{
  "$schema": "https://docs.agentic.market/schemas/discovery/v1.json",
  "name": "Hekate Gate",
  "version": "0.1.0",
  "description": "Security preflight for AI agents before they call, trust or pay an API, MCP tool or on-chain workflow.",
  "status": {
    "environment": "private_beta",
    "production_readiness": "not_certified",
    "mainnet_certification": "not_certified",
    "claim_boundary": "testnet-first discovery surface; not a guarantee of provider safety, settlement finality, or enterprise production readiness"
  },
  "publisher": {
    "name": "Hekate Gate",
    "url": "https://hekategate.com",
    "contact": "support@hekategate.com"
  },
  "openapi": "https://hekategate.com/openapi.json",
  "agents_guide": "https://hekategate.com/AGENTS.md",
  "llms_index": "https://hekategate.com/llms.txt",
  "llms_full": "https://hekategate.com/llms-full.txt",
  "hekate": "https://hekategate.com/.well-known/hekate.json",
  "agentsec": "https://hekategate.com/.well-known/agentsec.json",
  "registry_status_history": "https://api.hekategate.com/v1/registry/status-history",
  "auth": {
    "schemes": [
      { "type": "bearer", "format": "static_token" },
      { "type": "bearer", "format": "oidc_jwt", "discovery_env": "MC_OIDC_ISSUER" }
    ]
  },
  "capabilities": [
    {
      "name": "create_mission",
      "method": "POST",
      "path": "/v1/missions",
      "description": "Create a Mission Control mission in 'planned' state."
    },
    {
      "name": "run_mission",
      "method": "POST",
      "path": "/v1/missions/{id}/run",
      "description": "Quote and execute a mission. Returns the final mission with confidence_score, total_cost_usd, and result."
    },
    {
      "name": "get_audit_trail",
      "method": "GET",
      "path": "/v1/missions/{id}/audit",
      "description": "Hash-chained audit trail with chain integrity status."
    },
    {
      "name": "list_provider_scorecard",
      "method": "GET",
      "path": "/v1/providers/scorecard",
      "description": "Quality scores for registered providers. Certification labels are Mission Control registry status, not external audit certification."
    },
    {
      "name": "get_registry_status_history",
      "method": "GET",
      "path": "/v1/registry/status-history",
      "description": "Signed public registry status history with Hekate trust bundle for verification."
    },
    {
      "name": "open_dispute",
      "method": "POST",
      "path": "/v1/missions/{id}/disputes",
      "description": "Open a dispute on a completed mission."
    },
    {
      "name": "emergency_stop",
      "method": "POST",
      "path": "/v1/admin/kill-switch",
      "description": "Trip the wallet kill switch. Halts every paid call across the org until cleared."
    },
    {
      "name": "agentsec_mcp_preflight",
      "method": "POST",
      "path": "/v1/mcp/preflight",
      "description": "Hekate Lite security preflight before trusting or calling an MCP tool surface."
    },
    {
      "name": "agentsec_x402_preflight",
      "method": "POST",
      "path": "/v1/x402/preflight",
      "description": "Hekate Lite security preflight before paying a machine-payable HTTP endpoint."
    },
    {
      "name": "agentsec_sage_preflight",
      "method": "POST",
      "path": "/v1/ergo/sage/preflight",
      "description": "Hekate Lite security preflight for Sage quotes before Ergo paid-agent turns."
    }
  ],
  "mission_types": [
    "company_research",
    "competitor_research",
    "crypto_due_diligence",
    "market_research",
    "lead_enrichment"
  ],
  "x402": {
    "supported_networks": ["eip155:8453", "eip155:84532"],
    "supported_tokens": ["USDC"],
    "settlement_mode_env": "MC_PAYMENT_MODE",
    "settlement_status": "mock by default; testnet-first; mainnet requires production custody and explicit operator configuration",
    "payment_identifier_extension": true,
    "signed_offer_receipt_extension": true,
    "signed_offer_receipt_extension_status": "captured when a vendor returns X-PAYMENT-RESPONSE; independent receipt verification is not production-certified"
  },
  "guardrails": {
    "policy_engine": "deterministic — pure-function spend authorization",
    "budget_caps": ["per_call", "per_mission", "per_day"],
    "kill_switch": "/v1/admin/kill-switch",
    "rate_limit_per_provider": "10/sec, 20 burst",
    "audit_chain": "SHA-256 chained AuditEvents; verifyChain(missionId)",
    "registry_integrity": {
      "status_history": "/v1/registry/status-history",
      "schema_version": "mission_control.registry_status_history.v1",
      "signature_scheme": "ed25519.signer.v1",
      "trust_bundle": "/v1/agentsec/trust"
    }
  },
  "pricing": {
    "tiers": [
      { "name": "Developer", "price_usd_month": 0, "monthly_test_calls": 1000 },
      { "name": "Team", "price_usd_seat_month": 49 },
      { "name": "Enterprise", "price_usd_month": null, "contact": "hello@hekategate.com" }
    ],
    "orchestration_fee_pct_default": 10
  },
  "compliance": {
    "audit_export": "/v1/exports/missions.csv",
    "audit_chain_proof": "/v1/missions/{id}/audit",
    "stripe_metered_export": "/v1/billing/stripe-export",
    "soc2_status": "in_prep_not_certified"
  },
  "claims": {
    "provides": [
      "policy-gated mission orchestration",
      "hash-chained audit trails",
      "Hekate preflight surfaces",
      "local registry quality scoring"
    ],
    "does_not_provide": [
      "guaranteed agent safety",
      "mainnet production certification",
      "external provider audit certification",
      "legal or compliance review replacement"
    ]
  }
}