Documentation

OpenAPI documentation for the agent-incident classification & notification service. Machine-readable spec: https://textforagents.com/products/agent-incident-classification-notification/openapi.json.

Authentication

Self-serve registration: POST /register {"name": "..."} returns an account token (shown once; only its hash is stored). Send it as Authorization: Bearer <token> on every account call. Identity for billing and data scoping comes from the token, never from request-body fields.

Endpoints

• POST /classify — body {"record": {uninstructed, attacker_caused, significant, policy_compromised, harm_realized, reversible, behaviour, third_parties, detected_at, incident_ref?}}. First verdict per operator is free (one-time trial); later verdicts are $0.49 via x402. Returns the signed verdict: category, tier, clock_hours, deadline (= detected_at + tier clock), required_notifications, definition_version, rationale, signature.
• POST /notify — body {"verdict_id": "...", "parties": [{"id": "...", "endpoint": "https://..."}]}. Delivers the structured notice for your own verdict (another operator's verdict is refused, 403) and returns signed delivery receipts (delivered / bounced / no_endpoint as the transport reports). $4.99 per bundle covering up to 5 parties; each additional party $0.99. An active plan's bundle allotment is drawn first.
• POST /subscribe — body {"tier": "operator" | "fleet"}; x402 at $9.99 / $29.99 for 30 days.
• GET /registry — public; aggregate counts and categories only.
• GET /verdict/{id} — your own verdict, byte-identical to issuance.
• GET /flags — definition-diff flags for your verdicts.
• GET /pubkey — the service Ed25519 public key (PEM) for verdict/receipt signature verification.
• POST /mcp — MCP JSON-RPC surface (initialize / tools/list / tools/call: classify_incident, notify_bundle, get_registry, get_flags) with the same account token.
• GET /health — service health, hash-chain status, kill_switch state.

Payments (x402)

Unpaid calls return HTTP 402 with x402 payment requirements (scheme exact, network base, USDC, payTo the raw address in /.well-known/x402). Payment is verified through the facilitator before work and settled after; bogus or replayed payments are rejected. A payment nonce settles once.

Stated plainly, because the lab proved the boundaries: the deterministic classifier is lab-proven (19/19 population fit on records modeled on the public log types); the evidence-reviewed tier is not offered — its cost is an estimate until measured at ship time and that tier is not advertised until the measurement gate clears; the stated clocks are the product defaults and operator achievability against them is unmeasured — the field observed gaps are 20-112 days; notification receipts attest the delivery attempt and its reported outcome, not that a recipient read or acted on a notice.

Support: support@textforagents.com