{ "service": "Bitcoin risk intelligence (pay per query over Lightning)", "products": { "risk": { "price_sats": 300, "parameter": "address", "description": "Risk check for one Bitcoin address: OFAC SDN sanctions, ransomware payment lists, ownership-clustering with sanctioned/ransomware entities, sweeper-bot collection addresses, and this node's AML cases (30 days)." }, "aml_day": { "price_sats": 3000, "parameter": "date", "description": "Every AML case (score >= 25) this node detected on one day (YYYY-MM-DD, last 30 days), gzipped JSON lines." }, "whales_day": { "price_sats": 2000, "parameter": "date", "description": "Every transaction of US$100,000 or more this node saw on one day, gzipped JSON lines." }, "brief": { "price_sats": 500, "parameter": null, "description": "Today's AI analyst brief (AML patterns, whales, correlations)." }, "geo_report": { "price_sats": 1000, "parameter": "date", "description": "Whale x Geopolitics report for one day (YYYY-MM-DD, last 90 days): whale flows vs world news, lagged correlations, laundering patterns, headlines and the analyst brief. JSON." }, "geo_dataset": { "price_sats": 2000, "parameter": "date", "description": "Hourly research dataset for one day: BTC price, whale count and volume, AML cases, ransomware leak posts and 11 news-topic intensities. CSV." }, "pulse": { "price_sats": 20, "parameter": null, "description": "Live Bitcoin market pulse from this node: fee rates for 1 block to 1 day, mempool size, the last 24 h of whale transactions (>= US$100k) and laundering-pattern (AML) cases, implied BTC/USD. JSON." }, "watch": { "price_sats": 1000, "parameter": "address", "description": "Address Watch for 30 days: every confirmed transaction paying to or spending from one Bitcoin address, in a private feed (web, JSON, RSS) and as phone push (ntfy). Optional feed= adds the address to, or extends it in, an existing feed. Returns the feed links." }, "batch": { "price_sats": 3000, "parameter": "addresses", "description": "Batch risk check for up to 25 Bitcoin addresses in one call: OFAC SDN sanctions, ransomware payment lists, ownership clusters, sweeper-bot addresses and this node's AML cases (30 days) for each, plus a summary of the flagged ones. Volume price, about 60% below single checks." } }, "how_to": [ "GET /api/order?product=risk&address=", "pay the returned Lightning invoice", "GET /api/result?payment_hash=&preimage=" ], "l402": "Standards-based pay-per-call: GET /api/l402/?; on HTTP 402 pay the invoice in the WWW-Authenticate header; resend with Authorization: L402 :.", "x402": { "enabled": true, "protocol": "x402 v2 (v1 compatible)", "network": "eip155:8453", "asset": "USDC", "asset_address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "pay_to": "0x440D635d2e32376d61b4a84872A34205D07D9D7e", "endpoints": { "risk": { "url": "https://diamond.btc-intel.workers.dev/api/x402/risk?address=%3Caddress%3E", "price_usd": 0.25, "description": "Risk check for one Bitcoin address: OFAC SDN sanctions, ransomware payment lists, ownership-clustering with sanctioned/ransomware entities, sweeper-bot collection addresses, and this node's AML cases (30 days)." }, "aml_day": { "url": "https://diamond.btc-intel.workers.dev/api/x402/aml_day?date=%3Cdate%3E", "price_usd": 2.4, "description": "Every AML case (score >= 25) this node detected on one day (YYYY-MM-DD, last 30 days), gzipped JSON lines." }, "whales_day": { "url": "https://diamond.btc-intel.workers.dev/api/x402/whales_day?date=%3Cdate%3E", "price_usd": 1.6, "description": "Every transaction of US$100,000 or more this node saw on one day, gzipped JSON lines." }, "brief": { "url": "https://diamond.btc-intel.workers.dev/api/x402/brief", "price_usd": 0.4, "description": "Today's AI analyst brief (AML patterns, whales, correlations)." }, "geo_report": { "url": "https://diamond.btc-intel.workers.dev/api/x402/geo_report?date=%3Cdate%3E", "price_usd": 0.8, "description": "Whale x Geopolitics report for one day (YYYY-MM-DD, last 90 days): whale flows vs world news, lagged correlations, laundering patterns, headlines and the analyst brief. JSON." }, "geo_dataset": { "url": "https://diamond.btc-intel.workers.dev/api/x402/geo_dataset?date=%3Cdate%3E", "price_usd": 1.6, "description": "Hourly research dataset for one day: BTC price, whale count and volume, AML cases, ransomware leak posts and 11 news-topic intensities. CSV." }, "pulse": { "url": "https://diamond.btc-intel.workers.dev/api/x402/pulse", "price_usd": 0.02, "description": "Live Bitcoin market pulse from this node: fee rates for 1 block to 1 day, mempool size, the last 24 h of whale transactions (>= US$100k) and laundering-pattern (AML) cases, implied BTC/USD. JSON." }, "watch": { "url": "https://diamond.btc-intel.workers.dev/api/x402/watch?address=%3Caddress%3E", "price_usd": 1.0, "description": "Address Watch for 30 days: every confirmed transaction paying to or spending from one Bitcoin address, in a private feed (web, JSON, RSS) and as phone push (ntfy). Optional feed= adds the address to, or extends it in, an existing feed. Returns the feed links." }, "batch": { "url": "https://diamond.btc-intel.workers.dev/api/x402/batch?addresses=%3Caddresses%3E", "price_usd": 2.5, "description": "Batch risk check for up to 25 Bitcoin addresses in one call: OFAC SDN sanctions, ransomware payment lists, ownership clusters, sweeper-bot addresses and this node's AML cases (30 days) for each, plus a summary of the flagged ones. Volume price, about 60% below single checks." } }, "mcp": "https://diamond.btc-intel.workers.dev/api/mcp", "how_to": "GET the endpoint; on HTTP 402 sign the USDC authorization described in the PAYMENT-REQUIRED header (v2) or accepts[] (v1) and resend with PAYMENT-SIGNATURE (v2) or X-PAYMENT (v1)." }, "mcp": { "url": "/api/mcp", "transport": "streamable-http (POST, JSON-RPC 2.0)", "payments": "x402 MCP transport (_meta['x402/payment']) or Lightning (pay_with='lightning')" }, "openapi": "/api/openapi.json", "free": "GET /api/free/screen?address=: OFAC SDN + ransomware list match, free (a limited number per hour)", "terms": "Heuristic intelligence derived from public blockchain data observed by an independent Bitcoin node and from public sanctions and ransomware lists. It flags patterns, not proof. Not legal, compliance or investment advice. The absence of a flag is not evidence that an address is legitimate. Provided as-is, without warranty." }