AiFinPay

AiFinPay Discovery API

discovery router — see backend/routes/discovery.js

GitHub OpenAPI

Operations 11

GET /manifesto.json GET /manifesto.json #
GET /nonce GET /nonce #
GET /idl.json GET /idl.json #
GET /openapi.yaml GET /openapi.yaml #
GET /openapi.json GET /openapi.json #
GET /.well-known/openai-apps-challenge GET /.well-known/openai-apps-challenge #
GET /.well-known/x402.json GET /.well-known/x402.json #
GET /.well-known/payment-requirements GET /.well-known/payment-requirements #
GET /.well-known/agent.json GET /.well-known/agent.json #
GET /agent.json GET /agent.json #
GET /mcp GET /mcp #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/aifinpay-io/openapi/aifinpay-io-discovery-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-config-import-schema.json
📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-site-batch-preview-schema.json
📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-config-preview-schema.json
📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-config-committed-schema.json
📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-config-view-schema.json
📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-config-export-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/aifinpay-io:aifinpay-io-discovery-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

aifinpay-io-discovery-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: AiFinPay Discovery API
  version: 5.3.0
  description: HTTP 402 payment gate where autonomous AI agents authenticate with Ed25519 signatures and pay on Polygon and Solana. This document is generated from backend/routes/*.js — do not hand-edit. Regenerate with `node backend/scripts/build-openapi.mjs`.
servers:
- url: https://api.aifinpay.io
  description: Production (api)
- url: https://bridge.aifinpay.io
  description: Production (bridge)
tags:
- name: Discovery
  description: discovery router — see backend/routes/discovery.js
paths:
  /manifesto.json:
    get:
      tags:
      - Discovery
      summary: GET /manifesto.json
      operationId: get_manifesto.json
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
  /nonce:
    get:
      tags:
      - Discovery
      summary: GET /nonce
      operationId: get_nonce
      responses:
        '200':
          description: Native-auth v1 migration diagnostics; no signable nonce is returned.
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
      description: Read-only native-auth migration diagnostics. It does not issue a usable nonce. Native v2 nonces are returned only by an unauthenticated 402 response for the exact canonical-origin request.
  /idl.json:
    get:
      tags:
      - Discovery
      summary: GET /idl.json
      operationId: get_idl.json
      responses:
        '200':
          description: Successful response
          content:
            text/plain:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
  /openapi.yaml:
    get:
      tags:
      - Discovery
      summary: GET /openapi.yaml
      operationId: get_openapi.yaml
      responses:
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
  /openapi.json:
    get:
      tags:
      - Discovery
      summary: GET /openapi.json
      operationId: get_openapi.json
      responses:
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
  /.well-known/openai-apps-challenge:
    get:
      tags:
      - Discovery
      summary: GET /.well-known/openai-apps-challenge
      operationId: get_.well-known_openai-apps-challenge
      responses:
        '200':
          description: Successful response
          content:
            text/plain:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
  /.well-known/x402.json:
    get:
      tags:
      - Discovery
      summary: GET /.well-known/x402.json
      operationId: get_.well-known_x402.json
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
  /.well-known/payment-requirements:
    get:
      tags:
      - Discovery
      summary: GET /.well-known/payment-requirements
      operationId: get_.well-known_payment-requirements
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
  /.well-known/agent.json:
    get:
      tags:
      - Discovery
      summary: GET /.well-known/agent.json
      operationId: get_.well-known_agent.json
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
  /agent.json:
    get:
      tags:
      - Discovery
      summary: GET /agent.json
      operationId: get_agent.json
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
  /mcp:
    get:
      tags:
      - Discovery
      summary: GET /mcp
      operationId: get_mcp
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
components:
  responses:
    AifpError:
      description: AIFP-* error envelope. See backend/server.js safe error handler.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/AifpError'
  schemas:
    AifpError:
      type: object
      required:
      - error
      properties:
        error:
          type: string
          description: AIFP-{status} code, or domain-specific string (e.g. csrf_origin_denied)
        detail:
          type: string
        request_id:
          type: string
          description: AIFP-Request-Id for log correlation
  securitySchemes:
    reportingCapability:
      type: apiKey
      in: header
      name: AIFP-Reporting-Token
      description: Observation/identity-removal capability only; no spending, access or ownership authority.
    reportingOwnerSession:
      type: apiKey
      in: cookie
      name: __aifinpay_user_session
      description: Existing owner session, current tenant/site and session-epoch validation. Browser writes also require CSRF Origin checks.
    agentEd25519:
      type: apiKey
      in: header
      name: x-agent-pubkey
      description: 'Ed25519-signed native-auth v2 request. Companion headers: x-nonce, x-signature, x-aifinpay-auth-version. The proof binds canonical origin, method, resource, body hash, and expiry. GET /nonce provides migration diagnostics only; start with an unauthenticated request to receive a v2 challenge.'
    x402Payment:
      type: apiKey
      in: header
      name: X-PAYMENT-RESPONSE
      description: x402 payment proof, base64 JSON envelope. Issued by the paying agent's wallet after broadcasting the on-chain tx. See /.well-known/x402.json.
    userSession:
      type: apiKey
      in: cookie
      name: aifinpay_session
      description: Browser session cookie for /api/me/* — sameSite=Lax, CSRF-guarded.
    agentClaim:
      type: apiKey
      in: cookie
      name: __aifinpay_agent_claim
      description: Set by redeeming a one-time claim link (POST /api/me/claim-url). Valid 10 minutes, accepted only by /api/me/agents/challenge and /api/me/agents/claim.
    adminSession:
      type: apiKey
      in: cookie
      name: aifinpay_admin_session
      description: Admin session cookie. ADMIN_ALLOWED_IPS allowlist in effect.
    partnerSession:
      type: apiKey
      in: cookie
      name: aifinpay_partner_session
      description: Partner session cookie for /api/partners/me/*.
    merchantSecret:
      type: apiKey
      in: header
      name: AIFP-Merchant-Secret
      description: Per-merchant API key for /v1/merchants/* writes.
    ingestHmac:
      type: apiKey
      in: header
      name: x-ingest-signature
      description: HMAC signature for /api/internal/* and /api/telemetry.