goldkey-edge-storefront.noah-ing.workers.dev

Execute one pass-gated utility call. A successful distinct request consumes one unit; an exact idempotent replay does not. This stateful route is forwarded to ORIGIN_API and may cold-start.

For $0.01 USDC per x402 call on Base, execute one of seven deterministic utilities: json.canonicalize creates stable JSON serialization and a SHA-256 hash before signing or comparing structured data; json.validate checks data against a bounded JSON Schema 2020-12 subset before accepting agent output; security.prompt_scan returns prompt-injection and exfiltration signals with evidence spans for untrusted text; security.url_check statically screens unsafe schemes, credentials, ports, and direct private or reserved hosts before fetch; policy.spend_check evaluates atomic-unit payment proposals against mandate caps before authorization; text.normalize normalizes Unicode and can strip control or bidirectional-formatting characters before comparison or storage; action.gate combines applicable prompt, Unicode, URL, payload-schema, and spend-mandate checks into one ALLOW, REVIEW, or BLOCK decision with stable reason codes and a reproducible receipt hash. Submit one tool and its matching input. Each call is an independent purchase: the origin validates a fixed bounded envelope before payment verification, performs the potentially expensive tool work only after verification, buffers the result, settles payment, and only then releases it; failed evaluation or settlement does not return a tool result. A successfully settled retry is a new purchase. This stateful route is forwarded to ORIGIN_API and may cold-start.

For $0.01 USDC per x402 call on Base, evaluate one bounded proposed agent action across applicable prompt-injection, hidden-Unicode, static URL, payload-schema, and spend-mandate checks. The result is ALLOW, REVIEW, or BLOCK with stable reason codes, per-check evidence, and deterministic request and receipt SHA-256 hashes. Action Gate does not execute the proposed action, perform network I/O or DNS resolution, or guarantee safety. The origin validates a fixed bounded envelope before payment verification, performs full evaluation only after verification, buffers the result, settles payment, and only then releases it; failed evaluation or settlement does not return an Action Gate result. A successfully settled retry is a new purchase. This stateful route is forwarded to ORIGIN_API and may cold-start.

Beta hosted authorization for one exact MCP or HTTPS call. GoldKey verifies operator-controlled policy and returns a short-lived signed decision after settlement. ALLOW, REVIEW, and BLOCK are billable. GoldKey never receives the upstream credential and never forwards the call; only the operator's local enforcer may do so. This stateful route is forwarded to ORIGIN_API and may cold-start.

Beta hosted authorization for one exact supported EVM transaction, including decoding and required simulation. ALLOW, REVIEW, and BLOCK are billable. GoldKey never holds the wallet signer and never signs or broadcasts; only the operator's local enforcer may do so. This stateful route is forwarded to ORIGIN_API and may cold-start.