GM! Index — programmatic reference

# 1. Free: discover live catalog, prices, and schemas
curl https://gm.mutantdefi.com/services.json | jq '.services[] | {id, path: .http.path, price: .price_usd}'

# 2. Free: your first conviction cell (one free per caller fingerprint)
curl "https://gm.mutantdefi.com/v1/gm/conviction?symbol=BTC1D/DFY"

# 3. Free: feed metadata + validation telemetry
curl https://gm.mutantdefi.com/v1/feed/metadata

# ACP job history — requirements are on MESSAGE entries, not event.
import json, datetime, subprocess

raw = subprocess.check_output(
    ["acp", "job", "history", "--job-id", "JOB_ID", "--chain-id", "8453", "--json"],
    text=True,
)
d = json.loads(raw)
print("status:", d.get("status"))
for e in d.get("entries") or []:
    ts = e.get("timestamp") or 0
    t = datetime.datetime.utcfromtimestamp(ts / 1000).strftime("%H:%M:%S") if ts else "?"
    if e.get("kind") == "system":
        ev = e.get("event") or {}
        print(f"{t} system   {ev.get('type')}")
    else:
        # NEVER use e.get("event") here — it is empty on messages.
        print(f"{t} message  {e.get('contentType')}: {e.get('content')}")

# First call → 402 with payment requirements
curl -i "https://gm.mutantdefi.com/v1/gm/lattice?universe=core6&horizon=1D"

# 402 body (exact shape):
# { "x402Version": 1,
#   "error": "payment_required",
#   "accepts": [{
#     "scheme": "exact",
#     "network": "base",
#     "maxAmountRequired": "100000",   # atomic USDC (6dp) = $0.10
#     "resource": "/v1/gm/lattice",
#     "description": "dfy_gm_index_feed",
#     "mimeType": "application/json",
#     "payTo": "0x430c298f9a4a145e5299af997287bb4f928b8059",
#     "maxTimeoutSeconds": 60,
#     "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",  # USDC on Base
#     "extra": { "name": "USD Coin", "version": "2" }          # EIP-712 domain
#   }] }

# "asset" is the USDC contract address, not a ticker — sign the EIP-3009
# authorization against it using the "extra" domain. Never pay to the DFY
# ERC-20; payTo above is the settlement EOA.

# After settling, retry with the payment proof:
curl "https://gm.mutantdefi.com/v1/gm/lattice?universe=core6&horizon=1D" \
  -H "X-PAYMENT: <settlement-proof-from-facilitator>"

# ── v2 ───────────────────────────────────────────────────────────────────
# The same 402 also carries the v2 challenge in a header. Nothing to opt into.
#
#   PAYMENT-REQUIRED: <base64 PaymentRequired>
#
# decodes to the same terms in v2 spelling — "amount" rather than
# "maxAmountRequired", CAIP-2 "eip155:8453" rather than "base", and
# resource/description/mimeType lifted into a "resource" object:
#
# { "x402Version": 2,
#   "error": "PAYMENT-SIGNATURE header is required",
#   "resource": { "url": "/v1/gm/lattice", "mimeType": "application/json" },
#   "accepts": [{ "scheme": "exact", "network": "eip155:8453",
#                 "amount": "100000", "asset": "0x8335...2913",
#                 "payTo": "0x430c...8059", "maxTimeoutSeconds": 60,
#                 "extra": { "name": "USD Coin", "version": "2" } }] }

# Retry with the v2 proof header instead; the receipt comes back in
# PAYMENT-RESPONSE rather than X-PAYMENT-RESPONSE.
curl "https://gm.mutantdefi.com/v1/gm/lattice?universe=core6&horizon=1D" \
  -H "PAYMENT-SIGNATURE: <base64 PaymentPayload>"

# The signed EIP-3009 authorization is identical in both versions — only the
# envelope differs. GET /.well-known/x402 reports x402Versions and the exact
# header names under x402Transport.

# Paid GM! cell (x402). Prefer the Virtuals agent checkout in production.
# Local gateways accept X402_SKIP_PAYMENT=true for integration tests.
import httpx

r = httpx.get(
    "https://gm.mutantdefi.com/v1/gm/conviction",
    params={"symbol": "BTC1D/DFY"},
    timeout=30,
)
if r.status_code == 402:
    # Settle via x402 / ACP, then retry with payment proof headers
    print(r.headers.get("PAYMENT-REQUIRED") or r.text[:200])
else:
    cell = r.json()
    print(cell["symbol"], cell["value"], cell.get("omega_mass"))

const GM = "https://gm.mutantdefi.com";

// Free tool registry
const registry = await fetch(`${GM}/mcp/tools`).then((r) => r.json());

// Paid execute — same settlement as HTTP x402 routes
const paid = await fetch(`${GM}/mcp/execute`, {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
    name: "get_gm_lattice",
    args: { universe: "core6", horizon: "1D" },
  }),
});
// 402 → settle → retry; 200 → { name, result }
console.log(await paid.json());

# Hermes connector — desk owns the store; Hermes only pushes/pulls.
# Set HERMES_INGEST_TOKEN on dfy-desk; never expose on public A routes.
import httpx
import os

DESK = "https://desk.mutantdefi.com"
token = os.environ["HERMES_INGEST_TOKEN"]
headers = {"Authorization": f"Bearer {token}"}

# Trader → desk (outbound push)
httpx.post(
    f"{DESK}/v1/dfy/ingest",
    headers=headers,
    json={"kind": "runner", "data": {"symbol": "BTC", "event": "heartbeat"}},
    timeout=30,
).raise_for_status()

# Optional Tier-C oracle snapshot (operator / hermes-agent)
snap = httpx.get(f"{DESK}/v1/dfy/snapshot", headers=headers, timeout=60).json()
print(snap.keys())

import httpx

GM = "https://gm.mutantdefi.com"

# Free discovery — machine catalog is source of truth
catalog = httpx.get(f"{GM}/services.json", timeout=30).json()
tools = httpx.get(f"{GM}/mcp/tools", timeout=30).json()
print(catalog["product_name"], len(catalog.get("acp_offering_ids", [])))
print("mcp tools:", len(tools.get("tools", tools) if isinstance(tools, dict) else tools))

// Desk uses base tickers (BTC), never BTC1D/DFY
const desk = await fetch(
  "https://desk.mutantdefi.com/v1/dfy/desk?symbol=BTC",
).then(async (r) => {
  if (r.status === 402) throw new Error("settle x402 then retry");
  return r.json();
});
console.log(desk.symbol, desk.regime);

// apps.mutantdefi.com BFF — Virtuals front only (fails closed without bearer)
const apps = "https://apps.mutantdefi.com";
const symbol = encodeURIComponent("BTC1D/DFY");
const r = await fetch(`${apps}/api/dfy/ccxt/ticker?symbol=${symbol}`, {
  headers: { Authorization: `Bearer ${process.env.DFY_TICKER_ACCESS_TOKEN}` },
});
console.log(r.status, await r.json());