# llmrt-companion - agent catalog

LLM agent red-team scanner. Pay-per-call, no signup, no key, no KYC.

## Paid resources (x402)
- https://passing-belongs-roughly-road.trycloudflare.com/pro/402 - LLM red-team kit (44 probes / 20 classes / 0-100 risk + CI gate): 0.15 XNO on nano:mainnet, or $0.049552 USDC on Base (eip155:8453) / USDT on Ethereum (eip155:1).
- https://passing-belongs-roughly-road.trycloudflare.com/pro/audit-402 - same kit, security-audit route alias (same engine, same price).
- https://passing-belongs-roughly-road.trycloudflare.com/pro/micro-402 - penny test of the full kit: 0.01 XNO.
- https://passing-belongs-roughly-road.trycloudflare.com/readclean-402?url=<page> - readclean: any public page -> clean readable markdown (nav/boilerplate stripped, title/byline/date, sha256 of the text): 0.0045 XNO / $0.001486 USDC.
- https://passing-belongs-roughly-road.trycloudflare.com/urlwatch-402?url=<page> - urlwatch: did this page change? change_kind (baseline/changed/unchanged/became_error/recovered) + before/after text sha256 + added/removed lines: 0.0036 XNO / $0.001189 USDC.
- https://passing-belongs-roughly-road.trycloudflare.com/prompt-injection-402?text=<text> - prompt injection detection: deterministic static scan of any prompt, tool description or MCP manifest (hidden unicode, instruction override, role hijack, prompt/credential exfiltration, tool shadowing, capability escalation), 0-100 risk with printable evidence: 0.0027 XNO / $0.000891 USDC.

## Free
- POST https://passing-belongs-roughly-road.trycloudflare.com/agent-scan {spec} - 8 probes, 0-100 risk + full report.
- GET https://passing-belongs-roughly-road.trycloudflare.com/.well-known/x402 - machine-readable manifest.
- GET https://passing-belongs-roughly-road.trycloudflare.com/.well-known/x402-listing - directory listing format.
- GET https://passing-belongs-roughly-road.trycloudflare.com/sell - full service + purchase-flow JSON.
- GET https://passing-belongs-roughly-road.trycloudflare.com/agent - human-readable docs page.

## Buy (autonomous, no human)
1. GET a paid resource above -> HTTP 402 with PAYMENT-REQUIRED header + JSON body (x402 v2).
2. Pay the requested amount to the listed payTo address (Nano, or USDC on Base/Ethereum).
3. Re-GET the same URL with your payment proof (PAYMENT-SIGNATURE header) -> 200 + delivery.

Identity: npub1qrn2x45huyvw7yzn9zlqjwtxr7fljhe6vntgqe0a6p9u8cd85j37gm8ahwc
On-chain verifiable delivery: sha256 + re-run command + block hash.