{"version":1,"resources":["https://aso-x402-screen.asostudio.workers.dev/v1/screen","https://aso-x402-screen.asostudio.workers.dev/v1/screen/address","https://aso-x402-screen.asostudio.workers.dev/v1/screen/domain","https://aso-x402-screen.asostudio.workers.dev/v1/screen/impersonation","https://aso-x402-screen.asostudio.workers.dev/v1/screen/prompt","https://aso-x402-screen.asostudio.workers.dev/v1/screen/url","https://aso-x402-screen.asostudio.workers.dev/v1/screen/secret","https://aso-x402-screen.asostudio.workers.dev/v1/screen/diff"],"description":"Deterministic OFAC SDN address ($0.002), brand/handle/domain impersonation ($0.002), domain homoglyph ($0.002), prompt-injection ($0.002), pre-fetch URL/SSRF firewall ($0.002), pre-publish secret redactor ($0.002), pre-merge git diff auditor ($0.002), and combined batch ($0.005) screening in Base USDC.","instructions":"# EdgeScreen x402\n\nDeterministic zero-LLM risk screening API & MCP server (v1.8.0) settled in Base USDC via x402 v2 (up to 25 items per call). No account, no API key.\n\n## Quickstart (@x402/fetch)\n```js\nimport { wrapFetchWithPaymentFromConfig } from \"@x402/fetch\";\nimport { ExactEvmScheme } from \"@x402/evm\";\nimport { privateKeyToAccount } from \"viem/accounts\";\nconst acct = privateKeyToAccount(process.env.PRIVATE_KEY);\nconst payFetch = wrapFetchWithPaymentFromConfig(fetch, { schemes: [{ network: \"eip155:8453\", client: new ExactEvmScheme(acct) }] });\nconst res = await payFetch(\"https://aso-x402-screen.asostudio.workers.dev/v1/screen/url?url=https://example.com\");\n```\n\n## MCP Transport v2 (@x402/mcp)\n- Endpoint: POST https://aso-x402-screen.asostudio.workers.dev/mcp (Streamable HTTP JSON-RPC 2.0, 12 tools: 3 zero-wallet free entry hooks + 8 paid x402 tools + health_check).\n- Free entry hooks execute immediately on call #1 for $0.00 with zero wallet setup (`free_punycode_decode`, `free_secret_prefix_lint`, `edgescreen_x402_quickstart`, `health_check`).\n- Compliant with official coinbase/x402 MCP transport v2 (`specs/transports-v2/mcp.md`): unpaid `tools/call` on paid tools returns HTTP 200 with `result.isError: true` and `result.structuredContent` (`PaymentRequired`); paid `tools/call` accepts `params._meta[\"x402/payment\"]` (or HTTP `PAYMENT-SIGNATURE`) and returns settlement receipt in `result._meta[\"x402/payment-response\"]`.\n\n## Free Zero-Wallet Entry Hooks ($0.00)\n- MCP `free_punycode_decode` or GET https://aso-x402-screen.asostudio.workers.dev/v1/free/punycode?target=xn--unswap-4va.com ($0.00): decodes IDN xn-- punycode and inspects mixed Unicode scripts on 1 domain/handle (0 brand-corpus lookup; includes upgrade_hint to paid `screen_impersonation`).\n- MCP `free_secret_prefix_lint` or GET https://aso-x402-screen.asostudio.workers.dev/v1/free/secret-prefix?text=... or POST https://aso-x402-screen.asostudio.workers.dev/v1/free/secret-prefix ($0.00): checks up to 500 chars for obvious high-risk secret prefixes (AKIA, sk_live_, -----BEGIN, ghp_, xoxb-) without full entropy/offsets (includes upgrade_hint to paid `screen_secret` / `screen_diff`).\n- MCP `edgescreen_x402_quickstart` or GET https://aso-x402-screen.asostudio.workers.dev/v1/free/quickstart ($0.00): returns turnkey copy-paste @x402/mcp + @x402/fetch setup snippets (Cursor, Claude Code, TypeScript viem, Python) + live pricing ladder.\n\n## Paid Endpoints\n- POST https://aso-x402-screen.asostudio.workers.dev/v1/screen ($0.005 USD / 5000 atomic on eip155:8453): combined multi-signal batch screening (OFAC + brand impersonation + homoglyphs + prompt injection + SSRF URL firewall + secret redactor + git diff auditor).\n- POST https://aso-x402-screen.asostudio.workers.dev/v1/screen/address or GET https://aso-x402-screen.asostudio.workers.dev/v1/screen/address?address=0x...&chain=base ($0.002 USD / 2000 atomic on eip155:8453): OFAC SDN crypto wallet sanctions screening (EVM 0x..., BTC 1.../3.../bc1..., TRON T...).\n- POST https://aso-x402-screen.asostudio.workers.dev/v1/screen/domain or GET https://aso-x402-screen.asostudio.workers.dev/v1/screen/domain?domain=example.com ($0.002 USD / 2000 atomic on eip155:8453): IDN Punycode, Unicode UTS #39 confusable, and Damerau-Levenshtein lookalike domain/handle detector.\n- POST https://aso-x402-screen.asostudio.workers.dev/v1/screen/impersonation or GET https://aso-x402-screen.asostudio.workers.dev/v1/screen/impersonation?target=rnicrosoft.com ($0.002 USD / 2000 atomic on eip155:8453): deterministic brand/handle/domain impersonation & homograph detector (IDN xn-- punycode, Unicode confusables, Levenshtein-1 typosquats, rn/m & 0/o & 1/l swaps, fake support/airdrop lures -> risk_score, verdict, signals, canonical_comparison).\n- POST https://aso-x402-screen.asostudio.workers.dev/v1/screen/prompt or GET https://aso-x402-screen.asostudio.workers.dev/v1/screen/prompt?text=... ($0.002 USD / 2000 atomic on eip155:8453): prompt injection, MCP tool poisoning, Unicode tag smuggling (U+E0000-U+E007F), and secret exfiltration firewall.\n- POST https://aso-x402-screen.asostudio.workers.dev/v1/screen/url or GET https://aso-x402-screen.asostudio.workers.dev/v1/screen/url?url=https://... ($0.002 USD / 2000 atomic on eip155:8453): pre-fetch SSRF & URL firewall (loopback, RFC1918, CGNAT, IPv6 mapped/local, AWS/GCP/Azure/Alibaba metadata, hex/octal/decimal IPs, non-HTTP(S) schemes, credentials, punycode homoglyphs, open redirects).\n- POST https://aso-x402-screen.asostudio.workers.dev/v1/screen/secret ($0.002 USD / 2000 atomic on eip155:8453): pre-publish secret leak detector & redactor (OpenAI, Anthropic, AWS, GitHub, Stripe, Slack, Google keys, PEM/hex private keys, JWTs, Bearer tokens -> safe, riskScore, masked findings, redactedText).\n- POST https://aso-x402-screen.asostudio.workers.dev/v1/screen/diff ($0.002 USD / 2000 atomic on eip155:8453): pre-merge git diff & PR patch auditor (leaked secrets in + lines, destructive shell/SQL, CI workflow injection, postinstall hooks, SSRF/private IPs, auth/TLS bypass, Trojan Source BiDi Unicode, hunk integrity).\n\n## Free Discovery & Preview Endpoints\n- GET https://aso-x402-screen.asostudio.workers.dev/v1/demo (read-only preview on 5 fixed canonical fixtures: OFAC sanctioned address, xn--unswap-4va.com punycode homograph, prompt injection, SSRF URL, git diff audit)\n- GET https://aso-x402-screen.asostudio.workers.dev/v1/free/punycode?target=xn--unswap-4va.com\n- GET https://aso-x402-screen.asostudio.workers.dev/v1/free/secret-prefix?text=...\n- GET https://aso-x402-screen.asostudio.workers.dev/v1/free/quickstart\n- GET https://aso-x402-screen.asostudio.workers.dev/tools/ofac-sanctions-screening-api\n- GET https://aso-x402-screen.asostudio.workers.dev/tools/crypto-wallet-ofac-checker-mcp\n- GET https://aso-x402-screen.asostudio.workers.dev/tools/domain-impersonation-homograph-api\n- GET https://aso-x402-screen.asostudio.workers.dev/tools/punycode-idn-homograph-decoder\n- GET https://aso-x402-screen.asostudio.workers.dev/tools/prompt-injection-firewall-mcp\n- GET https://aso-x402-screen.asostudio.workers.dev/tools/llm-jailbreak-injection-detector\n- GET https://aso-x402-screen.asostudio.workers.dev/tools/ssrf-url-safety-validator\n- GET https://aso-x402-screen.asostudio.workers.dev/tools/webhook-ssrf-private-ip-guard\n- GET https://aso-x402-screen.asostudio.workers.dev/tools/git-diff-secret-scanner-mcp\n- GET https://aso-x402-screen.asostudio.workers.dev/tools/api-key-token-leak-scanner\n- GET https://aso-x402-screen.asostudio.workers.dev/openapi.json\n- GET https://aso-x402-screen.asostudio.workers.dev/llms.txt\n- GET https://aso-x402-screen.asostudio.workers.dev/terms.txt\n- GET https://aso-x402-screen.asostudio.workers.dev/.well-known/x402\n- GET https://aso-x402-screen.asostudio.workers.dev/.well-known/x402.json\n- GET https://aso-x402-screen.asostudio.workers.dev/.well-known/api-catalog\n- GET https://aso-x402-screen.asostudio.workers.dev/.well-known/mcp.json\n- GET https://aso-x402-screen.asostudio.workers.dev/.well-known/security.txt\n- POST https://aso-x402-screen.asostudio.workers.dev/mcp\n- GET https://aso-x402-screen.asostudio.workers.dev/health\n"}