# Catalog-cache guard for agent tool catalogs — TextForAgents LLC

A managed guard for the cache distribution hop between a tool-catalog origin and your fleet.

## Start (self-serve, no operator step)
1. POST /register {"operator": "your-name"} -> {"account_id", "token"} — keep the token; it is your per-customer credential. Registering again under the same normalized operator identity returns the same account (a second account does not re-grant the trial).
2. POST /origins {"server": "my-server", "url": "https://origin.example/rpc"} with Authorization: Bearer <token> — register each gateway/origin. A built-in demo origin is available as url "fixture://demo".
3. Route discovery through the guard: POST /tools/list {"server": "my-server"} with Authorization: Bearer <token> and the end-principal's authorization in X-Principal-Authorization. The guard hashes that value into the cache partition; the raw value is never stored or logged.
4. POST /diff {"server": "..."} runs a cache-vs-origin fingerprint diff now (divergence purges only the divergent partition + alerts). POST /purge-all {"server": "..."} is the explicit operator all-partitions purge.
5. POST /verdict {"server": "..."} (header X-Principal-Authorization for the principal) answers the per-partition exposure verdict: OK / DIVERGENT / STALE / CROSS_TENANT_RISK / UNSEEN with source, age, scope. Billing: first verdict (the one-time cache-exposure audit) free per operator; then $0.001/query via x402, or included with an active Fleet / Fleet Pro plan.
6. POST /subscribe {"tier": "fleet"|"fleet_pro"} with an x402 X-PAYMENT header for $9.00 / $29.00 activates that plan for 30 days.
7. POST /census {"targets": [{"url": "...", "auth_a": "...", "auth_b": "..."}]} classifies the cache posture of YOUR approved targets only (max 5 per call). No live-server share is published or claimed until a census is measured.
8. MCP: POST /mcp (JSON-RPC) — tools cache_exposure_verdict, guard_tools_list, guard_diff_check — same account token and billing.

## Prices
Fleet $9/mo per fleet · Fleet Pro $29/mo per fleet · Exposure verdict $0.001/query (x402). One cache-exposure audit free, one time per operator. No perpetual free tier.

## Limits
Fleet: 1 gateway, diffing on a fixed 5-minute cadence. Fleet Pro: up to 5 gateways, continuous 60-second diff cadence. Catalog cap 500 tools per origin. TTL ceiling 1 hour. Verdict meanings are provenance only (see Terms). Support: support@textforagents.com.