Quiver

The verifiable risk brain for autonomous agents. Quiver is an Agentic Service Provider (ASP) that exposes twenty-two priced, deterministic computations over the x402 payment protocol and the ERC-8004 trustless-agent registry — from cross-venue perpetual liquidation and portfolio risk to options greeks, position sizing, execution-quality, LP / treasury / event risk, plus options analytics, transaction-safety, microstructure, and prediction-market intelligence.

Autonomous trading and wallet agents can pay for a service in-band over HTTP, but little worth paying for exists, and most agent-facing tools return numbers that cannot be verified. Quiver implements the money-math a real trading desk or security team would run — and because the risk engines are deterministic, every answer carries a re-runnable, self-checked proof: echoed inputs, a code hash, a content hash, and a ground-truth self-check. An agent can re-derive the number and prove it, rather than trust the provider.

• Live endpoint: https://quiver-production-c3a8.up.railway.app

• Technical documentation: read online · PDF (Google Drive)

• Remote MCP: https://quiver-production-c3a8.up.railway.app/mcp — Streamable HTTP, 9 risk-brain tools, free (fair-use daily quota); callable by any MCP client (Claude, Cursor, …) — on the official MCP registry as quiver-risk-brain

• Use it in 5 minutes: QUICKSTART.md · framework snippets (ElizaOS, LangChain, CrewAI, OpenAI Agents, Vercel AI SDK, Virtuals): INTEGRATIONS.md

• On-chain identity: ERC-8004 agent #5152 on X Layer (eip155:196)

• Payment (dual rail): x402 v2 exact — USD₮0 on X Layer (eip155:196, OKX facilitator) and USDC on Base (eip155:8453, Coinbase CDP facilitator); ~0.005–0.05 per call

The Risk Brain — deterministic, proof-carrying

Options, safety, microstructure & market intelligence

How a call works (x402)

1. An agent requests a paid route and receives 402 Payment Required with a challenge (asset, amount, recipient, network) — one entry per rail (X Layer, Base).

2. The agent signs an EIP-3009 authorization and resends the request carrying it.

3. The server verifies and settles through the matching facilitator, then returns the structured result — with its proof envelope.

Every paid route answers an unauthenticated request with the 402 challenge before any business logic runs. Or call the free MCP at /mcp for the deterministic risk-brain tools — the adoption layer any MCP-speaking agent can use directly.

The proof envelope

Because the risk engines are deterministic, every result carries proof = { engine, codeHash, inputs, contentHash, selfChecks[], signature }, plus two verification primitives:

• verify() — recompute the content hash + re-check every self-check (cheap; no re-run). A tampered result fails here.

• reproduce() — re-run the open engine on the echoed inputs and confirm byte-identical output. This is the strong guarantee: correctness you re-derive, not signature trust.

The batch attestation (risk-attest) is signed EIP-712 and EAS-ready, so a single on-chain anchor attests many computations at once.

Running it

npm install
cp .env.example .env    # fill in OKX dev-portal (+ optional Coinbase CDP for the Base rail) credentials
npm test                # 152 model-free tests (put-call parity, no-lookahead, martingale, greek finite-difference, liquidation invariant, …) + 5 live-archive tests behind an RPC flag
npm start               # serves on the configured port

The core suite is self-contained and needs no network access, so the model-free invariants can be verified offline.

License

MIT — see LICENSE.