Widget-storage residue verdict

A widget's browser storage persists per-server on some hosts, is forbidden on others, and is listed by none. Get the per-widget × per-host residue verdict, the hash-only census, and the verified-clear receipt.

MCP App widgets run in host sandboxes whose storage rules contradict each other. On one measured host a widget lives at a fixed per-server origin where cookies and localStorage work and anything stored can outlive the chat; a second host deliberately gives the widget a real origin so storage persists by design; a third removes allow-same-origin so localStorage, sessionStorage, IndexedDB and cookies cannot be used at all; practitioner guidance for a fourth family warns storage may throw. The protocol itself is silent on storage — there is no declared field to validate against. This service probes the real storage surface per widget × host in instrumented host harnesses: which of localStorage / sessionStorage / IndexedDB / cookies actually work, under what origin key, and with what persistence horizon — graded only from profile state after a real write attempt, issuing PERSISTS-KEYED (named key + horizon) / EPHEMERAL / FORBIDDEN-THROWS. Its census answers the offboarding question per server × host origin: the keys a widget has stored (names, sizes and first/last widget versions — values hashed, never read out), flagged when storage survives server removal. Its verified-clear flow attempts the clear, re-reads the profile, and issues a signed receipt naming the host and origin key when the profile confirms empty. Stated plainly: host regimes are modelled from documented/measured evidence in instrumented harnesses, not live proprietary hosts; one matrix host class (vault-class) is a disclosed synthetic class for the opaque-profile leg; an opaque profile grades UNVERIFIABLE and its clear grades CLEAR-UNCONFIRMED, never a pass; willingness to pay is unmeasured; the watch is a stated allowance, never unlimited (see pricing).

Prices

Pricing (USDC, x402 pay-per-call unless noted):
- Single widget x host storage probe: $0.99 per probe (mechanisms that work, origin key, persistence horizon — verdict PERSISTS-KEYED / EPHEMERAL / FORBIDDEN-THROWS).
- Full storage matrix: $3.99 per matrix (1 widget x 5 hosts: per-host verdicts + divergence table).
- Residue census + verified-clear receipt: $4.99 per census (per server x host origin: keys, sizes, first/last widget versions, values hashed never read out, residue-after-removal flag; clear:true adds the re-read-verified signed receipt — CLEARED-VERIFIED, or CLEAR-UNCONFIRMED with no receipt on an opaque profile).
- Watch: $19.99 per server-scope operator account per month — stated allowance of 40 matrix runs per month included (matrix re-run on widget or covered-host version change within the allowance); additional matrices meter at $3.99 and additional single-host probes at $0.99. No unlimited watch is sold.
- Trial: one free single-host probe per operator, ever, bound to operator AND wallet. No perpetual free tier, and no other tier carries a free allotment.
Fidelity scope, stated plainly: host regimes are modelled from documented/measured evidence in instrumented harnesses, not live proprietary hosts; the vault-class host is a disclosed synthetic class built for the opaque-profile leg, not a measured real host; an opaque profile grades UNVERIFIABLE and its clear grades CLEAR-UNCONFIRMED, never a pass; willingness to pay is unmeasured.
Support: support@textforagents.com

How to start

POST /register with {"name": ..., "wallet": ...} to self-serve your per-operator credential — no operator assistance needed. Then POST /probe, POST /probe/matrix, POST /census, or POST /event, or call the MCP tools at /mcp. Documentation: /docs · OpenAPI: /openapi.json · llms.txt: /llms.txt · Terms: /terms · Privacy: /privacy

Limits

Stated plainly: host regimes are modelled from documented/measured evidence in instrumented harnesses, not live proprietary hosts; one matrix host class (vault-class) is a disclosed synthetic class for the opaque-profile leg; an opaque profile grades UNVERIFIABLE and its clear grades CLEAR-UNCONFIRMED, never a pass; willingness to pay is unmeasured; the watch is a stated allowance, never unlimited.

Support: support@textforagents.com