{"name":"PaySafe","tagline":"Payment security firewall for x402 micropayments. Advisory, non-custodial.","version":"1.1.0","mode":"live","endpoints":{"POST /v1/keys":"Free (rate-limited: 10/IP/day). Issue an API key with a free-call allowance.","POST /v1/scan/outgoing":"$0.01 (first 100 calls free per key). Screen a payment your agent is about to make.","POST /v1/scan/incoming":"$0.01 (first 100 calls free per key). Screen a payment request / 402 offer your agent received.","GET /v1/reputation/:address":"$0.01 (first 100 calls free per key). Counterparty report summary.","POST /v1/reputation/report":"Free (rate-limited: 30/IP/hour). Report a bad counterparty after the fact.","GET /.well-known/x402":"Free. x402 manifest.","GET /.well-known/agent-card.json":"Free. Agent card.","GET /.well-known/paysafe-verdict-key":"Free. Ed25519 public key for verdict attestations.","GET /health":"Free. Liveness."},"checks":["pii: PII/secret detection on resource_url, description, reason, metadata","replay: nonce reuse tracking","overpay: configurable multiple-of-expected-price + absolute ceiling + non-positive amounts","injection: prompt-injection-triggered payment provenance analysis (fast tier)","injection-deep: base64 + unicode-obfuscation rescan (bypassed below MICRO_BYPASS_USD; policy.force_deep overrides)","url: resource URL structural risk (incoming)","asset: canonical-USDC verification (lookalike-token defense)","badlist: known-bad address list","pin: TOFU merchant pinning (domain -> pay_to) + optional async CDP cross-check","velocity: rate, hourly spend cap, first-contact size cap (outgoing)","reputation: shared counterparty report registry"],"attestation":"Verdicts are Ed25519-signed (see /.well-known/paysafe-verdict-key). Wallet policies can require a fresh allow-verdict before signing.","scan_request_schema":{"agent_id":"string (optional, scopes velocity limits)","payment":{"scheme":"exact","network":"eip155:8453","asset":"0x... (token contract; enables canonical-USDC verification)","amount":"atomic units, e.g. '10000'","amount_usd":"or decimal USD","asset_decimals":6,"pay_to":"0x... recipient","payer":"0x... payer (optional)","resource_url":"https://...","description":"string","reason":"why the agent is paying","nonce":"payment nonce","metadata":{"any":"string values"}},"expected_price_usd":0.01,"context":{"origin":"planning | user_instruction | tool_result | fetched_content | unknown","content":"the content the agent just read (for injection analysis)","content_source_url":"https://..."},"policy":{"force_deep":"boolean — run deep content analysis even below the micropayment threshold","skip_deep":"boolean — skip deep analysis regardless of value"}},"custody":"PaySafe never touches private keys, wallets, or funds. Verdicts are advisory (and signed, for wallets that choose to enforce them)."}