MimirAPI

Endpoints (18 live)

• POST /v1/provenance/certificate — Chain-of-custody license certificate for any digital asset: a SHA-256 content hash bound to issuer, subject, and license terms under an HMAC-SHA-256 signature. Deterministic, portable, and verifiable through the issuer while the current HMAC v1 profile is active — a receipt an agent can carry to record what it licensed, from whom, and on what terms. (0.25 USDC on Base)
• POST /v1/x402-audit — Weigh any x402 counter and get a verdict: does its URL answer a coherent 402, would the CDP Bazaar validator accept its discovery metadata, and is it actually listed in the discovery index? Returns a per-check report (passed / found-wanting / unweighed) with evidence, optionally HMAC-signed. Three keyless checks for sellers and machine-service buyers. (0.25 USDC on Base)
• POST /v1/db — Ephemeral Postgres for agents: one POST provisions a real database and returns its connection string with a TTL; teardown at expiry is automatic and guaranteed. Scratch space for a pipeline, a test run, or a day of work — priced per DB-day, no signup, no cleanup, no leftovers. (0.25 USDC on Base)
• GET /v1/phone/intel — Phone number intelligence for agents: pass any number and get back whether it is a valid E.164 number, its country, the carrier that holds it, and the line type — mobile, landline, or VoIP. One paid call, no account, no API key. Decide whether a number is worth calling or texting, or flag a VoIP number before you trust it. Free-format numbers are normalized; a syntactically bad number is rejected before any charge. (0.03 USDC on Base)
• POST /v1/chart — Data to chart in one call: a numeric series rendered as a deterministic 800x400 line or bar chart SVG with optional labels and title. No charting library, no browser — an agent composing a report gets a predictable picture of its numbers. (0.01 USDC on Base)
• GET /v1/wallet/screen — Sanctions screen for an EVM wallet: one deterministic read of the public Chainalysis sanctions oracle contract. Call it mid-transaction before settling with an unknown counterparty — no account, no API key, one paid call returns sanctioned true/false with the oracle address for independent verification. Fail-closed: if the oracle is unreachable you get an error, never a false all-clear. (0.05 USDC on Base)
• POST /v1/visual-review — Eyes for agents, for a penny: renders any URL in a real browser (Cloudflare Browser Rendering) and returns a full-page screenshot as an inline PNG plus an axe-core accessibility audit — WCAG violations with rule, impact, fix-it link, and affected-node counts. Verify a deploy visually, catch layout breakage, and check accessibility in one call, without running a browser yourself. https URLs only. (0.01 USDC on Base)
• GET /v1/og-image — Deterministic 1200x630 social-card SVG from a title and optional subtitle, dark or light theme. Same input, byte-identical output — an agent building pages gets an Open Graph image in one call with no headless browser and no font pipeline. (0.01 USDC on Base)
• GET /v1/qr — QR code as a crisp deterministic SVG from any text or URL up to 1000 characters, with selectable error-correction level (L/M/Q/H). Vector output scales to any size with no rasterization step. (0.002 USDC on Base)
• GET /v1/route/price — Live crypto/token spot price in USD, routed to the best live x402 provider and returned normalized. Pass ?symbol=BTC (or ETH, WIF, a coin name) and optional ?vs=USD. One integration, always-live: the router ranks providers by measured reliability (cheapest live source wins) and buys on your behalf, falling over to the next provider if one is down — so you never chase a dead endpoint or manage six provider accounts. Add ?verify=1 to... (0.03 USDC on Base)
• GET /v1/ping — Paid liveness probe for the MimirAPI counter. Returns pong, the SKU id, and a server timestamp. One tenth of a cent buys a complete challenge, sign, settle, serve round trip — the cheapest possible proof that your x402 client wiring works before you spend real money on real SKUs. (0.001 USDC on Base)
• GET /v1/wallet/screen — Sanctions screen for an EVM wallet: one deterministic read of the public Chainalysis sanctions oracle contract. Call it mid-transaction before settling with an unknown counterparty — no account, no API key, one paid call returns sanctioned true/false with the oracle address for independent verification. Fail-closed: if the oracle is unreachable you get an error, never a false all-clear. (0.05 USDC on Base)
• GET /v1/route/price — Live crypto/token spot price in USD, routed to the best live x402 provider and returned normalized. Pass ?symbol=BTC (or ETH, WIF, a coin name) and optional ?vs=USD. One integration, always-live: the router ranks providers by measured reliability (cheapest live source wins) and buys on your behalf, falling over to the next provider if one is down — so you never chase a dead endpoint or manage six provider accounts. Add ?verify=1 to cross-validate against a second independent source: the confidence signal reads "cross-validated" when they agree within 2%, "divergent" (both prices returned, none hidden) when they don't, else "single-source". Returns the price, its as-of time, the upstream source(s), and that confidence signal. (0.03 USDC on Base)
• POST /v1/sms — Send an SMS on your agent behalf: one POST with an E.164 recipient and message text hands the message to a real carrier and returns a delivery receipt id. No account, no API key — pay per message over x402. The recipient is validated to E.164 before sending and the body is length-bounded; a rejected or undelivered message is never charged. Telephony as an access primitive: reach a human, not just an HTTP endpoint. (0.05 USDC on Base)
• GET /v1/tls-audit — TLS posture for any host in one call: which of TLS 1.0/1.1/1.2/1.3 it still accepts (the compliance red flag a Worker physically cannot test — it can only speak modern TLS), plus certificate hygiene (expiry, days remaining, key algorithm/size, signature). Returns per-protocol acceptance + derived findings (tls10_accepted, cert_expiring, weak_rsa_key, sha1_sig). Read-only observation of a public endpoint — the legacy-crypto check nobody else sells. (0.02 USDC on Base)
• GET /v1/qr — QR code as a crisp deterministic SVG from any text or URL up to 1000 characters, with selectable error-correction level (L/M/Q/H). Vector output scales to any size with no rasterization step. (0.002 USDC on Base)
• GET /v1/og-image — Deterministic 1200x630 social-card SVG from a title and optional subtitle, dark or light theme. Same input, byte-identical output — an agent building pages gets an Open Graph image in one call with no headless browser and no font pipeline. (0.01 USDC on Base)
• GET /v1/phone/intel — Phone number intelligence for agents: pass any number and get back whether it is a valid E.164 number, its country, the carrier that holds it, and the line type — mobile, landline, or VoIP. One paid call, no account, no API key. Decide whether a number is worth calling or texting, or flag a VoIP number before you trust it. Free-format numbers are normalized; a syntactically bad number is rejected before any charge. (0.03 USDC on Base)