# VYTREL Control

Buy a bounded useful result over x402 v2 on Base mainnet. No buyer account or API key.
The live PAYMENT-REQUIRED header is authoritative for price and payment requirements.

## Products
- GET /api/verify-domain?domain=example.com — $0.002 USDC. Live A/MX DNS evidence, null-MX detection, timestamps and resolver provenance. DNS_A_MX_ONLY; NOT_EMAIL_VALIDATION. No SMTP or mailbox deliverability check. Provider failures return 502.
- GET /api/url-proof?url=https%3A%2F%2Fexample.com — $0.001 USDC. Public HTTPS status, redirects, latency, content type, SHA-256 of up to 64 KiB, truncation flag and timestamp. HTTPS port 443 only. Not a signed attestation. Upstream non-2xx status is a completed observation; DNS/TLS/timeout failures return 502 and are not charged.
- GET /api/base-usdc-balance?address=0x... — $0.001 USDC. Exact Base USDC balance at the reported block.
- GET /api/base-wallet-snapshot?address=0x... — $0.005 USDC. Base ETH and USDC at one pinned block.
- GET /api/sha256?text=hello — $0.001 USDC. UTF-8 SHA-256, at most 64 KiB.
- GET /api/market-state?symbol=BTCUSDT — $0.005 USDC. Fresh BTC/ETH/SOL spot market state from live Coinbase Exchange public data: price, bid/ask spread, 24h range/change, volume, mechanical direction/regime, freshness and provenance. Not a trading recommendation.
- GET /api/crypto-price?symbol=BTC — $0.001 USDC. Live BTC/ETH/SOL USD price quote with bid, ask, spread, timestamp and source.

## Purchase and verify
1. Send the required input. Invalid input returns 400/413 before a quote.
2. Read the HTTP 402 PAYMENT-REQUIRED header with a standard x402 v2 client.
3. Authorize only the quoted amount to the quoted payTo on Base and retry.
4. Successful response includes PAYMENT-RESPONSE. Decode it and confirm success=true, network=eip155:8453, transaction and payer; verify the transaction independently on Base.
5. Hash the exact response bytes and compare X-VYTREL-Result-SHA256. Keep the response and PAYMENT-RESPONSE as your receipt. X-VYTREL-Receipt-ID is a support correlation ID, not a signature or a retrievable receipt.
No settled receipt means no confirmed sale. Unpaid probes and self-funded tests are not customer revenue.

## Support
alfendy@wyntrio.com — include correlation ID and settlement transaction, never a private key.
Seller logs contain settlement references and result hashes, not input text or URLs. Logs have hosting-provider retention limits; retain your buyer receipt.

## Discovery
OpenAPI: https://vytrel-control.vercel.app/openapi.json
Manifest: https://vytrel-control.vercel.app/.well-known/x402
/api/research-proof is retired (410); a random ID alone is not sold as a useful result.

## AgentCash MCP buyer integration
Use the existing AgentCash MCP client to discover this OpenAPI origin and call the paid route. Configuration, free discovery calls, exact market-state input and a per-call maxAmount=0.005 payment bound: https://vytrel-control.vercel.app/agentcash.md
MCP discover_api_endpoints: {"url":"https://vytrel-control.vercel.app"}
MCP check_endpoint_schema (no payment): {"url":"https://vytrel-control.vercel.app/api/market-state?symbol=BTCUSDT","method":"GET"}
Only with buyer payment authorization, MCP fetch: {"url":"https://vytrel-control.vercel.app/api/market-state?symbol=BTCUSDT","method":"GET","paymentProtocol":"x402","paymentNetwork":"eip155:8453","maxAmount":0.005}
A per-call limit is not a cumulative budget. Preserve payment receipts and do not blindly retry an uncertain paid request.

## Funded DNS batch
POST /api/verify-domain/batch: JSON domains (10–250 unique public domains) and idempotency_key (use random UUID). $0.0015/domain; 50 = $0.075. Standard PAYMENT-SIGNATURE. Authorization verified before execution; settlement only after successful delivery. Do not send a new payment when retrying an existing job.
POST /api/verify-domain/batch/replay: original batch body; header x-vytrel-replay-payer = payer wallet address. The free 401 challenge returns replay_message and expiry. EIP-191 sign the exact message with that EOA wallet, then repeat with original PAYMENT-SIGNATURE (lookup selector only), x-vytrel-replay-payer, x-vytrel-replay-expiry, x-vytrel-replay-signature. Proof binds origin, original route, request key, input hash, payer, Base chain and expiry within five minutes. Signer must match confirmed settlement payer. Retrieval never settles payment or runs DoH. Contract-wallet replay verification not implemented.
PAYMENT-RESPONSE confirms facilitator settlement; x-vytrel-result-sha256 hashes exact bytes, not a seller digital signature. Diff, prepaid balances and background recovery are deferred. Paid production delivery remains unproven.

Current batch production gate: GATED_STORAGE_BINDING. Vercel server SUPABASE_URL points to foarneemzuvsqmejkwgu, while authorized job schema and continuity ledger are on upkkcsfwhxkoyfyeddum. Batch quotes are disabled until production uses the canonical project with valid server-only credentials and a successful RPC readiness check. No paid production batch delivery is proven.