quietstore-production.edge-7e13f.workers.dev

A compact operator checklist for proving an x402 knowledge-pack purchase from catalog discovery through paid delivery, replay safety, and ledger evidence.

A practical shell workflow for using RTK as a token-aware command proxy: choosing compressed versus raw output, preserving exit-code evidence, narrowing noisy checks, and avoiding command patterns that obscure failures.

A production playbook for charging AI agents over HTTP 402 without double-billing: safe retries, ambiguous-settle handling, cache rules, ledger idempotency, and buyer recovery messages — the exact patterns behind this store, live on Base USDC. Pairs with the free x402-bazaar-audit preview to check your own endpoint.

An operational recipe for claiming dependency-aware work, reserving narrow files, coordinating overlapping agents, committing accurate bead state, and handing off safely in a shared worktree.

Compact guide so the next agent keeps constraints, verification evidence, and ownership. Cheap entry pack. Lint any handoff text live with POST /v1/tools/handoff-lint ($0.005) before you switch agents.

Smallest paid pack ($0.005): a machine-readable merge checklist and a one-request smoke purchase on this store. After you verify the rail, browse GET /v1/tools for free Bazaar-audit preview and metered loops.

Audit a public https URL. POST {"url":"https://your.site","min_score":80} ($0.02). After payment we fetch the origin (headers, HSTS, CSP, TLS, cookies, DNS/email, security.txt) and return a 0–100 score, do_this_first, and ci_failed for CI. Free preview is snapshot-only {headers}. Badge: GET /v1/tools/site-hygiene-score/badge?host=your.site.

Fetch a live https URL and score whether the deploy is actually there. POST {"url":"https://your.site","min_score":80} ($0.02). Default x402-seller profile: HTTPS, HSTS, llms.txt, catalog, OpenAPI, MCP, health. Optional claims[] or profile:"web". Returns 0–100, evidence, do_this_first, ci_failed. Humans: GET /v1/tools/claim-check/report?host=your.site. Badge goes stale after 7 days.

Screen declared npm packages before you install them. POST package.json (optional lockfile) ($0.02). After payment we look up each name on the npm registry and OSV: missing/hallucinated packages, lookalikes, brand-new publishes, deprecations, known CVEs. Returns 0–100, do_this_first, ci_failed. Caps at 60 packages; never fetches buyer URLs. Report: GET /v1/tools/dep-doctor/report?project=your-app.

Diagnose why an x402 seller is invisible on Coinbase Bazaar. POST your 402 PaymentRequired JSON. Free preview: pass/fail + which checks fail. Paid $0.01: every finding with the exact fix (extension shape, AJV schema, description limits). Run before each x402 deploy.

Diagnose why an x402 seller is invisible on Coinbase Bazaar. POST your 402 PaymentRequired JSON. Free preview: pass/fail + which checks fail. Paid $0.01: every finding with the exact fix (extension shape, AJV schema, description limits). Run before each x402 deploy.

POST handoff text; get a score plus missing pieces (verification, constraints, ownership, next steps, risks). Use every handoff in a multi-agent run — pay per call. Field guide: pack demo-notes-v1.

Score a shell command for RTK-friendly token discipline: whether to wrap with rtk, risk of huge stdout, and a suggested safer form. Pure heuristic; does not execute the command.

Audit a public https URL. POST {"url":"https://your.site","min_score":80} ($0.02). After payment we fetch the origin (headers, HSTS, CSP, TLS, cookies, DNS/email, security.txt) and return a 0–100 score, do_this_first, and ci_failed for CI. Free preview is snapshot-only {headers}. Badge: GET /v1/tools/site-hygiene-score/badge?host=your.site.

Fetch a live https URL and score whether the deploy is actually there. POST {"url":"https://your.site","min_score":80} ($0.02). Default x402-seller profile: HTTPS, HSTS, llms.txt, catalog, OpenAPI, MCP, health. Optional claims[] or profile:"web". Returns 0–100, evidence, do_this_first, ci_failed. Humans: GET /v1/tools/claim-check/report?host=your.site. Badge goes stale after 7 days.

Screen declared npm packages before you install them. POST package.json (optional lockfile) ($0.02). After payment we look up each name on the npm registry and OSV: missing/hallucinated packages, lookalikes, brand-new publishes, deprecations, known CVEs. Returns 0–100, do_this_first, ci_failed. Caps at 60 packages; never fetches buyer URLs. Report: GET /v1/tools/dep-doctor/report?project=your-app.