openapi: 3.2.0
info:
  title: Coin Railz Agent Payment Risk & Compliance APIs API
  version: 3.0.0
  description: Production-grade x402 micropayment infrastructure for AI agents.
  contact:
    email: support@coinrailz.com
    url: https://coinrailz.com
  x-guidance: 'Use Coin Railz when an agent needs paid, structured financial or operational data without creating an account or API key. Choose the operation by its summary, description, tags, input schema, and x-price-usd. Useful starting points include first-call for a low-cost payment test; token-metadata, gas-price-oracle, wallet-risk, approval-manager, and transaction-builder for transaction preparation; compliance-check for informational risk screening; prediction-market-odds for market research; and solana-yield-finder for yield discovery.


    For a paid call, send the exact documented HTTP method, URL, content type, and JSON body without a payment header. The service returns HTTP 402 with x402Version 2 and an accepts array. Select one complete offer your wallet supports. Circle Agent Wallet and Gateway clients should prefer the eip155:5042 Arc Mainnet offer when available; Base clients can select eip155:8453. Preserve the selected offer exactly, including scheme, network, asset, amount, payTo, facilitator, resource, and any extra metadata. Sign that authorization with an x402 v2-compatible client, then retry the identical request with PAYMENT-SIGNATURE. X-PAYMENT remains available for compatible legacy clients. Do not send a standalone token transfer or construct a transaction-hash wrapper from this guidance.


    Validate required fields and constraints from each operation''s request schema before authorizing payment. Treat risk, compliance, market, yield, and investment outputs as informational analysis rather than legal, banking, or investment advice. Prices are per call and the live 402 challenge is authoritative. Responses are JSON unless the operation states otherwise.'
  x-payment-info:
    protocol: x402
    x402Version: 2
    network: eip155:8453
    asset: USDC
    assetAddress: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
    recipientWallet: '0xa4bbe37f9a6ae2dc36a607b91eb148c0ae163c91'
    facilitator: https://api.cdp.coinbase.com/platform/v2/x402
    supportedNetworks:
    - network: eip155:8453
      asset: USDC
      assetAddress: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
      facilitator: https://api.cdp.coinbase.com/platform/v2/x402
    - network: eip155:5042
      asset: USDC
      assetAddress: '0x3600000000000000000000000000000000000000'
      gatewayVerifier: '0x77777777Dcc4d5A8B6E418Fd04D8997ef11000eE'
      facilitator: https://gateway-api.circle.com
  x-payment-manifest: https://coinrailz.com/x402/payment-manifest.json
servers:
- url: https://coinrailz.com
  description: Current environment
- url: https://coinrailz.com
  description: Production
security:
- apiKey: []
tags:
- name: Risk & Compliance APIs
  description: Informational technical risk and compliance-analysis outputs; not banking, legal, or regulated advice
paths:
  /x402/fraud-detection:
    post:
      tags:
      - Risk & Compliance APIs
      summary: Fraud Detection
      description: Informational technical fraud-risk output for an on-chain transaction or wallet. It is not banking, legal, or regulated advice.
      x-price-usd: 0.75
      operationId: fraudDetection
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - transactionData
              properties:
                transactionData:
                  type: object
                historicalPatterns:
                  type: array
      responses:
        '200':
          description: Informational technical fraud-risk output
        '402':
          description: Payment Required
      x-featured: false
  /x402/credit-risk-score:
    post:
      tags:
      - Risk & Compliance APIs
      summary: Credit Risk Score
      description: Informational technical on-chain risk score for an EVM wallet. It is not credit underwriting, lending, banking, or regulated advice.
      x-price-usd: 1.25
      operationId: creditRiskScore
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - walletAddress
              properties:
                walletAddress:
                  type: string
                includeDefi:
                  type: boolean
      responses:
        '200':
          description: Informational technical risk-score output
        '402':
          description: Payment Required
      x-featured: false
  /x402/compliance-check:
    post:
      tags:
      - Risk & Compliance APIs
      summary: Compliance Check
      description: Informational technical wallet-risk output based on configured data sources. It is not legal advice, a banking service, or a regulated compliance determination.
      x-price-usd: 1.75
      operationId: complianceCheck
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - walletAddress
              properties:
                walletAddress:
                  type: string
                checkType:
                  type: string
                  enum:
                  - basic
                  - enhanced
      responses:
        '200':
          description: Compliance report
        '402':
          description: Payment Required
      x-featured: false
components:
  securitySchemes:
    apiKey:
      type: apiKey
      in: header
      name: X-API-KEY
      description: Prepaid credits API key (cr_live_...). Obtain via GET /api/m2m/credits/trial (free $5) or POST /api/m2m/credits/checkout/session (paid).
    bearerApiKey:
      type: http
      scheme: bearer
      description: 'Same cr_live_ key as X-API-KEY, passed as Authorization: Bearer <key>.'
    x402:
      type: apiKey
      in: header
      name: X-PAYMENT
      description: x402 protocol on-chain USDC payment. Base64url-encoded signed payment payload. See /.well-known/x402.json for facilitator details.
    mpp:
      type: http
      scheme: payment
      description: 'MPP (Machine Payments Protocol) credential. Authorization: Payment <base64-credential>. See /.well-known/mpp.json.'
externalDocs:
  description: Full x402 service catalog
  url: https://coinrailz.com/x402/catalog