# BentCrypto

> Crypto intelligence for humans and AI agents. Learn · Protect · Navigate.

BentCrypto provides practical cryptocurrency education and structured blockchain
risk intelligence. Machine services are billed with the x402 pay-per-request
payment protocol, settled in USDC on Solana mainnet.

## Pages
- /: Overview of BentCrypto for humans and agents.
- /apis: Catalog of all intelligence API products with pricing and status.
- /agent-api: How autonomous agents consume BentCrypto services.
- /docs: Developer documentation — quickstart, payment, responses, errors.
- /pricing: Per-request pricing for every intelligence product.
- /learn: Crypto education (basics, wallets, safety, transactions, staking).
- /tools: Human-facing crypto intelligence tools.
- /products: Digital products, guides and templates.
- /about: Platform positioning and principles.
- /contact: Support, developer, and partnership contact.

## Machine-readable resources
- /openapi.json — OpenAPI 3.1 description of the live Token Risk endpoint.
- /agent-api.json — Product manifest with live/non-live status per product.
- /.well-known/agent.json — Agent descriptor (identity, docs, API base, x402, capabilities).
- /.well-known/agent-api.json — Same product manifest at the well-known path.
- /sitemap.xml, /robots.txt

## Authentication

x402 micropayment per request is the only access mechanism. There is no public
API-key program (apiKeysSupported = false). Do not send bearer tokens or keys.

## Live API

Operational production base URL: https://bentcrypto-x402-production.up.railway.app
Intended canonical hostname: https://api.bentcrypto.com — PENDING. Its /health
endpoint does not respond yet, so do not use it until it resolves to the API.

Engine: api_schema_version 1.0, risk_engine_version 1.1.2, release_stage beta.


### Token Risk API — LIVE (limited beta)

GET /v1/token/risk?chain=solana&address=<solana-mint>

- Price: exactly $0.01 USDC per request = 10000 USDC base units (6 decimals).
- x402 version: 2. Scheme: exact.
- Network (CAIP-2): solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
- USDC mint: EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v
- Receiver: 5bZdrGYAbHdbVCqw7RVUpxma22kJehaQCHhp4nHuHCyy

Payment flow: an unpaid request returns HTTP 402 with an empty body and the
base64-encoded JSON payment requirements in the `payment-required` response
header. Settle the micropayment with an x402 client and retry. A successful paid
response can include settlement metadata in the `payment-response` header.

CORS: enabled for https://bentcrypto.com, https://www.bentcrypto.com and
https://bentcrypto.lovable.app. GET and OPTIONS are allowed; payment-required,
payment-response and x-request-id are exposed. Payment signing must still happen
in a server or agent runtime, never in browser code.

Response contract (nested JSON):
- success, chain, address
- asset_context: type, registry_match
- token: name, symbol
- risk: score, level, provisional, base_score, floor_applied, override_applied
- confidence: score, level, coverage_percent, source_agreement_percent,
  freshness_percent
- categories: OBJECT keyed by authority_control, holder_concentration,
  liquidity_tradability, launch_manipulation, maturity_trust. Each category has
  score, available_max, configured_max.
- signals: OBJECT keyed by signal name (not an array). Each signal record has
  name, category, status, value, points, max_points, severity, context.
- holder_concentration: raw_top10_percent, effective_top10_percent,
  single_holder_percent, excluded_percent, excluded_account_types,
  classification_complete
- warnings: array of objects { code, severity, message }
- summary: string
- metadata: api_schema_version, risk_engine_version, asset_registry_version,
  release_stage, evaluated_at, data_sources, provider_errors, cache

Risk levels are lowercase machine-readable values: low, moderate, high,
critical, insufficient_data. Verified Wrapped SOL reference
(So11111111111111111111111111111111111111112): risk.score 1, risk.level low,
confidence.score 96, confidence.level high, confidence.coverage_percent 93,
confidence.source_agreement_percent 100, confidence.freshness_percent 100.

Error body contract:
{ "success": false, "error": "MACHINE_CODE", "message": "...", "request_id": "..." }

Public gateway error codes and HTTP mappings:
- 402 payment required (returned before route validation; empty JSON body)
- 400 UNSUPPORTED_CHAIN (route validation, after a valid payment)
- 400 MISSING_ADDRESS (after payment)
- 400 INVALID_ADDRESS (after payment)
- 500 INTERNAL_GATEWAY_ERROR
- 502 RISK_ENGINE_UNAVAILABLE
- 503 GATEWAY_NOT_CONFIGURED
- 504 RISK_ENGINE_TIMEOUT

Rate limiting: no public rate limit is enforced today; per-payer limits are planned.

## Other intelligence products — NOT LIVE

These are documented contract proposals only. They are labelled Preview or
Coming Soon and are not callable:

- GET /v1/wallet/risk — Wallet risk indicators. /apis/wallet-risk
- GET /v1/token/security — Token security indicators. /apis/token-security
- GET /v1/token/full — Full token intelligence report. /apis/token-full
- GET /v1/compliance/screen — Compliance screening signals. /apis/compliance-screening
- GET /v1/token/liquidity — Liquidity intelligence. /apis/token-liquidity
- POST /v1/agent/pretrade/security — Agent pre-trade security check. /apis/agent-pretrade-security
- POST /v1/agent/pretrade — Bundled pre-trade intelligence. /apis/agent-pretrade

## Safety

BentCrypto never requests private keys or seed phrases. Payment authorization
happens entirely inside the client's own wallet or agent runtime. The website
handles no signing material of any kind.

## Disclaimer

BentCrypto provides educational information and blockchain analytics. Content and
technical risk indicators are informational only and are not financial, legal, tax,
or investment advice.