Discovery readback
01Public files and routes such as llms.txt, agents.md, MCP pointers, UCP profiles, x402/MPP manifests, sitemaps, and launch pages.
AgentCore Payments / x402 / MPP / 3 business days
For teams shipping paid APIs, MCP servers, UCP commerce flows, x402 or MPP gateways, and AWS AgentCore-compatible resources that need a clean external readback before prospects, partners, reviewers, or analysts inspect the surface.
The reverse-engineering style of your check, with no payment, no signatures, and no paid calls, is the right shape for launch validation.
What it buys
The packet is intentionally narrow. It creates buyer-readable evidence for the public surface without touching private systems, sending payment signatures, or pretending a broad audit happened.
Public files and routes such as llms.txt, agents.md, MCP pointers, UCP profiles, x402/MPP manifests, sitemaps, and launch pages.
What is public, paid, free, gated, browser-readable, cache-safe, signed, replayable, undocumented, or blocked before a proper 402/payment challenge.
A short remediation list ordered by launch risk, with exact commands that reproduce the findings from public surfaces only.
Fit
commerce
Catalogs, product feeds, checkout handoffs, Universal Cart readiness, merchant policy pages, partner demos, and AI-shopping launch claims.
x402
402 challenges, x402 v2 and MPP browser preflight, resource binding, no-store cache posture, receipts, retry behavior, and AgentCore-compatible spend-map language.
mcp
MCP server cards, well-known discovery, tool schemas, install docs, public demos, registry claims, support boundaries, and audit language.
security
Runtime security, tool authorization, policy actions, prompt-injection exposure, public docs, evidence packs, and buyer-facing control claims.
Scope boundary
No login, no private endpoint guessing, no customer system probing, no wallet signatures, no real paid calls, no disclosure without sign-off. If the useful work needs private access, payment execution, or implementation, it becomes a separately approved sprint.
send
One URL or repo, the claim that needs proof, the approved public scope, and the deadline.
receive
A private evidence table, command transcript, launch-risk patch order, and short buyer-safe summary.
upgrade
If fixes are needed, implementation help starts at $2,500 and stays scoped to an approved patch list.
hire
For smaller checks, use the live Work402 $49 readiness task, the Swarmwage x402 surface-readiness listing, Clawlancer fixed scopes, or NEAR fixed-price services after scope is clear.
Ready
The fastest useful intake is a URL plus the claim that has to survive outside scrutiny.