Choose an agent entry point

<!-- Generated from scripts/fixtures/agent-entrypoints.v1.json by scripts/generate-agent-entry-docs.mjs. -->

Choose one primary path

All seven local entry points cover the four current capability categories through direct methods, host providers, or bounded tools. Media uses live model/option validation and the same durable buyer lifecycle. MCP provides nine narrow tools: discovery, chat, messages, images, speech, transcriptions, voices, wallet status, and receipt lookup. MCP limits MP3 Base64 to 1,048,576 characters; portable skill JSON is bounded to 1,000,000 bytes. CLI/SDK/proxy accept at most 25 MiB decoded MP3. The CLI explicit-file path rejects symlinks, special files, non-owned files, and changed files. Speech-to-text requires human permission for provider-retained audio/transcript processing and local acknowledge_provider_retention: true; the SDK removes that flag before sending the API request. Images default to hosted URLs. The proxy returns hosted speech JSON, not OpenAI binary audio, and does not yet support multipart transcription. Do not claim those transport forms work.

One shared contract

• Canonical origin: https://onchainrouter.dev.
• Network: Base mainnet eip155:8453.
• Asset: official Base USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913.
• Models and prices: always read /v1/models and /v1/pricing; never copy a price or assume an alias remains enabled.
• Paid endpoints: /v1/chat/completions, /v1/messages, /v1/images/generations, /v1/audio/speech, /v1/audio/transcriptions.
• Example text model at generation time: gemini-3.6-flash. Confirm it against live discovery before a call.
• Idempotency: create one stable key before the unpaid request and retain it through signing, recovery, and receipt lookup.
• Inspection: empty, incomplete, or malformed unsigned JSON returns a discovery-only 402. Do not sign an inspection challenge; submit a valid body to obtain the request-specific exact price first.
• Success: return ok, outcome, idempotencyKey, body, receipt, payment.
• Failure: return ok, outcome, retry, idempotencyKey, message, reference without secret-bearing diagnostics.

Every adapter delegates wallet custody, integer-atomic budgets, official x402 payment, ambiguity, recovery, and receipt verification to Buyer Runtime. None may contain a second signer or payment implementation.

The private loopback proxy additionally reuses eligible identical text answers within one wallet/agent/session/policy/catalog for up to ten minutes in bounded memory. Explicit idempotency keys bypass this cache and retain the durable recovery path; keep using them when recovery is required. A cache hit is the proxy-only outcome CachedResponse, with x-onchain-router-cache: HIT, x-onchain-router-charge-atomic: 0, the original source idempotency key, and x-onchain-router-source-receipt-id. It is not a new Buyer Runtime success, receipt, or settlement; body usage refers to the original inference. Ordinary payment/receipt headers are omitted on hits. Use Cache-Control: no-cache to refresh, Cache-Control: no-store or JSON cache: false / no_cache: true to bypass, or proxy --no-cache to disable. Tools/media are excluded. Direct SDK/CLI/MCP/public API and provider cached-token pricing are unchanged.

Human-owned setup

The following actions are human-only and must run in a direct terminal:

• wallet create or import
• wallet unlock
• funding
• legacy Permit2 profile migration
• policy widening
• confirmation-policy changes
• backup or restore
• key rotation
• wallet export or exit

Do not send a wallet key, seed phrase, passphrase, broker capability, payment payload, or receipt capability through an agent tool, prompt, environment value, or HTTP request.

Installed-client and public-source entry points are:

Install npm packages only from the @agenticfi scope with the alpha tag. Install OpenClaw and Hermes only from the exact AgenticFI GitHub repositories and pinned release references shown above. Host-native Git installability is independent of ClawHub or PyPI listing status.

Stable outcomes

ProviderOutcomeUnknown and SettlementOutcomeUnknown always require human review. A retry_same_idempotency_key directive means identical request and identical key; it never authorizes a fresh logical request. WalletLocked requires a direct human unlock.

Receipt and output

Return the requested content, selected model, normalized usage, signed exact atomic USDC amount, Base network, transaction, and verified receipt. Hosted media URLs are bearer capabilities: disclose their expiry but avoid logs or public messages containing the complete URL. A receipt proves Onchain Router's settlement and attested usage; it is not an upstream-provider attestation.

Public API discovery

Read /llms.txt, then /v1/models, /v1/pricing, and /openapi.json. Use /v1/audio/voices before text to speech and /v1/balance?address=0x... for a free Base USDC balance check. The public API accepts direct official x402 buyers whether or not a Release B local adapter is installed.

The portable skill source is available at /skill/onchain-router/SKILL.md and requires the public-alpha Buyer CLI. The llms.txt convention and Agent Skills are discovery and workflow mechanisms, not access-control or wallet-authority systems.