Built for machines, not humans
Programmatic payment, structured output, and a ports & adapters architecture that scales without rewrites.
Agent-native
MCP + REST delivery. The agent negotiates payment and retrieves a machine-readable verdict, end to end.
x402 payments
Compliant HTTP 402 challenge, USDC settlement via facilitator, replay protection, sanctions screening, and a credit if analysis fails.
Structured verdict
Versioned report.v1 + STIX contract. Content-addressed by sha256: dedup, idempotency, cost cache.
Observable
2-tier orchestration, Prometheus metrics and a real-time Grafana cockpit dashboard.
Three calls, zero friction
From file to verdict, the protocol is designed to be driven by an autonomous agent.
Submit
The agent POSTs the file to /v1/analyses. Response 402 with the payment terms.
Pay
The agent signs a USDC authorization and replays with the X-PAYMENT header. Settled via facilitator.
Retrieve
STATIC → instant verdict. DEEP → 202 + polling/webhook once detonation completes.
Submit a file in one request
Simple REST, idempotent by hash. The cached verdict is the cheapest path.
$ curl -F "file=@sample.bin" -F "tier=STATIC" \
https://agentsec.ca/v1/analyses
# DEEP tier — asynchronous, detonation then polling
$ curl -F "file=@sample.bin" -F "tier=DEEP" \
https://agentsec.ca/v1/analyses
# Cached verdict — the cheapest path
$ curl https://agentsec.ca/v1/files/<sha256>/verdict