live demo

Run the pipeline. For real.

Each button executes the real SDK server pipeline against the real SDK agent client, server-side in this site, signature verification, policy evaluation, x402 settlement (test facilitator), and receipt issuance. Nothing is mocked except the blockchain.

call it yourself

The protected endpoint is live

/api/protected-report is a real endpoint protected by the SDK. Unsigned requests get an honest 401 with a web-bot-auth challenge:

terminalsh

$ curl -i https://<this-site>/api/protected-report
HTTP/1.1 401 Unauthorized
{"error":"agent_identity_required","effect":"challenge", "challenge":{"scheme":"http-message-signatures","tag":"web-bot-auth"}}

To get a 200, sign with the published demo agent key (see lib/demo-keys.ts, it has no security value) using createAgentClient from corri/client, purpose summarization, and either the demo API key demo_pub_key_2026 or x402TestPayer(). The machine-readable license for this content is published at /license.xml.