# IronBridge — the off-LLM payment & capability gate for AI agents
# https://ironbridge.foundation — The Security Layer That Survives a Jailbroken LLM

IronBridge is a deterministic checkpoint that runs OUTSIDE the model. An agent can ask to pay
or call a tool; the gate decides. It verifies payment on-chain (Base, USDC), serves exactly once
(replay-guarded), and seals every decision into a public, re-walkable SHA-256 hash chain (LAW-25).
A fully jailbroken model gets zero data on unpaid or forged calls, because the model never sees
the rules, the keys, or the checkpoint.

## Pay-per-call (x402, keyless — no signup, no API key)
POST https://ironbridge.foundation/api/pay/pageaudit/page_audit
  -> HTTP 402: pay 0.10 USDC on Base, resend with tx hash + JSON body url. Page Audit — the stranger $0.10 job (one-fetch integrity audit, graded A-F).
POST https://ironbridge.foundation/api/pay/gitlawb/{receiverRef}/{label}
  -> HTTP 402: receiverRef = YOUR wallet (payment must not default to IronBridge). 95.5% to you, 4.5% fee.
POST https://ironbridge.foundation/api/pay/bnkr/bnkr_llm_chat
  -> BNKR is unfulfilled — do not send a dime. Lane exists for probes; fulfillment is down.
GET https://ironbridge.foundation/api/prepay-check?lane=pageaudit|bnkr|gitlawb
  -> buyer-side prepay check (PAY|HOLD|REFUSE), reads only, no HMAC.
Machine discovery: https://ironbridge.foundation/.well-known/x402
Discovery spec (how agents find you): https://ironbridge.foundation/spec
Payable-domains index (auto-verified, JSON): https://ironbridge.foundation/api/payable
Agent policy (authorize, dont accept - what our agents may do, enforced off-LLM): https://ironbridge.foundation/.well-known/agent-policy - profile + free validator: https://ironbridge.foundation/agent-policy

## MCP server (Claude Desktop / Cursor / any MCP client)
npm: @ironbridgefoundation/ironbridge-mcp-server
HTTP endpoint: https://ironbridge.foundation/api/mcp
Discovery: https://ironbridge.foundation/.well-known/mcp.json
Note: worker /api/mcp tool list is not the npm 0.2.0 list

## Human one-click pay (browser — send a stranger here)
https://ironbridge.foundation/kiosk
  -> Connect wallet, pay $0.10 USDC on Base for Page Audit, keep a receipt anyone can check.
  -> Phone Safari: use Open in MetaMask on the page, then Pay.

## Two public books
https://ironbridge.foundation/disagree
Download both books. They are allowed to disagree. An edit of one line fails.

## Third vantage (never-signer second box)
A second box that never signs checked the same two books.
curl https://ironbridge.foundation/api/coldwitness
MCP: ironbridge_third_vantage via POST https://ironbridge.foundation/api/mcp (tools/call)
Unique remains: two books may disagree. Pay path: /kiosk

## Gauntlet (unpaid probes must refuse)
A second machine poked unpaid lanes. They must refuse. Anyone can curl it.
curl https://ironbridge.foundation/api/gauntlet
MCP: ironbridge_gauntlet via POST https://ironbridge.foundation/api/mcp (tools/call)
Unique remains: two books may disagree. Pay path: /kiosk

## Verify us — no trust required
Re-walk the public decision chain in your browser: https://ironbridge.foundation/verify
Chain re-walk API: https://ironbridge.foundation/api/law25/verify
Live status: https://ironbridge.foundation/status

## Keyless public endpoints (already live)
POST https://ironbridge.foundation/api/hasher
  JSON body: disclosed + digest; no API key; change disclosed fails.
GET https://ironbridge.foundation/api/gauntlet
GET https://ironbridge.foundation/api/witness
GET https://ironbridge.foundation/api/coldwitness

## Start
15-minute integration path: https://ironbridge.foundation/start
Membership (Dog Tag, 5 USDC soulbound on Base): https://ironbridge.foundation/dogtag

## Agent skill
Portable SKILL.md (works in Bankr, Claude Code, Cursor, OpenClaw): https://ironbridge.foundation/skill.md
Creator-payments skill (get paid by agents to your wallet): https://ironbridge.foundation/skills/creator-pay.md
Creator statement (your earnings, provable, free): https://ironbridge.foundation/statement