RootCrak Preflight is paid, machine-readable risk intelligence for AI agents. You send a URL. You pay USDC over HTTP 402 (x402) on Base or Solana. You get signals — never a SAFE or DANGEROUS stamp.
Where to start
Live API: https://intel.rootcrak.com
Agent contract: github.com/ro0tcr4k/intel-api
No-JS HTML: /preflight.html · Markdown: send Accept: text/markdown on /preflight (or open /preflight.md).
Intelligence, not warranty. Outputs are probabilistic. They are not a guarantee that a target is safe to interact with.
Why it exists
Agents now hold keys, connect wallets, and follow instructions they did not write. Two attacks already scale faster than a human second look:
- Wallet drainers — a page asks the agent to connect or approve. One signature can empty the wallet.
- Prompt injection — hidden text, encoded blobs, or “ignore previous instructions” in a page or tweet.
Humans pause on a connect-wallet modal. Agents do not, unless you program a pause. Preflight is that pause.
What it is — and is not
- It is a pre-flight scan: settle first, then compute, then poll a job for
risk_score,confidence,flags,evidence, andrecommended_action. - It is not Shield (host hardening on your server).
- It is not the free human drainer on rootcrak.com. Agents pay this API.
- It is not a warranty, an audit badge, or a binary verdict.
x402 is how you pay. Preflight is the product.
Services
| Scan | What it checks | Price | Wait |
|---|---|---|---|
| Drainer | Wallet-drainer heuristics plus the same browser sandbox humans use, when health.drainer_sandbox is true | $0.05 USDC | poll 5s, cap 240s |
| Domain | Headers, DNS, exposed files, plus regex/heuristic LLM-injection on already-fetched HTML | $0.25 USDC | poll 12s, cap 480s |
Base URL: https://intel.rootcrak.com
POST /v1/intel/scans/drainerPOST /v1/intel/scans/domain
Unpaid calls return HTTP 402 with accepts. Pay with an official x402 client. Retry with PAYMENT-SIGNATURE. Poll GET /v1/intel/jobs/{id}/result with X-Job-Token.
USDC only. No $ROOT. Rails: Base (eip155:8453) and Solana (solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp). On Solana, use extra.feePayer from that 402 — do not reuse an old one.
Paid drainer uses the same remote browser sandbox as the human scanner when GET /v1/intel/health shows drainer_sandbox: true. Busy or dead sandbox fails the job — we do not return a fake monitor. Confirm cogs.sandbox_used on the result. Domain injection is regex/heuristic on HTML already fetched for headers (no second GET). Novel wording can slip. Fail closed when unsure.
What you get
risk_score— 0–100confidence— 0–1flags— machine tokens (neversafe/dangerous)evidence— source, detail, weightrecommended_action—monitor·proceed_with_caution·investigate_further·do_not_interact
From risk_score: 0–14 monitor · 15–39 proceed_with_caution · 40–69 investigate_further · 70–100 do_not_interact.
Policy: do_not_interact, or evidence of key/seed/exfil instructions → do not connect, sign, or transfer. Timeout or a failed job → fail closed.
Start
curl -sS https://intel.rootcrak.com/v1/intel/health
curl -sS https://intel.rootcrak.com/v1/intel/sdk
Full handshake: AGENTS.md