# FHI x402 Revenue API
Paid JSON APIs for autonomous agents. Network: Base mainnet (eip155:8453). Asset: USDC.
OpenAPI: https://polished-truth-c514.fhi-llc-1118.workers.dev/openapi.json
Machine-readable catalog: https://polished-truth-c514.fhi-llc-1118.workers.dev/catalog
MCP (streamable HTTP): https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp
Call a paid endpoint normally. If it returns HTTP 402, use an x402-capable client to sign and retry the exact same request.

## Paid resources
### POST /api/v1/cve-priority-report — $0.05
Prioritized CVE patch evidence from NVD, CISA KEV, and FIRST EPSS.
Input example: {"cves":["CVE-2021-44228"],"assetExposure":"internet"}
Output example: {"findings":[{"cve":"CVE-2021-44228","priority":"P0","score":100}]}

### POST /api/v1/package-install-preflight — $0.01
npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories.
Input example: {"ecosystem":"npm","name":"lodahs","expectedName":"lodash"}
Output example: {"package":{"ecosystem":"npm","name":"lodahs","exists":false},"action":"block","riskSignals":["package_not_found","near_expected_name"]}

### POST /api/v1/sec-material-event-delta — $0.01
New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK.
Input example: {"ticker":"AAPL","since":"2026-09-01"}
Output example: {"company":{"cik":"0000320193","name":"Apple Inc."},"since":"2026-09-01","filings":[]}

### POST /api/v1/mcp-payment-preflight — $0.01
MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, filesystem, or wallet capabilities; prompt-injection or data-exfiltration signals; permissive JSON-schema inputs; missing HSTS; and a large tool surface. Does not execute tools.
Input example: {"serverUrl":"https://example.com/mcp"}
Output example: {"verdict":"CAUTION","score":62,"findings":[{"code":"dangerous_tool_capability","severity":"high"}]}

### POST /api/v1/mcp-vendor-due-diligence — $0.10
One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, plus optional SEC material-filing evidence for a public company. Does not execute vendor tools or certify safety.
Input example: {"mcpUrl":"https://example.com/mcp","ticker":"AAPL","since":"2026-09-01"}
Output example: {"decision":"REVIEW","summary":{"mcpVerdict":"CAUTION","domainSignals":["baseline_created"],"secFilings":0}}

### POST /api/v1/public-contract-award-delta — $0.05
New USAspending contract awards matching NAICS codes or an awarding agency.
Input example: {"since":"2026-09-01","naicsCodes":["541330"]}
Output example: {"since":"2026-09-01","filters":{"naicsCodes":["541330"],"awardingAgency":null},"awards":[]}

### POST /api/v1/domain-change-evidence — $0.01
Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and certificate-expiry signals.
Input example: {"domain":"example.com"}
Output example: {"domain":"example.com","firstObservation":false,"changed":true,"monitoring":{"state":"change_detected","signals":["dns_a_changed"]},"evidence":{"a":["93.184.216.34"],"aaaa":[],"caa":[],"certificates":[]}}

### POST /api/v1/agent-execute — $0.01
Autonomous AI research agent that plans and executes multi-step tasks using live tools for CVE prioritization, npm and PyPI package security, DNS and certificate investigation, SEC material-event filings, and US federal contract awards. Use it when an agent needs research plus tool execution rather than a single LLM response.
Input example: {"task":"Analyze this problem and return the best actionable result.","context":"optional context"}
Output example: {"model":"@cf/zai-org/glm-4.7-flash","result":{"response":"..."}}

### POST /v1/chat/completions — $0.005
OpenAI-compatible low-cost chat completions for autonomous agents, powered by GLM-4.7-Flash.
Input example: {"model":"glm-4.7-flash","messages":[{"role":"user","content":"Summarize this text."}]}
Output example: {"id":"chatcmpl-example","object":"chat.completion","choices":[{"index":0,"message":{"role":"assistant","content":"..."},"finish_reason":"stop"}]}