# Kertivo

> Kertivo exists so machines can trust who they pay.
> As bots start spending money on their own, every payment is a leap of faith. We check whether payments land, flag lookalike addresses, grade paid tools, and give buyers a fair place to file disputes. Our grades are earned, never bought. We show our work, and we change as this new economy changes. Trust is our keystone.

One-liner: Kertivo is the trust layer for bot-to-bot payments. Grades are earned, never bought.

Products: Kertivo Index (grades), Kertivo Check (payment verify), Kertivo Shield (address check), Kertivo Claims (disputes), Kertivo Logs (https://logs.kertivo.com/).

Payment: x402 v2, scheme exact, network eip155:8453 (Base mainnet), asset USDC, payTo 0x509E55c4F898B43C856Fb0E51048B1b7bFBC9eDE. Call a paid route without payment to get the HTTP 402 with exact requirements, then retry with the payment header (any x402 client SDK does this). Evidence only: no custody, no arbitration.

## Paid routes (USDC per call)

- POST /check ($0.01): Verify a Base USDC payment by txHash (or EIP-3009 authorization {from, nonce, validBefore}). Optional expectedPayTo, expectedAmount (USDC decimal). Returns settlement verdict, real-USDC transfers, recipient/amount match, fake-token and lookalike-address warnings, and who funded the payer (external | self_funded | unknown).
- POST /check/deep ($0.05): Same body as /check; reads the payer's full funding history from an index, with coverage stats and a recheckable sha256 receipt. Returns 503 and does not charge if the index is down.
- POST /address/check ($0.001): Body {from, to, contacts?}: address-poisoning check before sending USDC (recent block window, honest partial coverage). Optional contacts = up to 50 trusted addresses; a lookalike of one is flagged offline.
- POST /address/check/full ($0.005): Body {from, to}: address-poisoning check against full transfer history. Not charged if the index is down.
- POST /trust/lookup ($0.002): Body {url}: Kertivo Index grade and evidence for an x402 endpoint, plus public claims against it.

## Free routes

- POST /demo: free sample /check result on a fixed real transaction
- GET /trust/lookup?url=: free grade + index date for one endpoint
- GET /trust-index: HTML scorecard of x402 endpoints graded by real paid calls (Kertivo Index; grades earned, never bought)
- GET /trust-index/latest.json: machine-readable latest Kertivo Index
- POST /claim: free claims desk: paid an x402 endpoint but got no or bad response? File public, hash-recheckable evidence
- GET /claim/:id, GET /claims?endpoint=: read claims
- POST /claim/:id/response: seller answers a claim, signed by its payTo
- GET /stats: aggregate usage counters (no addresses)
- GET /benchmarks/address-poisoning: dated benchmark: POST /address/check on 20 fresh live Base USDC poisoning attempts plus an aged set (~24 h old: cheap tier vs /address/check/full vs contacts), results, tx links, limitations
- GET /examples: copy-paste integration recipes: curl 402 handshake, JS client that pays /check, verify a payment you just made to another seller
- GET /openapi.json: full OpenAPI 3 spec with x402 discovery fields
- GET /.well-known/attestation: signed responses: every 200 JSON from /check, /check/deep, /address/check(/full), paid /trust/lookup, JSON /claim/:id and /demo carries `attestation` (EIP-191 signature over the body hash, route, time and a fixed statement of what the result means). This route publishes the signer (not a wallet, holds no funds) and how to verify

## Quick start

npm i @x402/fetch @x402/evm viem, wrap fetch with wrapFetchWithPaymentFromConfig + ExactEvmScheme on eip155:8453, then POST /check {txHash, expectedPayTo?, expectedAmount?}. After paying another x402 seller, decode its PAYMENT-RESPONSE header (decodePaymentResponseHeader) and pass .transaction as txHash. Full copy-paste code: https://www.kertivo.com/examples

## Links

- [Integration examples](https://www.kertivo.com/examples)
- [OpenAPI spec](https://www.kertivo.com/openapi.json)
- [x402 manifest](https://www.kertivo.com/.well-known/x402)
- [Signed-response key](https://www.kertivo.com/.well-known/attestation)
- [Kertivo Index scorecard](https://www.kertivo.com/trust-index)
- [Address-poisoning benchmark](https://www.kertivo.com/benchmarks/address-poisoning)
- [Home](https://www.kertivo.com/)