x402-url-extractor

# SameDayDesk x402 and MPP Data Gateway

Every paid HTTP response advertises
`/.well-known/agent-payment-evidence.json` through the standard HTTP
`describedby` link relation. The bounded free manifest joins each exact method
and route to its seller-declared read-only effect, recursively guaranteed JSON
paths, response-schema digest, exact replay binding, receipt behavior, and the
existing signed deployment statement. It does not change x402 or MPP terms and
is not authorization to spend; buyers must still verify the live challenge,
paid output, receipt, and settlement.

[![Smithery listing](https://smithery.ai/badge/epistemedeus/x402-data-gateway)](https://smithery.ai/servers/epistemedeus/x402-data-gateway)

Twenty pay-per-call tools for deterministic agent-work opportunity preflight,
machine-service discoverability, payment-offer preflight, Morpho borrower and
market decisions, protection plans, URL extraction, Markdown reading,
repository security scans, company and wallet enrichment, structured data
generation, transaction receipt evidence, delegated-signer policy conformance,
settlement proof, and AI-search readiness audits.

- Product page: https://samedaydesk.com/x402
- Smithery: https://smithery.ai/servers/epistemedeus/x402-data-gateway
- Remote MCP: https://agents.samedaydesk.com/mcp
- Live resource manifest: https://agents.samedaydesk.com/.well-known/x402
- OpenAPI: https://agents.samedaydesk.com/openapi.json
- Official MPP OpenAPI: https://agents.samedaydesk.com/mpp-openapi.json
- Skill contract: https://agents.samedaydesk.com/skill.md
- Action catalog: https://agents.samedaydesk.com/api/actions
- A2A agent card: https://agents.samedaydesk.com/.well-known/agent-card.json
- Global A2A Registry: https://www.a2a-registry.org/agent/9cb0b8e6-cb1f-422b-a604-861d0a79e24b
- Settlement Radar: https://agents.samedaydesk.com/platforms
- Platform health JSON: https://agents.samedaydesk.com/v0/cards.json
- Aggregate machine-demand telemetry: https://agents.samedaydesk.com/v0/commerce-demand.json
- Morpho position risk: `GET /defi/morpho-position?address=0x...&shocks=-10,-20,-30`
- Morpho protection quote: `GET /defi/morpho-protection?address=0x...&targetHealthFactor=1.25&protectAgainstShockPct=-10`
- Morpho market underwriting: `GET /defi/morpho-market-underwrite?marketId=0x...`
- Morpho PreLiquidation replay: `GET /defi/morpho-preliquidation-replay?transactionHash=0x...`
- Opportunity preflight: `GET /work/opportunity-preflight?rewardUsd=10&hours=0.25&hourlyCostUsd=4&selectionProbabilityPct=20`
- Agent discoverability audit: `GET /distribution/agent-discoverability-audit?origin=https://example.com&intent=extract+a+public+website+into+structured+JSON&route=/extract&runtimeUrl=https%3A%2F%2Fexample.com%2Fextract%3Furl%3Dhttps%253A%252F%252Fexample.org&surfaceAudit=true`
- Payment offer preflight: `GET /commerce/payment-offer-preflight?url=https://example.com/paid-route`
- Seller integrity audit: `GET /commerce/seller-integrity-audit?origin=https://seller.example&route=/paid-route&method=GET&requiredPaths=data.attributes`
- Contract-qualified search: `GET /commerce/contract-qualified-search?query=service+domain+ownership+code+provenance&requiredPaths=data.sourceRepository`
  returns a bounded advisory OpenAPI repair plan for missing buyer-required
  paths without mutating seller files or inferring undeclared property types.
- Base USDC settlement proof: `GET /commerce/settlement-proof?transactionHash=0x...&recipient=0x...&amountAtomic=5000`
- Base or Ethereum transaction receipt: `GET /chain/transaction-receipt?transactionHash=0x...&network=base`
- Wallet policy conformance: `POST /security/wallet-policy-conformance`
- Wallet policy conformance contract: `GET /schemas/wallet-policy-conformance-v1.json`
- Stateful wallet policy conformance: `POST /security/stateful-wallet-policy-conformance`
- Stateful wallet policy contract: `GET /schemas/stateful-wallet-policy-conformance-v1.json`
- Material-change alert probe: https://agents.samedaydesk.com/alerts
- Agoragentic seller callback: `POST /integrations/agoragentic/ai-readiness-audit`
- the402 signed fulfillment webhook: `POST /integrations/the402/webhook`

No API key or subscription is required. Every paid HTTP route advertises x402
and native MPP Payment authentication in the same 402 response. Both protocols
settle the same exact USDC amount to the same Base mainnet merchant wallet. MCP
tool calls remain x402-gated.

The Morpho route is read-only. It calculates LTV, LLTV, health factor,
liquidation headroom, and collateral-price shock scenarios from integer protocol
values, then cross-checks indexed collateral, borrow shares, and oracle price
against direct Base RPC state. Scenarios are calculations rather than
probabilities or transaction recommendations. The separate protection route
uses a fresh direct-RPC oracle read and direct confirmation of collateral and
borrow shares to calculate exact partial-repay and add-collateral amounts. It
returns unsigned token-approval and Morpho-call templates, explicit execution
buffers, revalidation requirements, and economic postconditions. It never
accesses a wallet, signs, broadcasts, or takes custody.

The service also keeps a privacy-safe demand telescope on a persistent Railway
volume. It records route families, query key names, challenge/success classes,
and pseudonymous repeat-use signals. External fetches are acquisition signals,
not verified buyers, because unidentified automated indexers can remain.
Recognized crawler and agent-indexer user agents are reduced at ingestion to a
controlled source label and reported in a separate machine-discovery lens with
source and route coverage. Those observations measure fetches, not authenticated
catalog referrals, intent, or demand.
Unmatched requests are reported separately from a conservative semantic-candidate
subset; neither becomes demand until an independent caller repeats or converts.
It does not record raw IP addresses, user
agents, URLs, query values, bodies, payment headers, marketplace payloads, or
credentials. Public output is aggregate only; owner traffic is excluded and
crawler traffic remains excluded from demand even when its controlled discovery
counts are reported separately. Common exploit probes such as `.env`, `.git`,
and WordPress discovery paths are classified as scanner traffic and excluded as
well.

Version 1.9.4 adds explicit paid-traffic classes without exposing buyer
addresses. `COMMERCE_PAYER_CLASSES` accepts a JSON array of `{ "address",
"class" }` records. Controlled classes are `internal`, `validation`,
`incentivized`, `affiliated`, and `independent`. Addresses are converted to the
same secret-keyed payer pseudonyms already used by telemetry and classified at
read time, which also permits retroactive correction without storing a raw
address. Unknown payers remain `unclassified`; unfamiliar wallets never become
independent demand by inference. The public snapshot reports paid success by
class plus independent and repeat-independent actor counts.

Version 1.9.5 adds route-level paid-success counts inside each evidence class.
This lets downstream monitors treat marketplace validation as accounting and
transport evidence, alert on unclassified paid use for investigation, and
advance the demand thesis only for explicitly independent or repeat-independent
buyers.

Version 1.9.6 privately captures a valid Base transaction hash from successful
x402 `PAYMENT-RESPONSE` or MPP `Payment-Receipt` headers after an explicit
evidence baseline. Public telemetry exposes only proof coverage, distinct-count,
and missing-reference counts by payment class. Raw headers and transaction
references stay on the private volume. A missing reference becomes a material
settlement-integrity event without exposing the reference itself.

Version 1.11.2 content-negotiates the root without changing its machine
contract. Browser navigation with an explicit `Accept: text/html` receives a
responsive human map of the fourteen tools, payment flow, and authoritative
discovery links. JSON clients, curl's wildcard accept header, and agents keep
the stable JSON descriptor. The response varies on `Accept`, and the human page
duplicates no payment schema.

Version 1.11.2 also adds the source-attributed machine-discovery lens. It keeps
raw user agents and network addresses out of the public snapshot, reports exact
future indexer observations by controlled source and route, and gives the radar
only first-source and first-route coverage changes as material events. Repeated
crawl volume remains visible data without becoming an attention alert or demand.

Version 1.11.3 makes that reach lens prospective and self-excluding. A distinct
`COMMERCE_AGENT_DISCOVERY_SINCE` baseline prevents pre-instrumentation crawler
history from becoming attributed reach, while SameDayDesk-owned monitor user
agents are excluded from both discovery and external-demand observations. This
keeps integrity sweeps, brand-blind benchmarks, and radar probes from creating
their own acquisition signal.

Version 1.11.4 preserves paying agents even when their user agent identifies as
a crawler or indexer. A valid submitted x402 or MPP credential moves the event
into economic telemetry before crawler classification, while the controlled
user-agent label records source-to-paid conversion by source and route. Channel
labels are still self-declared rather than authenticated referral proof, and
independent demand still requires the explicit payer-class policy.

Version 1.11.5 separates paid-route reach from challenge delivery. Prospective
agent/indexer observations now report paid-route probes, HTTP 402 challenges,
distinct and repeat challenge actors, challenge rate, and controlled source and
route breakdowns. This identifies whether the machine funnel stops before the
paywall, at the challenge, or after a submitted credential without treating an
indexer probe as purchase intent.

Version 1.11.6 adds a conservative challenge-to-payment