{"openapi":"3.1.0","info":{"title":"Relaystation","version":"v1","description":"Pay-per-call API platform for AI agents and developers. Baton — a prepaid storage object configured along five groups (write behavior · capacity · sharing · lifecycle · trust); five named preconfigs (Drop / Pass / Scratchpad / Checkpoint / Ledger) are fast-start prefills, not the organizing principle. Engine-priced everywhere — one quote, frozen at create.","contact":{"url":"https://relaystation.ai","email":"hi@relaystation.ai"},"license":{"name":"Proprietary"}},"servers":[{"url":"https://api.relaystation.ai","description":"production"}],"x-discovery":{"ownershipProofs":["0x5F7254f252eF9b9f92B6B4F2cF91205eD7A96C7A"]},"x-payment-info":{"protocol":"x402","version":2,"scheme":"exact","asset":"USDC","networks":["eip155:84532","eip155:8453"],"facilitator":"https://api.cdp.coinbase.com","discovery":"https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources","description":"Per-call payment via x402 v2 (EIP-3009 exact, USDC/EURC). Billable routes return 402 + accepts[] + a bazaar discovery extension; settled through CDP."},"tags":[{"name":"baton","description":"Storage — store a file, share it by link (no account for the recipient), collaborate on a doc with a person or another agent, save state snapshots, keep an append-only or tamper-evident hash-chained ledger. The prepaid storage object: create, read, write, share, extend."},{"name":"baton-pricing","description":"Storage — public preconfigs + price-of-record (quote before you store)."},{"name":"baton-trust","description":"Storage trust — notarize a document (witness its hash, kept 7 years), prove a witnessed document offline, verify a hash-chain's integrity."},{"name":"esigndoc","description":"Documents & signatures — send a PDF for legally-binding e-signature, place signature/approval boxes, route to multiple signers and approvers in a set order, reuse a contract template, chase unsigned recipients, retrieve the signed copy. (Verify a signed PDF's signatures via pdf_verify_signatures.) Billed per sent envelope."},{"name":"idverify","description":"Identity & compliance — verify a government ID (passport / driver's license / national ID), run a liveness check, match a face to the ID photo, optional AML/PEP screening as part of the check. Government-ID documents only, not arbitrary credentials. Hosted human-in-the-loop; create returns a hostedUrl. Billed per verification."},{"name":"screening","description":"Identity & compliance — screen a name against sanctions (OFAC / EU / UK; UN rides along) and Wikidata-derived PEP lists. Composable pay-per-call; charge-on-attempt. Scope via lists:[sanctions,pep] (default both). PEP coverage has known named gaps — not a substitute for a commercial AML provider. Free sources; attribution returned in every response."},{"name":"cputools","description":"Stateless pay-per-call CPU utilities, grouped by job: Microsoft Office (Word/Excel/PowerPoint → PDF, generate from markdown, Excel I/O), PDF tools (merge/split/OCR/render/watermark/encrypt/verify-signatures), convert documents (markup & HTML→PDF), images, audio & video, data & spreadsheets (SQL/filter/join/pipelines), and text utilities. Inline base64 ≤ 4 MiB or a storage-ref { inputKey } from upload-url."},{"name":"llm","description":"Language & AI tasks — translate, summarize, extract to JSON, classify, proofread, rewrite, sentiment, keywords, title, repair JSON. Task-based (never model-based); pick a tier (budget/value/best), authorize a published ceiling, pay the model's real cost + a small markup. The model behind each tier is named + dated on the disclosure page. GET /v1/llm/tasks is the live catalog."},{"name":"location","description":"Location — geocode an address, reverse-geocode coordinates, search places/POIs, calculate a route (AWS Location Service). Flat pay-per-call."},{"name":"docai","description":"Document AI — OCR with layout, extract form fields/tables, parse invoices/receipts and identity documents, ask questions of a page (sync Textract; single-page docs ≤ 5 MB at launch). Flat pay-per-document."},{"name":"vision","description":"Vision — label objects/scenes, moderate unsafe content, detect faces + attributes, compare faces, recognize celebrities, detect protective equipment (AWS Rekognition). Flat pay-per-image."},{"name":"bridge","description":"Messaging & coordination — give an agent an email address, message another agent, read an agent inbox, ask a human and wait for a reply, or notify a human (Telegram / email / SMS)."},{"name":"contracts","description":"Agreements & arbitration — create a binding-by-goodwill agreement (a hash-chained, auto-witnessed record), sign it (EIP-712 wallet or authenticated account; no cross-method satisfaction), and arbitrate disputes via a transparent AI arbiter. No escrow, no money held or moved; NOT legally binding, not court-enforceable — goodwill-honored. Offline-verifiable via GET /v1/contracts/disclosure."},{"name":"account","description":"Account & billing — balance, transactions, top-up, API keys, product enrollment."},{"name":"auth","description":"Account & billing — wallet-JWT challenge/verify (the crypto-native sign-in)."},{"name":"webhooks","description":"Account & billing — outbound webhook registrations + delivery history."},{"name":"discovery","description":"Discovery — OpenAPI / llms.txt / MCP advertisement / system info."}],"components":{"securitySchemes":{"apiKey":{"type":"http","scheme":"bearer","bearerFormat":"rs_live_<32-hex> | rs_test_<32-hex>","description":"API key minted at app.relaystation.ai after OAuth signup."},"walletJwt":{"type":"http","scheme":"bearer","bearerFormat":"JWT (HS256)","description":"Issued by POST /v1/auth/verify after EIP-191 wallet signature. Used for read paths."},"x402":{"type":"apiKey","in":"header","name":"PAYMENT-SIGNATURE","description":"Base64-encoded EIP-3009 PaymentPayload (USDC or EURC, v2, on Base / Base Sepolia). The 402 challenge advertises one accepts[] entry per accepted asset; sign the chosen one. One call = one payment."},"adminSession":{"type":"apiKey","in":"cookie","name":"rs_admin_session","description":"Operator-only admin session cookie (issued by admin Google OAuth, gated by the admin_users allowlist). Used by the operator-facing admin routes — NOT a customer auth mode. Documented here only so the Courier admin refund operation is discoverable; customers cannot call it."}},"schemas":{"WebhookEventName":{"type":"string","enum":["baton.written","token.used","token.exhausted","pass.all_tokens_consumed","bridge.ask.replied","envelope.sent","envelope.viewed","envelope.signed","envelope.completed","envelope.rejected","envelope.expired","envelope.cancelled","verification.started","verification.document_processed","verification.age_check","verification.manual_review","verification.completed","verification.failed","verification.expired","job.completed"],"description":"A webhook event type from the live allowlist (GET /v1/webhooks/events)."},"V1Webhook":{"type":"object","required":["id","url","events","active","createdAt"],"properties":{"id":{"type":"string","format":"uuid"},"url":{"type":"string","format":"uri"},"events":{"type":"array","items":{"$ref":"#/components/schemas/WebhookEventName"}},"description":{"type":"string","nullable":true},"active":{"type":"boolean"},"consecutiveFailures":{"type":"integer"},"secret":{"type":"string","description":"Returned ONCE on POST /v1/webhooks. Subsequent reads omit."},"createdAt":{"type":"string","format":"date-time"},"updatedAt":{"type":"string","format":"date-time"}}},"TabularFormat":{"type":"string","enum":["csv","tsv","json","ndjson"],"description":"A tabular file format: csv, tsv, json (array of objects), or ndjson."},"V1WebhookDelivery":{"type":"object","properties":{"id":{"type":"string","format":"uuid"},"webhookId":{"type":"string","format":"uuid"},"event":{"type":"string"},"subjectId":{"type":"string","format":"uuid","nullable":true},"status":{"type":"string","enum":["PENDING","SUCCESS","FAILED"]},"attempts":{"type":"integer"},"responseCode":{"type":"integer","nullable":true},"errorMessage":{"type":"string","nullable":true},"createdAt":{"type":"string","format":"date-time"}}},"Error":{"type":"object","required":["error","code"],"properties":{"error":{"type":"string"},"code":{"type":"string"}}}},"responses":{"Unauthorized":{"description":"Missing or invalid auth.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"NotFound":{"description":"Resource not found or not owned by the customer.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"ValidationError":{"description":"Invalid request body or parameters.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}}},"paths":{"/health":{"get":{"tags":["discovery"],"summary":"Health","description":"Health check.","security":[],"responses":{"200":{"description":"OK"}},"operationId":"healthCheck"}},"/openapi.json":{"get":{"tags":["discovery"],"summary":"OpenAPI spec","description":"This OpenAPI 3.1 spec.","security":[],"responses":{"200":{"description":"OpenAPI document."}},"operationId":"getOpenApiSpec"}},"/llms.txt":{"get":{"tags":["discovery"],"summary":"llms.txt","description":"Plain-text capability summary for LLM agent discovery.","security":[],"responses":{"200":{"description":"Capability summary.","content":{"text/plain":{"schema":{"type":"string"}}}}},"operationId":"getLlmsTxt"}},"/llms-full.txt":{"get":{"tags":["discovery"],"summary":"llms-full.txt","description":"Long-form plain-text spec — every endpoint, the five-group baton model + preconfigs, the x402 wire, the trust model.","security":[],"responses":{"200":{"description":"Full agent reference.","content":{"text/plain":{"schema":{"type":"string"}}}}},"operationId":"getLlmsFullTxt"}},"/.well-known/mcp.json":{"get":{"tags":["discovery"],"summary":"MCP advertisement","description":"MCP-server advertisement.","security":[],"responses":{"200":{"description":"MCP advertisement."},"404":{"description":"MCP disabled (`chassis.feature.mcp_enabled = false`)."}},"operationId":"getMcpManifest"}},"/.well-known/ai-catalog.json":{"get":{"tags":["discovery"],"summary":"ARD ai-catalog manifest","description":"Agentic Resource Discovery (ARD) manifest — this host's AI-facing resources (the MCP server, the REST API, llms.txt, the recipe pages) in one machine-readable catalog. ARD v0.9 draft (Linux Foundation WG, 2026-06); media type `application/ai-catalog+json`. Also served on the apex: https://relaystation.ai/.well-known/ai-catalog.json.","security":[],"responses":{"200":{"description":"The ai-catalog manifest (`application/ai-catalog+json`)."}},"operationId":"getAiCatalogManifest"}},"/mcp":{"post":{"tags":["discovery"],"summary":"MCP transport","description":"JSON-RPC over HTTP. Streamable-HTTP MCP server. Methods: `initialize`, `tools/list`, `tools/call`. Auth flows through the same modes as /v1/*: API key, x402, wallet JWT. Brief 150 — URL-parameter fallback: `?key=rs_live_` is accepted when no `Authorization` header is present (for clients like Cowork that only accept a server URL with no Bearer-token field). Bearer header takes precedence; a Bearer-present-but-invalid request is rejected without consulting `?key=`.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"responses":{"200":{"description":"JSON-RPC result."},"503":{"description":"MCP disabled."}},"operationId":"mcpTransport"}},"/v1/auth/challenge":{"get":{"tags":["auth"],"summary":"Wallet challenge","description":"Issue a wallet-sign-in nonce + EIP-191 message.","security":[],"parameters":[{"name":"wallet","in":"query","required":true,"schema":{"type":"string","pattern":"^0x[a-fA-F0-9]{40}$"}}],"responses":{"200":{"description":"Challenge."}},"operationId":"getWalletChallenge"}},"/v1/auth/verify":{"post":{"tags":["auth"],"summary":"Verify signature","description":"Verify EIP-191 signature and mint a wallet JWT.","security":[],"responses":{"200":{"description":"JWT minted."}},"operationId":"verifyWalletSignature"}},"/v1/webhooks":{"post":{"tags":["webhooks"],"summary":"Register","description":"Register a webhook (returns secret ONCE).","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"responses":{"201":{"description":"Webhook registered.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/V1Webhook"}}}}},"operationId":"webhook_register"},"get":{"tags":["webhooks"],"summary":"List","description":"List webhook registrations.","security":[{"apiKey":[]},{"walletJwt":[]}],"responses":{"200":{"description":"Webhook list."}},"operationId":"listWebhooks"}},"/v1/webhooks/events":{"get":{"tags":["webhooks"],"summary":"Event registry","description":"The live event-type allowlist a webhook can subscribe to (the same set returned in a 400 INVALID_EVENTS response). PUBLIC — discovery, no auth, no per-account variation.","security":[],"responses":{"200":{"description":"Event registry — `{ events: string[] }`.","content":{"application/json":{"schema":{"type":"object","required":["events"],"properties":{"events":{"type":"array","items":{"$ref":"#/components/schemas/WebhookEventName"}}}}}}}},"operationId":"listWebhookEvents"}},"/v1/webhooks/{id}":{"get":{"tags":["webhooks"],"summary":"Get","description":"Webhook detail (no secret).","security":[{"apiKey":[]},{"walletJwt":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"Webhook."}},"operationId":"getWebhook"},"put":{"tags":["webhooks"],"summary":"Update","description":"Update webhook (active / events / url / description).","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"Updated."}},"operationId":"updateWebhook"},"delete":{"tags":["webhooks"],"summary":"Delete","description":"Delete webhook (deliveries kept for audit).","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"204":{"description":"Deleted."}},"operationId":"deleteWebhook"}},"/v1/webhooks/{id}/deliveries":{"get":{"tags":["webhooks"],"summary":"Delivery history","description":"Paginated delivery history.","security":[{"apiKey":[]},{"walletJwt":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}},{"name":"limit","in":"query","schema":{"type":"integer","minimum":1,"maximum":100,"default":20}},{"name":"offset","in":"query","schema":{"type":"integer","minimum":0,"default":0}},{"name":"status","in":"query","schema":{"type":"string"}}],"responses":{"200":{"description":"Delivery page."}},"operationId":"listWebhookDeliveries"}},"/v1/account":{"get":{"tags":["account"],"summary":"Get account","description":"Customer profile + balance.","security":[{"apiKey":[]},{"walletJwt":[]}],"responses":{"200":{"description":"Account info."}},"operationId":"getAccount"}},"/v1/account/ledger":{"get":{"tags":["account"],"summary":"List ledger entries","description":"Paginated transaction ledger for the calling customer (credits + debits, newest first). The authoritative source for the customer's balance history. Query: limit (default 50, max 200), offset. The MCP equivalent is the `transactions` tool.","security":[{"apiKey":[]},{"walletJwt":[]}],"parameters":[{"name":"limit","in":"query","required":false,"schema":{"type":"integer","minimum":1,"maximum":200}},{"name":"offset","in":"query","required":false,"schema":{"type":"integer","minimum":0}}],"responses":{"200":{"description":"{ data: LedgerEntry[], pagination }."},"401":{"description":"UNAUTHENTICATED."}},"operationId":"listAccountLedger"}},"/v1/account/products/{product}/enable":{"post":{"tags":["account"],"summary":"Enable product","description":"Enable a Relaystation-family product for the calling customer. Dashboard/interactive auth (rs_session cookie OR wallet-JWT); not an x402-payable route. Idempotent — repeated enables return the same shape. No product slugs are registered yet (KNOWN_PRODUCTS is empty); the endpoint stays as a chassis primitive ready for the first V3-native product.","security":[{"apiKey":[]},{"walletJwt":[]}],"parameters":[{"name":"product","in":"path","required":true,"schema":{"type":"string"}}],"responses":{"200":{"description":"Product enabled."}},"operationId":"enableAccountProduct"}},"/v1/account/products":{"get":{"tags":["account"],"summary":"List enrollments","description":"Enrollment list for the calling customer. Returns the products this customer is enrolled in. Accepts API-key, rs_session, or wallet-JWT. Rejects x402 with X402_NOT_APPLICABLE (lodestone callers per D43 never enroll).","security":[{"apiKey":[]},{"walletJwt":[]}],"responses":{"200":{"description":"Enrollment list (may be empty)."},"400":{"description":"X402_NOT_APPLICABLE."},"401":{"description":"MISSING_AUTH."}},"operationId":"listAccountProducts"}},"/v1/baton/system/info":{"get":{"tags":["discovery"],"summary":"System info","description":"Agent-facing system descriptor (the five-group model, preconfigs, payment modes, merchant wallet, endpoint roster).","security":[],"responses":{"200":{"description":"System info.","content":{"application/json":{"schema":{"type":"object"}}}}},"operationId":"getBatonSystemInfo"}},"/v1/baton/system/egress-ips":{"get":{"tags":["discovery"],"summary":"Egress IPs","description":"Outbound webhook delivery egress IPs (currently dynamic; HMAC-verify advisory in body).","security":[],"responses":{"200":{"description":"Egress IP advisory.","content":{"application/json":{"schema":{"type":"object"}}}}},"operationId":"getBatonEgressIps"}},"/v1/baton/prices":{"get":{"tags":["baton-pricing"],"summary":"Preconfigs","description":"The named preconfigs and their default shapes (resource tuple + headlineCapacity framing) — fast-start prefills, not priced SKUs.","security":[],"responses":{"200":{"description":"Preconfig list."}},"operationId":"baton_prices"}},"/v1/baton/quote":{"post":{"tags":["baton-pricing"],"summary":"Quote","description":"Public price-of-record for any baton shape (a preconfig ref or a custom shape + optional flags). Engine-quoted; never charges.","security":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["preset"],"description":"The price-relevant subset of the create body. Same branch rule: tier \"custom\" (or tier omitted) requires customShape; bundled tiers must not supply one.","properties":{"preset":{"type":"string","enum":["drop","pass","scratchpad","checkpoint","ledger"],"description":"Named preconfig prefill. The LIVE active set is GET /v1/baton/prices."},"tier":{"type":"string","enum":["femto","pico","nano","micro","standard","big","custom"],"description":"Bundled resource tier, or \"custom\" (requires customShape)."},"customShape":{"type":"object","required":["sizeBytes","durationSeconds","maxEgressBytes"],"properties":{"sizeBytes":{"description":"Capacity in bytes (number or stringified bigint)."},"durationSeconds":{"description":"Lifetime in seconds (number or stringified bigint)."},"maxEgressBytes":{"description":"Egress budget in bytes (number or stringified bigint)."},"writesAllowed":{"type":"integer","minimum":0},"readsAllowed":{"type":"integer","minimum":0}}},"flags":{"type":"object","properties":{"hashChaining":{"type":"boolean"},"witness":{"type":"boolean"}},"description":"Echoed on bundle orders (catalog price is the total); priced on custom shapes."}}}}}},"responses":{"200":{"description":"Quote."},"404":{"description":"Preconfig not found."},"422":{"description":"Flag dependency unmet."}},"operationId":"quote_baton"}},"/v1/storage/drop":{"post":{"tags":["baton"],"summary":"Create a drop baton","description":"Store a file and get a durable, shareable URL — no account, no signup; the wallet is the identity. From $0.001; tiers by size, lifetime, egress. Part of Relaystation: 155 agent tools on one balance — storage, e-sign, KYC, PDF/data/media, sub-cent LLM. relaystation.ai\n\nStore a file (single object, multi-read until expiry). Preset-fixed alias of POST /v1/baton — the route injects preset:\"drop\" (overriding any body value) and delegates to the same create handler, so body shape, billing, and the x402 path are identical. Billable — the engine quote of the shape.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","description":"Same body as POST /v1/baton (tier, customShape, content, tokens, flags, …); the preset field is fixed by the route.","properties":{"tier":{"type":"string","enum":["femto","pico","nano","micro","standard","big","custom"],"description":"Bundled resource tier, or \"custom\" (requires customShape)."}}}}}},"responses":{"201":{"description":"The created baton."},"402":{"description":"Payment required (x402 challenge)."},"422":{"description":"Invalid shape."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"createDropBaton"}},"/v1/storage/pass":{"post":{"tags":["baton"],"summary":"Create a pass baton","description":"Hand a file to another agent or person — scoped, read-capped share tokens that burn once consumed. From $0.001; no account for the recipient. Part of Relaystation: 155 agent tools on one balance — storage, e-sign, KYC, PDF/data/media, sub-cent LLM. relaystation.ai\n\nShare a file (single object + a read-capped token; burns once consumed). Preset-fixed alias of POST /v1/baton — the route injects preset:\"pass\" (overriding any body value) and delegates to the same create handler, so body shape, billing, and the x402 path are identical. Billable — the engine quote of the shape.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","description":"Same body as POST /v1/baton (tier, customShape, content, tokens, flags, …); the preset field is fixed by the route.","properties":{"tier":{"type":"string","enum":["femto","pico","nano","micro","standard","big","custom"],"description":"Bundled resource tier, or \"custom\" (requires customShape)."}}}}}},"responses":{"201":{"description":"The created baton."},"402":{"description":"Payment required (x402 challenge)."},"422":{"description":"Invalid shape."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"createPassBaton"}},"/v1/storage/scratchpad":{"post":{"tags":["baton"],"summary":"Create a scratchpad baton","description":"Shared working memory for agents — append, read, and collaborate on a durable scratchpad with per-collaborator tokens; humans get an online editor. From $0.001. Part of Relaystation: 155 agent tools on one balance — storage, e-sign, KYC, PDF/data/media, sub-cent LLM. relaystation.ai\n\nCollaborate (append log + collaborator tokens). Preset-fixed alias of POST /v1/baton — the route injects preset:\"scratchpad\" (overriding any body value) and delegates to the same create handler, so body shape, billing, and the x402 path are identical. Billable — the engine quote of the shape.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","description":"Same body as POST /v1/baton (tier, customShape, content, tokens, flags, …); the preset field is fixed by the route.","properties":{"tier":{"type":"string","enum":["femto","pico","nano","micro","standard","big","custom"],"description":"Bundled resource tier, or \"custom\" (requires customShape)."}}}}}},"responses":{"201":{"description":"The created baton."},"402":{"description":"Payment required (x402 challenge)."},"422":{"description":"Invalid shape."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"createScratchpadBaton"}},"/v1/storage/checkpoint":{"post":{"tags":["baton"],"summary":"Create a checkpoint baton","description":"Save and restore agent state — durable snapshots you overwrite as you go and resume from anywhere. From $0.001, metered by size, lifetime, egress; no account, the wallet is the identity. Part of Relaystation: 155 agent tools on one balance — relaystation.ai\n\nSave state (overwrite; replace the snapshot as you go). Preset-fixed alias of POST /v1/baton — the route injects preset:\"checkpoint\" (overriding any body value) and delegates to the same create handler, so body shape, billing, and the x402 path are identical. Billable — the engine quote of the shape.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","description":"Same body as POST /v1/baton (tier, customShape, content, tokens, flags, …); the preset field is fixed by the route.","properties":{"tier":{"type":"string","enum":["femto","pico","nano","micro","standard","big","custom"],"description":"Bundled resource tier, or \"custom\" (requires customShape)."}}}}}},"responses":{"201":{"description":"The created baton."},"402":{"description":"Payment required (x402 challenge)."},"422":{"description":"Invalid shape."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"createCheckpointBaton"}},"/v1/storage/ledger":{"post":{"tags":["baton"],"summary":"Create a ledger baton","description":"Audited ledger (append, hash-chained; tamper-evident; auto-witnessed). Preset-fixed alias of POST /v1/baton — the route injects preset:\"ledger\" (overriding any body value) and delegates to the same create handler, so body shape, billing, and the x402 path are identical. Billable — the engine quote of the shape.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","description":"Same body as POST /v1/baton (tier, customShape, content, tokens, flags, …); the preset field is fixed by the route.","properties":{"tier":{"type":"string","enum":["femto","pico","nano","micro","standard","big","custom"],"description":"Bundled resource tier, or \"custom\" (requires customShape)."}}}}}},"responses":{"201":{"description":"The created baton."},"402":{"description":"Payment required (x402 challenge)."},"422":{"description":"Invalid shape."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"createLedgerBaton"}},"/v1/baton":{"post":{"tags":["baton"],"summary":"Create","description":"A baton is a durable storage object agents create, append, read, and cryptographically prove — then hand off to other agents or people. Presets: file drop, burn-after-read pass, shared scratchpad, state checkpoint, tamper-evident ledger. Metered by bytes, time, egress, writes; price frozen at purchase. 155 tools, one balance — relaystation.ai\n\nCreate a baton. Billable — the engine quote of the shape (a preconfig ref or a custom shape), floored at the network minimum.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["preset"],"description":"A preconfig ref (preset + tier) or a custom shape (tier \"custom\" or tier omitted + customShape). Bundled tiers must not supply customShape.","properties":{"preset":{"type":"string","enum":["drop","pass","scratchpad","checkpoint","ledger","witness"],"description":"Named preconfig prefill. The LIVE active set is GET /v1/baton/prices."},"tier":{"type":"string","enum":["femto","pico","nano","micro","standard","big","custom"],"description":"Bundled resource tier, or \"custom\" (requires customShape)."},"customShape":{"type":"object","required":["sizeBytes","durationSeconds","maxEgressBytes"],"properties":{"sizeBytes":{"description":"Capacity in bytes (number or stringified bigint)."},"durationSeconds":{"description":"Lifetime in seconds (number or stringified bigint)."},"maxEgressBytes":{"description":"Egress budget in bytes (number or stringified bigint)."},"writesAllowed":{"type":"integer","minimum":0},"readsAllowed":{"type":"integer","minimum":0}}},"contentType":{"type":"string","maxLength":255},"contentEncoding":{"type":"string","enum":["utf-8","base64","binary"]},"name":{"type":"string","maxLength":255},"description":{"type":"string","maxLength":2000},"tags":{"type":"array","items":{"type":"string","maxLength":64},"maxItems":32},"content":{"type":"string","description":"Inline initial content (base64-encoded when contentEncoding is base64/binary). Omit for an empty baton."},"requestPresignedUpload":{"type":"boolean","description":"Mint a presigned-PUT URL for an out-of-band initial upload instead of inline content."},"acl":{"type":"object","additionalProperties":{"type":"string","enum":["editor","reader"]},"description":"Collaborator ACL keyed by customer UUID."},"eventTriggers":{"type":"array","description":"Webhook event triggers; each { url, events[], description? }. The secret is server-minted and returned ONCE.","items":{"type":"object"}},"tokens":{"type":"array","description":"Create-time collaborator tokens; each entry follows the POST /v1/baton/{id}/tokens body.","items":{"type":"object"}},"flags":{"type":"object","properties":{"hashChaining":{"type":"boolean"},"witness":{"type":"boolean"}},"description":"flags.hashChaining: true auto-commits a prepaid witness (an explicit witness: false alongside it → 422 FLAG_DEPENDENCY_UNMET)."},"onExpiration":{"type":"string","enum":["hard_delete","tombstone_then_delete"]},"deleteOnAllTokensConsumed":{"type":"boolean"},"schemaRef":{"type":"string","maxLength":255},"rateLimits":{"type":"object"}}}}}},"responses":{"201":{"description":"Baton created."},"402":{"description":"Payment required (x402 challenge)."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"create_baton"}},"/v1/baton/{id}":{"get":{"tags":["baton"],"summary":"Read","description":"Read a baton (owner-addressed by UUID, OR token-addressed by `tok_<43-char>`).","security":[{"apiKey":[]},{"walletJwt":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"Baton."},"410":{"description":"Content gone."}},"operationId":"read_baton"},"post":{"tags":["baton"],"summary":"Write","description":"Write/append (owner-addressed by UUID, OR token-addressed). Append on append / append-chained batons; overwrite on single-object / overwrite batons.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"201":{"description":"Entry appended."},"409":{"description":"Quota exhausted / baton frozen."}},"operationId":"append_to_baton"},"delete":{"tags":["baton"],"summary":"Delete","description":"Soft-delete; sweeper purges per on_expiration.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"Delete scheduled."}},"operationId":"delete_baton"}},"/v1/baton/{id}/entries":{"get":{"tags":["baton"],"summary":"List entries","description":"Paginated entries (owner or token-addressed).","security":[{"apiKey":[]},{"walletJwt":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}},{"name":"limit","in":"query","schema":{"type":"integer","minimum":1,"maximum":100,"default":20}},{"name":"offset","in":"query","schema":{"type":"integer","minimum":0,"default":0}},{"name":"since","in":"query","schema":{"type":"string"}},{"name":"until","in":"query","schema":{"type":"string"}},{"name":"writer","in":"query","schema":{"type":"string"}},{"name":"type","in":"query","schema":{"type":"string"}}],"responses":{"200":{"description":"Entries page."}},"operationId":"list_entries"}},"/v1/baton/{id}/tail":{"get":{"tags":["baton"],"summary":"Tail","description":"Long-poll for new entries (owner or token-addressed).","security":[{"apiKey":[]},{"walletJwt":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"New entries since `?since=`."}},"operationId":"tail_baton"}},"/v1/baton/{id}/add":{"post":{"tags":["baton"],"summary":"Add resources","description":"Buy more of the same preconfig (another tier of resources). Billable. Owner only.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["tier"],"properties":{"tier":{"type":"string","enum":["femto","pico","nano","micro","standard","big"],"description":"The tier bundle to add (the baton's frozen preset, at this tier's resources + price)."}}}}}},"responses":{"200":{"description":"Additive resources applied.","content":{"application/json":{"schema":{"type":"object","description":"The updated baton after the tier was added.","properties":{"id":{"type":"string","format":"uuid"},"preset":{"type":"string"},"tier":{"type":"string"},"sizeBytes":{"type":"string","description":"Total size quota after the add (micros/bytes as string)."},"expiresAt":{"type":"string","format":"date-time"},"egressBytes":{"type":"string"}},"additionalProperties":true}}}}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"add_baton"}},"/v1/baton/{id}/extend":{"post":{"tags":["baton"],"summary":"Extend","description":"Buy à-la-carte dimensions (size / duration / egress / writes). At least one required. addDurationSeconds pushes the expiry out (expiry = createdAt + total durationSeconds). Billable; engine-quoted. Owner only.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","description":"At least one of the four must be provided.","properties":{"addDurationSeconds":{"type":"string","description":"Seconds of life to ADD (decimal string). Pushes the expiry out."},"addSizeBytes":{"type":"string","description":"Bytes of capacity to add (decimal string)."},"addEgressBytes":{"type":"string","description":"Egress (read) budget bytes to add (decimal string)."},"addWritesAllowed":{"type":"integer","minimum":0,"description":"Additional writes to allow."}}}}}},"responses":{"200":{"description":"Dimensions extended.","content":{"application/json":{"schema":{"type":"object","description":"The updated baton after the à-la-carte dimensions were applied.","properties":{"id":{"type":"string","format":"uuid"},"sizeBytes":{"type":"string"},"expiresAt":{"type":"string","format":"date-time"},"egressBytes":{"type":"string"},"maxWrites":{"type":"integer"}},"additionalProperties":true}}}}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"extend_baton"}},"/v1/baton/{id}/meta":{"get":{"tags":["baton"],"summary":"Read metadata","description":"Read metadata + flags snapshot.","security":[{"apiKey":[]},{"walletJwt":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"Metadata."}},"operationId":"baton_meta"},"post":{"tags":["baton"],"summary":"Update metadata","description":"Mutate metadata (allowlisted fields only).","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"Metadata updated."},"422":{"description":"INVALID_FIELD."}},"operationId":"updateBatonMeta"}},"/v1/baton/{id}/event-logs":{"get":{"tags":["baton"],"summary":"Audit log","description":"Paginated audit log.","security":[{"apiKey":[]},{"walletJwt":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}},{"name":"limit","in":"query","schema":{"type":"integer","minimum":1,"maximum":100,"default":20}},{"name":"offset","in":"query","schema":{"type":"integer","minimum":0,"default":0}},{"name":"since","in":"query","schema":{"type":"string"}},{"name":"until","in":"query","schema":{"type":"string"}},{"name":"writer","in":"query","schema":{"type":"string"}},{"name":"type","in":"query","schema":{"type":"string"}}],"responses":{"200":{"description":"Audit log page."}},"operationId":"getBatonEventLogs"}},"/v1/baton/{id}/tokens":{"post":{"tags":["baton"],"summary":"Share a file or add a collaborator (mint an access token)","description":"Mint a collaborator token (read / write / read_write capability + per-token caps). Owner-only, free.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["type"],"properties":{"type":{"type":"string","enum":["read","write","read_write"]},"reads_allowed":{"type":["integer","null"],"minimum":0,"description":"Per-token read sub-cap; null/omitted = unlimited within the baton bundle."},"writes_allowed":{"type":["integer","null"],"minimum":0,"description":"Per-token write sub-cap; null/omitted = unlimited within the baton bundle."},"expires_at":{"type":["string","null"],"format":"date-time"},"require_fingerprint":{"type":"boolean"},"ip_allow_list":{"type":"array","items":{"type":"string","maxLength":64},"maxItems":64,"description":"IPv4 CIDRs only (an IPv6 CIDR → 422 IPV6_NOT_SUPPORTED)."}}}}}},"responses":{"201":{"description":"Token issued."}},"operationId":"mint_token"},"get":{"tags":["baton"],"summary":"List tokens","description":"List tokens (includes revoked).","security":[{"apiKey":[]},{"walletJwt":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"Token list."}},"operationId":"listBatonTokens"}},"/v1/baton/{id}/tokens/{tokenId}":{"post":{"tags":["baton"],"summary":"Modify or revoke","description":"Modify (mutable subset) OR revoke a token. Owner-only, free.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}},{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}}],"responses":{"200":{"description":"Token modified / revoked."}},"operationId":"revoke_token"}},"/v1/baton/{id}/trust/document-witness":{"post":{"tags":["baton-trust"],"summary":"Witness","description":"Freeze + sign the baton. Conditionally billable ($0.05 standalone OR free on prepaid path).","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"Baton witnessed."},"409":{"description":"ALREADY_WITNESSED / BATON_NOT_ACTIVE / CHAIN_NOT_INITIALIZED."},"422":{"description":"witness_key_not_configured."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"witness_baton"}},"/v1/baton/{id}/trust/verify-chain":{"post":{"tags":["baton-trust"],"summary":"Verify chain","description":"Verify chained-hash integrity (modes: links | full). FREE.","security":[{"apiKey":[]},{"walletJwt":[]}],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"requestBody":{"required":false,"content":{"application/json":{"schema":{"type":"object","properties":{"mode":{"type":"string","enum":["links","full"],"description":"Default links. 'full' re-hashes entry content and is gated by the baton.trust.verify_chain_full_enabled tunable — 403 MODE_DISABLED when off."}}}}}},"responses":{"200":{"description":"Chain status."}},"operationId":"verifyBatonChain"}},"/v1/baton/{id}/trust/challenge":{"post":{"tags":["baton-trust"],"summary":"Challenge","description":"Match a candidate against a witnessed baton. PUBLIC, FREE, per-IP rate-limited.","security":[],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"Match result."},"429":{"description":"Rate-limited."}},"operationId":"challengeBatonProof"}},"/v1/baton/{id}/trust/proof":{"get":{"tags":["baton-trust"],"summary":"Get proof","description":"Retrieve the signed attestation. PUBLIC, FREE.","security":[],"parameters":[{"name":"id","in":"path","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"Proof envelope."},"409":{"description":"NOT_WITNESSED."}},"operationId":"getBatonProof"}},"/v1/cputools/upload-url":{"post":{"tags":["cputools"],"summary":"Mint a storage-ref upload URL","description":"Mint a customer-scoped presigned POST for the storage-ref input path — used to upload a file too large for the inline base64 field (> cputools.io.max_inline_bytes, 4 MiB) before passing { inputKey } to a PDF op. NOT billable (minting is free; the op that consumes the bytes bills). Auth: api-key / wallet-JWT / cookie, OR a verify-only x402 payment (the EIP-712 signature is verified but NOT settled — this lets an account-less x402 lodestone caller obtain a scoped key and transform files > 4 MB). The minted key is scoped to the resolved customer (scratch//); a cputool only admits the caller's own keys. Returns an HTML-form-style multipart POST (Brief 149): the client POSTs multipart/form-data to `url` with every `fields` entry plus a `file` part — NOT a raw PUT. The upload is hard-capped at cputools.io.max_storage_ref_bytes (50 MiB) by the presigned-POST content-length-range.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":false,"content":{"application/json":{"schema":{"type":"object","properties":{"ext":{"type":"string","maxLength":12,"description":"Optional file extension, sanitized to [a-z0-9]{0,12}."},"contentType":{"type":"string","maxLength":255}}}}}},"responses":{"201":{"description":"{ url, fields, inputKey, expiresAt, maxBytes } — POST multipart/form-data (all fields + a `file` part) to `url`; then pass { inputKey } to a PDF op."},"401":{"description":"No account identity and no valid x402 signature."}},"operationId":"cputools_upload_url"}},"/v1/outputs/{key}":{"get":{"tags":["cputools"],"summary":"Re-fetch a stored op output","description":"Stable re-fetch for any binary op output (the `outputKey` an op returned when its output exceeded the inline threshold). The presigned `outputUrl` an op returns expires in ~1 h; this route re-mints a fresh one on demand for as long as the underlying scratch object lives (≤ 24 h bucket lifecycle), then 404s. NOT billable. Returns an output record (JSON) — programmatic-first, not the bytes: { outputKey, url (fresh presigned GET, ~1 h), sizeBytes, contentType, expiresAt } where `url` IS the immediate download. Auth = the same ownership gate as a storage-ref input: the key must live under the caller's scratch// namespace (resolved via api-key / wallet-JWT / cookie OR a verify-only x402 signature). A no-identity caller, or a key under another tenant's namespace, gets 404 — never 403, never a cross-customer existence oracle.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"parameters":[{"name":"key","in":"path","required":true,"schema":{"type":"string"},"description":"The full scratch output key (scratch//.) — exactly the `outputKey` an op returned."}],"responses":{"200":{"description":"{ outputKey, url, sizeBytes, contentType, expiresAt } — `url` is a fresh presigned GET (~1 h) for the current object."},"404":{"description":"No such output under the caller's namespace, or the object has aged past the 24 h scratch lifecycle."}},"operationId":"getOutput"}},"/v1/pdf/merge":{"post":{"tags":["cputools"],"summary":"Merge PDFs","description":"$0.001/page. Combine any number of PDFs into one, in the order you choose. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nConcatenate 2+ PDFs into one. Body: { files: [, …], filename? } where each is { inline: } (≤ 4 MiB decoded) or { inputKey: }. Billed per output page. Output: { output: { inline?: | outputKey + outputUrl (presigned GET, when > 4 MiB), sizeBytes, contentType } }.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"responses":{"200":{"description":"Merged PDF (uniform JSON output envelope)."},"402":{"description":"Payment required (x402 challenge with the body-derived price)."},"404":{"description":"A storage-ref inputKey is not owned by the caller."},"413":{"description":"A storage-ref input exceeds max_storage_ref_bytes."},"422":{"description":"INPUT_TOO_LARGE (inline > 4 MiB) / INPUT_EMPTY / PDF_PARSE_FAILED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_merge"}},"/v1/pdf/split":{"post":{"tags":["cputools"],"summary":"Split a PDF","description":"$0.001/page. Split a PDF by page ranges or burst it into single pages. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nSplit one PDF into multiple. Body: { file: , ranges?: \"1-3,5\", burst?: true }. `burst` (or no ranges) = one file per page; `ranges` = one file per comma segment. Billed per SOURCE page. Capped at cputools.pdf.split.max_outputs (100). Output: a manifest { files: [{ index, outputKey, outputUrl (presigned GET), pages, sizeBytes }, …] } — never inline.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"responses":{"200":{"description":"Split manifest of presigned-GET refs."},"402":{"description":"Payment required (x402 challenge)."},"404":{"description":"inputKey not owned by the caller."},"413":{"description":"Input exceeds max_storage_ref_bytes."},"422":{"description":"BAD_RANGE / TOO_MANY_OUTPUTS / PDF_PARSE_FAILED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_split"}},"/v1/pdf/rotate":{"post":{"tags":["cputools"],"summary":"Rotate pages","description":"$0.001/page. Rotate PDF pages — all or a selection, any multiple of 90°. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nRotate pages by 90/180/270°. Body: { file: , degrees: \"90\"|\"180\"|\"270\", pages?: \"all\"|\"1-3,5\" } (pages are 1-based; folds onto existing rotation). Billed per rotated page. Output: uniform JSON output envelope.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["file","degrees"],"properties":{"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"degrees":{"type":"string","enum":["90","180","270"]},"pages":{"type":"string","description":"1-based pages/ranges, \"all\" or \"1-3,5\" (default all)."}}}}}},"responses":{"200":{"description":"Rotated PDF."},"402":{"description":"Payment required (x402 challenge)."},"404":{"description":"inputKey not owned by the caller."},"422":{"description":"BAD_RANGE / PDF_PARSE_FAILED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_rotate"}},"/v1/pdf/pages":{"post":{"tags":["cputools"],"summary":"Delete / reorder / insert pages","description":"$0.001/page. Delete, reorder, or insert PDF pages — restructure without desktop software. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nEdit the page set. Body is a discriminated union on `action`: { action:\"delete\", file, pages:\"2,4-5\" } | { action:\"reorder\", file, order:[3,1,2] } | { action:\"insert\", file, insert:, at:1 }. All page references are 1-based; insert `at`=N+1 appends. Billed per RESULT page. Output: uniform JSON output envelope.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"oneOf":[{"type":"object","required":["action","file","pages"],"properties":{"action":{"type":"string","enum":["delete"]},"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"pages":{"type":"string","description":"1-based pages/ranges to delete, e.g. \"2,4-5\"."}}},{"type":"object","required":["action","file","order"],"properties":{"action":{"type":"string","enum":["reorder"]},"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"order":{"type":"array","items":{"type":"integer","minimum":1},"minItems":1,"description":"1-based page order, e.g. [3,1,2]."}}},{"type":"object","required":["action","file","insert","at"],"properties":{"action":{"type":"string","enum":["insert"]},"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"insert":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"at":{"type":"integer","minimum":1,"description":"1-based insert position; at = N+1 appends."}}}]}}}},"responses":{"200":{"description":"Edited PDF."},"402":{"description":"Payment required (x402 challenge)."},"404":{"description":"inputKey not owned by the caller."},"422":{"description":"BAD_RANGE / PDF_PARSE_FAILED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_pages"}},"/v1/pdf/extract-text":{"post":{"tags":["cputools"],"summary":"Extract text","description":"$0.002/page. Pull text and structure out of a PDF — clean input for LLMs and search. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nExtract text via unpdf (a serverless pdf.js build). Body: { file: , pages?: \"1-3,5\" }. Billed per source page. Output: JSON { totalPages, pages: [{ page, text }, …], text } — no bytes.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"responses":{"200":{"description":"Extracted per-page + merged text."},"402":{"description":"Payment required (x402 challenge)."},"404":{"description":"inputKey not owned by the caller."},"422":{"description":"BAD_RANGE / PDF_PARSE_FAILED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_extract_text"}},"/v1/pdf/metadata":{"post":{"tags":["cputools"],"summary":"Get / set metadata","description":"$0.001/call. Read or set PDF document metadata — title, author, keywords, dates. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nRead or write document metadata. Body: { file: , set?: { title?, author?, subject?, keywords?, creator?, producer? } }. No `set` → returns the metadata JSON; with `set` → returns the modified PDF (uniform JSON output envelope). Flat-billed (cputools.price.pdf.metadata.flat_micros).","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"responses":{"200":{"description":"Metadata JSON (get) or modified PDF (set)."},"402":{"description":"Payment required (x402 challenge)."},"404":{"description":"inputKey not owned by the caller."},"422":{"description":"PDF_PARSE_FAILED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_metadata"}},"/v1/pdf/watermark":{"post":{"tags":["cputools"],"summary":"Watermark / stamp","description":"$0.001/page. Stamp text watermarks across PDF pages — DRAFT, CONFIDENTIAL, or your own. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nStamp text on pages. Body: { file: , text, opacity?:0-1, size?:int, color?:\"#RRGGBB\", position?:\"center\"|\"top-left\"|\"top-right\"|\"bottom-left\"|\"bottom-right\", pages?:\"all\"|\"1-3\" }. Billed per stamped page. Output: uniform JSON output envelope.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["file","text"],"properties":{"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"text":{"type":"string","minLength":1,"maxLength":500},"opacity":{"type":"number","minimum":0,"maximum":1},"size":{"type":"integer","minimum":1,"maximum":400},"color":{"type":"string","pattern":"^#?[0-9a-fA-F]{6}$"},"position":{"type":"string","enum":["center","top-left","top-right","bottom-left","bottom-right"]},"pages":{"type":"string","description":"1-based pages/ranges, \"all\" or \"1-3\" (default all)."}}}}}},"responses":{"200":{"description":"Watermarked PDF."},"402":{"description":"Payment required (x402 challenge)."},"404":{"description":"inputKey not owned by the caller."},"422":{"description":"BAD_RANGE / PDF_PARSE_FAILED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_watermark"}},"/v1/pdf/form":{"post":{"tags":["cputools"],"summary":"Form-fill / flatten","description":"$0.001/page. Fill or flatten PDF forms programmatically — field values in, finished PDF out. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nFill AcroForm fields and/or flatten. Body: { file: , fields?: { : }, flatten?: bool } — string → text/dropdown/radio, boolean → checkbox. Billed per page. Output: uniform JSON output envelope.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"responses":{"200":{"description":"Filled/flattened PDF."},"402":{"description":"Payment required (x402 challenge)."},"404":{"description":"inputKey not owned by the caller."},"422":{"description":"FIELD_NOT_FOUND / FIELD_TYPE_MISMATCH / PDF_PARSE_FAILED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_form"}},"/v1/pdf/encrypt":{"post":{"tags":["cputools"],"summary":"Password-protect a PDF","description":"$0.001/page. Password-protect a PDF with 256-bit AES and set permissions. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nEncrypt (password-protect) a PDF via qpdf (256-bit AES) in the cputools worker. Body: { file: , userPassword?, ownerPassword?, print?, copy?, modify?, annotate?, fillForms?, extract?, assemble?, printHighRes? } (at least one password; neither may start with \"-\"). Standard PDF model: an ownerPassword alone leaves the open (user) password EMPTY — anyone opens, permissions are owner-gated. The optional permission booleans (the canonical PDF permission octet) map to qpdf restriction flags; an ABSENT boolean means the qpdf default (allowed). print + printHighRes fold into one print level (none/low/full). `copy` is the live text/graphics extraction control; `extract` is the accessibility-extraction bit, which PDF 2.0 / 256-bit encryption deprecated and always grants (so extract:false may be a no-op). Billed per page. Output: uniform JSON envelope (the encrypted PDF). Passwords ride only in the IAM-gated worker invoke — never logged.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["file"],"properties":{"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"userPassword":{"type":"string","minLength":1,"maxLength":500,"description":"The open password. Must not start with \"-\"."},"ownerPassword":{"type":"string","minLength":1,"maxLength":500,"description":"The permissions password. Must not start with \"-\"."},"print":{"type":"boolean","description":"Allow printing (absent = allowed). Pair with printHighRes for the print level."},"copy":{"type":"boolean","description":"Allow text/graphics extraction — the live \"copy\" permission (absent = allowed)."},"modify":{"type":"boolean","description":"Allow document modification (absent = allowed)."},"annotate":{"type":"boolean","description":"Allow annotation (absent = allowed)."},"fillForms":{"type":"boolean","description":"Allow filling in form fields (absent = allowed)."},"extract":{"type":"boolean","description":"Allow extraction for accessibility (absent = allowed). NOTE: PDF 2.0 / 256-bit encryption deprecated this bit and always grants it — may be a no-op; use `copy` to control extraction."},"assemble":{"type":"boolean","description":"Allow document assembly — insert/delete/rotate pages (absent = allowed)."},"printHighRes":{"type":"boolean","description":"Allow high-resolution printing (absent = allowed). With print:true, printHighRes:false restricts to low-res printing."}}}}}},"responses":{"200":{"description":"Encrypted PDF (uniform JSON output envelope)."},"402":{"description":"Payment required (x402 challenge with the per-page price)."},"404":{"description":"A storage-ref inputKey is not owned by the caller."},"413":{"description":"A storage-ref input exceeds max_storage_ref_bytes."},"422":{"description":"PDF_PARSE_FAILED / BAD_REQUEST (no password)."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_encrypt"}},"/v1/pdf/compress":{"post":{"tags":["cputools"],"summary":"Compress a PDF","description":"$0.001/page. Recompress and linearize a PDF — smaller files, fast web view. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nRecompress a PDF via qpdf (object + content streams, flate) in the cputools worker. Body: { file: , linearize?: bool } (linearize = web \"fast view\" / byte-range streaming — there is no separate pdf/linearize op). Billed PER PAGE — not by savings; the compression ratio varies by document (an already-optimized PDF may not shrink). Output: uniform JSON envelope (the recompressed PDF).","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["file"],"properties":{"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"linearize":{"type":"boolean","description":"Web-optimize (linearize) the output for byte-range \"fast view\" streaming (default false)."}}}}}},"responses":{"200":{"description":"Recompressed PDF (uniform JSON output envelope)."},"402":{"description":"Payment required (x402 challenge with the per-page price)."},"404":{"description":"A storage-ref inputKey is not owned by the caller."},"413":{"description":"A storage-ref input exceeds max_storage_ref_bytes."},"422":{"description":"PDF_PARSE_FAILED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_compress"}},"/v1/pdf/render":{"post":{"tags":["cputools"],"summary":"Render PDF pages to images","description":"$0.001/page. Rasterize PDF pages to PNG or JPEG — previews, thumbnails, vision-model input. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nRasterize PDF pages to PNG/JPEG via poppler pdftoppm in the cputools worker. Body: { file: , pages?: \"1-3,5\" (default all), dpi?: int ≤ cputools.render.max_dpi (300), format?: \"png\"|\"jpeg\" }. Non-embedded standard-14 fonts render via a vendored DejaVu Sans + fontconfig. Billed per OUTPUT page. Capped at cputools.render.max_pages (40). Output: a manifest { images: [{ index, page, outputKey, outputUrl (presigned GET) }, …] } — never inline.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["file"],"properties":{"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"pages":{"type":"string","description":"1-based pages/ranges, e.g. \"1-3,5\" (default all)."},"dpi":{"type":"integer","minimum":36,"maximum":600,"description":"Render DPI; runtime-capped at cputools.render.max_dpi."},"format":{"type":"string","enum":["png","jpeg"]}}}}}},"responses":{"200":{"description":"Render manifest of presigned-GET image refs."},"402":{"description":"Payment required (x402 challenge with the per-page price)."},"404":{"description":"A storage-ref inputKey is not owned by the caller."},"413":{"description":"A storage-ref input exceeds max_storage_ref_bytes."},"422":{"description":"BAD_RANGE / RENDER_TOO_MANY_PAGES / DPI_TOO_HIGH / PDF_PARSE_FAILED / PDF_ENCRYPTED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_render"}},"/v1/pdf/ocr":{"post":{"tags":["cputools"],"summary":"OCR a PDF","description":"$0.003/page. Extract text from a scanned PDF (Tesseract) — make paper searchable data. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nExtract text from a scanned/image PDF via pdftoppm → tesseract (LSTM) in the cputools worker. Body: { file: , pages?: \"1-3,5\" (default all), lang?: }. SYNCHRONOUS and capped at cputools.ocr.max_sync_pages (5) — the call must clear the 30 s API-Gateway timeout; larger asynchronous jobs are coming. Billed per SOURCE page (premium tier). Output: JSON { pages: [{ page, text }, …], text } — no bytes.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["file"],"properties":{"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"pages":{"type":"string","description":"1-based pages/ranges, e.g. \"1-3,5\" (default all)."},"lang":{"type":"string","enum":["eng","spa","fra","deu","ita","por","nld","pol","rus","chi_sim"],"description":"OCR language tag (default \"eng\"). The live roster is the operator-tunable cputools.ocr.langs (deployed traineddata: eng, spa, fra, deu, ita, por, nld, pol, rus, chi_sim); an off-roster lang is a free 422 UNSUPPORTED_LANG naming the roster."}}}}}},"responses":{"200":{"description":"Per-page + merged OCR text."},"402":{"description":"Payment required (x402 challenge)."},"404":{"description":"inputKey not owned by the caller."},"413":{"description":"Input exceeds max_storage_ref_bytes."},"422":{"description":"BAD_RANGE / OCR_TOO_MANY_PAGES_SYNC / UNSUPPORTED_LANG (free, names the roster) / PDF_PARSE_FAILED / PDF_ENCRYPTED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_ocr"}},"/v1/pdf/ocr-searchable":{"post":{"tags":["cputools"],"summary":"Make a scanned PDF searchable (OCR text layer)","description":"$0.004/page. Add an invisible OCR text layer to a scanned PDF — looks identical, fully searchable. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nConvert a scanned/image PDF into a SEARCHABLE PDF: per page, pdftoppm rasterizes, tesseract emits a page PDF with the image + an invisible text layer, and qpdf merges them. Body: { file: , pages?: \"1-3,5\" (default all), lang?: }. SYNCHRONOUS and capped at cputools.ocr.max_sync_pages (5). Billed per SOURCE page at cputools.price.pdf.ocr-searchable.per_page_micros — a premium over plain OCR (it runs OCR plus PDF assembly). Output: the uniform JSON envelope, ALWAYS as a storage ref ({ output: { outputKey, outputUrl (presigned GET), sizeBytes, contentType: \"application/pdf\", filename } }) — never inline, even for small outputs (the render convention).","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["file"],"properties":{"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"pages":{"type":"string","description":"1-based pages/ranges, e.g. \"1-3,5\" (default all)."},"lang":{"type":"string","enum":["eng","spa","fra","deu","ita","por","nld","pol","rus","chi_sim"],"description":"OCR language tag (default \"eng\"). The live roster is the operator-tunable cputools.ocr.langs (deployed traineddata: eng, spa, fra, deu, ita, por, nld, pol, rus, chi_sim); an off-roster lang is a free 422 UNSUPPORTED_LANG naming the roster."}}}}}},"responses":{"200":{"description":"Searchable PDF (storage-ref output envelope — outputKey + presigned outputUrl)."},"402":{"description":"Payment required (x402 challenge with the per-page price)."},"404":{"description":"A storage-ref inputKey is not owned by the caller."},"413":{"description":"A storage-ref input exceeds max_storage_ref_bytes."},"422":{"description":"BAD_RANGE / OCR_TOO_MANY_PAGES_SYNC / UNSUPPORTED_LANG (free, names the roster) / PDF_PARSE_FAILED / PDF_ENCRYPTED."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_ocr_searchable"}},"/v1/image/ocr":{"post":{"tags":["cputools"],"summary":"OCR an image","description":"$0.003/call. Extract text from an image — Tesseract, 10 languages, plain text out. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nExtract text from a raster image (PNG/JPEG/TIFF/BMP/WebP — anything leptonica reads) via tesseract (LSTM) in the cputools worker. Body: { file: , lang?: , tsv?: bool }. With tsv: true the response also carries tesseract's TSV (per-word bounding boxes + confidences). No pre-charge image-format guard — tesseract is the parser; a non-image input is a refunded 422 IMAGE_PARSE_FAILED. FLAT-billed (cputools.price.image.ocr.flat_micros). Output: JSON { text, tsv? } — no bytes.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["file"],"properties":{"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."},"lang":{"type":"string","enum":["eng","spa","fra","deu","ita","por","nld","pol","rus","chi_sim"],"description":"OCR language tag (default \"eng\"). The live roster is the operator-tunable cputools.ocr.langs (deployed traineddata: eng, spa, fra, deu, ita, por, nld, pol, rus, chi_sim); an off-roster lang is a free 422 UNSUPPORTED_LANG naming the roster."},"tsv":{"type":"boolean","description":"Also return tesseract TSV (per-word boxes + confidences)."}}}}}},"responses":{"200":{"description":"Extracted text (+ optional TSV)."},"402":{"description":"Payment required (x402 challenge with the flat price)."},"404":{"description":"A storage-ref inputKey is not owned by the caller."},"413":{"description":"A storage-ref input exceeds max_storage_ref_bytes."},"422":{"description":"UNSUPPORTED_LANG (free, names the roster) / IMAGE_PARSE_FAILED (input is not a readable raster image — refunded)."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"image_ocr"}},"/v1/pdf/repair":{"post":{"tags":["cputools"],"summary":"Repair a damaged PDF","description":"$0.001/page. Diagnose and rewrite a damaged PDF — recover files other tools reject. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nDiagnose and rewrite a damaged PDF via qpdf in the cputools worker: `qpdf --check` produces a findings report (exit 0 clean / 2 errors / 3 warnings), then a full re-serialization reconstructs the xref and normalizes structure. Body: { file: }. Billed per page (compress's grain — same engine, structural rewrite). Output: { output: { outputKey, outputUrl (presigned GET), sizeBytes, contentType: \"application/pdf\", filename }, repair: { exitCode, findings: [...] } } — the repaired PDF is ALWAYS a storage ref. A PDF too damaged to parse at all is a 422 PDF_PARSE_FAILED.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["file"],"properties":{"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."}}}}}},"responses":{"200":{"description":"Repaired PDF (storage-ref output envelope) + the qpdf --check findings report."},"402":{"description":"Payment required (x402 challenge with the per-page price)."},"404":{"description":"A storage-ref inputKey is not owned by the caller."},"413":{"description":"A storage-ref input exceeds max_storage_ref_bytes."},"422":{"description":"PDF_PARSE_FAILED (unparseable beyond repair) / PDF_ENCRYPTED / WRONG_PASSWORD."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_repair"}},"/v1/pdf/verify-signatures":{"post":{"tags":["cputools"],"summary":"Verify PDF digital signatures (structural)","description":"$0.001/call. Verify a PDF's digital signatures — structural + digest checks, results as JSON. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nInspect a PDF's digital signatures via poppler pdfsig in the cputools worker. Body: { file: }. HONEST SEMANTICS: this is STRUCTURAL verification + digest intactness — signature present, the signed byte range unmodified (signatureValidation), signer identity fields surfaced (common name, DN, signing time, hash algorithm). Certificate-chain trust is NOT evaluated — no CA store is deployed, so certificateValidation typically reports the chain could not be checked. FLAT-billed (cputools.price.pdf.verify-signatures.flat_micros). Output: JSON { signatures: [{ index, signerCommonName?, signerDistinguishedName?, signingTime?, hashAlgorithm?, signatureType?, signatureValidation?, certificateValidation? }, …], signatureCount } — an UNSIGNED document returns signatures: [] (not an error). Pairs with the e-sign product (esigndoc) as the verification half.","security":[{"apiKey":[]},{"walletJwt":[]},{"x402":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","required":["file"],"properties":{"file":{"type":"object","description":"cputools input-source: { inline: } or { inputKey: }."}}}}}},"responses":{"200":{"description":"Signature report (possibly empty — unsigned is a normal outcome)."},"402":{"description":"Payment required (x402 challenge with the flat price)."},"404":{"description":"A storage-ref inputKey is not owned by the caller."},"413":{"description":"A storage-ref input exceeds max_storage_ref_bytes."},"422":{"description":"PDF_PARSE_FAILED (input is not a usable PDF — refunded)."}},"x-payment-info":{"protocols":["x402"],"scheme":"exact","asset":"USDC","networks":["eip155:8453","eip155:84532"],"price":{"mode":"dynamic","currency":"USD","min":"0.001","max":"1.00"}},"operationId":"pdf_verify_signatures"}},"/v1/pdf/from-html":{"post":{"tags":["cputools"],"summary":"Generate a PDF from HTML (headless Chromium)","description":"$0.003/call. Render HTML to PDF — sandboxed headless Chromium, print-quality output. 1¢ x402 min; remainder auto-credits — relaystation.ai/penny\n\nRender caller-supplied HTML to a PDF on headless Chromium (a dedicated render worker) — invoices, reports, contracts, certificates. Body: { html: string, options?: { format?: \"A4\"|\"Letter\"|\"Legal\"|\"A3\"|\"A5\"|\"Tabloid\"|\"Ledger\", landscape?, printBackground?, scale?: 0.1–2, margin?: { top, right, bottom, left }, displayHeaderFooter?, headerTemplate?, footerTemplate?, pageRanges?: \"1-5, 8\", tagged? } }. Header/footer templates are HTML print furniture (use the `date`/`title`/`url`/`pageNumber`/`totalPages` classes); supplying one implies displayHeaderFooter unless you set it false. `pageRanges` prints a subset; `tagged` (default true) emits an accessible/tagged PDF. SANDBOXED: the renderer has NO network and NO JavaScript — every request whose scheme is not `data:` is aborted (external URLs, `