canary_register

com.agenticfinancegraph/agentic-finance-graph · Verify this server

Register the public part of a decoy you planted: kind address|key|url|apikey|tool|x402 with exactly one target (address, url_sha256, key_sha256, tool_name or resource_path), a label, the triggers to watch (nonce, code, permit, siwe, inbound_transfer, http_hit, api_use, tool_call, x402_request) and planted_at. Needs Authorization: Bearer <Desk session>; the session's wallet is the operator. Private material is refused before validation; a bait key must be fresh (nonce 0, no code). A canary is a decoy you plant where only an intruder or a misled agent would read it: a bait key that never holds a balance (its first use is the signal), an address planted as a treasury, a URL, an API key, a tool description or a paid x402 resource. Register the PUBLIC part only (address, hash, tool name, path); we refuse anything that looks like a key, a URL or an API key in clear. We read the chain every 2 minutes (nonce, code, gas funding, inbound transfers, permits) and your own channels when you push them (canary ingest). A fire is a pattern for a human to read, written to your canary log; nothing is published about a plant. Shadow period: at most 25 live canaries per operator, no e-mail yet.