AIS Gateway · docs
Three servers. One campus. Two ways to pay.
The AIS campus is a set of small MCP servers sharing one key system and one payment rail. The front desk is free and tells your assistant everything — which buildings exist, what they cost, how to pay. Each building holds one product, and every tool has an HTTP twin for scripts and cron. Paid tools unlock two ways: a key scoped to the building (or a campus pass for everything), or per-call payment over the x402 protocol for agents that carry a wallet. No account. No API key to manage. No subscription that renews behind your back.
The servers
| Server | URL | Role |
|---|---|---|
| ais-gateway | https://api.aislabs.ai/mcp | Front desk — the campus directory. All free. |
| ais-cve | https://api.aislabs.ai/cve/mcp | Daily CVE prioritization (key scope: cve). |
| ais-recorder | https://api.aislabs.ai/recorder/mcp | Agent Flight Recorder (key scope: recorder). |
claude mcp add --transport http ais-gateway https://api.aislabs.ai/mcp
# buildings, with a key: add --header "Authorization: Bearer YOUR_KEY"Claude app (web / desktop / mobile), Cursor, and other clients: the step-by-step with screenshots is on the Gateway page. Without a key the free tools still work, and the paid ones tell your assistant exactly how to unlock them.
MCP tools
| Building | Tool | Tier | What it does |
|---|---|---|---|
| Front desk | list_buildings | Free | The campus directory: every building, its tools, prices, free tier, and which key scope unlocks it. Start here. |
| Front desk | how_to_pay | Free | The two payment doors — key vs x402 — explained to your assistant. |
| Front desk | about_aislabs | Free | What AIS sells, how agents can buy over x402, where the data comes from. |
| CVE | brief_teaser | Free | Today's top-3 CVE priorities, no scores — the taste that points at the paid list. |
| CVE | top_cves_today | Key · or x402 $0.02 | Today's full ranked list of 25 CVEs: priority scores, KEV status + date added, EPSS, severity, patch status, vendor/product, methodology. |
| CVE | kev_fresh | Key · or x402 $0.01 | Every CVE CISA added to KEV in the last 7 days (complete catalog), annotated with today's AIS rank and score. |
| CVE | cve_verdict | Key · or x402 $0.005 | One CVE's verdict from today's ranked set — score, rank, factors — or an honest miss. |
| Recorder | register_monitor | Free (1 per alert target) · Key (20) | Watch an agent or cron job — expected heartbeat interval, grace, alert target (Discord / HTTPS webhook / email). Returns a monitor id + secret and a one-line curl for cron. |
| Recorder | heartbeat | Free · Key | The agent's "still alive" ping. Attach a state capsule (any JSON ≤32 KB: step, done, next, ids) — stored on the key tier. status:"fail" reports a failure immediately. |
| Recorder | fetch_capsule | Key | The last capsule a monitored agent sent, so a fresh agent resumes where the dead one stopped. |
| Recorder | fleet_status | Key | Every monitor you own: alive / late / dead, last heartbeat, capsule preview. |
| Recorder | delete_monitor | Free · Key | Remove a monitor (its secret or the owning key). |
"Key" = a Gateway key whose scope covers the building: CVE $19 / 30 days, Recorder $19 / 30 days, campus pass $29 / 30 days or $149 / 12 months. Tools marked "or x402" also take a per-call USDC payment from a wallet-carrying agent.
HTTP endpoints
| Endpoint | Access | Returns |
|---|---|---|
| GET /v1/brief/teaser | Free | Today's top-3 priorities — no scores. Try before you pay. |
| GET /v1/brief/today | Key · x402 $0.02 | Today's full ranked list: priority scores, KEV status + added-date, EPSS, severity, patch status, vendor/product, and the scoring methodology. |
| GET /v1/kev/fresh | Key · x402 $0.01 | Every CVE added to CISA KEV in the last 7 days (complete catalog), annotated with today's AIS ranks. |
| GET /v1/cve/{cve_id} | Key · x402 $0.005 | One CVE's verdict from today's ranked set — score, rank, factors. Honest miss if it isn't ranked today. |
| GET /v1/archive/{date} | Key · x402 $0.05 | A past day's full brief (YYYY-MM-DD). Archive accumulates daily from 2026-08-19. |
| POST /v1/recorder/monitors | Free · Key | Register a monitor: { name, period_minutes, grace_minutes, alert_webhook, alert_email }. Send your key to own it (20 monitors); without one, 1 per alert target. |
| GET / POST /v1/recorder/beat/{id}/{secret} | Free · Key | Heartbeat. POST a JSON body { capsule, status } to attach state; GET is the one-liner for cron jobs. |
| GET /v1/recorder/capsule/{id} | Key | Last stored capsule + how to resume. |
| GET /v1/recorder/fleet | Key | All monitors for the calling key with live states. |
| DELETE /v1/recorder/monitors/{id} | Free · Key | Remove a monitor. |
Base URL: https://api.aislabs.ai · Key: send Authorization: Bearer YOUR_KEY on any route its scope covers · x402: exact scheme, USDC on Base (gasless for the payer) · Machine specs: /openapi.json · /v1/recorder · /.well-known/x402
Unlock a building with a key
curl https://api.aislabs.ai/v1/brief/today -H "Authorization: Bearer YOUR_KEY"One key, every paid tool and route in its scope, for a fixed term — get one here. Use a key at the wrong building and the response names exactly which key to add.
Or pay a call with a wallet (x402)
import { privateKeyToAccount } from 'viem/accounts';
import { wrapFetchWithPayment } from 'x402-fetch';
const fetchPay = wrapFetchWithPayment(fetch, privateKeyToAccount(process.env.WALLET_KEY));
const brief = await (await fetchPay('https://api.aislabs.ai/v1/brief/today')).json();Any x402 client works — x402-fetch, @x402/fetch, x402-axios, or the Cloudflare Agents SDK. The client sees the 402 challenge, signs a USDC payment, and retries — automatically. Listed in the Coinbase x402 Bazaar.
Notes
CVE data regenerates daily from CISA KEV, FIRST.org EPSS, and NVD, scored by the AIS methodology (each response carries it). Recorder alerts fire within a minute of a missed deadline. Sales are final; keys are access delivered instantly.
Need the same scoring against your environment's full CVE list, on your own infrastructure? That's the CVE Priority Kit.
Questions: support@aislabs.ai