# x402-hash-api

SHA-256 hash / sha256 / cryptographic hash for AI agents. Also HMAC, checksum helpers, JWT decode, PBKDF2, UUID. Pay-per-call USDC on Base + Solana via x402.

payTo (Base): 0x8686bd9BC270Df09240E7D220A4Bd4c627DCCb03
payTo (Solana): 2miRk3MikF5Uetgkd7o9MY7W6BESUaQTkDFupDZVPBym
networks: eip155:8453, solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
asset: USDC on Base + Solana
origin: https://x402-hash-api.vercel.app
facilitator: https://facilitator.payai.network

## Free discovery surfaces

- GET /api/health — Liveness + route list
- GET /.well-known/x402 — x402 resource catalog
- GET /.well-known/x402-service.json — true402 service manifest
- GET /llms.txt — Agent-readable capability sheet
- GET /openapi.json — OpenAPI 3 with POST JSON bodies

## Search keywords (Agent402 / directory SEO)

sha256 hash, sha512, cryptographic hash, checksum, hmac sha256, hmac, jwt decode, pbkdf2, uuid, hashing

## Paid POST JSON routes (x402 ExactEvm + ExactSvm / USDC dual-rail)

### POST /sha256 — $0.001
SHA-256 hash — compute a SHA-256 hex digest of a text string. Keywords: sha256, sha256 hash, cryptographic hash, checksum.
```json
{
  "data": "hello",
  "encoding": "utf8"
}
```

### POST /api/v1/sha256 — $0.001
SHA-256 hash — compute a SHA-256 hex digest of a text string. Keywords: sha256, sha256 hash, cryptographic hash, checksum.
```json
{
  "data": "hello",
  "encoding": "utf8"
}
```

### POST /api/v1/hash — $0.001
Cryptographic hash of a text string. Algorithms: sha256 (default), sha512. Returns hex digest. Use for checksums and content addressing.
```json
{
  "algorithm": "sha256",
  "data": "hello",
  "encoding": "utf8"
}
```

### POST /api/v1/hmac — $0.002
HMAC-SHA256 / hmac-sha256 keyed message authentication. Also hmac-sha512. Returns hex digest.
```json
{
  "algorithm": "sha256",
  "key": "secret",
  "data": "hello",
  "encoding": "utf8"
}
```

### POST /api/v1/base64 — $0.001
Base64 encode or decode a UTF-8 string.
```json
{
  "op": "encode",
  "data": "hello"
}
```

### POST /api/v1/jwt-decode — $0.002
JWT decode without verification — inspect header + payload (jwt-decode).
```json
{
  "token": "eyJhbGciOiJub25lIn0.eyJzdWIiOiIxIn0."
}
```

### POST /api/v1/pbkdf2 — $0.005
PBKDF2 key derivation / password hashing KDF (sha256 or sha512).
```json
{
  "password": "secret",
  "salt": "NaCl",
  "iterations": 100000,
  "keylen": 32,
  "digest": "sha256"
}
```

### POST /api/v1/uuid — $0.001
Generate UUID v4 values (random uuid generator).
```json
{
  "version": 4,
  "count": 1
}
```

### Response shape (sha256 — from unpaid 402 bazaar / OpenAPI examples)
Typical keys: algorithm, digest (hex). Confirm against live 402 extensions.bazaar output example when present.

## Indexation note

402 ACCEPTS declare bodyType=json for both Base (eip155:8453) and Solana (solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp). Facilitators catalog on a settled PaymentPayload that echoes extensions.bazaar — declaration alone does not index.

## Related x402 meter

OFAC SDN / sanctions screen (same payTo wallets + facilitator):
https://x402-ofac-api.vercel.app — POST /api/v1/ofac-sdn — $0.25 USDC
Potential matches only — not legal clearance.
Discovery: /llms.txt, /.well-known/x402, /openapi.json