# mint-risk-gate

Fail-closed Solana mint facts and a transaction preflight pack for autonomous trading agents. Two SKUs on one host.

## Payment
- Protocol: x402 v2
- Scheme: exact
- Network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
- Asset: USDC (EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v)
- payTo: E5Ba7DeM6tVcNN1wN2qMbHuZ8nrJHyw1YdZJkiK7HvYz
- Facilitator: PayAI (https://facilitator.payai.network) — no API key required on the free tier; they sponsor gas.

Unpaid calls to paid routes return HTTP 402. The machine-readable challenge is in the PAYMENT-REQUIRED header (base64 JSON) and mirrored in the JSON body as accepts[]. Retry with a PAYMENT-SIGNATURE header after signing.

## Free discovery
- GET https://mint-risk-gate.mint-risk.workers.dev/health
- GET https://mint-risk-gate.mint-risk.workers.dev/.well-known/x402
- GET https://mint-risk-gate.mint-risk.workers.dev/openapi.json
- GET https://mint-risk-gate.mint-risk.workers.dev/llms.txt
- GET https://mint-risk-gate.mint-risk.workers.dev/
- GET https://mint-risk-gate.mint-risk.workers.dev/v1/fees/p50  — recent priority-fee percentiles (not a simulation)

## Paid SKUs
- $0.01 GET https://mint-risk-gate.mint-risk.workers.dev/v1/mint/EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v
- $0.01 POST https://mint-risk-gate.mint-risk.workers.dev/v1/mint/:mint
- $0.01 POST https://mint-risk-gate.mint-risk.workers.dev/mcp  — MCP tool mint_risk
- $0.005 POST https://mint-risk-gate.mint-risk.workers.dev/v1/preflight  — simulate a tx, classify the fail, return CU + suggested priority fee

Bazaar / PayAI catalog pickup happens after the first successful paid settlement (not on 402 alone). x402scan reads /openapi.json then /.well-known/x402.

## Preflight request
Send JSON:
- { "transaction": "<base64 serialized Solana tx>" }, or
- { "feePayer": "<base58>", "instructions": [{ "programId", "accounts": [{ "pubkey", "isSigner", "isWritable" }], "data": "<base64>" }] }

Simulation uses replaceRecentBlockhash and does not send on-chain. This pack does not invent a safety score.

## Output contract
Fields are proven facts or the literal string "unknown".
- mint SKU: authorities, concentration, LP, Jupiter route, pump.fun bonding
- preflight SKU: ok, logs, units (consumed/limit/headroom), suggestedMicroLamports, error.kind taxonomy
- error.kind: insufficient_funds | blockhash | account_missing | compute_exceeded | custom_program_error | unknown
- first-funder cluster: unknown (historical walk is not cheap)

## Local / CI bypass
If ALLOW_DEV_BYPASS=1, send header X-Dev-Bypass: 1 to skip settlement. Disable this on any public host.

## Do not
- Treat unknown as safe
- Spend the merchant SOL bankroll to test
- Expect a composite rug score