Agentic Finance Graph changelog

• + fleet_check
• + payer_check
• + agent_books

description

Ledger of AI-agent money on Base: agents, payments, detections, Gate, signed Pass, free checks → Ledger of AI-agent money on Base: payments, detections, Gate, signed Pass, Agent Books, free checks

package_identifier

— → agentic-finance-graph

package_registry

— → npm

version

1.9.1 → 1.10.0

description

Ledger of AI-agent money on Base: ranked agents, payments, detections, free checks before you pay → Ledger of AI-agent money on Base: agents, payments, detections, Gate, signed Pass, free checks

version

1.7.0 → 1.9.1

https://agenticfinancegraph.com/llms.txt

− - [MCP setup guide](https://agenticfinancegraph.com/mcp-server-connect-your-ai-to-agent-money-data): Claude, Cursor, VS Code, agent frameworks; the fourteen tools; what is free.− - [MCP server](https://agenticfinancegraph.com/mcp): Streamable HTTP, stateless, free, read-only. Tools: market_state, find_agent, agent_record, ranked_agents, detections, definition, metric_history, list_metrics, since_last, counterparty_preview, agent_statement, pay_check, payer_set, agent_stability, agent_independence, ladder_dynamics, verify_sum_log, evidence_pack_quote, and since 16 Oct 2026 the security layer in shadow: agent_pattern, payee_facts, gate_check, agent_pass, blast_radius, cana− - 16 Oct 2026, the security layer (shadow / log-only; measurements with their time and definition id, never verdicts; nothing is blocked by us): how it works, with live figures, /ai-agent-security-layer-gate-watch-pass-shadow. The Watch: is an agent's newest payment in character for it, /api/score and /api/score?agent=<id> (behaviour.out_of_character.v2). The Gate: POST /api/gate/check {agent, payee, amount_usd, policy_name} answers block / warn / log / allow with every reason under a policy in + - [MCP setup guide](https://agenticfinancegraph.com/mcp-server-connect-your-ai-to-agent-money-data): Claude, Cursor, VS Code, agent frameworks; the twenty-five tools and five prompts; which wallets it works with (seven recipes read from the wallets' own docs on 30 Oct 2026, at #wallets); what is free.+ - [MCP server](https://agenticfinancegraph.com/mcp): Streamable HTTP, stateless, free, read-only. Tools: market_state, find_agent, agent_record, ranked_agents, detections, definition, metric_history, list_metrics, since_last, counterparty_preview, agent_statement, pay_check, payer_set, agent_stability, agent_independence, ladder_dynamics, verify_sum_log, evidence_pack_quote, the security layer (live since 16 Oct 2026, advisory since 1 Nov 2026; the Pass is signed): agent_pattern, payee_facts, ga+ - 16 Oct 2026, the security layer (shadow / log-only until 1 Nov 2026, advisory since; measurements with their time and definition id, never verdicts; nothing is blocked by us): how it works, with live figures, /ai-agent-security-layer-gate-watch-pass-shadow. The Watch: is an agent's newest payment in character for it, /api/score and /api/score?agent=<id> (behaviour.out_of_character.v2). The Gate: POST /api/gate/check {agent, payee, amount_usd, policy_name} answers block / warn / log / allow wit

• + self_check

https://agenticfinancegraph.com/llms.txt

− - Evidence packs (checks) about one id: GET /check/precheck|liveness|paygraph|drain|exit|incidents|peer|builders|bundle|reval|statement?id=<token|slug|wallet> (POST with a JSON id also works; precheck also takes payto=0x…). About one address: GET /check/counterparty?address=0x… (2 cents: up to 100 paying agents with level, binding confidence and transaction hashes) and GET /check/venue?address=0x… (3 cents: what the address is, who pays it, poisoning look-alike or not, live 48-hour flow). 1 to 5+ - When you want a whole month of agent money as one file rather than the page: /check/edition?period=2026-09 (30¢; YYYY-MM, YYYY-Qn or latest) returns the working papers behind a final State of Agent Money edition: every agent with its level, binding method, payments, USD, what left its control and its counterparties; every payee with its label; the edition's figures with definition ids and daily series; the two-way checks and the change register. The edition's hash is a leaf of the signed state+ - Evidence packs (checks) about one id: GET /check/precheck|liveness|paygraph|drain|exit|incidents|peer|builders|bundle|reval|statement?id=<token|slug|wallet> (POST with a JSON id also works; precheck also takes payto=0x…). About one address: GET /check/counterparty?address=0x… (2 cents: up to 100 paying agents with level, binding confidence and transaction hashes) and GET /check/venue?address=0x… (3 cents: what the address is, who pays it, poisoning look-alike or not, live 48-hour flow). 1 to 5+ - [Use our data safely](https://agenticfinancegraph.com/use-agentic-finance-graph-data-safely): for builders. Treat answers as time-stamped measurements, never permission; keep your own spending limits; choose a fail mode for when we are late (feed freshness at /api/status); check records yourself with the open-source CLI (afg chaincheck against a public RPC, afg verify against the signed Merkle-sum head, afg logwatch for the statement log).+ - [Answers to the manifesto's two research questions (23 Oct 2026)](https://agenticfinancegraph.com/research/manifesto-answers-2026-10-23.json): both of our expectations were wrong. The routing-hop rule, not pre-registration, carries the USDC spending share (+36.6 points when switched off on its own, against +6.7); feedback volume, ten heaviest raters set aside, does not predict that an agent starts paying (AUC 0.452, 95% interval 0.422 to 0.487, on the pre-registered 15 Sep cohort). Definitions+ - [/api/registry-chains](https://agenticfinancegraph.com/api/registry-chains): the ERC-8004 Identity Registry on every EVM chain where it is deployed, read from public nodes daily: per chain the highest agent id plus one (ids start at 0: the registrations minted at that address unless the newest were burned, never a count of agents), the agentURI hosts in a twelve-id sample, and which chains our own census reads (reg.chains.upperbound.v2). Free.

version

1.5.0 → 1.7.0

https://agenticfinancegraph.com/llms.txt

− - [MCP server](https://agenticfinancegraph.com/mcp): Streamable HTTP, stateless, free, read-only. Tools: market_state, find_agent, agent_record, ranked_agents, detections, definition, metric_history, list_metrics, since_last, counterparty_preview, agent_statement, pay_check, evidence_pack_quote. Prompts: start_here, daily_brief, check_before_paying, explain_agent, where_agents_pay. Just connected? Ask your AI what it can do with Agentic Finance Graph: the server tells it how to give the tour. Ad+ - [MCP server](https://agenticfinancegraph.com/mcp): Streamable HTTP, stateless, free, read-only. Tools: market_state, find_agent, agent_record, ranked_agents, detections, definition, metric_history, list_metrics, since_last, counterparty_preview, agent_statement, pay_check, payer_set, agent_stability, agent_independence, ladder_dynamics, verify_sum_log, evidence_pack_quote, and since 16 Oct 2026 the security layer in shadow: agent_pattern, payee_facts, gate_check, agent_pass, blast_radius, cana+ - 16 Oct 2026, the security layer (shadow / log-only; measurements with their time and definition id, never verdicts; nothing is blocked by us): how it works, with live figures, /ai-agent-security-layer-gate-watch-pass-shadow. The Watch: is an agent's newest payment in character for it, /api/score and /api/score?agent=<id> (behaviour.out_of_character.v2). The Gate: POST /api/gate/check {agent, payee, amount_usd, policy_name} answers block / warn / log / allow with every reason under a policy in 

• + agent_stability
• + agent_independence
• + ladder_dynamics
• + verify_sum_log
• + agent_pattern
• + payee_facts
• + gate_check
• + agent_pass
• + blast_radius
• + canary_register
• + canary_status

https://agenticfinancegraph.com/llms.txt

− > Public accounting tape for AI agents that hold, move, and earn real money. We rank economic actors (L7+: a bound wallet observed paying a different address), not ERC-8004 mints. Every number ships with object, chain set, window, as_of and source. Do not quote a registration count as a live-agent count. Do not quote a liveness percentage without its sample and date: call GET /api/state and read probe_l5_rate with its as_of and probe_sample_size.− - Before your agent pays an unknown agent or wallet: GET https://agenticfinancegraph.com/api/agents?q=<wallet|token> (free) says whether it is ranked (L7+: a bound wallet we saw paying a different address). For a dated record, /check/liveness?id=<token> (1¢); for its hash-chained, Ed25519-signed three-hour statements with Merkle proofs, /check/statement?id=<token> (1¢).− Packs are sold over x402 v2 in USDC on Base, appear in the Coinbase x402 Bazaar, and are quoted free by the MCP tool evidence_pack_quote. A 404 before payment means there is nothing to sell, and nothing is charged.− - [MCP setup guide](https://agenticfinancegraph.com/mcp-server-connect-your-ai-to-agent-money-data): Claude, Cursor, VS Code, agent frameworks; the eleven tools; what is free.− - [MCP server](https://agenticfinancegraph.com/mcp): Streamable HTTP, stateless, free, read-only. Tools: market_state, find_agent, agent_record, ranked_agents, detections, definition, metric_history, since_last, counterparty_preview, agent_statement, evidence_pack_quote. Add it to Claude, Cursor or an agent framework as a remote MCP server at https://agenticfinancegraph.com/mcp. Paid evidence packs are quoted by evidence_pack_quote and bought over x402 at /check/<kind>.− - The Desk, a monitoring board for people who run agents, is in open beta: connect a wallet at /desk (Sign-In with Ethereum; terms at /terms). Watch is free (3 agents); Operator (29 USDC / 30 days, 25 agents, evidence packs included) and Team (149 USDC / 30 days, 250 agents, revaluations included) are bought in USDC on Base over x402 from the signed-in wallet, prepaid, never auto-renewing. Plans: /api/subscribe?view=plans. A Desk session on a paid plan sent as a Bearer token unlocks the full tie− - Evidence packs (checks) about one id: GET /check/liveness|paygraph|drain|incidents|peer|bundle|reval|statement?id=<token|slug|wallet> (POST with a JSON id also works). About one receiving address: GET /check/counterparty?address=0x… (2 cents: up to 100 paying agents with level, binding confidence and transaction hashes). 1 to 5 cents in USDC on Base over x402 v2 (bundle 10 cents, reval 25 cents), settled by the Coinbase facilitator; the 402 states the exact price and the receiving address, and− ## Research and data quality (September 2026)− - [Research notes (PDF)](https://agenticfinancegraph.com/research): dated, reproducible notes. Note 01 (27 Sep 2026): the first census of ERC-8004 agents on Base and where counted spending goes (figures dated 27 September 2026; the live values are at /api/state).− - [Know Your Agent needs a memory](https://agenticfinancegraph.com/know-your-agent-needs-behaviour-history-ai-agent-wallet-drains): agent-wallet drains are behavioural; the drain-pattern detector and a ten-item threat model. The case we cite is the May 2026 Bankrbot drain (Ledger: ~$175K in DRB tokens, most of it later returned; our own detector would have missed it, see Research Note 02); Zscaler's July 2026 work was a demonstration, not a theft.− - [Live machine-money panels](https://agenticfinancegraph.com/live-agentic-finance-data-stablecoins-ai-agent-tokens-vault-tvl)− - [Graph model](https://agenticfinancegraph.com/agentic-finance-graph-ai-agents-wallets-policies-flows-vaults)− - [Detections log](https://agenticfinancegraph.com/detections-ai-agent-anomaly-log-mint-bursts-retry-storms)− - [ERC-8004 identity](https://agenticfinancegraph.com/erc-8004-trustless-agents-identity-reputation-liveness-data)− - [Idle USDC and ERC-4626 vaults](https://agenticfinancegraph.com/where-ai-agents-park-idle-usdc-yield-agents-erc-4626-vaults-rwa)− - [Agent wallet security checklist](https://agenticfinancegraph.com/ai-agent-wallet-security-prompt-injection-god-keys-checklist)− - [History of agentic finance](https://agenticfinancegraph.com/history-of-agentic-finance-from-multi-agent-systems-to-machine-money)− - [Who wrote ERC-8004, x402 and A2A](https://agenticfinancegraph.com/who-wrote-erc-8004-x402-and-a2a-the-people-behind-trustless-agents)− - [September 2026 changelog](https://agenticfinancegraph.com/changelog-september-2026-what-we-added-and-what-it-measures)− - [Payments statistics](https://agenticfinancegraph.com/ai-agent-payments-statistics-2026-volume-usdc-share-liveness-data)− - [Forecasts vs measured commerce](https://agenticfinancegraph.com/agentic-commerce-market-size-forecasts-vs-measured-reality-2026)+ > Public accounting tape for AI agents that hold, move, and earn real money. We rank economic actors (L7+: a bound wallet seen paying money out of the agent's control), not ERC-8004 mints. Every number ships with object, chain set, window, as_of and source. Do not quote a registration count as a live-agent count. Do not quote a liveness percentage without its sample and date: call GET /api/state and read probe_l5_rate with its as_of and probe_sample_size.+ Agentic Finance Graph has no token and has never launched one. A token named "Agentic Finance Graph (AFG)" on Robinhood Chain (0x3f6dba1b74bf3a8d123ad05f24ddfa952245bac2) is not ours.+ - The routine check before your agent pays or hires another (costs cents): /check/precheck?id=<token>&payto=<address> (5¢) returns its level and last payment, live incidents, how old its latest statement is and whether the chain is intact, and, with payto, what that address is (label, contract or key, how many registered agents paid it, whether this agent paid it before, whether our poisoning watch saw it planted as a look-alike). Facts only, never a verdict.+ - Before you send money to an address you were given: /check/venue?address=<0x…> (3¢): its label and basis, contract or plain key, which registered agents pay it (30 days and all time), poisoning look-alike or not, and its USDC, USDT and EURC flow over the last 48 hours, read live. Which apps build one agent's transactions (ERC-8021 Builder Codes): /check/builders?id=<token> (1¢); the aggregate by code is free at /api/builders.+ - When an agent you run, insure or depend on went quiet: /check/exit?id=<token> (3¢) lists every window in which a new payee took most of its outflow within 72 hours, whether it paid anyone after, and where the money went next (read live). Each window is a candidate under drain.abandoned.v1, never a verdict: a person cashing out and a thief with a stolen key leave the same shape.+ - Before your agent pays an unknown agent or wallet: GET https://agenticfinancegraph.com/api/agents?q=<wallet|token> (free) says whether it is ranked (L7+: a bound wallet we saw paying money out of the agent's control). For a dated record, /check/liveness?id=<token> (1¢); for its hash-chained, Ed25519-signed three-hour statements with Merkle proofs, /check/statement?id=<token> (1¢).+ Packs are sold over x402 v2 in USDC on Base, appear in the Coinbase x402 Bazaar and on x402scan.com, and are quoted free by the MCP tool evidence_pack_quote. Any x402 v2 client can pay them, including agent wallets such as AgentCash; the discovery document with every price is https://agenticfinancegraph.com/openapi.json. A 404 before payment means there is nothing to sell, and nothing is charged. Four packs (liveness, paygraph, drain, incidents) package what the free agent record already shows i+ Not measured yet: session keys (smart-account or EIP-7702 session permissions). No figure here covers them, and an agent record's silence on session keys means "not observed", not "none".+ - [MCP setup guide](https://agenticfinancegraph.com/mcp-server-connect-your-ai-to-agent-money-data): Claude, Cursor, VS Code, agent frameworks; the fourteen tools; what is free.+ - [MCP server](https://agenticfinancegraph.com/mcp): Streamable HTTP, stateless, free, read-only. Tools: market_state, find_agent, agent_record, ranked_agents, detections, definition, metric_history, list_metrics, since_last, counterparty_preview, agent_statement, pay_check, evidence_pack_quote. Prompts: start_here, daily_brief, check_before_paying, explain_agent, where_agents_pay. Just connected? Ask your AI what it can do with Agentic Finance Graph: the server tells it how to give the tour. Ad+ - The Desk, a monitoring board for people who run agents, is in open beta: connect a wallet at /desk (Sign-In with Ethereum; terms at /terms). Watch is free (1 agent); Operator (29 USDC / 30 days, 20 agents, evidence packs included for 9 of them) and Team (149 USDC / 30 days, 60 agents, every pack and revaluations included; more than 60 is a custom plan) are bought in USDC on Base over x402 from the signed-in wallet, prepaid, never auto-renewing. Plans: /api/subscribe?view=plans. A Desk session + - Evidence packs (checks) about one id: GET /check/precheck|liveness|paygraph|drain|exit|incidents|peer|builders|bundle|reval|statement?id=<token|slug|wallet> (POST with a JSON id also works; precheck also takes payto=0x…). About one address: GET /check/counterparty?address=0x… (2 cents: up to 100 paying agents with level, binding confidence and transaction hashes) and GET /check/venue?address=0x… (3 cents: what the address is, who pays it, poisoning look-alike or not, live 48-hour flow). 1 to 5+ ## Research and data quality+ Every figure quoted in this section is dated to the note or page it comes from; the live values are at [/api/state](https://agenticfinancegraph.com/api/state).+ - [Research notes (PDF)](https://agenticfinancegraph.com/research): dated, reproducible notes, newest first. Latest: Note 03 (11 Oct 2026). Machine-readable index: [/research/notes.json](https://agenticfinancegraph.com/research/notes.json).+ - [Research Note 03 (PDF): Measured Before Trusted](https://agenticfinancegraph.com/research/afg-research-note-03-v1-0-measured-before-trusted-2026-10-11.pdf): v1.0 of 11 Oct 2026. Our detectors run against synthetic agent wallets with known answers (an adaptation of IBM's AMLSim), the two faults that found in the live rules, a balance test that separates a drain from a purchase, and the backtest over the whole ledger behind the 11 October corrections.+ - [Research Note 01 (PDF): The Binding Record](https://agenticfinancegraph.com/research/afg-research-note-01-v2-1-the-binding-record-2026-09-27.pdf): v2.1 of 27 Sep 2026. How we join an AI agent's identity to the money it moves, and the first census of ERC-8004 agents on Base (figures dated 27 September 2026).+ - [Know Your Agent needs a memory](https://agenticfinancegraph.com/know-your-agent-ai-agent-wallet-drains): agent-wallet drains are behavioural; the drain-pattern detector and a ten-item threat model. The case we cite is the May 2026 Bankrbot drain (Ledger: ~$175K in DRB tokens, most of it later returned; our own detector would have missed it, see Research Note 02); Zscaler's July 2026 work was a demonstration, not a theft.+ - [/api/changepoints](https://agenticfinancegraph.com/api/changepoints) and [/api/steps](https://agenticfinancegraph.com/api/steps): our own dated changes (coverage, method, labels, detector rules), and every step found in our archived series with what explains it. A step at a changepoint date is our change, not the market's.+ - [/api/payers?agent=](https://agenticfinancegraph.com/api/payers?agent=54261): the wallets observed paying one agent, and how much of its ERC-8004 feedback came from wallets that paid it first; the list is ready for getSummary(clientAddresses). Free.+ - [/api/stability?agent=](https://agenticfinancegraph.com/api/stability?agent=45978): stable for N days: the run length since the last break in an agent's own payment behaviour (CUSUM against its own history) and its 30-day heartbeat class; the measured false-break rate is in the document. Free.+ - [/api/independence?agent=](https://agenticfinancegraph.com/api/independence?agent=45978): the seed-based independence score (no symmetric score is sybilproof; this one starts from addresses with demand from three or more operator sets), the inflation ratio of an agent's L9 support, and the operator sets behind the rank. Free.+ - [/api/ladder-dynamics](https://agenticfinancegraph.com/api/ladder-dynamics): how ranked agents end (cumulative incidence of drained, abandoned, dormant with numbers at risk), the Standardised Drain Ratio per minting address with intervals, the day-to-day transition matrix, and the landmark re-check of the survival figures. Free.+ - [/api/sum-log](https://agenticfinancegraph.com/api/sum-log): the counted total as a Merkle-sum tree with a signed head; ?event= proves one payment to the root and the total, ?agent= proves one agent's whole record and says whether it was rewritten. The MCP tool verify_sum_log is the skeptical client. Free.+ - [/api/freezes](https://agenticfinancegraph.com/api/freezes): the stablecoin issuers' own freeze events on Base and the addresses frozen now, with which of them agents paid. Free.+ - [/api/x402-submitters](https://agenticfinancegraph.com/api/x402-submitters): who lands x402 settlements (payer, facilitator, third party, bundler) and the share in the closed receiveWithAuthorization form. Free.+ - /check/trace?id= (5 cents over x402): where did the money go: an agent's exits followed live up to three hops, with each hop's label, kind, issuer freeze, swap out of a freezable token and Tron activity.+ - [/api/approvals](https://agenticfinancegraph.com/api/approvals): the token approvals paying agent wallets gave in the last 30 days, the balances behind standing unlimited ones, and approvals to plain accounts; daily.+ - [ERC-8004 in practice](https://agenticfinancegraph.com/erc-8004-in-practice-trust-features-measured): how Base agents use the standard's trust features (agentWallet, endpoint-domain proof, payer-filtered reviews), and the risks around agent money, measured 12 Oct 2026.+ - [/api/statements/log](https://agenticfinancegraph.com/api/statements/log): an append-only log over every signed statement root (RFC 6962): keep a signed tree head, later ask ?consistency=<size> and check that our history was not rewritten.+ - [Builder Codes](https://agenticfinancegraph.com/builder-codes) and [/api/builders](https://agenticfinancegraph.com/api/builders): ERC-8021 Builder Codes read from counted agent payments on Base, grouped by code (value, agents, payees, dates), hourly; codes shown as codes, the registry names no one.+ - [Slow drains, read one by one](https://agenticfinancegraph.com/slow-drains): a working note (11 Oct 2026) on the candidate slow-drain rule: every window it opens on the live ledger, four signals per window, two drain candidates read at receipt level; not detections.+ - [Live machine-money panels](https://agenticfinancegraph.com/live-agentic-finance-data-stablecoins-tvl)+ - [Graph model](https://agenticfinancegraph.com/agentic-finance-graph-wallets-flows-vaults)+ - [Detections log](https://agenticfinancegraph.com/detections-ai-agent-anomaly-log-mint-bursts-retry-storms): every rule's measured record on synthetic data with known answers (github.com/AgenticFinanceGraph/amlsim-agentic), and the 11 October 2026 corrections (retry_storm v2 and mint_burst v2 as runs with a peak, the balance reading on every drain detection, the new layering_fan kind).+ - [Changelog, October 2026](https://agenticfinancegraph.com/changelog-october-2026)+ - [ERC-8004 identity](https://agenticfinancegraph.com/erc-8004-trustless-agents-data)+ - [Idle USDC and ERC-4626 vaults](https://agenticfinancegraph.com/ai-agents-idle-usdc-yield-erc-4626-vaults)+ - [Agent wallet security checklist](https://agenticfinancegraph.com/ai-agent-wallet-security-checklist)+ - [History of agentic finance](https://agenticfinancegraph.com/history-of-agentic-finance-machine-money)

• + guide
• + changepoints
• + definitions

• + start_here
• + daily_brief
• + check_before_paying
• + explain_agent
• + where_agents_pay

• + pay_check
• + payer_set
• + list_metrics

version

1.4.0 → 1.5.0

description

Ledger of AI-agent money on Base: ranked agents, payments, detections, checks before you pay → Ledger of AI-agent money on Base: ranked agents, payments, detections, free checks before you pay

version

1.2.0 → 1.4.0

description

Independent ledger of AI-agent money on Base: ranked agents, payments, detections, statements → Ledger of AI-agent money on Base: ranked agents, payments, detections, checks before you pay

version

1.1.0 → 1.2.0