Review
by invinoveritas in Security & trust
invinoveritas /review — a signed neutral verdict BEFORE an irreversible action, committed before the outcome it's graded against. Recomputable from public
https://api.babyblueviper.com/review- Price
- $0.825
- per call in USDC
- Uptime
- 100%
- last 30 days
- Response time
- 618 ms
- 1.1 s slowest 5%
- Last check
- Passed
- 3 h ago, next any minute now
Reliability
Status and outage history · Atom feed · Watch with other listings
How to call it
POST https://api.babyblueviper.com/review
Each call costs $0.825 in USDC on Base, paid with the request over x402.
Run a free test callOne unpaid request, the way an agent sends it. You see the payment challenge it gets back. Nothing is charged.
Example request
From the listing.
POST https://api.babyblueviper.com/review
content-type: application/json
{
"artifact": "<The trade/diff/command/plan/on-chain action to review>",
"artifact_type": "code_diff",
"concerns": "example",
"context": "example",
"severity_threshold": "blocker",
"sign": true
}Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
artifact | string | Yes | The trade/diff/command/plan/on-chain action to review |
artifact_type | string | No | One of: code_diff, patch, shell_command, plan, config_change, analysis, agent_output, trade, onchain_action, general. |
concerns | string | No | |
context | string | No | |
severity_threshold | string | No | One of: blocker, high, medium, all. |
sign | boolean | No | Return a PORTABLE signed verdict proof you can attach to your output — any downstream agent verifies it via free /verify-proof WITHOUT trusting you or us (schnorr vs our published key). This is the differentiator. |
Example response
The provider's example. We can't check it without paying.
{
"confidence": 0.88,
"issues": [
{
"detail": "…",
"severity": "high"
}
],
"proof": {
"event": {
"id": "<nostr id>",
"sig": "<schnorr>"
},
"proof_payload": {
"schema": "invinoveritas.verdict_proof.v1",
"verifier_pubkey": "<x-only hex>",
"verify_url": "https://api.babyblueviper.com/verify-proof"
},
"verify": "POST this proof's event to /verify-proof — anyone confirms we issued this verdict without trusting the presenter or us. Track record: /ledger."
},
"summary": "Safe to proceed; two non-blocking concerns noted.",
"verdict": "approve_with_concerns"
}Call it from code
The curl command shows the payment challenge. The JavaScript and Python versions pay and call, and never pay more than $0.825.
curl: see the payment challenge
# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i -X POST 'https://api.babyblueviper.com/review' \
-H 'content-type: application/json' \
--data-raw '{"artifact":"<The trade/diff/command/plan/on-chain action to review>","artifact_type":"code_diff","concerns":"example","context":"example","severity_threshold":"blocker","sign":true}'
# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - -X POST 'https://api.babyblueviper.com/review' \
-H 'content-type: application/json' \
--data-raw '{"artifact":"<The trade/diff/command/plan/on-chain action to review>","artifact_type":"code_diff","concerns":"example","context":"example","severity_threshold":"blocker","sign":true}' \
| grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decodeJavaScript: pay and call
// npm i @x402/fetch @x402/evm viem
import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
// Pays at most $0.825 per call.
const client = new x402Client().setSpendControls({ maxAmountPerPayment: "$0.825" });
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.EVM_PRIVATE_KEY) });
const pay = wrapFetchWithPayment(fetch, client);
// Not sure it's safe to pay? ToolVet checks it first for $0.005. Pay for that from a separate
// client: this one is capped at $0.825 per payment. GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fapi.babyblueviper.com%2Freview&method=POST
const res = await pay("https://api.babyblueviper.com/review", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({
"artifact": "<The trade/diff/command/plan/on-chain action to review>",
"artifact_type": "code_diff",
"concerns": "example",
"context": "example",
"severity_threshold": "blocker",
"sign": true
}),
});
console.log(res.status, await res.text());Python: pay and call
# pip install "x402[requests,evm]"
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client
# Pays at most $0.825 per call.
client = x402ClientSync().set_spend_controls({"max_amount_per_payment": "$0.825"})
register_exact_evm_client(client, EthAccountSigner(Account.from_key(os.environ["EVM_PRIVATE_KEY"])))
with x402_requests(client) as session:
res = session.post(
"https://api.babyblueviper.com/review",
json={
"artifact": "<The trade/diff/command/plan/on-chain action to review>",
"artifact_type": "code_diff",
"concerns": "example",
"context": "example",
"severity_threshold": "blocker",
"sign": True,
},
)
print(res.status_code, res.text)Security scan
No findings
We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time | Price |
|---|---|---|---|---|
| 3 h ago | Passed | 402 | 644 ms | $0.825 |
| 8 h ago | Passed | 402 | 569 ms | $0.825 |
| 13 h ago | Passed | 402 | 609 ms | $0.825 |
| 17 h ago | Passed | 402 | 613 ms | $0.825 |
| 22 h ago | Passed | 402 | 693 ms | $0.825 |
Show 10 older checks
| 26 h ago | Passed | 402 | 1.1 s | $0.825 |
| 30 h ago | Passed | 402 | 672 ms | $0.825 |
| 34 h ago | Passed | 402 | 230 ms | $0.8 |
| 38 h ago | Passed | 402 | 594 ms | $0.825 |
| 43 h ago | Passed | 402 | 650 ms | $0.8 |
| 47 h ago | Passed | 402 | 1.1 s | $0.825 |
| 2 days ago | Passed | 402 | 637 ms | $0.825 |
| 2 days ago | Passed | 402 | 596 ms | $0.825 |
| 2 days ago | Passed | 402 | 729 ms | $0.825 |
| 3 days ago | Passed | 402 | 676 ms | $0.825 |
History
| 16 Oct 2026 | Price on xrpl:0 changed from 615701 units of XRP to 626930 units of XRP |
| 16 Oct 2026 | Price on xrpl:0 changed from 613201 units of XRP to 615701 units of XRP |
| 16 Oct 2026 | Price on xrpl:0 changed from 614356 units of XRP to 613201 units of XRP |
| 16 Oct 2026 | Price on xrpl:0 changed from 615934 units of XRP to 614356 units of XRP |
| 16 Oct 2026 | Price on xrpl:0 changed from 613644 units of XRP to 615934 units of XRP |
| 15 Oct 2026 | Price on xrpl:0 changed from 615394 units of XRP to 613644 units of XRP |
| 15 Oct 2026 | Price on Base changed from $0.8 to $0.825; Price on xrpl:0 changed from 618691 units of XRP to 615394 units of XRP |
| 15 Oct 2026 | Price on Base changed from $0.825 to $0.8; Price on xrpl:0 changed from 620096 units of XRP to 618691 units of XRP |
| 15 Oct 2026 | Price changed from $0.8 to $0.825 |
| 15 Oct 2026 | Price changed from $0.825 to $0.8 |