor for free route help before spending again.",
"Do not retry high-value routes repeatedly until the 402-to-paid path is clear."
],
"privateData": [
"Buyer prompts are not exposed publicly.",
"Wallet-level request history is not exposed publicly.",
"Raw feedback text is not exposed publicly.",
"Paid response bodies are not exposed publicly.",
"Watched subjects tied to buyers are not exposed publicly."
],
"trustSignals": [
"Public docs and card are available before payment.",
"Base mainnet is the proven production x402 rail.",
"Paid proof is public, but buyer wallet and buyer-level histories are redacted.",
"Public dashboard and cash register expose aggregate metrics only.",
"Every paid response is framed as first-pass decision support with explicit safe-use boundaries."
],
"willNotDo": [
"No automatic contact, DMs, emails, agent-to-agent signals, or third-party contact.",
"No security testing, endpoint scanning, scraping, or broad outside-domain lookup.",
"No paid upstream calls or automatic buyer spending.",
"No public buyer prompts, wallet-level histories, raw feedback, watched subjects, or paid response bodies.",
"No settlement-rail switch away from the proven Base mainnet x402 path."
],
"links": {
"publicAgent": "https://apexscout.ai/public-agent",
"agentCard": "https://apexscout.ai/.well-known/agent.json",
"docs": "https://apexscout.ai/docs.json",
"messageIntake": "https://apexscout.ai/api/agent-message-intake",
"instantX402": "https://apexscout.ai/instant-x402",
"rescue": "https://apexscout.ai/402-rescue",
"cashRegister": "https://apexscout.ai/api/cash-register",
"dashboard": "https://apexscout.ai/dashboard"
}
},
"recommendedFirstBuys": [
{
"path": "/api/opportunity-check",
"price": "$0.01",
"when": "Cheapest useful paid test."
},
{
"path": "/api/company-intel",
"price": "$0.05",
"when": "Named-company trust read."
},
{
"path": "/api/agentic-market-brief",
"price": "$0.25",
"when": "Agent/x402 market strategy."
},
{
"path": "/api/agent-revenue-audit",
"price": "$5.00",
"when": "Builder/operator monetization audit when the buyer needs a route ladder, price decision, and 402-to-paid fix plan."
}
],
"acceptedInboundMessageTypes": [
"route_recommendation_request",
"402_retry_help",
"public_agent_install_check",
"paid_route_test_request",
"qualified_tester_feedback"
],
"links": {
"home": "https://apexscout.ai/",
"publicAgent": "https://apexscout.ai/public-agent",
"buyerAgentChallenge": "https://apexscout.ai/buyer-agent-challenge",
"buyerAgentChallengeApi": "https://apexscout.ai/api/buyer-agent-challenge",
"x402Proof": "https://apexscout.ai/x402-proof",
"x402ProofApi": "https://apexscout.ai/api/x402-proof",
"agentSpendPassport": "https://apexscout.ai/agent-spend-passport",
"agentSpendPassportApi": "https://apexscout.ai/api/agent-spend-passport",
"agentSpendPassportPrepareApi": "https://apexscout.ai/api/agent-spend-passport/prepare",
"hubSpotAgentReadiness": "https://apexscout.ai/hubspot-agent-readiness",
"hubSpotAgentReadinessApi": "https://apexscout.ai/api/hubspot-agent-readiness",
"adReadiness": "https://apexscout.ai/api/ad-readiness",
"directoryReadiness": "https://apexscout.ai/directory-readiness",
"directoryReadinessApi": "https://apexscout.ai/api/directory-readiness",
"mcpToolPack": "https://apexscout.ai/mcp-tool-pack",
"mcpToolPackApi": "https://apexscout.ai/api/mcp-tool-pack",
"mcpManifest": "https://apexscout.ai/.well-known/mcp.json",
"agentWalletSkillPack": "https://apexscout.ai/agent-wallet-skill-pack",
"agentWalletSkillPackApi": "https://apexscout.ai/api/agent-wallet-skill-pack",
"agentWalletSkillPackWellKnown": "https://apexscout.ai/.well-known/apexscout-agent-wallet-skill.json",
"agentWalletSkillMarkdown": "https://apexscout.ai/apexscout-agent-wallet-skill.md",
"agentWalletSkillMarkdownWellKnown": "https://apexscout.ai/.well-known/apexscout-agent-wallet-skill.md",
"apifyX402UpstreamReadiness": "https://apexscout.ai/apify-x402-upstream-readiness",
"apifyX402UpstreamReadinessApi": "https://apexscout.ai/api/apify-x402-upstream-readiness",
"apifyX402UpstreamReadinessWellKnown": "https://apexscout.ai/.well-known/apexscout-apify-x402-upstream.json",
"x402scanDiscovery": "https://apexscout.ai/x402scan-discovery",
"x402scanDiscoveryApi": "https://apexscout.ai/api/x402scan-discovery",
"x402scanOpenApi": "https://apexscout.ai/openapi.json",
"x402scanWellKnown": "https://apexscout.ai/.well-known/x402",
"mistTrackRiskReadiness": "https://apexscout.ai/misttrack-risk-readiness",
"mistTrackRiskReadinessApi": "https://apexscout.ai/api/misttrack-risk-readiness",
"mistTrackRiskReadinessWellKnown": "https://apexscout.ai/.well-known/apexscout-misttrack-risk-readiness.json",
"cloudflareMonetizationGatewayRuleExport": "https://apexscout.ai/cloudflare-monetization-gateway-rules",
"cloudflareMonetizationGatewayRuleExportApi": "https://apexscout.ai/api/cloudflare-monetization-gateway-rules",
"cloudflareMonetizationGatewayRuleExportWellKnown": "https://apexscout.ai/.well-known/apexscout-cloudflare-monetization-gateway-rules.json",
"agentReceiptContract": "https://apexscout.ai/agent-receipt-contract",
"agentReceiptContractApi": "https://apexscout.ai/api/agent-receipt-contract",
"agentReceiptContractWellKnown": "https://apexscout.ai/.well-known/apexscout-agent-receipt-contract.json",
"agentCoreReadiness": "https://apexscout.ai/agentcore-readiness",
"agentCoreReadinessApi": "https://apexscout.ai/api/agentcore-readiness",
"agentCoreGateway": "https://apexscout.ai/agentcore-gateway",
"agentCoreGatewayApi": "https://apexscout.ai/api/agentcore-gateway",
"agentCoreOpenApi": "https://apexscout.ai/api/agentcore-openapi.json",
"agentCorePaymentsPolicy": "https://apexscout.ai/agentcore-payments-policy",
"agentCorePaymentsPolicyApi": "https://apexscout.ai/api/agentcore-payments-policy",
"agentCorePaymentsPolicyWellKnown": "https://apexscout.ai/.well-known/apexscout-spend-policy.json",
"agentCoreBuyerStart": "https://apexscout.ai/agentcore-buyer-start",
"agentCoreBuyerStartApi": "https://apexscout.ai/api/agentcore-buyer-start",
"agentPaymentAlpha": "https://apexscout.ai/agent-payment-alpha",
"agentPaymentAlphaApi": "https://apexscout.ai/api/agent-payment-alpha",
"x402BatchSettlementReadiness": "https://apexscout.ai/x402-batch-settlement",
"x402BatchSettlementReadinessApi": "https://apexscout.ai/api/x402-batch-settlement",
"agentSafetyPosture": "https://apexscout.ai/agent-safety-posture",
"agentSafetyPostureApi": "https://apexscout.ai/api/agent-safety-posture",
"agentWonderlandReadiness": "https://apexscout.ai/agent-wonderland-readiness",
"agentWonderlandReadinessApi": "https://apexscout.ai/api/agent-wonderland-readiness",
"circleAgentStackReadiness": "https://apexscout.ai/circle-agent-stack-readiness",
"circleAgentStackReadinessApi": "https://apexscout.ai/api/circle-agent-stack-readiness",
"agenticPaymentsMarketSignal": "https://apexscout.ai/agentic-payments-market-signal",
"agenticPaymentsMarketSignalApi": "https://apexscout.ai/api/agentic-payments-market-signal",
"whyApexScoutAgenticPayments": "https://apexscout.ai/why-apexscout-agentic-payments",
"whyApexScoutAgenticPaymentsApi": "https://apexscout.ai/api/why-apexscout-agentic-payments",
"x402SellerReadiness": "https://apexscout.ai/x402-seller-readiness",
"x402SellerReadinessApi": "https://apexscout.ai/api/x402-seller-readiness",
"discoveryReadiness": "https://apexscout.ai/discovery-readiness",
"discoveryReadinessApi": "https://apexscout.ai/api/discovery-readiness",
"discoveryIndexingStatus": "https://apexscout.ai/api/discovery-indexing-status",
"agentCard": "https://apexscout.ai/.well-known/agent.json",
"docs": "https://apexscout.ai/docs.json",
"rescue": "https://apexscout.ai/402-rescue",
"instantX402": "https://apexscout.ai/instant-x402",
"agentRevenueAudit": "https://apexscout.ai/agent-revenue-audit",
"agentRevenueAuditBuilderActionPack": "https://apexscout.ai/api/agent-revenue-audit-builder/action-pack",
"agentCommerceScenarioReadiness": "https://apexscout.ai/agent-commerce-scenarios",
"agentCommerceScenarioReadinessApi": "https://apexscout.ai/api/agent-commerce-scenarios",
"agentCommerceReliabilityLedger": "https://apexscout.ai/agent-commerce-reliability-ledger",
"agentCommerceReliabilityLedgerPreviewApi": "https://apexscout.ai/api/agent-commerce-reliability-ledger/preview",
"agentCommerceReliabilityLedgerPaidApi": "https://apexscout.ai/api/agent-commerce-reliability-ledger",
"compatibilityWitness": "https://apexscout.ai/x402-compatibility-witness",
"compatibilityWitnessPreflightApi": "https://apexscout.ai/api/x402-compatibility-witness/preflight",
"compatibilityWitnessPaidApi": "https://apexscout.ai/api/x402-compatibility-witness",
"agentRevenueAuditFastPathIntent": "https://apexscout.ai/payment-intent?route=agent-revenue-audit&src=audit-builder-agent-fast-path",
"agentRevenueAuditFastPathIntentApi": "https://apexscout.ai/api/payment-intent?route=agent-revenue-audit&src=audit-builder-agent-fast-path",
"messageIntake": "https://apexscout.ai/api/agent-message-intake",
"cashRegister": "https://apexscout.ai/api/cash-register"
},
"guardrails": [
"Inbound only",
"Buyer may be a human operator or an authorized buyer agent.",
"ApexScout is inbound-only and does not contact agents.",
"ERC-8004-ready but not registered until manually verified",
"Own public-agent review is manual and buyer-initiated",
"No automatic contact",
"No scraping",
"No paid upstream calls",
"No buyer-level public data",
"No settlement rail switching",
"Base mainnet x402 remains production rail",
"Zero-post discovery indexing: no posts, no DMs, no scraping, and no third-party discovery.",
"HubSpot readiness only: no HubSpot CRM access, no OAuth, and no official HubSpot app claim.",
"Ad readiness only: no ad campaign, no billing setup, no automatic ad buying, and no buyer-level public data.",
"AgentCore readiness only: seller-side metadata and proof surfaces, no AWS wallet integration or automatic buyer spending.",
"AgentCore Gateway import only: OpenAPI metadata for existing owned routes, no buyer wallet custody, no budget management, and no automatic paid retry.",
"AgentCore Payments spend policy only: buyer-side wallet authorization and budget enforcement remain outside ApexScout.",
"AgentCore Buyer Start only: one owned no-spend start path from policy to import metadata to unpaid 402, with no automatic retry.",
"Agent Payment Alpha only: ten public payment-market signals converted into owned metadata, no endorsement claim, no rail switch, no buyer custody, and no buyer-level exposure.",
"Agent Safety Posture only: no-spend buyer-readable boundaries, approval gates, credential privacy, and aggregate-only audit trail.",
"Agent Wonderland readiness only: no package setup, listing submission, OpenWallet, Stripe Connect, Agent Wonderland-managed MPP integration, Solana, Tempo, or token action; ApexScout's independent optional Tempo MPP Ledger path remains available.",
"Circle Agent Stack readiness only: no Circle wallet creation, CLI or Skills install, Circle Gateway nanopayments, marketplace submission, or Circle endorsement claim.",
"Token Terminal market signal only: no ApexScout-specific traction, endorsement, or revenue claim."
],
"publicMetrics": "aggregate-only",
"externalInstallsClaimed": false
}