Know the minute a seller you pay changes

Preview an alert Example

The payTo in the seller's 402 differs from the one we recorded before, seen on two separate checks. Hosts that rotate deposit addresses per request are compared as one pattern and don't trigger it. Example host seller.example.

{
  "type": "botsrated.alert",
  "subscription_id": "sub_0123456789abcdef0123456789abcdef",
  "plan": "alerts-50",
  "sent_at": "2026-10-27T19:40:05.000Z",
  "events": [
    {
      "type": "payto_changed",
      "host": "seller.example",
      "field": "payto",
      "from": "0x1111111111111111111111111111111111111111",
      "to": "0x2222222222222222222222222222222222222222",
      "measured_at": "2026-10-27T19:38:12.000Z",
      "receipt_id": "example-receipt-id",
      "host_page": "https://botsrated.com/host/seller.example"
    }
  ],
  "note": "Measured facts from unpaid probes; every value links to a signed receipt. Not a judgement of the seller."
}

Webhooks are JSON, ed25519-signed with key botsrated-prober-1. Slack and Discord get plain text, not signed. Email: confirm once; sent from alerts@botsrated.com.

X-BotsRated-Key-Id: botsrated-prober-1
X-BotsRated-Timestamp: <timestamp>
X-BotsRated-Signature: <base64 ed25519 over JSON.stringify({ m: timestamp + "." + rawBody })>
X-BotsRated-Signed: canonical JSON {"m":"<timestamp>.<raw body>"}

BotsRated alert (alerts-50, 1 change)
• seller.example: payto changed (payto: 0x1111111111111111111111111111111111111111 → 0x2222222222222222222222222222222222222222) at 2026-10-27T19:38:12.000Z UTC. Receipt: https://botsrated.com/receipt/example-receipt-id?host=seller.example&day=2026-10-27 · https://botsrated.com/host/seller.example
Measured facts from unpaid probes; every value links to a signed receipt. Not a judgement of the seller.

Every event type

Facts before → after.

Set up with USDC

1. Webhook: public https, no redirects; echo our {"type":"botsrated.verify","challenge":"..."} with a 2xx within 5 s. (Or Slack/Discord, or "email".)
2. Raise your cap to $29 for this call (@x402/fetch defaults to $1).
3. Subscribe: POST https://botsrated.com/v1/subscribe/alerts-50 with {"hosts":[...],"webhook_url":"https://..."}; pay the 402 (29000000 atomic USDC on Base); save the token (shown once). Errors are free.
4. Verify each alert with /.well-known/botsrated-key.

TypeScript (pay and subscribe)

import { x402Client, wrapFetchWithPayment } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client();
client.setSpendControls({ maxAmountPerPayment: "$29" });   // default cap is $1: raise it for this call
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.BUYER_KEY) });
const pay = wrapFetchWithPayment(fetch, client);
const r = await pay("https://botsrated.com/v1/subscribe/alerts-50", { method: "POST", headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ hosts: ["blockrun.ai", "x402.tavily.com"], webhook_url: "https://you.example/botsrated-hook" }) });
console.log(await r.json());   // save "token" now: it is shown once

Verify an alert (Node 20+)

// Public key: botsrated-prober-1 at https://botsrated.com/.well-known/botsrated-key (base64, raw ed25519)
const key = await crypto.subtle.importKey("raw", Buffer.from(PROBER_PUBKEY_B64, "base64"), { name: "Ed25519" }, false, ["verify"]);
const signed = JSON.stringify({ m: req.headers["x-botsrated-timestamp"] + "." + rawBody });
const ok = await crypto.subtle.verify("Ed25519", key, Buffer.from(req.headers["x-botsrated-signature"], "base64"), new TextEncoder().encode(signed));

Plans

Coming: All-Access $39 / month, Team $499 / month, Fleet from $2,500 / month (plans). Pro keeps $19 / month.

USDC on Base: one payment = one 30-day period, no auto-renewal. Refunds only for our faults (terms). Token also reads /v1/check + /v1/report for your hosts (60/min).

Manage

GET  https://botsrated.com/v1/subscription          # Authorization: Bearer <token>
POST https://botsrated.com/v1/subscription/update   # {"hosts":[...],"webhook_url":"..."}
POST https://botsrated.com/v1/subscription/cancel

Reference: /v1/plans, /docs, openapi.json.