{
  "$schema": "https://prxy.monster/schemas/agents.v1.json",
  "spec_version": "0.1",
  "service": {
    "name": "prxy.monster",
    "type": "AIProxy",
    "tagline": "The visibility, control, verification, and learning layer for AI agent calls.",
    "value_prop": "prxy.monster makes AI agent work visible, controllable, verifiable, and reusable — with a base URL change.",
    "description": "prxy.monster sits in front of your existing model calls (Anthropic, OpenAI, Google, Groq, AWS Bedrock, OpenRouter). Every call gets cost attribution, policy metadata, an Ed25519-signed receipt, and an outcome loop. Visibility: see every call, provider, model, cost, cache hit, policy decision, module chain, and receipt. Control: per-project budgets, payload-capture rules (hash_only default; encrypted_at_rest opt-in under customer X25519 pubkey), and provider routing. Verification: every receipt is signed against a published JWKS and verifiable offline. Compounding: positive outcomes feed memory_candidates; reviewer-promoted candidates become patterns that ride into future calls. BYOK by default — providers bill inference directly; prxy bills the gateway / control layer. Managed MPP lets agents buy one settled call over HTTP 402; production Stripe SPT settlement is gated on Stripe Link SPT GA. The MIT prxy-monster-local edition runs the same module pipeline on your own infrastructure with no telemetry.",
    "homepage": "https://prxy.monster",
    "docs": "https://docs.prxy.monster",
    "publisher": {
      "name": "ekkOS Technologies Inc.",
      "country": "CA",
      "contact": "hello@prxy.monster"
    }
  },
  "capabilities": {
    "transaction_layer": true,
    "signed_receipts": {
      "enabled": true,
      "algorithm": "Ed25519",
      "canonicalization": "RFC 8785 JCS + NFC normalization",
      "jwks_url": "https://api.prxy.monster/.well-known/prxy-receipt-keys.json",
      "verifier_doc_url": "https://api.prxy.monster/.well-known/prxy-receipts.md",
      "ledger_url": "https://receipts.prxy.monster"
    },
    "attribution": {
      "fields": ["tenant_id", "project_id", "agent_id", "iam_principal", "aws_account_id", "user_id", "api_key_id"],
      "headers": ["x-prxy-tenant-id", "x-prxy-project-id", "x-prxy-agent-id", "x-prxy-client-request-id"]
    },
    "payload_capture": {
      "default": "hash_only",
      "supported": ["hash_only", "encrypted_at_rest", "none"],
      "encryption_envelope": "x25519-xchacha20-poly1305-v1",
      "encryption_status": "live_opt_in_per_api_key"
    },
    "cost_estimation": {
      "providers_supported": ["aws_bedrock", "anthropic", "openai", "google"],
      "providers_with_partial_pricing": ["openrouter"],
      "pricing_tables_signed_into_receipt": true
    },
    "outcomes": {
      "enabled": true,
      "endpoint": "https://api.prxy.monster/v1/outcomes",
      "kinds": ["succeeded", "partially_solved", "failed", "no_progress", "regressed", "user_satisfied", "user_unsatisfied", "tool_chain_succeeded", "tool_chain_failed", "review_pending", "out_of_scope"],
      "memory_candidates_review": "manual_human_only"
    },
    "anonymous_sandbox": {
      "enabled": true,
      "url": "https://prxy.monster/sandbox/",
      "calls_per_session": 5,
      "model": "us.amazon.nova-micro-v1:0",
      "receipt_visibility": "public_demo",
      "no_signup_required": true
    },
    "settlement_protocols": ["byok_passthrough", "mpp_stripe", "reconciled"]
  },
  "agent_purchase": {
    "supported": true,
    "methods": [
      {
        "type": "stripe-payment-link",
        "label": "Subscribe via Stripe Checkout (operator-driven)",
        "url_pro": "https://buy.stripe.com/6oUdR88gxgBj7F5ceh6c001",
        "url_team": "https://buy.stripe.com/9B67sK9kBgBj3oPfqt6c002",
        "fulfillment": "API key emailed within 2 minutes of checkout.session.completed",
        "billing": "subscription"
      },
      {
        "type": "mpp-discovery",
        "label": "MPP merchant discovery (agent-wallet driven)",
        "well_known": "https://api.prxy.monster/.well-known/mpp",
        "challenge_endpoint": "https://api.prxy.monster/v1/agent/messages",
        "spec": "https://mpp.dev",
        "wallet_providers": ["stripe-link"],
        "billing": "per-call",
        "status": "protocol_live_settlement_gated_on_stripe_link_spt_ga",
        "status_detail": "Discovery, HTTP 402 challenge, /v1/agent/quote, /v1/agent/sessions, and /v1/agent/messages are wired end-to-end. Production Stripe SPT settlement is gated on Stripe Link SPT GA + production-payment credentials. Until configured, paid retries can return verification-failed.",
        "price_usd_per_call": 0.05,
        "provider_cost_included": true,
        "provider_key_required_from_agent": false
      }
    ]
  },
  "byok": {
    "required": true,
    "supported_providers": ["anthropic", "openai", "aws-bedrock", "google-genai"],
    "key_storage": "AES-256-GCM at rest, never returned in plaintext after registration",
    "billing_relationship": "Provider bills you directly at their list rates. prxy.monster never marks up, intercepts, or settles your provider invoice."
  },
  "catalog_endpoint": "https://api.prxy.monster/v1/catalog",
  "capabilities_endpoint": "https://api.prxy.monster/v1/capabilities",
  "pricing": {
    "currency": "USD",
    "billing_unit": "request",
    "billing_unit_definition": "One HTTP call into the prxy.monster gateway. Streaming counts as one. Cached hits count as one. Failed-upstream calls (provider returned 5xx) do not count.",
    "tiers": [
      {
        "id": "free",
        "label": "Free",
        "monthly_usd": 0,
        "requests_included": 1000,
        "overage_allowed": false,
        "byok": true,
        "all_base_modules": true,
        "self_host_unlimited": true
      },
      {
        "id": "pro",
        "label": "Pro",
        "monthly_usd": 20,
        "requests_included": 100000,
        "overage_allowed": true,
        "overage_per_1k_requests_usd": 0.20,
        "byok": true,
        "checkout_url": "https://buy.stripe.com/6oUdR88gxgBj7F5ceh6c001"
      },
      {
        "id": "team",
        "label": "Team",
        "monthly_usd": 99,
        "requests_included": 1000000,
        "overage_allowed": true,
        "overage_per_1k_requests_usd": 0.10,
        "byok": true,
        "custom_modules": true,
        "sso": true,
        "audit_log": true,
        "checkout_url": "https://buy.stripe.com/9B67sK9kBgBj3oPfqt6c002"
      }
    ]
  },
  "positioning_moats": [
    {
      "id": "signed-receipts",
      "summary": "Every inference call is an ed25519-signed receipt against a published JWKS — verifiable offline, attributable to tenant / project / agent, with token-level cost estimate and pricing-table provenance.",
      "human_url": "https://receipts.prxy.monster",
      "machine_url": "https://api.prxy.monster/.well-known/prxy-receipt-keys.json",
      "docs_url": "https://api.prxy.monster/.well-known/prxy-receipts.md"
    },
    {
      "id": "hash-only-payload-capture",
      "summary": "Default is hash-only — sha-256 of the canonical request and response live on the receipt; no plaintext stored. Opt-in to encrypted-at-rest under a customer-held X25519 key.",
      "human_url": "https://prxy.monster/security",
      "docs_url": "https://docs.prxy.monster/concepts/payload-handling"
    },
    {
      "id": "no-provider-markup",
      "summary": "API-key BYOK users pay providers directly; prxy.monster bills only gateway requests.",
      "human_url": "https://prxy.monster/pricing/",
      "machine_url": "https://prxy.monster/pricing.json"
    },
    {
      "id": "public-receipt-verifier",
      "summary": "Signed receipts for AI work — verify any public receipt against the JWKS in the browser, in CLI, or in your own code. Visibility levels: public_demo / public_minimal / public_redacted / public_full / private.",
      "human_url": "https://receipts.prxy.monster",
      "machine_url": "https://api.prxy.monster/.well-known/prxy-receipt-keys.json"
    },
    {
      "id": "outcomes-and-patterns",
      "summary": "POST /v1/outcomes anchors a learning signal on a receipt. Positive outcomes feed memory_candidates. A reviewer in lair promotes useful candidates into patterns. Patterns ride into future calls. Receipts → outcomes → patterns → better future calls.",
      "human_url": "https://docs.prxy.monster/concepts/outcomes",
      "machine_url": "https://api.prxy.monster/v1/outcomes"
    },
    {
      "id": "anonymous-sandbox",
      "summary": "5 real Bedrock calls, 5 signed public_demo receipts, no signup required. Sandbox is for evaluation only — no secrets, no private code, no customer data.",
      "human_url": "https://prxy.monster/sandbox/"
    },
    {
      "id": "monster-log",
      "summary": "Dated public AI coding-agent incidents mapped to modules and module status.",
      "human_url": "https://prxy.monster/monster-log/",
      "machine_url": "https://prxy.monster/monster-log.json",
      "docs_url": "https://docs.prxy.monster/concepts/monster-log"
    },
    {
      "id": "module-marketplace",
      "summary": "Third-party extensible module pipeline with public registry, npm packages, and verified publisher program.",
      "human_url": "https://modules.prxy.monster",
      "publishing_url": "https://modules.prxy.monster/publish/"
    },
    {
      "id": "reproducible-benchmarks",
      "summary": "Public benchmark page and JSON expose module fixture results plus commands to rerun locally or against a live endpoint.",
      "human_url": "https://prxy.monster/benchmarks/",
      "machine_url": "https://prxy.monster/benchmarks.json",
      "docs_url": "https://docs.prxy.monster/concepts/benchmarks"
    }
  ],
  "agent_value_proposition": [
    "See what your agents did — every call returns a signed Payment-Receipt header (Ed25519, JWKS-verifiable) with cost, provider, model, cache_status, policy_decision, module_chain, and four canonical hashes",
    "Prove what happened — verify any public receipt offline against /.well-known/prxy-receipt-keys.json. No prxy involvement required",
    "Reuse what worked — POST /v1/outcomes anchors a learning signal on a receipt; positive outcomes feed memory_candidates; reviewer-promoted candidates become patterns that ride into future calls",
    "Receipts carry tenant / project / agent attribution plus IAM principal for AWS Bedrock — solves the CUR \"which agent caused this Bedrock charge\" reconciliation problem",
    "Default hash-only payload capture — sha-256 of canonical request/response on the receipt, no plaintext stored. Opt-in to encrypted-at-rest under your X25519 public key when compliance needs it",
    "Cost on every receipt is computed from token-level pricing tables with provenance (pricing_table_id + version + effective_at) — re-verifiable against a known rate snapshot",
    "API-key BYOK users keep the provider billing relationship direct; prxy.monster never marks up the provider invoice",
    "Managed MPP agents can buy one settled LLM call without a prxy account or provider key (protocol surface live; production Stripe SPT settlement gated on Stripe Link SPT GA)",
    "Per-project budgets with off / warn / hard_fail enforcement — hard_fail emits a signed blocked receipt for the audit trail",
    "Anonymous sandbox — 5 real Bedrock calls, 5 signed public_demo receipts, no signup required",
    "12 verified middleware modules: caches, optimizers, routers, content filters, context bridges — each declares provider compatibility and fallback behavior",
    "Drop-in for Anthropic Messages and OpenAI Chat Completions; see /integrations.json for full integration list",
    "Self-host the entire pipeline (MIT prxy-monster-local) — same modules, your infrastructure, no telemetry"
  ],
  "rate_limits": {
    "free": "60 requests/minute",
    "pro": "600 requests/minute",
    "team": "20000 requests/hour, dedicated quota"
  },
  "data_residency": {
    "primary_region": "Hosted cloud region; contact us for private-cloud requirements.",
    "encryption_at_rest": "Provider-managed encryption at rest for hosted storage; BYOK provider keys receive application-level AES-256-GCM encryption.",
    "byok_storage": "AES-256-GCM, never returned in plaintext",
    "provider_call_residency": "Determined by your provider — we forward to their endpoints. Anthropic + OpenAI: provider-dependent. Bedrock: us-east-1. Google: provider-dependent."
  },
  "trust_signals": {
    "public_receipts_surface": "https://receipts.prxy.monster",
    "receipt_jwks": "https://api.prxy.monster/.well-known/prxy-receipt-keys.json",
    "receipt_verification_doc": "https://api.prxy.monster/.well-known/prxy-receipts.md",
    "receipt_signing_algorithm": "Ed25519",
    "receipt_signing_key_id": "prxy-receipt-2026-q2",
    "receipt_canonicalization": "RFC 8785 JCS + Unicode NFC",
    "anonymous_sandbox": "https://prxy.monster/sandbox/",
    "data_retention_matrix": "https://prxy.monster/data-retention/",
    "security": "https://prxy.monster/security/",
    "privacy": "https://prxy.monster/privacy/",
    "monster_log": "https://prxy.monster/monster-log/",
    "benchmarks": "https://prxy.monster/benchmarks/",
    "open_source_components": [
      "https://www.npmjs.com/package/@prxy/cli",
      "https://www.npmjs.com/package/@prxy/module-sdk",
      "https://github.com/Ekkos-Technologies-Inc/prxy-monster-local"
    ],
    "github": "https://github.com/Ekkos-Technologies-Inc/prxy-monster-local",
    "uptime_reporting": "https://prxy.monster/status.json",
    "license": "Hosted: commercial (per-request). CLI + module-sdk + self-host gateway: MIT.",
    "never_marks_up_provider_bill": true,
    "default_payload_capture": "hash_only",
    "no_foundation_model_training_on_customer_content": true
  },
  "compliance": {
    "gdpr": "data minimization; no inference content stored without explicit module opt-in",
    "data_deletion": "Hosted deletion requests go to privacy@prxy.monster. A self-service deletion endpoint is planned but not currently documented as live.",
    "audit_logs": "Available on Team tier",
    "byok_revocation": "Revoke a stored provider key any time via DELETE /v1/byok/:provider — takes effect on next request"
  },
  "machine_readable_alternates": [
    "/llms.txt",
    "/llms-full.txt",
    "/pricing.json",
    "/modules.json",
    "/monster-log.json",
    "/benchmarks.json",
    "/providers.json",
    "/integrations.json",
    "/status.json",
    "/manifest.json",
    "/sitemap.xml",
    "https://api.prxy.monster/.well-known/prxy-receipt-keys.json",
    "https://api.prxy.monster/.well-known/prxy-receipts.md",
    "https://api.prxy.monster/.well-known/mpp"
  ]
}