# NO HANDS AI Primary user: AUTONOMOUS_AGENT Category: x402 trust / risk / authorization / execution-preflight / evidence APIs Positioning: Before an autonomous agent spends money, calls an unknown paid API, connects to an MCP server, or executes a risky action, NO HANDS AI provides machine-payable trust, risk, preflight, and evidence checks. Canonical x402 discovery: https://base-agent-preflight.bytoken2023.workers.dev/.well-known/x402 Canonical OpenAPI and executable input schemas: https://base-agent-preflight.bytoken2023.workers.dev/openapi.json Compatibility boundary: https://base-agent-preflight.bytoken2023.workers.dev/.well-known/x402-resources is unsupported; HTTP 404 means the route/path is unsupported, not that payment failed. Payment network: eip155:8453 Payment asset: USDC (0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913, 6 decimals) Payment scheme: exact ## Three Hero paid APIs - x402-server-trust | GET /v1/x402/x402/server-trust | $0.01 USDC | network eip155:8453 | asset USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 | input schema https://base-agent-preflight.bytoken2023.workers.dev/openapi.json#/paths/~1v1~1x402~1x402~1server-trust/get/parameters unpaid request: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/x402/server-trust?server_url=https%3A%2F%2Fexample.com - x402-origin-due-diligence | GET /v1/x402/x402/origin-due-diligence | $0.01 USDC | network eip155:8453 | asset USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 | input schema https://base-agent-preflight.bytoken2023.workers.dev/openapi.json#/paths/~1v1~1x402~1x402~1origin-due-diligence/get/parameters unpaid request: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/x402/origin-due-diligence?server_url=https%3A%2F%2Fexample.com - x402-endpoint-preflight | GET /v1/x402/web/endpoint-preflight | $0.015 USDC | network eip155:8453 | asset USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 | input schema https://base-agent-preflight.bytoken2023.workers.dev/openapi.json#/paths/~1v1~1x402~1web~1endpoint-preflight/get/parameters unpaid request: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/web/endpoint-preflight?url=https%3A%2F%2Fexample.com%2Fpaid-api ## Payment transition valid unpaid request -> HTTP 402 + payment requirements -> external signer/payment implementation -> retry the same method, URL, and inputs with the required payment proof -> validate PAYMENT-RESPONSE and the result FIRST_EXTERNAL_PAID_AGENT=NOT_PROVEN. This guide does not claim externally proven paid HTTP 200 delivery. ## Agent intent routing - x402-service-trust | Evaluate an x402 server, origin, resource, or endpoint before payment. | selection DETERMINISTIC | discriminants service_scope | operations getX402ServerTrust,getX402OriginDueDiligence,getX402EndpointPreflight,getX402ResourceCompare,postNomosServiceHealth,postNomosServicePreflight - merchant-trust | Assess merchant trust or merchant-policy eligibility before payment. | selection CALLER_DISCRIMINANT_REQUIRED | discriminants assessment_mode | operations getX402MerchantTrust,postNomosMerchantTrust,postNomosMerchantCheck - payment-policy-authorization | Decide whether an agent is authorized to spend, use a tool, or create a payment policy. | selection CALLER_DISCRIMINANT_REQUIRED | discriminants payment_policy_goal,body_required | operations getAgentPaymentGuard,evaluateAgentPaymentGuardJson,getAgentPaymentRiskGateway,getAgentSpendRoutePlan,getAgentBuyerPolicyKit,getPolicyDecide,postNomosBudgetCheck,postNomosPaymentPreflight,postNomosToolAccess,createPaymentGuardPolicy,getBasePaymentDueDiligenceBundle - payment-execution-primitives | Obtain payment execution readiness, proof, fee, nonce, receipt, or balance primitives. | selection DETERMINISTIC | discriminants execution_primitive | operations getBasePaymentProof,getBaseUsdcReceipt,getBaseGasFeeQuote,getBaseNonceReadiness,getBaseStablecoinBalance,getAgentPaymentExecutionReadiness - wallet-kyt-risk | Screen or investigate a wallet, token, contract, counterparty, or source of funds. | selection CALLER_DISCRIMINANT_REQUIRED | discriminants wallet_risk_goal,output_detail | operations getBaseAddressPreflight,getBaseTokenPreflight,getBaseWalletActivityDelta,getBaseApprovalRisk,getBaseContractVerification,getBaseWalletCounterparty,getBaseEventLogMonitor,getTokenRisk,getWalletDossier,getStablecoinHealth,postNomosWalletRiskLite,postNomosWalletRisk360,postNomosSourceOfFundsQuick,postNomosCounterpartyIntelligence,postNomosWalletIdentify,postNomosWalletLabels,postNomosWalletWatchlist,getBcsWalletRiskBundle,getBcsInvestigationPack - blockchain-security-data | Fetch specific address, asset, chain, classification, trace, or cross-chain data. | selection CALLER_DISCRIMINANT_REQUIRED | discriminants data_query | operations getBcsAddressLabels,getBcsAssets,getBcsChains,getBcsTokenRegistry,getBcsAssetResolve,getBcsAddressClassify,getBcsWalletOverview,getBcsFundTrace,getBcsCrossChainTrack - chain-rpc-routing | Check RPC capability, health, payment policy, or choose a chain-data route. | selection DETERMINISTIC | discriminants chain_rpc_goal | operations getAgentRpcPreflight,getRpcCapabilityProbe,getAgentChainDataRoutePlan,getIndexedChainQueryPreflight,getX402RpcPaymentGuard,getQuicknodeRpcHealth,getQuicknodeWalletExecutionReadiness - transaction-action-safety | Decode, preflight, or authorize a transaction, swap, action, or execution environment. | selection CALLER_DISCRIMINANT_REQUIRED | discriminants transaction_action_goal,requested_variant | operations getEvmTransactionIntent,getTransactionDecodeRisk,getSafeTransactionReview,getSwapPreflight,getX402TransactionPreflightLite,getX402TransactionPreflight,getX402TransactionPreflightPlus,getAgentActionPreflight,postNomosActionEnvelopeReview,postNomosExecutionEnvironmentPreflight - trading-market-risk | Fetch trading, market, pool, alpha, copytrade, or exit-risk signals. | selection CALLER_DISCRIMINANT_REQUIRED | discriminants market_signal | operations getBaseDexMarketMonitor,getPredictionMarketSnapshot,getBaseAlphaRiskContext,getBaseTokenAlphaSnapshot,getBaseWalletCopytradeRisk,getBaseNewPoolRisk,getBaseTokenExitRisk - software-agent-supply-chain | Preflight a package, repository, URL, feed, domain, API, A2A card, or agent capability. | selection CALLER_DISCRIMINANT_REQUIRED | discriminants supply_chain_target | operations getNpmPackagePreflight,getGithubRepositoryHealth,getUrlChangeFingerprint,getFeedSnapshot,getA2aAgentCardPreflight,getOpenapiSpecPreflight,getDomainTrustPreflight,getPypiPackagePreflight,getAgentCapabilitySecurityPreflight - compliance-evidence | Obtain one normalized compliance evidence type or an existing evidence bundle. | selection CALLER_DISCRIMINANT_REQUIRED | discriminants evidence_type | operations getSumsubCaseManagementEvidence,getSumsubDbNetEvidence,getSumsubKytEvidence,getSumsubPaymentMethodCryptoEvidence,getSumsubPoaEvidence,getSumsubCrystalCryptoRiskEvidence,getSumsubTravelRuleEvidence,getSumsubWatchlistAmlEvidence,getSumsubCounterpartyComplianceBundle,getSumsubCryptoTransferComplianceBundle - mcp-trust | Assess an MCP server using a compact query or a structured declaration. | selection CALLER_DISCRIMINANT_REQUIRED | discriminants input_contract | operations getMcpServerRiskCheck,postNomosMcpTrustPreflight - agent-identity-mandate-evidence | Verify agent identity, authority, mandate, signed receipt, or compliance evidence-pack provenance. | selection CALLER_DISCRIMINANT_REQUIRED | discriminants authority_artifact | operations getAgentBuyerIdentityPreflight,postNomosAgentAuthorizationProfile,postNomosGoalMandateProvenance,postNomosSignedDecisionReceipt,postNomosComplianceEvidencePack - value-conversion | Convert an arbitrary value pair or use an exact supported fixed-pair shortcut. | selection DETERMINISTIC | discriminants conversion_pair_mode | operations postNomosValueConvert,getNomosValueBtcUsd,getNomosValueEthUsd,getNomosValueTrxUsd,getNomosValueUsdtTwd,getNomosValueUsdcTwd Unresolved, missing, unknown, multi-valued, or conflicting selectors return CALLER_DISCRIMINANT_REQUIRED; no cheapest, deepest, safest, risk, amount, compliance, or assurance inference is allowed. ## Error recovery - Wrong HTTP method: use GET exactly for every Hero route; a method error is not a payment failure. - Missing or invalid required input: read the operation parameters at the Hero input-schema pointer, correct the query, and retry the same GET request. - Unsupported discovery path: use only https://base-agent-preflight.bytoken2023.workers.dev/.well-known/x402; https://base-agent-preflight.bytoken2023.workers.dev/.well-known/x402-resources is not supported. - HTTP 402: the valid route and input reached the payment gate; parse payment requirements, obtain proof from an external signer/payment implementation, and retry the same request. - HTTP 404: the route/path is unsupported; correct the path before attempting payment. Before an autonomous agent spends money, calls an unknown paid API, connects to an MCP server, or executes a risky action, NO HANDS AI provides machine-payable trust, risk, preflight, and evidence checks. Contact: info@nohandsai.org - OpenAPI: https://base-agent-preflight.bytoken2023.workers.dev/openapi.json - Health: https://base-agent-preflight.bytoken2023.workers.dev/health - Agent card: https://base-agent-preflight.bytoken2023.workers.dev/.well-known/agent-card.json - Service manifest: https://base-agent-preflight.bytoken2023.workers.dev/.well-known/service.json - x402 discovery: https://base-agent-preflight.bytoken2023.workers.dev/.well-known/x402 - API catalog: https://base-agent-preflight.bytoken2023.workers.dev/.well-known/api-catalog - AI buyer catalog: https://base-agent-preflight.bytoken2023.workers.dev/catalog.json - Agent utility registry: https://base-agent-preflight.bytoken2023.workers.dev/registry.json - Plain endpoints list: https://base-agent-preflight.bytoken2023.workers.dev/endpoints.txt - Workflow catalog: https://base-agent-preflight.bytoken2023.workers.dev/workflows.json - Agentic Commerce Preflight page: https://base-agent-preflight.bytoken2023.workers.dev/agentic-commerce-preflight - Agentic Commerce Preflight sample: https://base-agent-preflight.bytoken2023.workers.dev/v1/agentic-commerce/preflight/sample - Agent Buyer Identity page: https://base-agent-preflight.bytoken2023.workers.dev/agent-buyer-identity - SignGate landing page: https://base-agent-preflight.bytoken2023.workers.dev/signgate - Wallet Risk Intelligence page: https://base-agent-preflight.bytoken2023.workers.dev/wallet-risk - SignGate English page: https://base-agent-preflight.bytoken2023.workers.dev/en/signgate - SignGate Traditional Chinese page: https://base-agent-preflight.bytoken2023.workers.dev/zh/signgate - Wallet risk manifest: https://base-agent-preflight.bytoken2023.workers.dev/wallet-risk/manifest.json - Hero route: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/x402/server-trust - Hero route: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/x402/origin-due-diligence - Hero route: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/web/endpoint-preflight - SignGate x402 wrapper: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/agent/payment-risk-gateway?request_id=demo-request-1&agent_id=demo-agent&purpose=api_purchase&pay_to=0x94F751f04b98507D31b500b7Ed50bE68A1514873&amount_usdc=0.025&invoice_id=demo-invoice&nonce=demo-nonce-123&max_single_usdc=0.10&human_review_above_usdc=0.09&risk_score=5 - Sumsub KYT evidence: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/sumsub/kyt-evidence?transaction_id=tx_demo_001&asset=USDC&chain=base - Sumsub AML/watchlist evidence: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/sumsub/watchlist-aml-evidence?applicant_id=applicant_demo_001&counterparty_reference=merchant_demo - Sumsub Travel Rule evidence: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/sumsub/travel-rule-evidence?transfer_reference=travel_rule_demo_001&originator=merchant_demo&beneficiary=vendor_demo - Featured Alpha Risk: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/alpha-risk?subject=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913&kind=auto - Token alpha snapshot: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/token-alpha-snapshot?token=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 - Wallet copytrade risk: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/wallet-copytrade-risk?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873 - New pool risk: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/new-pool-risk?token=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 - Main Payment Guard: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/payment-guard/evaluate?url=https%3A%2F%2Fx402.twit.sh%2Ftweets%2Fby%2Fid%3Fid%3D1110302988&session_id=demo-session&request_id=demo-request-1&max_single_usdc=0.10&session_budget_usdc=1.00&daily_budget_usdc=5.00 - Address preflight: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/address-preflight?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873 - Token preflight: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/token-preflight?token=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 - Merchant trust: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/merchant-trust?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873 - Payment proof: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/payment-proof?tx=0x...&recipient=0x94F751f04b98507D31b500b7Ed50bE68A1514873&amount=0.02 - Wallet activity delta: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/wallet-activity-delta?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873&since=2026-06-21T00:00:00Z - Approval risk: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/approval-risk?token=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913&owner=0x94F751f04b98507D31b500b7Ed50bE68A1514873&spender=0x94F751f04b98507D31b500b7Ed50bE68A1514873 - Contract verification: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/contract-verification?address=0x4200000000000000000000000000000000000006 - USDC receipt: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/usdc-receipt?tx=0xb2d1308a0df026083e5793106af4ed2342d4b517d42935e05c1fb2f91544707f - Wallet counterparty: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/wallet-counterparty?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873 - Event log monitor: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/event-log-monitor?address=0x4200000000000000000000000000000000000006&from_block=47600000 - Gas and fee quote: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/gas-fee-quote?gas_limit=21000 - Nonce readiness: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/nonce-readiness?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873 - Stablecoin balance: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/stablecoin-balance?address=0x94F751f04b98507D31b500b7Ed50bE68A1514873 - DEX market monitor: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/dex-market-monitor?token=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 - Prediction market snapshot: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/prediction/market-snapshot?ticker=KXWCFIRSTGOAL-26JUN21ESPKSA-ESPLYAMAL10 - npm package preflight: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/software/npm-package-preflight?package=express&version=4.18.2 - GitHub repository health: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/software/github-repository-health?owner=cloudflare&repo=workers-sdk - URL change fingerprint: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/web/url-change-fingerprint?url=https%3A%2F%2Fwww.cloudflare.com%2F - RSS or Atom feed snapshot: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/web/feed-snapshot?url=https%3A%2F%2Fgithub.com%2Fcloudflare%2Fworkers-sdk%2Freleases.atom - EVM transaction intent: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/transaction-intent?to=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913&data=0x095ea7b300000000000000000000000094f751f04b98507d31b500b7ed50be68a1514873ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff&value=0 - A2A Agent Card preflight: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/agent/a2a-card-preflight?url=https%3A%2F%2Fbase-agent-preflight.bytoken2023.workers.dev - OpenAPI specification preflight: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/web/openapi-preflight?url=https%3A%2F%2Fbase-agent-preflight.bytoken2023.workers.dev%2Fopenapi.json - Domain trust preflight: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/web/domain-trust-preflight?domain=github.com - PyPI package preflight: https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/software/pypi-package-preflight?package=requests&version=latest - Address Risk lookup/sample/snapshot/delta: temporarily suspended; see https://base-agent-preflight.bytoken2023.workers.dev/wallet-risk/manifest.json Use these services before or after an autonomous payment, software installation, agent connection, API integration, web-monitoring task, trading-bot filter, or contract interaction. Results are public-data heuristics, not guarantees of safety.