XGuard — Agent Execution Gateway

XGuard Live

[XGuard Extract](https://xguardgate.com/extract): up to 3 public web pages → clean text, metadata, links and source evidence in one JSON result. 0.012 USDC per request, paid with x402 v2 on Base.

Use the browser wallet checkout or POST https://api.xguardgate.com/api/paid/v1/extract with an Idempotency-Key and {"urls":["https://example.com/"],"max_amount_atomic":"12000"}. The initial request returns 402 without retrieving the supplied pages. A funded x402 client authorizes the exact offer, then retries the same body and key with Payment-Signature and X-XGuard-Quote.

No subscription or XGuard API key. Public HTML/text/JSON only; no browser rendering, sign-ins, search or access-control bypass. Up to 128 KiB source input and 6,000 extracted text characters per page. Partial success reports coverage; all-source failure after settlement creates an operation-specific execution credit, not an automatic cash refund. API and recovery contract · JavaScript client.

The live facts layer for AI.

Current facts. Source verified. Change tracked. Machine readable.

XGuard Live observes public primary sources and publishes compact, canonical facts with verification timestamps, source evidence and immutable history. People and machines retrieve the same data through ordinary HTTP. No account, SDK, plugin or paid API key is needed for public facts.

Live site · Fact index · Methodology · Changes · Connect AI tools

curl https://xguardgate.com/fact/npm/react/latest-version

curl -H 'Accept: text/markdown' https://xguardgate.com/fact/npm/react/latest-version curl -H 'Accept: application/json' https://xguardgate.com/fact/npm/react/latest-version

A published observation includes the current or last observed value, source URL, source hash, observed/verified timestamps, freshness limit, previous value and history. STALE/UNKNOWN never imply a current verified value. Verification means a match to the source at retrieval, not independent certification of every publisher claim. Candidates remain unpublished until schema and source checks pass.

Connect an AI client

Use XGuard Live's MCP endpoint with Streamable HTTP and call xguard.fact.get with {"factId":"npm/react/latest-version"}. Free public fact reads need no account or API key. Install in your client or use the A2A agent card.

Development

Use Node 24.

npm ci --prefix apps/relay

npm run check npm test npm run build npm run --prefix apps/relay live:test-runtime npm run dev

Local development uses a separate Worker config and local SQLite Durable Objects. Production smoke checks are read-only and excluded from business metrics: npm run smoke. The primary-source check is node scripts/live-source-check.mjs; robots restrictions, rate limits and changed source schemas can legitimately prevent collection.

Operations

The production Worker is xguard-mainnet. Cron runs every ten minutes; persistent shard alarms collect due sources with domain limits and backoff. Cloudflare cache serves bounded, format-specific representations. /healthz exposes real counts and scheduler health. /admin requires an owner key and protects all mutations.

Deployment: use a pull request, pass CI/CodeQL, merge, then the Deploy XGuard Live workflow deploys the tested commit. Manual deployment with existing Cloudflare credentials: npx --prefix apps/relay wrangler deploy --config apps/relay/wrangler.jsonc --tag git-$(git rev-parse --short=12 HEAD). Production lifecycle changes must first pass node scripts/durable-object-deploy-guard.mjs HEAD and be isolated from runtime changes.

See operations and rollback and migration inventory. The former execution gateway is retained solely for state/recovery compatibility and historical reference; it is not the public Live product. Historical result recovery still requires its original signed quote. Legacy marketing and release workflows are archived and do not run.

Monetization

Launch mode is observe. Cloudflare Pay Per Crawl eligibility and Pay Per Use buyer participation require confirmation in the owner's Cloudflare account. The application does not fabricate revenue, simulate paid production traffic or equate crawler requests with paid use. Actual provider report imports and invoice costs are separate, auditable records. No report means unknown account revenue, not proven zero. Discovery remains free even when eligible high-value detail pages are later configured for paid retrieval.