PHION Evidence Engine API

Endpoints (249 live)

• POST /v1/paid/commercial/intelligence — Evidence-grounded research synthesis with citations and signed delivery (0.012 USDC on Base)
• POST /v1/paid/commercial/inference — Bounded low-cost inference with a signed delivery receipt (0.001 USDC on Solana)
• POST /v1/paid/commercial/enrich — Provider-backed entity enrichment with explicit match and limitations (0.12 USDC on Solana)
• POST /v1/paid/commercial/search — Source-returning web search with normalized results and signed delivery (0.006 USDC on Base)
• POST /v1/paid/schema-normalize — Normalize an agent payload to a PHION service schema without changing payment-critical values; return a signed repair receipt (0.001 USDC on Solana)
• POST /v1/paid/trust/company-enrichment-evidence — Resolve a company through People Data Labs with free input preflight and signed, limitation-aware evidence (0.005 USDC on Solana)
• POST /v1/paid/attest — Signed integrity, provenance and freshness receipt for AI-agent JSON (0.001 USDC on Base)
• POST /v1/paid/fetch-evidence — Independent, prompt-injection-screened, hashed and signed web evidence for AI agents (0.004 USDC on Base)
• GET /v1/paid/commercial/intelligence — Evidence-grounded research synthesis with citations and signed delivery (0.012 USDC on Solana)
• GET /v1/paid/commercial/inference — Bounded low-cost inference with a signed delivery receipt (0.001 USDC on Base)
• GET /v1/paid/commercial/search — Source-returning web search with normalized results and signed delivery (0.006 USDC on Solana)
• GET /v1/paid/commercial/enrich-basic — Bounded direct observation of a public company website with hashes, injection screening and signed delivery (0.003 USDC on Base)
• GET /v1/paid/commercial/enrich — Provider-backed entity enrichment with explicit match and limitations (0.12 USDC on Base)
• POST /v1/paid/commercial/enrich-basic — Bounded direct observation of a public company website with hashes, injection screening and signed delivery (0.003 USDC on Base)
• POST /v1/paid/trust/cross-protocol-receipt — Bind consistent protocol receipt commitments into one auditable bundle (0.004 USDC on Solana)
• POST /v1/paid/trust/tool-call-policy-guard — Bind a proposed tool call to declared intent, allowed tools, destination and cost before execution (0.002 USDC on Base)
• POST /v1/paid/trust/agent-reputation-evidence — Evidence-bounded reputation assessment with confidence, coverage and explicit limitations (0.005 USDC on Base)
• POST /v1/paid/trust/payment-route-selector — Reject impossible or unsafe x402 routes, rank eligible routes by explicit policy, and return a directly executable next action (0.002 USDC on Solana)
• POST /v1/paid/trust/signed-result-comparator — Compare multiple agent results and sign exact agreement or conflict evidence (0.003 USDC on Base)
• POST /v1/paid/trust/webhook-verifier — Validate declared signature status, freshness and payload evidence (0.003 USDC on Base)

+229 more endpoints.

MCP tools (135)

phion-universal https://phion.systems/mcp

• a2a_transaction_bridge — Bind an A2A task to a transaction without silently transferring authority.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• abandoned_tool_detector — Require stale success plus multiple independent failed probes before classifying likely abandonment; 0.003 USDC.
• agent_approval_relay — Agent Approval Relay; deterministic signed assessment over supplied input.
• agent_behavior_fingerprint — Create a privacy-minimized behavioral commitment without retaining payloads or raw identifiers.; 0.003 USDC. Deterministic, evidence-bounded and signed.
• agent_budget_guard — Enforce per-call, task, session and period budgets; 0.002 USDC.
• agent_economic_graph — Build privacy-bounded economic relationships only from supplied nodes and edges.; 0.005 USDC. Deterministic, evidence-bounded and signed.
• agent_memory_provenance — Agent Memory Provenance; deterministic signed assessment over supplied input.
• agent_rate_limit_negotiator — Agent Rate Limit Negotiator; deterministic signed assessment over supplied input.
• agent_reputation_evidence — Evidence-bounded agent reputation assessment with confidence, coverage, provenance limitations and a signed receipt; 0.005 USDC.
• agent_session_continuity — Agent Session Continuity; deterministic signed assessment over supplied input.
• agent_task_handoff_receipt — Sign a bounded agent-task handoff; 0.003 USDC.
• ap2_mandate_bridge — Map mandate fields for review without advertising unsupported AP2 production authorization.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• attest — x402 paid signed JSON attestation; 0.001 USDC on Base.
• automated_dispute_bundle — Assemble failure evidence and recommend resolution without executing refunds.; 0.005 USDC. Deterministic, evidence-bounded and signed.
• autonomous_procurement — Recommend a verified eligible provider under a mandate without purchasing.; 0.005 USDC. Deterministic, evidence-bounded and signed.
• capability_benchmark — Measure reproducible success, latency and cost from versioned evidence-bound benchmark cases.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• capability_negotiation_preflight — Capability Negotiation Preflight; deterministic signed assessment over supplied input.
• capability_verification — Separate claimed capabilities from independently evidenced successful demonstrations.; 0.003 USDC. Deterministic, evidence-bounded and signed.
• company_enrichment_evidence — Company enrichment with free input preflight, provider attribution and signed evidence; 0.005 USDC.
• concurrency_guard — Fail closed unless capacity counter is fresh and the request carries a lease plus idempotency binding; 0.002 USDC.
• conflict_resolution — Resolve or abstain; every candidate must bind source, value hash, observation time and bounded confidence; 0.003 USDC.
• contact_enrichment_evidence — Business-contact enrichment with free input preflight, identity limitations and signed receipt; 0.007 USDC.
• context_provenance_labeler — Hash and label context integrity, confidentiality and source; 0.002 USDC.
• counterparty_risk_preflight — Deterministic counterparty policy preflight using supplied reputation evidence and transaction limits; 0.003 USDC.
• cross_agent_receipt_bundle — Cross-Agent Receipt Bundle; deterministic signed assessment over supplied input.
• cross_protocol_receipt — Bundle consistent transaction commitments across multiple protocols.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• data_egress_preflight — Inspect outbound agent data and destination before transmission; 0.002 USDC.
• data_freshness_certificate — Certify freshness only when timestamp is bound to source URI and a 64-hex content hash; 0.002 USDC.
• delegated_credential_guard — Delegated Credential Guard; deterministic signed assessment over supplied input.
• delegated_spend_policy — Fail closed when delegated authority, per-call limit or remaining budget is insufficient.; 0.003 USDC. Deterministic, evidence-bounded and signed.
• delegation_scope_guard — Least-privilege guard for agent-to-agent delegation scope, destinations, budget and expiry; 0.003 USDC.
• delivery_evidence — Bind successful delivery to transaction, request and matching 64-hex expected/observed content hashes without echoing content; 0.003 USDC.
• dependency_provenance_assessment — Fail closed on empty dependency sets or absent registry policy; distinguish digest declarations from verified provenance; 0.003 USDC.
• document_to_verified_json — Public text, HTML, JSON or XML normalized to source-backed JSON; no OCR; 0.010 USDC.
• domain_ownership_evidence — Require a fresh domain-bound DNS-01/HTTP-01 challenge and separate control from legal ownership; 0.003 USDC.
• duplicate_charge_detector — Detect repeated transaction hashes, payment identifiers and idempotent intents; 0.003 USDC.
• durable_agent_task — Durable Agent Task; deterministic signed assessment over supplied input.
• dynamic_service_pricing — Propose a capped shadow price without changing the live catalog.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• economic_loop_detector — Detect self-transfer and reciprocal economic patterns without presenting correlation as fraud.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• entity_enrichment_evidence — Source-bounded entity field coverage with explicit missing facts; 0.008 USDC.
• erc8004_identity_evidence — Bind an ERC-8004 registry identity to evidence while separating registration from ownership.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• erc8004_reputation_intelligence — Aggregate diverse verified reputation observations with low-sample abstention.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• execution_cost_estimator — Execution Cost Estimator; deterministic signed assessment over supplied input.
• fetch_evidence — Independently fetch bounded public evidence with redirect/DNS/connected-address SSRF checks, hashes and injection screening; 0.004 USDC.
• human_approval_policy — Classify an action as automatic, approval-required or denied; 0.002 USDC.
• idempotency_replay_guard — Detect safe replays and conflicting idempotency-key reuse; 0.002 USDC.
• index_feed — Canonical catalog snapshot or digest-based delta with exact HTTP/MCP records, PHION Execute templates and signed evidence; 0.005 USDC.
• inspect_agent — Pre-payment agent inspection across x402, A2A, ERC-8004, OpenAPI and MCP; failed inspections are not charged; 0.009 USDC.
• inter_agent_policy_evaluator — Require policy identity, subject, action, lifetime and valid decisions; compute the restrictive cap and shared actions; 0.003 USDC.
• interrupted_task_recovery — Resume only when task/checkpoint identity, sequence, deadline, attempt budget, idempotency and side effects are explicit; 0.003 USDC.
• journey_verify — Verify hash continuity, timestamps and ordered intent→quote→payment→delivery lifecycle; 0.010 USDC.
• live_data_freshness — Evaluate live source observation against explicit maximum age; 0.002 USDC.
• mandate_reserve — Atomic spending reservation with cumulative cap and conflict-safe idempotency; 0.004 USDC.
• manifest_version_diff — Recursive manifest diff that requires explicit versions and flags sensitive changes without a version advance; 0.002 USDC.
• market_data_snapshot — Timestamped public market-data snapshot with provenance; 0.005 USDC.
• market_demand_predictor — Forecast verified demand trends while abstaining on insufficient history.; 0.005 USDC. Deterministic, evidence-bounded and signed.
• mcp_2026_compatibility_gateway — MCP 2026 Compatibility Gateway; deterministic signed assessment over supplied input.
• mcp_a2a_task_bridge — MCP-A2A Task Bridge; deterministic signed assessment over supplied input.
• mcp_catalog_cache_guard — MCP Catalog Cache Guard; deterministic signed assessment over supplied input.
• mcp_manifest_firewall — Inspect an MCP manifest before installation or trust; 0.002 USDC.
• mcp_server_identity_evidence — Bind MCP domain, endpoint, manifest, key and version; 0.003 USDC.
• mcp_transaction_gateway — Bind an MCP tool call to transaction evidence without granting undeclared authority.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• memory_write_guard — Screen persistent memory writes for poisoning, unsafe instructions and missing provenance; 0.002 USDC.
• multi_agent_escrow — Recommend hold or release from evidence without PHION custody or fund movement.; 0.005 USDC. Deterministic, evidence-bounded and signed.
• multi_source_fact_bundle — Independent source observations with agreement made explicit; 0.005 USDC.
• oauth_issuer_binding_evidence — OAuth Issuer Binding Evidence; deterministic signed assessment over supplied input.
• oauth_token_audience_guard — Validate declared OAuth audience and issuer; never send raw tokens; 0.002 USDC.
• onchain_evidence — Public explorer or RPC response evidence with immutable hashes; 0.004 USDC.
• payment_capability_preflight — Free anonymous non-blocking self-report of wallet, mandate, x402 v2, network, asset, account kind and funding readiness. Detects EVM account types incompatible with exact EIP-3009 before signature. Stores only a daily pseudonymous actor and normalized reason; never a wallet, balance, signature or request content.
• payment_delivery_atomicity — Payment Delivery Atomicity; deterministic signed assessment over supplied input.
• payment_diagnose — Free diagnosis of the exact payment-funnel stage and machine-readable recovery actions for any PHION service.
• payment_optimizer — Rank only integration-tested payment routes under explicit cost and latency constraints.; 0.003 USDC. Deterministic, evidence-bounded and signed.
• payment_preflight — Fail-closed x402 v2 firewall for network, asset, recipient, amount, scheme, resource host and expiry; 0.002 USDC.
• payment_receipt_reconciler — Compare canonical and common x402 payment/receipt aliases, settlement state and coverage; 0.003 USDC.
• payment_route_selector — Reject impossible x402 routes, rank safe eligible routes by policy and return the exact next payment action; read-only, deterministic, 0.002 USDC.
• person_enrichment_evidence — Person enrichment with free input preflight, provider attribution, likelihood, limitations and signed receipt; 0.006 USDC.
• phion_discover — Free complete PHION service index generated from canonical inventory. Use when the agent knows a capability or wants to inspect the full network.
• phion_enrich — Enrich a company, person or contact through an attributed provider route without hiding upstream cost.; 0.120 USDC. Deterministic, evidence-bounded and signed.
• phion_enrich_basic — Observe a public company domain directly and return bounded website metadata, hashes, injection screening and signed delivery without an expensive enrichment upstream.; 0.003 USDC. Deterministic, evidence-bounded and signed.
• phion_execute — Universal PHION execution gateway: enforce a budget and persistent idempotency, execute one selected PHION service, evaluate acceptance criteria, and return a signed completion envelope. No gateway surcharge; the selected service price applies.
• phion_get_service — Retrieve one exact canonical PHION service contract by service id or MCP tool name.
• phion_inference — Complete a bounded inference microtask and return a directly usable answer with signed delivery.; 0.001 USDC. Deterministic, evidence-bounded and signed.
• phion_intelligence — Search, synthesize and cite evidence in one call, minimizing residual agent work.; 0.012 USDC. Deterministic, evidence-bounded and signed.
• phion_preflight — Free service-specific schema, network, budget and economic preflight. It does not execute or charge.
• phion_resolve — Free provider-neutral capability resolution. Applies eligibility constraints, preserves UNKNOWN and abstains when evidence is insufficient. Advisory only: never authorizes payment or execution.
• phion_search — Search the live web and return normalized source URLs and snippets with signed delivery.; 0.006 USDC. Deterministic, evidence-bounded and signed.
• phion_search_services — Search the complete canonical PHION inventory by task, capability, protocol or maximum advertised price without selecting or charging.
• portable_observability_audit — Validate event identity, timestamps, hash chain and W3C-compatible lowercase nonzero trace/span identifiers; 0.004 USDC.
• preflight — Free URL safety and reachability check.
• price_discovery_engine — Derive price bands only from settled observations, never traffic or unsigned quotes.; 0.005 USDC. Deterministic, evidence-bounded and signed.
• proof_of_service — Commit request, authority, execution, payment and delivery evidence in one proof.; 0.005 USDC. Deterministic, evidence-bounded and signed.
• provider_quality_predictor — Estimate provider success, quality, latency and cost using transparent sample-aware statistics.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• purpose_bound_consent — Fail-closed consent bound to ID, subject, recipient, purpose, scope, issue/expiry and checked revocation state; 0.003 USDC.
• quote_freshness_guard — Quote Freshness Guard; deterministic signed assessment over supplied input.
• redirect_callback_validator — Validate HTTPS callbacks and redirect host allowlists; 0.002 USDC.
• reputation_update_receipt — Recommend a bounded auditable reputation update from verified outcome evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• resource_cycle_guard — Require per-step identity, token and cost counters; detect repeated nodes/edges and enforce all three hard caps; 0.002 USDC.
• retention_deletion_receipt — Separate requested, operator-completed and evidence-verified retention/deletion states using content and evidence hashes; 0.003 USDC.
• rwa_asset_due_diligence — Fail-closed issuer, contract, jurisdiction, custody and documentation coverage with independently fetched evidence; 0.019 USDC.
• rwa_compliance — Fail-closed RWA transfer decision requiring explicit jurisdiction, KYC, allowlist, limit and transfer-window checks; 0.012 USDC.
• rwa_corporate_actions — Detect and sign material RWA changes in NAV, income, maturity, redemption or freeze state; 0.012 USDC.
• rwa_nav_reserve — Compare declared NAV and reserve ratios with structured observed facts plus independently fetched evidence; returns discrepancies in basis points and fails closed on incomplete evidence; 0.015 USDC.
• rwa_sanctions_screening_evidence — Evidence-based literal subject screening against observed official US/EU sanctions sources; 0.015 USDC. Not legal clearance or wallet attribution.
• rwa_transaction_assurance — Verify an RWA asset, payment, delivery and transfer restrictions; 0.020 USDC.
• schema_normalize — Safe alias normalization that refuses ambiguous canonical/alias collisions and never changes payment values; 0.001 USDC.
• schema_normalize_free — Free, rate-limited payload validation and safe key normalization before payment. Payment-critical values are never changed.
• secret_redaction_preflight — Detect and redact common secret indicators before transmission; 0.002 USDC.
• service_failover_selector — Service Failover Selector; deterministic signed assessment over supplied input.
• service_gap_detector — Detect capability shortages using verified demand and verified provider supply.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• service_sla_attestation — Sign availability and latency calculations from bounded samples; 0.004 USDC.
• signed_result_comparator — Compare agent results and sign agreement or conflict; 0.003 USDC.
• sla_risk_predictor — Estimate SLA failure probability from bounded success and latency evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• social_source_evidence — Attributable public social-source observations with identity limitations; 0.006 USDC.
• source_backed_search — Literal search over supplied public sources with citations and hashes; 0.004 USDC.
• subscription_spend_guard — Bind one recurring charge to approval, merchant, due time and per-charge/period budgets; 0.003 USDC.
• sybil_reputation_guard — Combine multiple bounded Sybil signals while abstaining without independent evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• task_cancel_assurance — Task Cancel Assurance; deterministic signed assessment over supplied input.
• task_checkpoint_evidence — Task Checkpoint Evidence; deterministic signed assessment over supplied input.
• task_lease_guard — Task Lease Guard; deterministic signed assessment over supplied input.
• tool_call_policy_guard — Bind a proposed tool call to declared intent and execution policy; 0.002 USDC.
• tool_capability_drift_monitor — Detect tool capability or manifest drift; 0.002 USDC.
• tool_output_firewall — Inspect untrusted MCP/tool output before it enters agent context or triggers an action; 0.002 USDC.
• tool_result_schema_validator — Tool Result Schema Validator; deterministic signed assessment over supplied input.
• transaction_assurance — End-to-end settlement, timestamp, delivery-hash and deterministic acceptance assurance; 0.015 USDC.
• transaction_recovery — Failure classification and non-repeating recovery plan with validated attempt history; 0.010 USDC.
• transaction_recovery_v2 — Recommend bounded recovery and reconcile ambiguous payments before retry.; 0.005 USDC. Deterministic, evidence-bounded and signed.
• transaction_risk_score — Estimate evidence-supported loss probability without selling insurance or assuming liability.; 0.004 USDC. Deterministic, evidence-bounded and signed.
• trust_anomaly_detector — Detect material drift between comparable trust vectors without asserting misconduct.; 0.003 USDC. Deterministic, evidence-bounded and signed.
• try_service — Free representative preview, exact price and upgrade instructions for any PHION paid service; no wallet required.
• verified_news_monitor — Literal query evidence across bounded public news sources; 0.006 USDC.
• verified_web_extract — Bounded public web extraction with source, timestamp and hashes; 0.003 USDC.
• verify — Free verification of a PHION signed receipt.
• webhook_verifier — Fail-closed RFC 9421-style webhook preflight requiring trusted key, algorithm, nonce, freshness, replay status and signature coverage of method, target and content; 0.003 USDC.
• x402_quote_comparator — Validate x402 v2 fields and compare only quotes sharing asset and decimals; 0.002 USDC.
• x402_v2_router — Select an exactly compatible x402 v2 payment requirement without receiving private keys.; 0.003 USDC. Deterministic, evidence-bounded and signed.