# Panthera Zero-Trust Honeypot, OSINT, Dark Web, Web3 & Agent Utility API (x402 v2)

> Clean URL-to-Markdown scraping, Solana tx pre-flight simulation & drainer guard, 24h ephemeral public webhook relay for sandboxed agents, live Solana priority-fee oracle, MX/burner email verification, real-time threat intelligence, 100-IP bulk firewall batch auditing, IP fraud scoring, domain & SSL recon, username OSINT, email breach analytics, Tor .onion dark web search, Solana wallet profiling, Solana SPL token rug-pull auditing, phishing URL & homograph detection, SSL/TLS compliance grading, and reverse image OSINT powered by x402 v2 on Solana Mainnet USDC.

- **Gateway Origin**: https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com
- **x402scan Live Server**: https://www.x402scan.com/server/293f0905-4549-4bf0-95b3-db8c4df1dbee
- **x402scan Recipient Treasury**: https://www.x402scan.com/recipient/CLBg2XGPZZ5h9tfUX1aAvLWtczbTuojJ4RNnHPrKyk1Y
- **OpenAPI 3.1.0 Spec**: https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/openapi.json
- **x402 v2 Discovery**: https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/.well-known/x402
- **Payment Network**: Solana Mainnet (`solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp`)
- **Payment Asset**: USDC (`EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v`)
- **PayTo Treasury Wallet**: `CLBg2XGPZZ5h9tfUX1aAvLWtczbTuojJ4RNnHPrKyk1Y`
- **Payment Header**: `PAYMENT-SIGNATURE` (or `X-Payment` / `?txSignature=`)

## Paid x402 Endpoints (22 Live Resources)

1. `POST/GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/v1/chat/completions` — **$0.001 USDC**: Drop-in OpenAI-compatible `/v1/chat/completions` LLM inference gateway (no API key required).
2. `POST/GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/v1/search` — **$0.002 USDC**: Live Web, HackerNews & Threat-Intel Search API for autonomous AI agents.
3. `POST/GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/v1/rpc/solana` — **$0.001 USDC**: Solana Mainnet JSON-RPC 2.0 pay-per-call passthrough (`getSlot`, `getBalance`, `getLatestBlockhash`, `getAccountInfo`, etc.).
4. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/scrape/markdown?url={url}` — **$0.01 USDC**: Clean URL-to-Markdown, OpenGraph & JSON-LD extractor for LLM agents.
5. `GET/POST https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/web3/simulate-tx?txBase64={tx}` — **$0.01 USDC**: Solana transaction pre-flight simulator & SPL Approve/SetAuthority drainer guard.
6. `GET/POST https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/agent/webhook-inbox?label={label}` — **$0.02 USDC**: Mint a 24-hour public HTTPS webhook drop URL & polling inbox for sandboxed/NAT agents.
7. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/web3/solana-priority-fee` — **$0.005 USDC**: Live Solana priority-fee percentiles (p25/p50/p75/p90 micro-lamports/CU), TPS & SOL/USDC depth.
8. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/security/email-verify?email={email}` — **$0.005 USDC**: Live DNS MX, SPF/DMARC & 500+ disposable/burner email deliverability gatekeeper.
9. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/threat-intel/check?ip={ip}` — **$0.01 USDC**: Single-IP Honeypot reputation & attack telemetry.
10. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/threat-intel/feed?limit=500` — **$0.05 USDC**: Bulk live feed of up to 500 verified malicious scanner IPs.
11. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/threat-intel/bulk-check?ips={ip1,ip2}` — **$0.1 USDC**: Batch-audit up to 100 IPs in a single call against Honeypot + C2 blacklists.
12. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/osint/ip-score?ip={ip}` — **$0.01 USDC**: Composite IP fraud score (AbuseIPDB + IPQualityScore VPN/Proxy/Tor/Bot + Honeypot).
13. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/osint/domain?domain={domain}` — **$0.02 USDC**: Live Domain DNS (A/AAAA/MX/NS/TXT), SPF/DMARC, RDAP WHOIS, crt.sh SSL subdomains & Dark Web exposure.
14. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/osint/username?handle={handle}` — **$0.02 USDC**: Cross-platform developer & social username OSINT (GitHub, Reddit, HN, Keybase, GitLab, Dev.to, npm, Crates.io, Dark Web).
15. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/osint/email-breach?email={email}` — **$0.02 USDC**: Email credential breach history (XposedOrNot), password risk & Hudson Rock Dark Web infostealer check.
16. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/osint/darkweb?query={query}` — **$0.03 USDC**: Ahmia Tor .onion Dark Web hidden service mentions & infostealer exposure search.
17. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/web3/solana-wallet?address={wallet}` — **$0.01 USDC**: Solana Mainnet wallet SOL/USDC balances, USD valuation, recent tx signatures & x402 history.
18. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/web3/solana-token-audit?mint={mint}` — **$0.02 USDC**: Solana SPL token rug-pull, Mint/Freeze authority, Top-10 whale concentration & Jupiter liquidity audit.
19. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/security/url-phishing-check?url={url}` — **$0.01 USDC**: Real-time phishing URL, IDN homograph (xn--), brand impersonation & RDAP domain age detector.
20. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/security/ssl-tls-grade?domain={domain}` — **$0.02 USDC**: Automated SSL/TLS certificate, cipher & HTTP security header compliance grader (A+ to F).
21. `GET https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/osint/reverse-image?url={imageUrl}` — **$0.05 USDC**: Reverse image & avatar visual OSINT correlation.
22. `POST https://rklhfyeyw0.execute-api.ap-south-1.amazonaws.com/api/x402/unban` — **$25 USDC**: Automated self-unban security clearance bond (`{"ip": "203.0.113.42"}`).