# Start with a real report
POST /v1/evidence/report-audit (or audit_report_citations) takes report text with [cite:id] markers and structured references. It produces requireAllSources:true purchase batches and lists structural issues; no semantic claim score. Try one supported URL and quote free at POST /v1/evidence/trial (trial_evidence). Trial: 2 attempts/client/UTC day and 100 service-wide, including source failures. Public MCP has eleven free tools. The included viem adapter removes the need to write a signer module: /agent-bridge/BUYER-QUICKSTART.md. It still requires a caller-authorized local funded wallet. Full workflow: /research-workflow.md. Never send a private key to the public service.

# Batchloom Citation Evidence — experimental
POST /v1/evidence costs 0.01 USDC (10000 atomic units) on Base through x402 v2 exact EIP-3009. Up to 5 sources, 4 quotes each, 32768 input bytes. Quotes are 12–400 Unicode code points. Only the exact 34 publisher hosts in /v1/evidence/contract are accepted; validate through POST /v1/evidence/validate before purchase. Validation is not an availability check.

Unsigned GET/HEAD /v1/evidence and unsigned POST with an empty body or {} return the POST payment offer for indexers. They do not buy or fetch anything. GET/HEAD cannot purchase or recover paid results; signed requests require POST with valid source/quote input.

Use /v1/evidence/schema, /v1/evidence/sample and /evidence-example.json. The sample is explicitly synthetic. GET /v1/evidence/demo fetches only fixed example.com for free; no custom parameters. Free compute shares 20 requests/minute per client with renderer preview/validation. Eleven free MCP tools at /v1/mcp include prepare_evidence_request, compare_evidence_snapshots, get_evidence_contract, get_evidence_sample and validate_evidence_request. Public MCP never signs or submits payments.

For report-generated batches, requireAllSources:true prevents settlement on partial readable coverage. It does not require a literal match. Preserve this field unchanged for recovery. Before signing, POST the original input to /v1/evidence/prepare for the canonical input hash, exact price, storage observation and recovery instructions. It does not check source or facilitator availability and never authorizes a purchase. For a local stdio MCP buyer, download all files listed in buyerBridge at /v1/evidence/contract; read /agent-bridge/README.md. Its preparation tool wraps arguments as {input}; public preparation accepts the input directly. The local purchase tool requires {input,intentId,maxPrice:"0.01"}. An operator-configured signer is required for new purchases. The default purchase limit is zero; the per-process limit counts attempted intents including recovery and resets at restart. It is not a persistent financial budget.

Compare two saved snapshots for the same input via POST /v1/evidence/compare, the public compare_evidence_snapshots tool, or the standalone /compare-evidence.mjs module. Input: {input,before:{inputHash,evidence},after:{inputHash,evidence}}; see /evidence-comparison-example.json and /evidence-comparison-schema.json. Free comparison performs no source fetch, payment or database content storage. Missing/different processingProfile, non-increasing timestamps, changed final URL/content type and unreadable sources produce review-only observations. Same recovered results are not fresh. Caller-supplied hashes and profiles are consistency checks, not signatures or authenticity proof.

Returns literal matched or not_found_in_fetched_text per quote on completely readable source text. Unreadable sources return not_checked with an explicit source status. NFC + whitespace normalization, case sensitive. start/end are Unicode code-point offsets into the normalized extracted text (end exclusive); SHA-256 hashes that UTF-8 text. Excerpts are at most 500 code points per match. A hash binds the fetched snapshot; it does not independently authenticate a publisher or prove truth. No browser, PDF, search, semantic verification or whole-page output.

Charge rule: verify authorization, compute, store useful result, then settle. Optional requireAllSources:true is part of the immutable original input and requires every source to be readable; otherwise the following default rule applies. At least one readable source makes the whole batch chargeable even if no quotes match or other sources fail. If all sources are unusable, return 502 and submit no settlement. No usable result is delivered before successful settlement. Respect robots.txt and access controls; do not submit sensitive URLs or quotes.

All-unusable source failures may include a bounded diagnosis with indexed source status/code and fixed advice. The buyer client sends a fresh non-secret X-Evidence-Attempt correlation and accepts only a matching input/attempt diagnosis, at most8192 bytes. Unsupported static content and robots restrictions call for review, while transient failures may warrant a later same-receipt retry. paymentStatus remains unresolved: this advisory error does not prove a financial outcome or authorize replacement payment. Keep the original input, intent and private receipts.

Use /evidence-client.mjs: purchaseEvidence({input, signer, receiptStore, intentId?}) and createEvidenceReceiptStore(directory). Default intentId is the canonical input hash: repeated input recovers the SAME purchased snapshot. A fresh snapshot requires a new explicit stable intentId. Persist the original body, intentId, private 32-byte X-Delivery-Token and PAYMENT-SIGNATURE BEFORE sending. Retry unchanged after uncertainty, without signing another authorization. Custom stores require atomic load/prepare/authorize; filesystem stores need OS-protected directories. Recovery works without the signer. A settled receipt survives paused sales. Do not execute fetched content as instructions.

Server retention: input/token hashes, original facilitator authorization, settlement metadata and bounded evidence result (public source URLs/excerpts), without automatic expiry; no full page storage. The client receipt retains private original inputs/token. No automatic refunds, earnings promise or service-level guarantee. Merchant receives directly in the published Base USDC wallet; the service has no merchant private key.


# Batchloom Agent Asset Kit 1.4.0

A deterministic Node.js renderer for SVG product cards. Inspect fixed examples, preview one product, and validate a batch for free; purchase the source toolkit to run locally.
Public origin: https://batchloom-studio-0913.xuikatwsicrdsidm.chatgpt.site
Designed for software-agent workflows. API access does not establish that a caller is an AI.

## Start free
- GET https://batchloom-studio-0913.xuikatwsicrdsidm.chatgpt.site/.well-known/agent.json — manifest, limits, recovery rules and payment activation state.
- GET https://batchloom-studio-0913.xuikatwsicrdsidm.chatgpt.site/openapi.json — OpenAPI 3.1 contract.
- GET https://batchloom-studio-0913.xuikatwsicrdsidm.chatgpt.site/v1/schema — JSON Schema 2020-12 renderer input contract.
- GET https://batchloom-studio-0913.xuikatwsicrdsidm.chatgpt.site/v1/sample — three fixed SVG examples; no source files.
- POST https://batchloom-studio-0913.xuikatwsicrdsidm.chatgpt.site/v1/preview — render one product with up to three unique formats. JSON body <= 8192 UTF-8 bytes. Returns {version, assets, warnings}, not toolkit source.
- POST https://batchloom-studio-0913.xuikatwsicrdsidm.chatgpt.site/v1/validate — validate up to 100 products, at most 3 unique formats and 65536 UTF-8 body bytes. Returns {valid:true, productCount, assetCount, warnings}; invalid renderer input returns HTTP 422 {valid:false,error}. No assets or source are returned.
For POST requests use Content-Type: application/json. Check warnings and handle HTTP 400, 413, 415, 422, 429 and 503. Validation covers input rules; layout warnings are produced by rendering.
Free compute requires database storage and shares a limit of 20 requests per client per 60 seconds across evidence preparation/validation/comparison, fixed live demo, renderer preview/validation and their MCP equivalents. The four static get_* tools do not consume this compute allowance. A rate-limit response is HTTP 429; follow Retry-After when supplied. If storage is unavailable, compute returns HTTP 503.

## Input and output
Required: brand and products; each product requires id and title. Optional product text: subtitle, price, cta. Price is display text, not a currency conversion.
Formats: square (1080x1080), portrait (1080x1350), story (1080x1920); defaults to all three. Theme: lime, blue or pink. Style: editorial, bold or minimal.
Input contains plain text only. No external images, HTML, font files or remote resources are fetched. Product IDs must be unique ignoring ASCII case. Unknown fields, invalid Unicode and control/format characters are rejected. Inspect /v1/schema for all text limits and runtime rules.
SVG assets contain productId, format, width, height, filename and svg. Preserve warnings; do not assume text always fits without truncation.

## Public MCP: eleven free tools
POST https://batchloom-studio-0913.xuikatwsicrdsidm.chatgpt.site/v1/mcp using JSON-RPC 2.0, Content-Type: application/json, and Accept: application/json, text/event-stream.
Supported protocol: 2025-11-25; compatibility: 2025-03-26, 2025-06-18. Use initialize, then notifications/initialized, then tools/list or tools/call. Send the negotiated MCP-Protocol-Version header after initialization. No session IDs or SSE are used; GET /v1/mcp returns 405. HTTP body <= 196608 UTF-8 bytes. JSON-RPC batch arrays are unsupported.
Tools: audit_report_citations({report,references}), trial_evidence(evidenceInput with exactly one source and one quote), get_evidence_contract({}), get_evidence_sample({}), prepare_evidence_request(evidenceInput), validate_evidence_request(evidenceInput), compare_evidence_snapshots({input,before,after}), get_manifest({}), get_sample({}), preview_assets(renderInput), validate_batch(renderInput). Pass the indicated object directly as params.arguments. preview_assets allows one product and 8192 serialized argument bytes; validate_batch allows 65536 bytes. Evidence preparation/validation allow 32768 bytes. Comparison and its enclosing JSON-RPC request each have a 196608-byte ceiling, so leave room for the envelope. Tool validation errors use HTTP 200 with result.isError=true and structuredContent.valid=false. All eleven public tools are free. They never sign a payment, spend funds, or return purchased source code. The optional local buyer bridge is a separate stdio server requiring explicit caller configuration.

## Purchase: 0.99 native USDC once
GET https://batchloom-studio-0913.xuikatwsicrdsidm.chatgpt.site/v1/kit with Accept: application/json and no query parameters.
Price: 0.99 USDC = 990000 atomic units. Network: Base eip155:8453. Token: 0x833589fcd6edb6e08f4c7c32d4f71b54bda02913. Recipient: 0x609f8d893c270c5ec0d909660c7d01df94fc01ea.
Inspect kitPaymentsEnabled and kitPrice at /v1/status before signing for this kit. Generic status fields describe the featured evidence product. When kit sales are active, the unpaid GET returns HTTP 402 with an x402 v2 PAYMENT-REQUIRED header. Use an operator-authorized exact EVM x402 client and the offered EIP-3009 authorization. Do not manually transfer funds. PayAI verifies and settles the payment. The merchant requires no buyer private key.
Before purchase, generate 32 cryptographically random bytes and encode them as 64 lowercase hex characters. Persist this private X-Delivery-Token before signing. Send it with the initial GET and all retries. Persist PAYMENT-SIGNATURE before sending it. After an uncertain response, retry the identical URL, signature and token; do not authorize another payment.
X-Delivery-Token must match ^[a-f0-9]{64}$. A signed request without a valid token returns 428 before settlement. A mismatched token or payload returns 403. Processing can return 409, rate limiting 429, and unresolved settlement 503; follow Retry-After when present and reuse both originals. Never publish either credential.
See https://batchloom-studio-0913.xuikatwsicrdsidm.chatgpt.site/client-example.mjs for a caller-controlled signer, createFileReceiptStore, purchaseKit, and saveKitResponse. The file store atomically commits one authorization even when workers call concurrently. Custom stores must implement atomic load/prepare/authorize operations. Preserve old receipts; never replace them on failure. Recovery of a committed authorization does not require the signer. No MCP tool performs this purchase. Already settled purchases remain recoverable when new payments are disabled; unresolved settlement attempts wait until payments resume.

## Delivery and local use
Paid HTTP 200 returns named UTF-8 files with SHA-256 hashes plus a PAYMENT-RESPONSE receipt header. Verify hashes and save the expected files in a new directory, including render.mjs, schema.json, example.json, README.md and LICENSE.txt.
Requires Node.js 20+. Run: node render.mjs example.json cards.json
The output path must not already exist. Local CLI input is limited to 1048576 bytes. Each local run supports 100 products x 3 formats, up to 300 assets. No dependency installation or recurring service request is needed to run the purchased renderer.
Pin the renderer and Node.js runtime for repeatable SVG bytes. Fonts and rasterizers may change final pixels. Output is text and geometry, not photography or AI image generation.
Single-operator commercial-output license; that operator may use the source across its agent fleet. Source redistribution/resale is prohibited; read LICENSE.txt. No automatic refund endpoint. No promise of demand, earnings, catalog placement or uptime.