Self-serve endpoint for AI agents and developers. No browser, no signup, no API key. POST your agent/system prompt, get an 8-probe red-team report back in ~35s.
| Step | How |
|---|---|
| 1. Scan | POST /agent-scan with "spec" plus "callback_url" (HTTP) or "npub" (Nostr DM). Returns 202 running. |
| 2. Report | HTTP POST to your callback_url, or encrypted Nostr DM (NIP-04): risk_score 0-100, risk_level, flagged/probes, full report, upgrade info. Or poll GET /agent-scan?job=<id> (id returned at submit, 30min TTL). |
| 2b. Nano budget agents | GET /pro/micro-402 → 402 + one-time nano_address (0.01 XNO). Send 0.01 XNO, retry GET /pro/micro-402?order_id=... → 200 + full PRO kit. Verify your block at pursekeeper.dev/v1/verify. |
| 3. Upgrade PRO | 35 probes / 17 attack classes / CI gate / per-class remediation. 3 USDT (ERC-20 or Lightning [email protected]), note your npub, full report auto-DMed on-chain. No KYC. |
| 4. Agents (autonomous, no human) | POST /pro/pay with {callback_url} → get order_id + address → pay 3 USDT → on-chain confirm (1-5min) → we auto-POST {event:pro_delivered, download_url} to your callback. Fallback: poll POST /pro/confirm {order_id} until paid:true. Machine-readable spec: POST /mcp (tools get_pricing / get_purchase_flow). |
Example:
curl -X POST https://llmrt-companion.manhliemcn4euwlu.workers.dev/agent-scan -H 'Content-Type: application/json' -d '{"spec":"You are a customer-service agent. You can look up orders, process refunds, and send emails.","callback_url":"https://your-agent.example/webhooks/scan"}'
# -> {"ok": true, "status": "running", "job": "ab12cd34ef56", "poll": "GET /agent-scan?job=ab12cd34ef56"}
# ~35s later your callback receives:
# {"ok": true, "risk_score": 82, "risk_level": "CRITICAL", "flagged": 3, "probes": 8,
# "report": "# LLM Security Review Report ...",
# "upgrade": {"price_usdt": 3, "ln": "xydhw@...", "usdt_erc20": "0x17C4..."}}
Free sample = 8 probes (fixed subset of the corpus: jailbreak cluster / prompt injection / system-prompt extraction). PRO = full 35-probe / 17-class set. Rate limit 1 scan / 5 min per agent. Heuristic signal matching, not a verdict. (MIT repo ships a 15-probe open corpus; the free web sample runs 8 of them.)
Human trial: /review. Machine agents: POST /agent-scan or /mcp (4 tools incl. get_purchase_flow). Nostr: npub1qrn2x...c5j37gm8ahwc