POST /api/skill/identity-mintBundled execution of the Server-side identity mint workflow — The server-side identity-issuance round-trip: mint a random user-id (UUIDv4), derive a deterministic cross-system correlation-id (UUIDv5), turn the display name into a URL-safe handle, generate a one-time recovery password, hash it for storage, sign a session JWT with HMAC, and base64-encode the recovery bundle for transport. Seven pure-CPU tools — the canonical 'create-user' write path done as one deterministic pipeline. One x402 payment runs 7 underlying tools (uuid, uuid-v5, slugify, password, hash, jwt-sign, base64); partial-success per step.
| Field | Type | Description |
|---|---|---|
displayName * | string | the user's display name (will be slugified for the URL handle) |
email * | string | the user's email (used to derive the deterministic UUIDv5 correlation ID) |
signingSecret * | string | the server's JWT HMAC signing secret |
{
"pack": "identity-mint",
"args": {
"displayName": "Alice O'Connor",
"email": "alice.oconnor@example.com",
"signingSecret": "server_demo_jwt_secret_do_not_use_in_prod"
},
"steps": [
{
"slug": "uuid",
"ok": true,
"result": {}
},
{
"slug": "uuid-v5",
"ok": true,
"result": {}
},
{
"slug": "slugify",
"ok": true,
"result": {}
},
{
"slug": "password",
"ok": true,
"result": {}
},
{
"slug": "hash",
"ok": true,
"result": {}
},
{
"slug": "jwt-sign",
"ok": true,
"result": {}
},
{
"slug": "base64",
"ok": true,
"result": {}
}
],
"summary": "7/7 steps succeeded"
}
curl -i -X POST https://agent402.tools/api/skill/identity-mint \
-H "Content-Type: application/json" \
-d '{"displayName":"Alice O'Connor","email":"alice.oconnor@example.com","signingSecret":"server_demo_jwt_secret_do_not_use_in_prod"}'
The response is HTTP 402 Payment Required with exact payment requirements. Any x402 v2 client pays automatically and retries:
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
const client = new x402Client();
registerExactEvmScheme(client, { signer: privateKeyToAccount(KEY) });
const payFetch = wrapFetchWithPayment(fetch, client);
const res = await payFetch("https://agent402.tools/api/skill/identity-mint", {
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({
"displayName": "Alice O'Connor",
"email": "alice.oconnor@example.com",
"signingSecret": "server_demo_jwt_secret_do_not_use_in_prod"
}),
});
This is a pure-CPU tool, so an agent without a wallet can pay with proof-of-work instead of USDC: fetch a challenge, solve the sha256 puzzle (16 leading zero bits — a fraction of a second of CPU, no money, no AI tokens), and resend with the X-Pow-Solution header.
import { createHash } from "node:crypto";
const lz = (b) => { let t = 0; for (const x of b) { if (!x) { t += 8; continue; } t += Math.clz32(x) - 24; break; } return t; };
const c = await (await fetch("https://agent402.tools/api/pow/challenge?slug=skill-identity-mint")).json();
let n = 0;
while (lz(createHash("sha256").update(c.challenge + ":" + n).digest()) < c.difficulty) n++;
await fetch("https://agent402.tools/api/skill/identity-mint", { method: "POST", headers: { "X-Pow-Solution": c.token + ":" + n, "Content-Type": "application/json" }, body: JSON.stringify({"displayName":"Alice O'Connor","email":"alice.oconnor@example.com","signingSecret":"server_demo_jwt_secret_do_not_use_in_prod"}) });
POST /api/skill/security-auditBundled execution of the Security audit workflow — Enumerate a domain's external attack surface in one workflow: certs, …
POST /api/skill/email-deliverabilityBundled execution of the Email deliverability workflow — Diagnose why a domain's email lands in spam: SPF posture, DMARC…
POST /api/skill/financial-researchBundled execution of the Financial research workflow — Pull SEC filings, real-time quotes, historical prices, and macro …