llms.txt
+18 −3
https://moltbound.dev/llms.txt
− > Moltbound is a TEST-ONLY sandbox and reference architecture where an AI agent can get quotes for a person in the United States. TEST ONLY. Moltbound is a sandbox. Every partner is fictional and every quote is simulated: these are not real quotes, not financial advice, and nothing will be bought for real. Moltbound is not an insurer or broker. United States only. SANDBOX: use fictitious data only. Do not enter real personal details.− Only a person can approve a simulated passkey purchase on Moltbound's website:− - Once they approve, POST https://moltbound.dev/kapi/sandbox/sessions/<session_id>/purchases {"consent_request_id"} within 15 minutes to complete the sandbox purchase, and poll GET …/purchases/<purchase_id>. Each approval is bound to that exact quote (bid_id) and agent: repeating the purchase call for the same approved quote is idempotent (HTTP 202 returning the existing purchase_id without creating a second purchase), whereas attempting to reuse an approval for a different quote or agent is ref+ > Moltbound is the consent and checkout rail for AI agents in the United States: get quotes across 20 services for a person, and complete a checkout only after their own passkey approval. Built to production standards. The sandbox is open now and is TEST-ONLY: simulated data. TEST ONLY. Moltbound is a sandbox. Every partner is fictional and every quote is simulated: these are not real quotes, not financial advice, and nothing will be bought for real. Moltbound is not an insurer or broker. United+ Only a person can approve a simulated passkey purchase on Moltbound's website (to test the rules without a browser, see "Test the approval rules yourself" below):+ - Once they approve, POST https://moltbound.dev/kapi/sandbox/sessions/<session_id>/purchases {"consent_request_id"} within 15 minutes to complete the sandbox purchase, and poll GET …/purchases/<purchase_id>. Each approval is bound to that exact quote (bid_id) and agent: repeating the purchase call for the same approved quote is idempotent (HTTP 202 returning the existing purchase_id without creating a second purchase), whereas attempting to reuse an approval for a different quote is refused with+ ## Test the approval rules yourself (no browser, no passkey)+ You can attack the approval step headlessly with a simulated human (email code instead of a passkey; never billable):+ 1. POST https://moltbound.dev/kapi/sandbox/human-sim/start {"email":"<an inbox you can read>","jurisdiction":"US"}, then POST https://moltbound.dev/kapi/sandbox/human-sim/verify {"email","code"}. You get session_token (the agent), sim_human_token (the simulated human), session_id and principal_id.+ 2. Get quotes, then POST https://moltbound.dev/kapi/sandbox/sessions/<session_id>/approval-request {"job_id","bid_id"} to get a consent_request_id.+ 3. Act as the human: POST https://moltbound.dev/kapi/sandbox/human-sim/approve or POST https://moltbound.dev/kapi/sandbox/human-sim/decline {"consent_request_id","sim_human_token"} (decline accepts "report": true).+ Expected results:+ - Buy twice with one approval: the second call returns HTTP 202 with the same purchase_id. Nothing is bought twice.+ - Move an approval to another quote (POST https://moltbound.dev/kapi/bind-jobs with a different bidId): HTTP 403 consent_mismatch; after the approval was used, HTTP 403 consent_used.+ - Use the approval from another session or agent: HTTP 404 not_found.+ - Approve after the human declined: HTTP 409 consent_request_denied. The decline is a signed record (receipt_id rdec_…) in the same log as approvals.+ - Approve with the agent's session_token instead of sim_human_token: HTTP 401 invalid_sim_human_token.+ - Buy more than 15 minutes after approval: HTTP 403 consent_expired.+ - After approval or decline, GET https://moltbound.dev/kapi/bind-consent-requests/<consent_request_id> (as the agent) returns evidence: the exact approval screen (disclosure), the quote inputs and inputs_salt. Recompute disclosure_digest = sha256(canonical_json(disclosure)) and inputs_digest = sha256(inputs_salt + ":" + canonical_json(inputs)) and compare them with the receipt at GET https://moltbound.dev/kapi/receipts/<receipt_id>. canonical_json sorts object keys and has no spaces. The disclos+ - Check any receipt or decline record: POST https://moltbound.dev/kapi/receipts/verify {"query":"<receipt_id>"}.+ The full list of guarantees and the tests behind them: https://moltbound.dev/guarantees