Security · x402

Get a post-quantum ML-DSA-65 signature (FIPS 204, scheme 4099 — the same scheme the Ani…

by animica.dev · discovered, not yet claimed by its owner · updated 2026-08-22

Not responding. This endpoint did not answer its last liveness check (2026-10-13). It may be temporarily down.

Mirrored from Coinbase's public x402 Bazaar. The description is the provider's own text and has not been reviewed here; the payment requirements are copied as published.

What it does

Get a post-quantum ML-DSA-65 signature (FIPS 204, scheme 4099 — the same scheme the Animica L1 admits transactions with) over a document you never have to send us. Post a sha256 digest, or post a JSON payload and we canonicalise and hash it here; either way the signature covers the HASH, so the resulting envelope can be published, escrowed or put on-chain without disclosing the content. Buy this when a claim has to stay checkable by a third party years from now — a dataset manifest, a model card, an audit-log segment, a delivery receipt between two agents, the exact bytes of an agreement — because an HMAC proves nothing to anyone but its issuer and an ECDSA signature made today is retrospectively forgeable once a cryptographically-relevant quantum computer exists. You need no PQ library and no key of your own. Verification is FREE (POST /x402/pq/sign/verify) and the signing public key is FREE (GET /x402/pq/sign/pubkey), so anyone can check an envelope offline without paying us. The signed statement records whether YOU or WE computed the digest, because those are different claims. If the signer or its key is not reachable you get a 503 with the reason and are NOT charged — this endpoint has no branch that returns an unsigned envelope.

Tags: animica · bazaar · discovery

Use with an agent

Discover. Agents find this listing with GET https://bazaar.saylorinnovations.com/discovery/search?query=…, the MCP tool search_resources, or /discovery/resources.
Inspect. Fetch /resources/7542.json for the price and payment options.
Pay. Call GET https://animica.dev/x402/pq/sign. The provider answers 402 with its payment requirements. An x402 client signs one of the options below and retries with PAYMENT-SIGNATURE.
Execute. The provider returns 200 with the data. Agent Bazaar is not in the request path and never sees your payment.

For humans

You don't need an account or an API key; you need a wallet holding a small amount of USDC on Base, animica:1, and an x402-capable client (see the examples below). Call the endpoint unpaid first to see exactly what it asks for.

Pricing & payment

Price: $0.006 / request
Protocol: x402 v2
Auth: No account or API key. Pay per request.
Networks: Base, animica:1
Uptime: 0 of the last 1 checks answered
Calls (30d): 1 · 1 unique payers (third-party data from the public x402 Bazaar)

x402 payment requirements

Scheme	Network	Asset	Amount	Pay to	Timeout
exact	Base eip155:8453	USDC	$0.006	0x5D17c40FD6b119dc6006C4Ab3C20a917FCaB2aCD	60s
exact	animica:1 animica:1	ANM	71270193221	anim1zqpsmegc0qcvzjfukm89xs0zeu3eqyyyel7kelehuszvwfarqypky2gr946ga	60s

accepts[] (raw JSON)

[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "payTo": "0x5D17c40FD6b119dc6006C4Ab3C20a917FCaB2aCD",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "6000",
    "amountUsd": 0.006,
    "maxTimeoutSeconds": 60
  },
  {
    "scheme": "exact",
    "network": "animica:1",
    "payTo": "anim1zqpsmegc0qcvzjfukm89xs0zeu3eqyyyel7kelehuszvwfarqypky2gr946ga",
    "asset": "ANM",
    "amount": "71270193221",
    "maxTimeoutSeconds": 60
  }
]

Schemas

Output schema (JSON Schema)

{
  "animica": {
    "catalog": "https://animica.dev/.well-known/x402",
    "content_type": "application/json",
    "currency": "USDC",
    "description": "Get a post-quantum ML-DSA-65 signature (FIPS 204, scheme 4099 — the same scheme the Animica L1 admits transactions with) over a document you never have to send us. Post a sha256 digest, or post a JSON payload and we canonicalise and hash it here; either way the signature covers the HASH, so the resulting envelope can be published, escrowed or put on-chain without disclosing the content. Buy this when a claim has to stay checkable by a third party years from now — a dataset manifest, a model card, an audit-log segment, a delivery receipt between two agents, the exact bytes of an agreement — because an HMAC proves nothing to anyone but its issuer and an ECDSA signature made today is retrospectively forgeable once a cryptographically-relevant quantum computer exists. You need no PQ library and no key of your own. Verification is FREE (POST /x402/pq/sign/verify) and the signing public key is FREE (GET /x402/pq/sign/pubkey), so anyone can check an envelope offline without paying us. The signed statement records whether YOU or WE computed the digest, because those are different claims. If the signer or its key is not reachable you get a 503 with the reason and are NOT charged — this endpoint has no branch that returns an unsigned envelope.",
    "documentation": "https://animica.dev/x402#product-pq_sign",
    "name": "Post-quantum document signature (ML-DSA-65)",
    "openapi": "https://animica.dev/x402/openapi.json",
    "price": "0.006000",
    "product": "pq_sign",
    "provider": "Animica",
    "terms": {
      "amount_atomic": "6000",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "chain_id": 8453,
      "network": "eip155:8453",
      "pay_to": "0x5D17c40FD6b119dc6006C4Ab3C20a917FCaB2aCD",
      "scheme": "exact"
    },
    "x402_version": 2
  },
  "bazaar": {
    "discoverable": true,
    "info": {
      "input": {
        "method": "POST",
        "type": "http"
      },
      "output": {
        "type": "json"
      }
    },
    "schema": {
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "properties": {
        "input": {
          "properties": {
            "body": {
              "properties": {
                "digest": {
                  "description": "64 hex characters — the 32-byte digest of your document. Send this OR payload, never both. Your document never leaves your side.",
                  "type": "string"
                },
                "digest_alg": {
                  "description": "how YOU computed digest, recorded in the signature as your declaration: sha256, sha3-256, keccak-256, blake2b-256. Omit it and the signature says sha256 with document_digest_alg_source:'assumed_default' — a default, marked as one, never presented as something you stated. With payload it must be omitted or sha256, which is what we run.",
                  "type": "string"
                },
                "label": {
                  "description": "your own annotation for what this covers, up to 128 printable ASCII characters; signed, and marked in the envelope as the client's claim",
                  "type": "string"
                },
                "payload": {
                  "description": "a JSON value to canonicalise and SHA-256 here instead of sending a digest. Hashed and dropped: never stored, logged or returned.",
                  "type": "object"
                }
              },
              "type": "object"
            },
            "method": {
              "enum": [
                "POST"
              ],
              "type": "string"
            },
            "queryParams": {
              "properties": {
                "digest": {
                  "description": "same as body.digest, for GET callers",
                  "type": "string"
                },
                "digest_alg": {
                  "description": "same as body.digest_alg",
                  "type": "string"
                },
                "label": {
                  "description": "same as body.label",
                  "type": "string"
                }
              },
              "type": "object"
            },
            "type": {
              "const": "http",
              "type": "string"
            }
          },
          "required": [
            "type",
            "method"
          ],
          "type": "object"
        },
        "output": {
          "properties": {
            "example": {},
            "type": {
              "type": "string"
            }
          },
          "required": [
            "type"
          ],
          "type": "object"
        }
      },
      "required": [
        "input"
      ],
      "type": "object"
    }
  },
  "discovery": {
    "discoverable": true,
    "info": {
      "input": {
        "bodyFields": {
          "digest": {
            "description": "64 hex characters — the 32-byte digest of your document. Send this OR payload, never both. Your document never leaves your side.",
            "required": false,
            "type": "string"
          },
          "digest_alg": {
            "description": "how YOU computed digest, recorded in the signature as your declaration: sha256, sha3-256, keccak-256, blake2b-256. Omit it and the signature says sha256 with document_digest_alg_source:'assumed_default' — a default, marked as one, never presented as something you stated. With payload it must be omitted or sha256, which is what we run.",
            "required": false,
            "type": "string"
          },
          "label": {
            "description": "your own annotation for what this covers, up to 128 printable ASCII characters; signed, and marked in the envelope as the client's claim",
            "required": false,
            "type": "string"
          },
          "payload": {
            "description": "a JSON value to canonicalise and SHA-256 here instead of sending a digest. Hashed and dropped: never stored, logged or returned.",
            "required": false,
            "type": "object"
          }
        },
        "bodyType": "json",
        "method": "POST",
        "queryParams": {
          "digest": {
            "description": "same as body.digest, for GET callers",
            "type": "string"
          },
          "digest_alg": {
            "description": "same as body.digest_alg",
            "type": "string"
          },
          "label": {
            "description": "same as body.label",
            "type": "string"
          }
        },
        "type": "http"
      },
      "output": {
        "description": "alg, scheme_id, scheme, digest, digest_alg, digest_alg_source (client_declared|assumed_default|gateway_computed), digest_source (client|gateway), canonical_bytes, label, signature, public_key, key_id, signed_at, commitment {type, document_digest, document_digest_alg, document_digest_alg_source, digest_source, canonical_bytes, canonicalisation, client_label}, envelope {kind, canonical_form, digest, payload, verification} (the self-contained object to publish or POST back), commitment_digest, commitment_digest_alg, binding, verify {endpoint, url, price}, public_key_endpoint, took_ms, payload_disclosed:false",
        "type": "json"
      }
    }
  }
}

Example shape — generated from the schema, not a captured live response

null

Examples

curl

curl "https://animica.dev/x402/pq/sign"
# -> 402 Payment Required, accepts[] lists how to pay
# retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paid

JavaScript

const res = await fetch("https://animica.dev/x402/pq/sign");
if (res.status === 402) {
  const { accepts } = await res.json();
  // pay one of accepts[] via an x402 client, then retry with the payment header
}

Python

import httpx
res = httpx.get("https://animica.dev/x402/pq/sign")
if res.status_code == 402:
    accepts = res.json()["accepts"]
    # pay one of accepts[] via an x402 client, then retry with the payment header

Details

Provider: animica.dev
Endpoint: https://animica.dev/x402/pq/sign
Machine-readable: /resources/7542.json