Hekate Lite

Copy-paste preflight examples for agents.

Each fixture is public JSON that can be submitted directly to Hekate Lite. Use these to test allow, warn, block, receipt output, and Ergo/Sage testnet boundaries before wiring your own agent.

POST /v1/mcp/preflight

MCP preflight

Check a tool surface before an agent uses it.

curl -s https://hekategate.com/v1/mcp/preflight \
  -H 'content-type: application/json' \
  --data @https://hekategate.com/examples/hekate-lite/mcp-preflight.json
POST /v1/x402/preflight

x402 preflight

Check price, rail, recipient, input sensitivity, and receipt support before payment.

curl -s https://hekategate.com/v1/x402/preflight \
  -H 'content-type: application/json' \
  --data @https://hekategate.com/examples/hekate-lite/x402-preflight.json
POST /v1/permissions/diff

Permission diff

Minimize OAuth/API scopes against the declared task.

curl -s https://hekategate.com/v1/permissions/diff \
  -H 'content-type: application/json' \
  --data @https://hekategate.com/examples/hekate-lite/permissions-diff.json
POST /v1/tool-chain/risk

Tool-chain risk

Detect risky data-flow chains such as sensitive reads into public sends.

curl -s https://hekategate.com/v1/tool-chain/risk \
  -H 'content-type: application/json' \
  --data @https://hekategate.com/examples/hekate-lite/tool-chain-risk.json
POST /v1/receipts/verify

Receipt verify

Verify AgentSec-compatible Hekate receipt structure and evidence hash.

curl -s https://hekategate.com/v1/receipts/verify \
  -H 'content-type: application/json' \
  --data @https://hekategate.com/examples/hekate-lite/receipt-verify.json
POST /v1/ergo/sage/preflight

Sage quote preflight

Check Sage quote price, rail, reserve, task hash, deadline, and mainnet boundary.

curl -s https://hekategate.com/v1/ergo/sage/preflight \
  -H 'content-type: application/json' \
  --data @https://hekategate.com/examples/hekate-lite/sage-preflight.json
POST /v1/ergo/note/check

Ergo Note check

Check Ergo Note fields before trusting a paid-agent flow.

curl -s https://hekategate.com/v1/ergo/note/check \
  -H 'content-type: application/json' \
  --data @https://hekategate.com/examples/hekate-lite/ergo-note-check.json
POST /v1/ergo/sage/receipts/verify

Sage receipts verify

Check Agreement, Verification Receipt, Settlement Receipt, chain anchor, and task hash consistency.

curl -s https://hekategate.com/v1/ergo/sage/receipts/verify \
  -H 'content-type: application/json' \
  --data @https://hekategate.com/examples/hekate-lite/sage-receipts-verify.json
Private beta boundary

Public web receipts currently remain private-beta unless production Ed25519 custody is configured. Treat these examples as integration fixtures, not production certification.

Review claim boundaries