1cent Web Intelligence for AI Agents

Public SSRF-protected URL intelligence API and remote MCP server. Production uses x402 v2, Base Mainnet USDC and PayAI. No account or API key. Telegram is the only administrative UI.

• MCP: https://1cent.maxzoa.ru/mcp
• Free product demo: https://1cent.maxzoa.ru/v1/demo/pulse
• Free live demo: https://1cent.maxzoa.ru/v1/demo/live-pulse
• Live catalog/prices: https://1cent.maxzoa.ru/v1/catalog
• Public trust status: https://1cent.maxzoa.ru/status.json
• Buyer guide: https://1cent.maxzoa.ru/docs/getting-started

Production exposes 32 paid REST/MCP operations plus three free MCP tools:

• catalog_search — find the correct operation and live price without a URL fetch;
• demo_url_pulse — inspect a fixed precomputed output sample without payment or network access.
• demo_live_url_pulse — run the real safe service against fixed example.com, rate-limited.

Buyer setup starts with a no-payment diagnostic:

onecent doctor

The CLI refuses a paid call unless the buyer explicitly supplies a maximum amount, confirms Base Mainnet and types the one-call confirmation. See examples/buyer-python and examples/buyer-node.

PostgreSQL is the runtime source for tool availability and atomic Base USDC prices. Config values are clean-install fallbacks. Paid URL work begins only after successful payment checks.

Safety contract

• public HTTP/HTTPS only; private, loopback, link-local and rebinding destinations fail closed;
• strict input schemas; unknown fields rejected;
• bounded redirects, response bodies, extracted text, concurrency and queue depth;
• payment identifier, request fingerprint and idempotent replay protection;
• UNKNOWN settlement never retried automatically;
• no seller private key, buyer key, Docker socket or JavaScript execution on the server;
• Streamable HTTP host/origin protection enabled for remote MCP.

Local quality checks

python -m venv .venv
.venv/Scripts/pip install --require-hashes -r requirements-dev.lock
.venv/Scripts/pip install --no-deps -e .
ruff check .
mypy
pytest -q
python scripts/validate_release.py
docker compose --env-file .env.example config
docker compose --env-file .env.example build
pip-audit --no-deps -r requirements.lock --progress-spinner off

Local Docker start

Copy .env.example to .env, replace placeholders, keep X402_ENVIRONMENT=testnet and X402_NETWORK=eip155:84532, then:

docker compose up -d --build
docker compose ps

Container UID/GID: 10001:10001. No host bind-mounted writable directory is required. This local example is intentionally testnet. Production mainnet activation requires owner approval, a fresh PostgreSQL backup, production preflight, development bypass disabled and rollback readiness.

Documentation

• Public REST API
• Remote MCP server
• Buyer quickstart
• Security policy
• Release history
• Scaling and trust gates

Licensed under Apache-2.0. See LICENSE and NOTICE.