Trust and safety

BMM trust boundary for agent buyers

Blockchain Money Map provides public-chain research summaries and x402-paid agent APIs. It does not custody wallets, sign transactions, execute trades, or certify compliance outcomes.

Agent servicesNode.js guideSecurity questionnaireStatus

Security questionnaire

Buyer-review facts about data accepted, payment boundaries, support, and known gaps.

Threat model

Compact public threat model for x402-paid agent APIs and public-chain research inputs.

Observability

What buyers should monitor before paying and what to send support after a failed paid retry.

Accepted public inputs

  • Public EVM wallet addresses
  • Public contract addresses
  • Public transaction hashes
  • Public x402 endpoint and receiver facts supplied for review

Do not submit

  • Private keys
  • Seed phrases
  • Wallet passwords
  • Admin tokens
  • Supabase keys
  • Raw signed payment headers except when retrying the intended paid request

Out of scope

  • Wallet custody
  • Transaction signing by BMM
  • Token swaps or trading execution
  • Investment, legal, tax, or compliance advice
  • AML, sanctions, identity, fraud-certainty, or regulatory approval guarantees

x402 payment safety

Paid public endpoints return HTTP 402 before payment. The challenge discloses price, receiver, network, and resource.

Buyer agents should compare the challenge receiver with the x402 catalog before signing.

BMM accepts signed payment headers only for the intended paid retry. Do not log or share raw signed payment headers.

Observability

Availability target: 99.0% monthly availability for discovery and paid x402 endpoints, excluding upstream blockchain, data-provider, facilitator, and scheduled-maintenance outages. Check https://api.blockchainmoneymap.com/api/health before paying. This status statement is operational guidance, not a contractual service-level agreement.

Health endpoint: https://api.blockchainmoneymap.com/api/health

Support: support@blockchainmoneymap.com

MCP configuration

Agent runtimes that support remote MCP servers can use the BMM MCP endpoint. This exposes BMM as tools while preserving the same x402 payment checks on paid resources.

MCP discoveryMCP endpoint
{
  "mcpServers": {
    "blockchain-money-map": {
      "url": "https://api.blockchainmoneymap.com/api/mcp"
    }
  }
}