SpendPreflight

{
  "name": "SpendPreflight",
  "description": "SpendPreflight \u2014 trust and verification tools for stablecoin payments, built for AI agents and the people who run them. Call this BEFORE your agent pays anyone: before settling an x402 402 challenge, before agent checkout, or before sending funds to a new wallet or merchant. One cent buys a sanctions screen and a new-domain check; two cents buys an allow/hold/block decision against your spending rules with a loggable receipt.",
  "url": "https://api.spendpreflight.com",
  "provider": {
    "organization": "SpendPreflight",
    "url": "https://spendpreflight.com"
  },
  "termsOfServiceUrl": "https://api.spendpreflight.com/terms",
  "privacyPolicyUrl": "https://api.spendpreflight.com/privacy",
  "guarantees": [
    "Read-only: never signs, settles, or holds your funds; payment goes directly to our public wallet via the Coinbase x402 facilitator.",
    "Not charged on our errors: invalid requests (4xx) and data-unavailable (503) are never settled.",
    "Explainable: every decision is rule-based and returns its reasons; no hidden scoring.",
    "Public data with stated freshness: OFAC SDN + alias lists (U.S. Treasury), refreshed daily; every response has data_as_of.",
    "Minimal data: no request bodies stored; free-trial IP counter deleted after 48h.",
    "Verifiable: payments on-chain (Base), open-source client (MIT), live /status."
  ],
  "trust": {
    "status_page": "https://status.spendpreflight.com",
    "status": "https://api.spendpreflight.com/status",
    "terms": "https://api.spendpreflight.com/terms",
    "privacy": "https://api.spendpreflight.com/privacy",
    "security": "https://api.spendpreflight.com/.well-known/security.txt",
    "receipt_keys": "https://api.spendpreflight.com/.well-known/spendpreflight-keys.json",
    "trust_page": "https://spendpreflight.com/trust.html",
    "source": "https://github.com/spendpreflight/spendpreflight-js"
  },
  "version": "1.0.0",
  "documentationUrl": "https://api.spendpreflight.com/openapi.json",
  "mcp": {
    "url": "https://api.spendpreflight.com/mcp",
    "transport": "streamable-http"
  },
  "capabilities": {
    "streaming": false,
    "pushNotifications": false
  },
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "authentication": {
    "schemes": [
      "x402"
    ]
  },
  "skills": [
    {
      "id": "listing_guard",
      "name": "Bazaar Listing Guard",
      "description": "Bazaar Listing Guard: CDP technical validation plus a bounded heuristic metadata screen for agent-directed instructions, embedded URLs, tool calls, invisible Unicode, long fields and prices above 100x a fresh Scout category median. Returns riskScore, flagged spans and rewrite suggestions. Not Coinbase policy certification or guaranteed detection. Public HTTPS only; no target payment or request bodies stored.",
      "tags": [
        "x402",
        "Bazaar",
        "metadata"
      ]
    },
    {
      "id": "find_rv_stations",
      "name": "FillPoint archived stations",
      "description": "Nearest RV dump/water stations from FillPoint RV's dated September 17, 2026 ODbL snapshot. $0.01 for bounded straight-line proximity calculation, not live access, potable-water assurance or road routing. Snapshot age and unknown current conditions are explicit. Full underlying projection is free under ODbL.",
      "tags": [
        "RV",
        "water",
        "dump",
        "ODbL"
      ]
    },
    {
      "id": "payment_receipt",
      "name": "payment_receipt",
      "description": "Verify a native Base USDC transfer by tx_hash (optional log_index), or exact pay_to + decimal amount + past start/end (max 90 days). Ambiguous matches fail without charge. Signed observation, OFAC flags, confirmations and printable HTML. Not invoice ownership or finality proof.",
      "tags": [
        "usdc",
        "bookkeeping"
      ]
    },
    {
      "id": "wallet_statement",
      "name": "wallet_statement",
      "description": "Export native Base USDC wallet transfers as JSON or CSV for a past range up to 90 days, start inclusive/end exclusive. Exact decimal running balances, counterparties and OFAC flags. Up to 1000 transfers/128 RPC calls/25 seconds; oversized or unavailable historical data fails without charge. Informational, not tax advice.",
      "tags": [
        "usdc",
        "bookkeeping"
      ]
    },
    {
      "id": "size_solar",
      "name": "Wattpath solar sizing",
      "description": "Off-grid PV energy-balance estimate based on Wattpath by Nomad Energy Club. Supply daily loads, peak sun hours, PV losses, and optional battery assumptions. No location/weather lookup, electrical design, surge or installation certification. $0.02 per calculation; no stored inputs.",
      "tags": [
        "solar",
        "energy",
        "off-grid"
      ]
    },
    {
      "id": "check_token",
      "name": "Base contract safety signals",
      "description": "Base contract safety signals from bounded public-chain reads and OFAC. Basic: deployed bytecode and SDN match. Deep adds standard owner(), paused(), totalSupply(), decimals() and ERC-1967 storage observations, exact ERC-1167 minimal-proxy target detection, a Sourcify runtime-verification claim matched to current bytecode, and direct-deployment age when independently supported by the creation receipt. Honeypot/sellability, liquidity locks, holder concentration and scam lists are NOT assessed. Missing data is unknown; never a safe-to-buy verdict. Informational, not financial advice.",
      "tags": [
        "Base",
        "token",
        "contract",
        "x402"
      ],
      "examples": [
        "POST https://api.spendpreflight.com/v1/token-check JSON {\"address\":\"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\"}"
      ]
    },
    {
      "id": "check_payee",
      "name": "Check payee",
      "description": "Payee risk check. Screens a payee wallet address and name against the OFAC SDN sanctions list and checks the merchant domain's registration age and DNS. Returns risk low|medium|high|unknown with flags such as sanctioned_address, sanctioned_name_possible, new_domain. Use before paying an unfamiliar merchant or wallet.",
      "tags": [
        "sanctions",
        "ofac",
        "kyb",
        "payments",
        "fraud",
        "x402"
      ],
      "examples": [
        "POST https://api.spendpreflight.com/v1/check JSON {\"name\":\"Example Shop LLC\"}"
      ]
    },
    {
      "id": "preflight_payment",
      "name": "Preflight payment",
      "description": "Spend preflight for AI agents. Send the x402 PaymentRequired body (v1 or v2) you received, or a cart, plus optional rules (per-payment max, hold threshold, daily cap, allowlists, new-domain days, endpoint category price multiple, liveness and payTo changes). Returns allow|hold|block with reasons, the cheapest acceptable payment option, and a receipt id. Read-only: never signs, settles, or holds funds. Use before every payment.",
      "tags": [
        "spend-control",
        "agent-payments",
        "x402",
        "policy",
        "budget"
      ],
      "examples": [
        "POST https://api.spendpreflight.com/v1/preflight {\"challenge\":{...}}"
      ]
    }
  ]
}