{"openapi":"3.1.0","info":{"title":"QuietProof x402 API","version":"0.1.0","description":"Deterministic read-only audits with per-request Base USDC payments through x402. Public or synthetic inputs only."},"servers":[{"url":"https://quietproof-x402.quietproof-x402.workers.dev"}],"paths":{"/v1/oas/structure":{"post":{"operationId":"oas_01","summary":"OpenAPI structure and reference audit","description":"Validate OpenAPI 3.x structure, operations, responses, duplicate operationIds and local $refs.","tags":["openapi","api","contract"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"UTF-8 artifact content up to 2 MB."},"filename":{"type":"string","description":"Optional filename used for interpretation only."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"openapi.yaml"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.15","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/oas/examples":{"post":{"operationId":"oas_03","summary":"OpenAPI example conformance audit","description":"Validate inline OpenAPI request and response examples against their declared JSON Schemas.","tags":["openapi","examples","schema"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"UTF-8 artifact content up to 2 MB."},"filename":{"type":"string","description":"Optional filename used for interpretation only."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"openapi.yaml"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.25","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/oas/breaking":{"post":{"operationId":"apid_01","summary":"OpenAPI breaking-change audit","description":"Compare two OpenAPI documents for removed operations, parameters and responses.","tags":["openapi","breaking-change","diff"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"base":{"type":"string","description":"Base OpenAPI JSON or YAML."},"target":{"type":"string","description":"Target OpenAPI JSON or YAML."}},"required":["base","target"]},"example":{"base":"<base OpenAPI document>","target":"<target OpenAPI document>"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.50","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/json/schema-validate":{"post":{"operationId":"json_02","summary":"JSON Schema instance validation","description":"Validate one JSON instance against one JSON Schema and return machine-readable errors.","tags":["json-schema","validation","json"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"schema":{"type":"object","description":"JSON Schema object."},"instance":{"description":"JSON instance. Omit when using content as the instance JSON."},"content":{"type":"string","description":"Optional JSON instance text when instance is omitted."}},"required":["schema"]},"example":{"schema":{"type":"object","required":["id"],"properties":{"id":{"type":"string"}}},"instance":{"id":42}}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.15","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/json/schema-request-diff":{"post":{"operationId":"json_03","summary":"JSON request Schema compatibility diff","description":"Detect request-breaking changes between two JSON Schemas.","tags":["json-schema","breaking-change","api"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"base":{"type":"string","description":"Base request JSON Schema."},"target":{"type":"string","description":"Target request JSON Schema."}},"required":["base","target"]},"example":{"base":"{\"type\":\"object\",\"properties\":{\"id\":{\"type\":\"string\"}}}","target":"{\"type\":\"object\",\"required\":[\"id\"],\"properties\":{\"id\":{\"type\":\"string\"}}}"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.40","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/graphql/breaking":{"post":{"operationId":"gql_02","summary":"GraphQL SDL breaking-change audit","description":"Compare two GraphQL SDL documents for removed types, fields, enum values and changed field types.","tags":["graphql","breaking-change","schema"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"base":{"type":"string","description":"Base GraphQL SDL."},"target":{"type":"string","description":"Target GraphQL SDL."}},"required":["base","target"]},"example":{"base":"type Query { ping: String! }","target":"type Query { ping: String }"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.40","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/protobuf/wire-diff":{"post":{"operationId":"pb_02","summary":"Protocol Buffers wire compatibility audit","description":"Compare message field numbers, types and cardinality in two .proto sources.","tags":["protobuf","grpc","breaking-change"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"base":{"type":"string","description":"Base .proto source."},"target":{"type":"string","description":"Target .proto source."}},"required":["base","target"]},"example":{"base":"syntax = \"proto3\"; message User { string id = 1; }","target":"syntax = \"proto3\"; message User { int64 id = 1; }"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.50","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/ci/github-actions":{"post":{"operationId":"ci_01","summary":"GitHub Actions safety audit","description":"Inspect workflow permissions, pull_request_target, action pinning and shell-expression injection.","tags":["github-actions","ci","security"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"UTF-8 artifact content up to 2 MB."},"filename":{"type":"string","description":"Optional filename used for interpretation only."}},"required":["content"]},"example":{"content":"<artifact content>","filename":".github/workflows/ci.yml"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.40","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/k8s/workload-security":{"post":{"operationId":"k8s_01","summary":"Kubernetes workload security audit","description":"Check pod and container privilege, root user, capabilities, image pinning and resources.","tags":["kubernetes","security","yaml"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"UTF-8 artifact content up to 2 MB."},"filename":{"type":"string","description":"Optional filename used for interpretation only."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"deployment.yaml"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.25","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/supply-chain/osv":{"post":{"operationId":"sca_02","summary":"OSV vulnerability lookup","description":"Query the current OSV database for package versions supplied directly, in CycloneDX or npm lockfiles.","tags":["osv","vulnerability","sbom"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"packages":{"type":"array","maxItems":500,"description":"Packages to query. Each item needs name, version and ecosystem.","items":{"type":"object","required":["name","version","ecosystem"],"properties":{"name":{"type":"string"},"version":{"type":"string"},"ecosystem":{"type":"string"}}}},"content":{"type":"string","description":"Optional CycloneDX SBOM or npm package-lock v3 JSON."}},"anyOf":[{"required":["packages"]},{"required":["content"]}]},"example":{"packages":[{"name":"lodash","version":"4.17.20","ecosystem":"npm"}]}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.50","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/supply-chain/sbom":{"post":{"operationId":"sca_03","summary":"CycloneDX or SPDX SBOM quality audit","description":"Validate SBOM format, component identity, versions, licenses and duplicate component records.","tags":["sbom","cyclonedx","spdx"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"UTF-8 artifact content up to 2 MB."},"filename":{"type":"string","description":"Optional filename used for interpretation only."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"bom.json"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.50","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/csv/contract":{"post":{"operationId":"csv_02","summary":"CSV data-contract audit","description":"Check row width, duplicate headers and contract-defined required, type and enum rules.","tags":["csv","data-quality","contract"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"CSV up to 2 MB."},"contract":{"type":"object","description":"Column rules as {columns:{name:{required:boolean,type:string,enum?:array}}}."}},"required":["content","contract"]},"example":{"content":"id,email\n1,user@example.com\n2,\n","contract":{"columns":{"id":{"required":true,"type":"integer"},"email":{"required":true,"type":"email"}}}}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.15","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/csv/formula-injection":{"post":{"operationId":"csv_05","summary":"CSV formula-injection scan","description":"Find cells that begin with spreadsheet formula or control prefixes without modifying the file.","tags":["csv","formula-injection","security"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"UTF-8 artifact content up to 2 MB."},"filename":{"type":"string","description":"Optional filename used for interpretation only."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"export.csv"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.10","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/seo/robots":{"get":{"operationId":"seo_01","summary":"robots.txt structural audit","description":"Fetch one public origin's robots.txt and report groups, rules, sitemap declarations and syntax issues.","tags":["robots","seo","crawler"],"parameters":[{"name":"url","in":"query","required":true,"schema":{"type":"string","description":"Absolute public HTTP(S) URL. Private and loopback targets are rejected."}}],"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.10","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/seo/sitemap":{"get":{"operationId":"seo_02","summary":"Sitemap structure audit","description":"Fetch one sitemap and report type, loc count, duplicates, invalid URLs, limits and lastmod syntax.","tags":["sitemap","seo","xml"],"parameters":[{"name":"url","in":"query","required":true,"schema":{"type":"string","description":"Absolute public HTTP(S) URL. Private and loopback targets are rejected."}}],"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.15","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/schema-org/product":{"get":{"operationId":"sd_04","summary":"Schema.org Product and Offer audit","description":"Extract JSON-LD from one public page and check Product and Offer required fields.","tags":["schema-org","product","json-ld"],"parameters":[{"name":"url","in":"query","required":true,"schema":{"type":"string","description":"Absolute public HTTP(S) URL. Private and loopback targets are rejected."}}],"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.20","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/html/aria-static":{"get":{"operationId":"a11y_05","summary":"Static ARIA and duplicate-ID audit","description":"Check one public page for unknown roles, unknown ARIA attributes, duplicate IDs and hidden interactive elements.","tags":["aria","accessibility","html"],"parameters":[{"name":"url","in":"query","required":true,"schema":{"type":"string","description":"Absolute public HTTP(S) URL. Private and loopback targets are rejected."}}],"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.20","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/http/csp":{"get":{"operationId":"hdr_01","summary":"Content-Security-Policy audit","description":"Fetch one public response and inspect CSP presence, required directives, unsafe tokens and wildcards.","tags":["csp","http","security"],"parameters":[{"name":"url","in":"query","required":true,"schema":{"type":"string","description":"Absolute public HTTP(S) URL. Private and loopback targets are rejected."}}],"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.10","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/links/broken":{"get":{"operationId":"lnk_01","summary":"Single-page broken-link audit","description":"Extract up to 20 links from one public page and report unreachable, error and redirecting targets.","tags":["links","http","qa"],"parameters":[{"name":"url","in":"query","required":true,"schema":{"type":"string","description":"Absolute public HTTP(S) URL. Private and loopback targets are rejected."}}],"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.50","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/shop/feed-basic":{"post":{"operationId":"shop_01","summary":"Merchant product-feed basic audit","description":"Check required product fields, ID uniqueness, URLs, availability and price syntax in JSON or CSV.","tags":["merchant-feed","product-data","catalog"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"UTF-8 artifact content up to 2 MB."},"filename":{"type":"string","description":"Optional filename used for interpretation only."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"products.csv"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.30","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/x402/challenge":{"get":{"operationId":"x402_01","summary":"x402 payment challenge audit","description":"Inspect one public x402 endpoint's unpaid 402 response, payment options, networks, amounts and payees.","tags":["x402","payments","http-402"],"parameters":[{"name":"url","in":"query","required":true,"schema":{"type":"string","description":"Absolute public HTTP(S) URL. Private and loopback targets are rejected."}}],"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"OAS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.10","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/container/dockerfile-security":{"post":{"operationId":"docker_01","summary":"Dockerfile security and reproducibility audit","description":"Review Dockerfile instructions for root execution, unpinned images, embedded secrets, unsafe downloads and cache hygiene.","tags":["docker","container","security"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"Dockerfile text up to 2 MB. The file is parsed as text and never built or executed."},"filename":{"type":"string","description":"Optional Dockerfile filename used for interpretation and report metadata."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"Dockerfile"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"DOCKER-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.30","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/iac/terraform-security":{"post":{"operationId":"tf_01","summary":"Terraform security configuration audit","description":"Inspect Terraform HCL for public exposure, broad ingress, wildcard IAM, hardcoded secrets and disabled audit controls.","tags":["terraform","iac","security"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"Terraform HCL source up to 2 MB. Modules, providers and plans are not expanded."},"filename":{"type":"string","description":"Optional .tf filename used for interpretation and report metadata."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"main.tf"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"TF-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.50","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/sql/migration-risk":{"post":{"operationId":"sql_01","summary":"SQL migration risk audit","description":"Review SQL migration statements for destructive DDL, unbounded DML, locking index changes and unsafe column alterations.","tags":["sql","migration","database"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"SQL migration text up to 2 MB. The migration is statically analyzed and never executed."},"filename":{"type":"string","description":"Optional .sql filename used for interpretation and report metadata."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"migration.sql"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"SQL-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.35","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/llms/structure":{"post":{"operationId":"llms_01","summary":"llms.txt structure audit","description":"Check llms.txt title structure, section headings, absolute resource links, labels, anchors and duplicate targets.","tags":["llms-txt","documentation","markdown"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"llms.txt Markdown text up to 2 MB. Resource relevance is not evaluated."},"filename":{"type":"string","description":"Optional llms.txt filename used for report metadata."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"llms.txt"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"LLMS-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.15","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/mcp/config-audit":{"post":{"operationId":"mcp_01","summary":"MCP server configuration audit","description":"Inspect MCP client configuration for missing transports, unpinned package runners, insecure HTTP and literal credentials.","tags":["mcp","configuration","security"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"MCP configuration JSON text up to 2 MB. The configuration is parsed, not launched."},"filename":{"type":"string","description":"Optional MCP config filename used for interpretation and report metadata."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"mcp.json"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"MCP-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.25","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/secrets/env-scan":{"post":{"operationId":"sec_01","summary":"Environment secret exposure scan","description":"Scan .env-style text for literal secret-like variables, credential-bearing database URLs and known token patterns.","tags":["secrets","env","security"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"Environment file text up to 2 MB. Findings omit the submitted values."},"filename":{"type":"string","description":"Optional environment filename used for report metadata."}},"required":["content"]},"example":{"content":"<artifact content>","filename":".env.example"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"SEC-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.20","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/license/package-metadata":{"post":{"operationId":"lic_01","summary":"Package license metadata audit","description":"Review package metadata for missing, deprecated or non-SPDX license declarations and absent license files.","tags":["license","package","metadata"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"package.json text up to 2 MB. Dependency license compatibility is not resolved."},"filename":{"type":"string","description":"Optional package metadata filename used for interpretation and report metadata."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"package.json"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"LIC-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.15","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}},"/v1/github/repository-metadata":{"post":{"operationId":"ghmeta_01","summary":"GitHub repository metadata audit","description":"Inspect exported GitHub repository metadata for archived state, missing discovery fields, security settings and admin permissions.","tags":["github","metadata","security"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"content":{"type":"string","description":"GitHub repository API metadata JSON text up to 2 MB. No GitHub API call is made."},"filename":{"type":"string","description":"Optional metadata filename used for report metadata."}},"required":["content"]},"example":{"content":"<artifact content>","filename":"github-repository.json"}}}},"responses":{"200":{"description":"QPReport/1 report. A completed audit can be PASS or FAIL.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/QPReport"},"example":{"schema":"QPReport/1","service":"QuietProof","sku":"GHMETA-01","status":"FAIL","checked_at":"2026-10-31T00:00:00.000Z","input":{"sha256":"64-hex-character-digest","filename":"openapi.yaml","bytes":1234},"rule_set":"quietproof/oas-structure/v1","findings":[{"rule_id":"OAS_RESPONSES_MISSING","severity":"error","locator":"#/paths/~1pets/get","message":"responses is required for every operation."}],"metrics":{"paths":1,"operations":1},"limitations":["Structural audit only."],"replay":{"service_version":"0.1.0","deterministic_rules":true}}}}},"402":{"description":"x402 payment required."},"422":{"description":"Input rejected; payment is not settled."}},"x-payment-info":{"price":"$0.20","network":"eip155:8453","scheme":"exact","asset":"USDC","payTo":"0x84ceCd9f58d14A86E3f769f9435Be62578aF1F9A"}}}},"components":{"schemas":{"QPReport":{"type":"object","required":["schema","service","sku","status","checked_at","input","rule_set","findings","metrics","limitations"],"properties":{"schema":{"type":"string","const":"QPReport/1"},"service":{"type":"string","const":"QuietProof"},"sku":{"type":"string"},"status":{"type":"string","enum":["PASS","FAIL","INCONCLUSIVE","REJECTED"]},"checked_at":{"type":"string"},"input":{"type":"object","required":["sha256","bytes"],"properties":{"sha256":{"type":"string"},"filename":{"type":"string"},"url":{"type":"string"},"bytes":{"type":"number"}}},"rule_set":{"type":"string"},"findings":{"type":"array","items":{"type":"object","required":["rule_id","severity","locator","message"],"properties":{"rule_id":{"type":"string"},"severity":{"type":"string","enum":["info","warning","error"]},"locator":{"type":"string"},"message":{"type":"string"},"evidence":{}}}},"metrics":{"type":"object"},"limitations":{"type":"array","items":{"type":"string"}},"replay":{"type":"object"}}},"Finding":{"type":"object","required":["rule_id","severity","locator","message"],"properties":{"rule_id":{"type":"string"},"severity":{"type":"string","enum":["info","warning","error"]},"locator":{"type":"string"},"message":{"type":"string"},"evidence":{}}}}}}