ExchangeRebel Injection API

openapi: 3.2.0
info:
  title: ExchangeRebel — pay-per-call APIs for AI agents (x402 on…
  version: 1.0.0
  contact:
    name: 'ExchangeRebel (operator: Rebel Data)'
    url: https://exchangerebel.com
    email: sound.money.investing@gmail.com
  x-guidance: 'All paid operations use x402 on Solana: call without payment to get a 402 challenge (SOL recipient + USDC token account + fresh memo), pay with the memo attached via the Solana Memo program, then retry with header X-Payment-Tx: <signature> and ?toll_memo=<memo>. Challenges are dual-version: the PAYMENT-REQUIRED header carries the x402 v2 PaymentRequired object and the response body carries the same challenge in x402 v1 form for compatibility. Free operations (security: []) include each service''s /health catalog with full response shapes. Prices in x-payment-info are USD per call unless the summary says otherwise (RPC is per 1,000-request block; Telegram provisioning is per bot-month; transcription is per minute of audio).'
  description: '67 data and utility APIs behind x402 tolls, settled in SOL or USDC on Solana. Call a paid endpoint without payment to receive a 402 x402 challenge (recipient + fresh memo), pay with the memo attached via the Solana Memo program, then retry with the X-Payment-Tx header and toll_memo query parameter. Free catalog/health endpoints are marked without x-payment-info. Full catalogs: GET /toll/discovery and each service''s /health.'
servers:
- url: https://exchangerebel.com
tags:
- name: Injection
paths:
  /toll/injection:
    get:
      tags:
      - Injection
      summary: Prompt-Injection Verdict service catalog
      responses:
        '200':
          description: 'Success. Returns the service catalog: what a scan includes, the prices, the coverage, and the scope statement (a deterministic pattern screen — a safe verdict is not a guarantee that a text is safe).'
      security: []
      operationId: getTollInjection
      x-operation-id-source: derived
  /toll/injection/health:
    get:
      tags:
      - Injection
      summary: Prompt-Injection Verdict service health
      responses:
        '200':
          description: Success. Returns service liveness and the verdict signer address.
      security: []
      operationId: getTollInjectionHealth
      x-operation-id-source: derived
  /toll/injection/rules:
    get:
      tags:
      - Injection
      summary: The published prompt-injection detection rulebook
      responses:
        '200':
          description: 'Success. Returns the full published detection rulebook (prompt-injection-rules/v1): all 26 patterns with categories and severities, the normalization views, the verdict rule, the sanitization method, and the input caps; every verdict is reproducible from them.'
      security: []
      operationId: getTollInjectionRules
      x-operation-id-source: derived
  /toll/injection/precheck:
    post:
      tags:
      - Injection
      summary: Free verdict-line prompt-injection pre-check of one text
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                text:
                  type: string
                  description: The text to screen (up to 8,000 characters).
                caller:
                  type: string
                  description: Solana base58 wallet of the operator; keys the free allowance (100/day per wallet).
              required:
              - text
              - caller
      responses:
        '200':
          description: Success. Returns the verdict line only (safe / suspicious / malicious) — no matched patterns, no sanitized copy. When the caller's free allowance is exhausted, the response is the /toll/injection/scan payment challenge instead.
      security: []
      operationId: postTollInjectionPrecheck
      x-operation-id-source: derived
  /toll/injection/scan:
    post:
      tags:
      - Injection
      summary: Full prompt-injection scan of one submitted text
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                text:
                  type: string
                  description: The text to scan (up to 8,000 characters).
              required:
              - text
      responses:
        '200':
          description: Success. Returns the signed verdict (safe / suspicious / malicious), every matched pattern with its position, and a sanitized copy with the flagged spans neutralized, under the published rulebook. Submitted text is processed in memory only and is never stored.
        '402':
          description: 'Payment Required (x402). A per-item fee: $0.01 buys one prompt-injection scan of one submitted text — verdict, matched patterns, and a sanitized copy. The response body carries the payment instructions in x402 v1 form: payTo (the operator''s Solana wallet), the amount (10000 USDC units = $0.01) and a fresh memo. Pay in USDC on Solana with the memo attached via the Solana Memo program, then resubmit the same scan request with the payment transaction in the X-Payment-Tx header and ?toll_memo=<memo>. The PAYMENT-REQUIRED response header carries the same object in x402 v2 form.'
      x-payment-info:
        protocols:
        - x402
        price:
          mode: fixed
          currency: USD
          amount: '0.01'
      security:
      - x402Payment: []
      operationId: postTollInjectionScan
      x-operation-id-source: derived
  /toll/injection/metrics:
    get:
      tags:
      - Injection
      summary: Prompt-Injection Verdict aggregate counters
      responses:
        '200':
          description: Success. Returns aggregate counters (paid scans, distinct payers, free pre-checks today, paid verdicts by class). Aggregate only — no payer identities.
      security: []
      operationId: getTollInjectionMetrics
      x-operation-id-source: derived
components:
  securitySchemes:
    x402Payment:
      type: apiKey
      in: header
      name: X-Payment-Tx
      description: 'x402 toll payment proof: the Solana transaction signature of a payment carrying the memo from the 402 challenge; send together with ?toll_memo=<memo>. Payment itself is made on-chain in SOL or USDC to the recipient named in the challenge.'