samedaydesk-com Security API

openapi: 3.2.0
info:
  title: SameDayDesk machine commerce gateway Security API
  version: 1.23.55
  description: Deterministic agent APIs for web and company intelligence, repository security, agent-work economics, machine-service discoverability, payment preflight and settlement proof, wallet context, and Morpho decision evidence. Pay per call through Base x402, with a Circle Gateway Nanopayments path for gasless batched USDC.
  contact:
    email: contact@samedaydesk.com
    url: https://samedaydesk.com
  x-guidance: Choose the narrowest route that answers the task. Supply required query parameters, inspect the currently advertised HTTP 402 offers, enforce your own price and network policy, then retry the identical method, path, and query with one supported payment credential. Treat runtime payment challenges as authoritative.
servers:
- url: https://agents.samedaydesk.com
tags:
- name: Security
paths:
  /schemas/wallet-policy-conformance-v1.json:
    get:
      summary: Free canonical case matrix and JSON Schemas for the wallet-policy conformance…
      responses:
        '200':
          description: Versioned credential-free wallet-policy conformance contract
      operationId: getWalletPolicyConformanceSchema
      tags:
      - Security
      security: []
  /schemas/stateful-wallet-policy-conformance-v1.json:
    get:
      summary: Free canonical stateful case matrix and JSON Schemas for cumulative…
      responses:
        '200':
          description: Versioned credential-free stateful wallet-policy conformance contract
      operationId: getStatefulWalletPolicyConformanceSchema
      tags:
      - Security
      security: []
  /security/wallet-policy-conformance:
    post:
      operationId: evaluateWalletPolicyConformance
      tags:
      - Security
      summary: Evaluate a credential-free standardized allow/deny matrix for an agent wallet…
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $schema: https://json-schema.org/draft/2020-12/schema
              title: SameDayDesk wallet policy conformance input
              type: object
              properties:
                schemaVersion:
                  type: string
                  const: agent-payment-policy.wallet-policy-observation.v1
                profileId:
                  type: string
                  minLength: 1
                  maxLength: 128
                provider:
                  type: string
                  minLength: 1
                  maxLength: 128
                network:
                  type: string
                  minLength: 1
                  maxLength: 128
                protocol:
                  type: string
                  minLength: 1
                  maxLength: 128
                observations:
                  type: array
                  minItems: 1
                  maxItems: 16
                  items:
                    type: object
                    properties:
                      case:
                        type: string
                        enum:
                        - intended
                        - missing_authorization
                        - wrong_operation
                        - duplicate_approved_action
                        - wrong_chain
                        - wrong_token_contract_or_program
                        - wrong_recipient
                        - wrong_amount
                        - wrong_function_or_instruction
                        - wrong_route_or_offer
                        - changed_protocol_challenge
                        - replay_or_reuse
                        - reordered_approved_actions
                        - mixed_unapproved_action
                        - wrong_fee_asset
                        - missing_validity
                      actual:
                        type: string
                        enum:
                        - allowed
                        - denied
                        - error
                      denialClass:
                        type: string
                        enum:
                        - none
                        - policy
                        - validation
                        - provider
                      code:
                        type: string
                        pattern: ^[A-Za-z0-9][A-Za-z0-9._:/-]{0,63}$
                    required:
                    - case
                    - actual
                    - denialClass
                    additionalProperties: false
              required:
              - profileId
              - provider
              - network
              - protocol
              - observations
              additionalProperties: false
      responses:
        '200':
          description: credential-free wallet-policy conformance evidence
          content:
            application/json:
              schema:
                $schema: https://json-schema.org/draft/2020-12/schema
                title: SameDayDesk wallet policy conformance output
                type: object
                properties:
                  schemaVersion:
                    type: string
                    const: samedaydesk.wallet-policy-conformance.v1
                  evaluatedAt:
                    type: string
                    format: date-time
                  profile:
                    type: object
                    additionalProperties: false
                    properties:
                      profileId:
                        type: string
                      provider:
                        type: string
                      network:
                        type: string
                      protocol:
                        type: string
                    required:
                    - profileId
                    - provider
                    - network
                    - protocol
                  decision:
                    type: string
                    enum:
                    - conformant
                    - partial
                    - unsafe
                  complete:
                    type: boolean
                  exactShapePassed:
                    type: boolean
                  results:
                    type: array
                    items:
                      type: object
                      additionalProperties: false
                      properties:
                        case:
                          type: string
                          enum:
                          - intended
                          - missing_authorization
                          - wrong_operation
                          - duplicate_approved_action
                          - wrong_chain
                          - wrong_token_contract_or_program
                          - wrong_recipient
                          - wrong_amount
                          - wrong_function_or_instruction
                          - wrong_route_or_offer
                          - changed_protocol_challenge
                          - replay_or_reuse
                          - reordered_approved_actions
                          - mixed_unapproved_action
                          - wrong_fee_asset
                          - missing_validity
                        actual:
                          type: string
                          enum:
                          - allowed
                          - denied
                          - error
                        denialClass:
                          type: string
                          enum:
                          - none
                          - policy
                          - validation
                          - provider
                        code:
                          type: string
                          pattern: ^[A-Za-z0-9][A-Za-z0-9._:/-]{0,63}$
                        expected:
                          type: string
                          enum:
                          - allow
                          - deny
                        control:
                          type:
                          - string
                          - 'null'
                        required:
                          type: boolean
                        expectationMet:
                          type: boolean
                        providerNativeVerified:
                          type: boolean
                        finding:
                          type: string
                          enum:
                          - expected_behavior
                          - unsafe_allowed
                          - expected_behavior_not_proven
                          - denied_outside_provider_policy
                      required:
                      - case
                      - actual
                      - denialClass
                      - expected
                      - control
                      - required
                      - expectationMet
                      - providerNativeVerified
                      - finding
                  providerNativeVerified:
                    type: array
                    items:
                      type: string
                  providerNativeUnverified:
                    type: array
                    items:
                      type: string
                  notEvaluatedByWalletPolicy:
                    type: array
                    items:
                      type: string
                  missingRequiredCases:
                    type: array
                    items:
                      type: string
                  unsafeCases:
                    type: array
                    items:
                      type: string
                  inconclusiveCases:
                    type: array
                    items:
                      type: string
                  boundary:
                    type: object
                    additionalProperties: false
                    properties:
                      credentialsAccepted:
                        type: boolean
                        const: false
                      walletAccessed:
                        type: boolean
                        const: false
                      signatureVerified:
                        type: boolean
                        const: false
                      transactionBroadcast:
                        type: boolean
                        const: false
                      statement:
                        type: string
                    required:
                    - credentialsAccepted
                    - walletAccessed
                    - signatureVerified
                    - transactionBroadcast
                    - statement
                  standardSchemaVersion:
                    type: string
                    const: agent-payment-policy.wallet-policy-observation-report.v1
                  product:
                    type: string
                    const: samedaydesk-wallet-policy-conformance
                required:
                - schemaVersion
                - standardSchemaVersion
                - product
                - evaluatedAt
                - profile
                - decision
                - complete
                - exactShapePassed
                - results
                - providerNativeVerified
                - providerNativeUnverified
                - notEvaluatedByWalletPolicy
                - missingRequiredCases
                - unsafeCases
                - inconclusiveCases
                - boundary
                additionalProperties: false
              example:
                schemaVersion: samedaydesk.wallet-policy-conformance.v1
                standardSchemaVersion: agent-payment-policy.wallet-policy-observation-report.v1
                product: samedaydesk-wallet-policy-conformance
                evaluatedAt: '2026-10-29T21:20:24.903Z'
                profile:
                  profileId: privy-solana-lab
                  provider: Privy
                  network: solana:mainnet
                  protocol: x402
                decision: unsafe
                complete: false
                exactShapePassed: false
                results:
                - case: intended
                  actual: allowed
                  denialClass: none
                  code: signed
                  expected: allow
                  control: null
                  required: true
                  expectationMet: true
                  providerNativeVerified: false
                  finding: expected_behavior
                - case: wrong_operation
                  actual: denied
                  denialClass: policy
                  code: policy_violation
                  expected: deny
                  control: operation
                  required: true
                  expectationMet: true
                  providerNativeVerified: true
                  finding: expected_behavior
                - case: duplicate_approved_action
                  actual: allowed
                  denialClass: none
                  code: signed
                  expected: deny
                  control: execution_shape
                  required: true
                  expectationMet: false
                  providerNativeVerified: false
                  finding: unsafe_allowed
                providerNativeVerified:
                - operation
                providerNativeUnverified:
                - authorization
                - execution_shape
                - chain
                - token_contract
                - recipient
                - amount
                - function
                - route_lock
                - protocol_challenge
                - replay
                notEvaluatedByWalletPolicy:
                - output_contract
                - receipt
                - balance_reconciliation
                missingRequiredCases:
                - missing_authorization
                - wrong_chain
                - wrong_token_contract_or_program
                - wrong_recipient
                - wrong_amount
                - wrong_function_or_instruction
                - wrong_route_or_offer
                - changed_protocol_challenge
                - replay_or_reuse
                unsafeCases:
                - duplicate_approved_action
                inconclusiveCases: []
                boundary:
                  credentialsAccepted: false
                  walletAccessed: false
                  signatureVerified: false
                  transactionBroadcast: false
                  statement: Evaluates caller-supplied standardized observations. It does not independently execute or verify provider policy tests.
        '400':
          description: invalid standardized observation matrix, charged nothing
        '402':
          description: payment required (x402, $0.01 USDC base)
      x-payment-info:
        operation:
          id: security_wallet-policy-conformance
          price: '10000'
          billingBasis: per-call
          supportedRails:
          - x402
        price:
          amount: '0.01'
          currency: USD
          mode: fixed
        protocols:
        - x402:
            asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
            network: eip155:8453
            scheme: exact
      x-paid-effect:
        version: 0.1.0
        classification: read_only
        unpaidRequest:
          applicationEffects: none
          protocolStateMayBeRecorded:
          - payment_challenge
          telemetryPersisted: false
        retry:
          applicationEffectAtMostOnce: not_applicable_read_only
          responseReplay: conditional
          requestBinding:
          - method
          - canonical_url
          - exact_raw_body_sha256
          - payer
          - payment_terms
          - exact_settled_credential
          x402Requirement: payment-identifier extension
          mppRequirement: exact settled credential
          mismatchStatus: 409
        paymentProtocols:
        - x402
        - mpp
        profile: /.well-known/paid-action-effects.json
  /security/stateful-wallet-policy-conformance:
    post:
      operationId: evaluateStatefulWalletPolicyConformance
      tags:
      - Security
      summary: Evaluate credential-free stateful wallet-policy observations for sequential…
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $schema: https://json-schema.org/draft/2020-12/schema
              title: SameDayDesk stateful wallet policy conformance input
              type: object
              properties:
                schemaVersion:
                  type: string
                  const: agent-payment-policy.stateful-wallet-policy-observation.v1
                profileId:
                  type: string
                  minLength: 1
                  maxLength: 128
                provider:
                  type: string
                  minLength: 1
                  maxLength: 128
                network:
                  type: string
                  minLength: 1
                  maxLength: 128
                protocol:
                  type: string
                  minLength: 1
                  maxLength: 128
                observations:
                  type: array
                  minItems: 1
                  maxItems: 7
                  items:
                    type: object
                    properties:
                      case:
                        type: string
                        enum:
                        - first_within_cap
                        - sequential_exceeds_cap
                        - signed_unbroadcast_counts
                        - unrecognized_calldata
                        - concurrent_exceeds_cap
                        - missing_counter_reference
                        - application_serialized_concurrent_exceeds_cap
                      actual:
                        type: string
                        enum:
                        - allowed
                        - denied
                        - error
                      enforcementClass:
                        type: string
                        enum:
                        - none
                        - policy
                        - application
                        - validation
                        - provider
                      code:
                        type: string
                        pattern: ^[A-Za-z0-9][A-Za-z0-9._:/-]{0,63}$
                    required:
                    - case
                    - actual
                    - enforcementClass
                    additionalProperties: false
              required:
              - profileId
              - provider
              - network
              - protocol
              - observations
              additionalProperties: false
      responses:
        '200':
          description: credential-free stateful wallet-policy conformance evidence
          content:
            application/json:
              schema:
                $schema: https://json-schema.org/draft/2020-12/schema
                title: SameDayDesk stateful wallet policy conformance output
                type: object
                properties:
                  schemaVersion:
                    type: string
                    const: samedaydesk.stateful-wallet-policy-conformance.v1
                  evaluatedAt:
                    type: string
                    format: date-time
                  profile:
                    type: object
                    additionalProperties: false
                    properties:
                      profileId:
                        type: string
                      provider:
                        type: string
                      network:
                        type: string
                      protocol:
                        type: string
                    required:
                    - profileId
                    - provider
                    - network
                    - protocol
                  decision:
                    type: string
                    enum:
                    - conformant
                    - partial
                    - unsafe
                  complete:
                    type: boolean
                  strictBudgetPassed:
                    type: boolean
                  results:
                    type: array
                    items:
                      type: object
                      additionalProperties: false
                      properties:
                        case:
                          type: string
                          enum:
                          - first_within_cap
                          - sequential_exceeds_cap
                          - signed_unbroadcast_counts
                          - unrecognized_calldata
                          - concurrent_exceeds_cap
                          - missing_counter_reference
                          - application_serialized_concurrent_exceeds_cap
                        actual:
                          type: string
                          enum:
                          - allowed
                          - denied
                          - error
                        enforcementClass:
                          type: string
                          enum:
                          - none
                          - policy
                          - application
                          - validation
                          - provider
                        code:
                          type: string
                          pattern: ^[A-Za-z0-9][A-Za-z0-9._:/-]{0,63}$
                        expected:
                          type: string
                          enum:
                          - allow
                          - deny
                        control:
                          type:
                          - string
                          - 'null'
                        required:
                          type: boolean
                        expectationMet:
                          type: boolean
                        providerNativeVerified:
                          type: boolean
                        applicationVerified:
                          type: boolean
                        finding:
                          type: string
                          enum:
                          - expected_behavior
                          - unsafe_allowed
                          - expected_behavior_not_proven
                          - denied_outside_policy_or_application_guard
                      required:
                      - case
                      - actual
                      - enforcementClass
                      - expected
                      - control
                      - required
                      - expectationMet
                      - providerNativeVerified
                      - applicationVerified
                      - finding
                  providerNativeVerified:
                    type: array
                    items:
                      type: string
                  providerNativeUnverified:
                    type: array
                    items:
                      type: string
                  applicationVerified:
                    type: array
                    items:
                      type: string
                  missingRequiredCases:
                    type: array
                    items:
                      type: string
                  unsafeCases:
                    type: array
                    items:
                      type: string
                  inconclusiveCases:
                    type: array
                    items:
                      type: string
                  boundary:
                    type: object
                    additionalProperties: false
                    properties:
                      credentialsAccepted:
                        type: boolean
                        const: false
                      walletAccessed:
                        type: boolean
                        const: false
                      signaturesVerified:
                        type: boolean
                        const: false
                      transactionBroadcast:
                        type: boolean
                        const: false
                      statement:
                        type: string
                    required:
                    - credentialsAccepted
                    - walletAccessed
                    - signaturesVerified
                    - transactionBroadcast
                    - statement
                  standardSchemaVersion:
                    type: string
                    const: agent-payment-policy.stateful-wallet-policy-observation-report.v1
                  product:
                    type: string
                    const: samedaydesk-stateful-wallet-policy-conformance
                required:
                - schemaVersion
                - standardSchemaVersion
                - product
                - evaluatedAt
                - profile
                - decision
                - complete
                - strictBudgetPassed
                - results
                - providerNativeVerified
                - providerNativeUnverified
                - applicationVerified
                - missingRequiredCases
                - unsafeCases
                - inconclusiveCases
                - boundary
                additionalProperties: false
              example:
                schemaVersion: samedaydesk.stateful-wallet-policy-conformance.v1
                standardSchemaVersion: agent-payment-policy.stateful-wallet-policy-observation-report.v1
                product: samedaydesk-stateful-wallet-policy-conformance
                evaluatedAt: '2026-10-29T21:20:24.915Z'
                profile:
                  profileId: privy-base-sepolia-stateful-cap
                  provider: Privy
                  network: eip155:11155111
                  protocol: x402
                decision: unsafe
                complete: false
                strictBudgetPassed: false
                results:
                - case: first_within_cap
                  actual: allowed
                  enforcementClass: none
                  code: signed
                  expected: allow
                  control: null
                  required: true
                  expectationMet: true
                  providerNativeVerified: false
                  applicationVerified: false
                  finding: expected_behavior
                - case: sequential_exceeds_cap
                  actual: denied
                  enforcementClass: policy
                  code: policy_violation
                  expected: deny
                  control: cumulative_limit
                  required: true
                  expectationMet: true
                  providerNativeVerified: true
                  applicationVerified: false
                  finding: expected_behavior
                - case: unrecognized_calldata
                  actual: allowed
                  enforcementClass: none
                  code: signed
                  expected: deny
                  control: extraction_integrity
                  required: true
                  expectationMet: false
                  providerNativeVerified: false
                  applicationVerified: false
                  finding: unsafe_allowed
                - case: concurrent_exceeds_cap
                  actual: allowed
                  enforcementClass: none
                  code: oversubscribed
                  expected: deny
                  control: concurrency
                  required: true
                  expectationMet: false
                  providerNativeVerified: false
                  applicationVerified: false
                  finding: unsafe_allowed
                providerNativeVerified:
                - cumulative_limit
                providerNativeUnverified:
                - post_sign_accounting
                - extraction_integrity
                - concurrency
                - reference_integrity
                applicationVerified: []
                missingRequiredCases:
                - signed_unbroadcast_counts
                - missing_counter_reference
                unsafeCases:
                - unrecognized_calldata
                - concurrent_exceeds_cap
                inconclusiveCases: []
                boundary:
                  credentialsAccepted: false
                  walletAccessed: false
                  signaturesVerified: false
                  transactionBroadcast: false
                  statement: Evaluates caller-supplied standardized stateful observations. It does not run concurrent requests, inspect provider counters, access a wallet, or verify signatures.
        '400':
          description: invalid standardized stateful observation matrix, charged nothing
        '402':
          description: payment required (x402, $0.01 USDC base)
      x-payment-info:
        operation:
          id: security_stateful-wallet-policy-conformance
          price: '10000'
          billingBasis: per-call
          supportedRails:
          - x402
        price:
          amount: '0.01'
          currency: USD
          mode: fixed
        protocols:
        - x402:
            asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
            network: eip155:8453
            scheme: exact
      x-paid-effect:
        version: 0.1.0
        classification: read_only
        unpaidRequest:
          applicationEffects: none
          protocolStateMayBeRecorded:
          - payment_challenge
          telemetryPersisted: false
        retry:
          applicationEffectAtMostOnce: not_applicable_read_only
          responseReplay: conditional
          requestBinding:
          - method
          - canonical_url
          - exact_raw_body_sha256
          - payer
          - payment_terms
          - exact_settled_credential
          x402Requirement: payment-identifier extension
          mppRequirement: exact settled credential
          mismatchStatus: 409
        paymentProtocols:
        - x402
        - mpp
        profile: /.well-known/paid-action-effects.json
  /scan:
    get:
      summary: Static supply-chain security scan of a public GitHub repo before an agent…
      parameters:
      - name: repo
        in: query
        required: true
        schema:
          type: string
      responses:
        '200':
          description: security risk report
          content:
            application/json:
              schema:
                type: object
                properties:
                  ok:
                    type: boolean
                  repo:
                    type: string
                  risk:
                    type: string
                    enum:
                    - clean
                    - suspicious
                    - dangerous
                  filesScanned:
                    type: number
                  summary:
                    type: string
                  findings:
                    type: array
                required:
                - ok
                - repo
                - risk
              example:
                ok: true
                repo: owner/name
                risk: clean
                filesScanned: 12
                summary: No known malware/exfil/obfuscation patterns found.
                findings: []
        '402':
          description: payment required (x402, $0.20 USDC base)
      operationId: scanRepositoryRisk
      tags:
      - Security
      x-payment-info:
        operation:
          id: scan
          price: '200000'
          billingBasis: per-call
          supportedRails:
          - x402
        price:
          amount: '0.2'
          currency: USD
          mode: fixed
        protocols:
        - x402:
            asset: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
            network: eip155:8453
            scheme: exact
x-service-info:
  categories:
  - agentic-payments
  - machine-commerce
  - data


# --- truncated at 32 KB (35 KB total) ---
# Full source: https://artifacts.apis.io/samedaydesk-com/openapi/samedaydesk-com-security-api-openapi.yml