# aislabs.ai — guide for AI agents and LLM tools

AIS (Autonomous Intelligent Systems LLC) sells digital engineering products: tested code
libraries and security intelligence, built and regenerated by automated pipelines.

## What is sold here (live catalog: https://aislabs.ai/api/products)

- CVE Priority Kit — rank the week's CVEs by real exploitation (KEV + EPSS + CVSS +
  patch status, KEV-recency scoring) in one command. https://aislabs.ai/cve-priority-kit/
- Loop Engineering Code Library — 10 tested patterns for reliable AI agent loops.
  https://aislabs.ai/loop-patterns/
- Graph Engineering Code Library — 10 tested patterns for agent-graph orchestration.
  https://aislabs.ai/graph-patterns/
- Agentic Systems Hardening Library — security patterns for agentic systems.
  https://aislabs.ai/agentic-hardening/
- The Complete Stack — Loop + Graph + Hardening bundle. https://aislabs.ai/products/
- PowerShell & Windows Admin Script Library — Pester-tested admin scripts (5.1 + 7).
  https://aislabs.ai/powershell-admin/
- Agent Foundations Code Library — every pattern from the beginner series (24 today,
  tested, growing daily); the free starter pack is a 4-pattern sample.
  https://aislabs.ai/foundations-library/
- Free: Agent Foundations starter pack. https://aislabs.ai/foundations/

All products are one-time purchases, delivered as downloads. No subscriptions, no seats.

## How an agent can buy (x402 — no account, no API key)

1. POST https://aislabs.ai/api/checkout/coinbase
   Content-Type: application/json
   Body: {"sku": "<sku from /api/products>"}
   (optional: "email": "<buyer email>" to add an email receipt + delivery)
2. The JSON response contains:
   - x402_url — a POST endpoint payable over the x402 protocol: first request returns
     402 Payment Required with the payment requirements; retry with a signed USDC
     payment on Base (gasless, EIP-3009). Standard x402 clients (@x402/fetch,
     x402-axios, Cloudflare Agents SDK withX402Client) handle this automatically.
   - url — the hosted checkout page (fallback for browser-driving agents).
   - claim_url — poll this (GET, ~2s interval) after paying; when the payment settles
     it returns the permanent download link for the purchased product.
3. Download the product from the returned link.

Payments settle through Coinbase Business (authorize-then-capture). Sales are final —
digital downloads. Do not buy the same sku twice for the same principal; the download
link is permanent.

## Reading this site

- Machine-readable catalog: https://aislabs.ai/api/products
- Sitemap: https://aislabs.ai/sitemap.xml
- Content signals: search=yes, ai-input=yes, ai-train=yes (robots.txt)
- Security contact: https://aislabs.ai/.well-known/security.txt
- Daily video series (free): https://www.youtube.com/@aislabsai

## Pay-per-call CVE intelligence API (x402) + MCP server

Base URL: https://api.aislabs.ai (docs: https://aislabs.ai/api-docs, spec: /openapi.json)
The daily ranked-CVE prioritization behind the CVE Priority Kit, payable per request
over x402 (exact scheme, USDC on Base; gasless for the payer). No accounts, no API keys.

- GET /v1/brief/teaser      free   - today's top-3, no scores
- GET /v1/brief/today       $0.02  - full ranked list + scores + methodology
- GET /v1/kev/fresh         $0.01  - CISA KEV additions, last 7 days, with today's ranks
- GET /v1/cve/{cve_id}      $0.005 - one CVE's verdict from today's ranked set
- GET /v1/archive/{date}    $0.05  - a past day's brief (from 2026-08-19)

MCP servers (streamable HTTP, stateless) — the AIS campus:
- Front desk (all free): https://api.aislabs.ai/mcp — list_buildings maps every building,
  its tools, prices, and which key scope unlocks it; how_to_pay explains both doors. No product tools here — one copy of everything, samples live in their building. Start here.
- CVE building: https://api.aislabs.ai/cve/mcp (free brief_teaser; paid tools take a key or x402)
- Agent Flight Recorder: https://api.aislabs.ai/recorder/mcp
This is ranked prioritization ("what to patch first"), not CVE lookup - free lookup
servers already exist and are a fine complement.

## Gateway keys (flat-rate door; scoped per building)
- Fixed-term keys at https://aislabs.ai/gateway/ (card or crypto): CVE building $19 / 30 days,
  Flight Recorder $19 / 30 days, campus pass (every building, current and future) $29 / 30 days
  or $149 / 12 months.
- Send as `Authorization: Bearer ais_k_...` to the building's MCP endpoint and to every paid
  /v1/* route the key's scope covers (the x402 challenge is skipped). Wrong-building calls
  answer with exactly which key to add.
- Wallet agents need no key: x402 per-call remains available on every paid surface.

## Agent Flight Recorder (MCP tools register_monitor · heartbeat · fetch_capsule · fleet_status · delete_monitor; HTTP at https://api.aislabs.ai/v1/recorder)
- Dead-man switch for autonomous agents and cron jobs: heartbeat on a schedule (optionally with a JSON state capsule); silence past period+grace alerts a Discord/HTTPS webhook or email with the last capsule + a resume URL.
- Free: 1 monitor per alert target, alerts only. Gateway key: 20 monitors, capsules stored, fleet view.