appendix b · for the machines
Payment is the auth.
No account, no API key, no OAuth dance. Every paid endpoint answers an unpaid request with 402 Payment Required and the exact price; sign it, replay with an X-PAYMENT header, get your result. This page is the human-readable mirror of the machine-readable manifest.
discovery
- + x402 manifest
- + OpenAPI schema
- + llms.txt agent guide
- + ClawHub:
hyrule-cloud,hyrule-network-intel
HTTP 402 — payment required
b.1 the golden path
Ask. Pay. Replay.
Settlement is USDC via the x402 exact scheme (EIP-3009 — a gasless signature, no on-chain transaction from you). Rails are listed live below; any x402-aware client library can sign the payload.
# 1 — ask: the 402 carries the price + payment requirements
curl -si https://cloud.hyrule.host/v1/dns/lookup \
-H 'content-type: application/json' \
-d '{"name":"example.com","type":"AAAA"}'
# HTTP/1.1 402 Payment Required
# 2 — pay: sign the requirements, replay with X-PAYMENT
curl -si https://cloud.hyrule.host/v1/dns/lookup \
-H 'content-type: application/json' \
-H 'X-PAYMENT: <signed payment payload>' \
-d '{"name":"example.com","type":"AAAA"}'
# HTTP/1.1 200 OK → diagnostic evidence
b.2 the vm contract
Provisioning is asynchronous.
1.pay
POST /v1/vm/create → 200 with status_url + save-once management_url$0.05+2.poll
status_url (GET /v1/vm/{id}/status — public, no token)free3.when
status is ready: ssh root@<hostname> over IPv6~60s4.lifecycle (extend, destroy, details) via the token-bearing
Table 5. The management token is returned once, at create — store it
management_urlkeep it
b.3 price schedule
Every paid endpoint.
Rendered live from the published manifest — if it's listed here, it answers a 402 with exactly this minimum price. The manifest is also what the x402 Bazaar and scanners index.
| endpoint | description | min price |
|---|---|---|
POST /v1/vm/create |
Provision a bare VM with SSH access | $0.05 |
POST /v1/domain/register |
Register a domain via Openprovider | $6.00 |
POST /v1/network/request |
Make a micro-proxy network request over Direct, Tor, I2P, or Yggdrasil | $0.01 |
POST /v1/bgp/lookup |
Paid BGP/routing lookup by prefix, IP, ASN, or AS215932 router-table dataset | $0.005 |
POST /v1/bgp/jobs |
Paid historical BGPStream job over RouteViews and RIPE RIS collectors | $0.05 |
GET /v1/bgp/snapshots/router/{snapshot_id}/download |
Paid AS215932 active router table snapshot download | $0.10 |
POST /v1/ip/lookup |
Paid IP geolocation, ASN/ISP, reverse DNS, RDAP/WHOIS, reputation, and BGP-context lookup | $0.003 |
POST /v1/dns/lookup |
Paid read-only DNS lookup, reverse lookup, DNSSEC, and trace diagnostics | $0.001 |
POST /v1/dns/propagation |
Paid DNS propagation comparison across public recursive resolvers | $0.001 |
POST /v1/dns/recommend-records |
Paid DNS record recommendations for web, mail, SIP, verification, and reverse DNS workflows | $0.001 |
POST /v1/rdap/lookup |
Paid structured RDAP lookup for domains, IPs, prefixes, ASNs, and entities | $0.003 |
POST /v1/whois/lookup |
Paid legacy WHOIS lookup for domains, IPs, prefixes/network blocks, and ASNs | $0.005 |
POST /v1/web/check |
Paid web reachability, HTTP/HTTPS, TLS certificate, security headers, and CDN/WAF diagnostic check | $0.005 |
POST /v1/web/tls/deep |
Paid Hyrule-native SSL Labs-style deep TLS scanner and grade | $0.10 |
POST /v1/mx/check |
Paid MXToolbox-compatible diagnostic check for mail, DNS, blacklist, SMTP, and domain troubleshooting | $0.005 |
POST /v1/mx/bounce/parse |
Paid mail bounce/rejection parser and likely-cause classifier | $0.005 |
POST /v1/mx/recommend-records |
Paid SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI recommendation engine | $0.005 |
POST /v1/mx/jobs |
Paid full mail-delivery diagnostic report (synchronous, results returned inline) | $0.03 |
POST /v1/ports/check |
Paid outside-in single declared service reachability check with strict port allowlist | $0.003 |
POST /v1/nat/lookup |
Paid server-only CGNAT/NAT hint report from caller and customer WAN/LAN evidence | $0.003 |
POST /v1/nat/port-forward/check |
Paid outside-in NAT port-forward reachability check for one declared service | $0.005 |
POST /v1/voip/check |
Paid SIP DNS, SIP TLS, OPTIONS, STUN/TURN diagnostic check | $0.01 |
/.well-known/x402.json
b.4 payment rails
Settlement options, live from the API.
1.Base — USDC, x402 exact scheme (EIP-3009, gasless)
eip155:8453＋XMR — native one-time deposit address (VM checkout)intent
Table 7. Never hardcode rails — read GET /v1/payments/networks at run time
b.5 mcp server
For Claude, Cursor, and friends.
The
hyrule-mcp server (ships with the hyrule-cloud package) exposes every operation on this page as MCP tools. Point it at the public API and your agent can quote, pay, provision, and manage.// pip install hyrule-cloud → mcpServers entry
{
"mcpServers": {
"hyrule-cloud": {
"command": "hyrule-mcp",
"env": { "HYRULE_API_URL": "https://cloud.hyrule.host" }
}
}
}
go
Your agent already knows how to do this.
Fetch the manifest, pick an endpoint, sign the 402. The first request costs a tenth of a cent — the whole catalog is priced to be tried.