SpendTheBits Payable Handles bronze

superapp-api.spendthebits.com

“x402-payable resources published by SpendTheBits users. Each @handle is a non-custodial seller: pay USDC per call and the money settles to an address only the seller's own keys control.

https://superapp-api.spendthebits.com/.well-known/agent-card.json its card

🇨🇦 CA · Oracle Corporation Checked 4d ago extensions, pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 24 Jan 2027 as of our check on 9 Nov 2026.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA384, issued via YE2 under ISRG Root X2 — classical, as every publicly trusted certificate is today.

Names on this certificate (2)

superapp-api.spendthebits.com, x402.spendthebits.com.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 9 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 3 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI-facing documents: Publishes /llms.txt — “SpendTheBits Payable Handles” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 26 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇨🇦 CA · Oracle Corporation (AS31898)
Last checked: 4d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of superapp-api.spendthebits.com controls every word below.

STB Address Risk Check

Sanctions/scam screening verdict for one address (?address=, optional ?network=mainnet|testnet) plus whether it is a verified token contract STB recognises. The same screen that gates every send in the STB wallet.

x402usdc@superappstbcompliancesanctionsrisksecuritywallet

Examples it gives

GET https://superapp-api.spendthebits.com/x402/@superappstb/address-risk/

STB Deposit Check

One call before a stablecoin vault deposit: ok / caution / avoid with every reason, built from STB's 0-100 safety score, a sanctions and scam screen of the vault contract, and protocol changes detected in the last 30 days. Every vetted vault, or one by ?venue=<id|pool address>.

x402usdc@superappstbdefiriskdue-diligencevaultstablecoin

Examples it gives

GET https://superapp-api.spendthebits.com/x402/@superappstb/deposit-check/

SpendTheBits x402 heartbeat

Official $0.01 proof-of-life resource for SpendTheBits x402: returns a JSON heartbeat. Pay it to verify your agent's x402 client end to end.

x402usdc@superappstb

Examples it gives

GET https://superapp-api.spendthebits.com/x402/@superappstb/proof/

STB Protocol Watch

Changes detected in the protocols behind STB's Earn and FXRP: Firelight, Flare FAssets, Morpho, Tether and Flare. On-chain parameter changes and official announcements, as the reviewed notice shown to users. ?protocol= and ?days=1-90 (default 30).

x402usdc@superappstbdefiriskmonitoringgovernancexrp

Examples it gives

GET https://superapp-api.spendthebits.com/x402/@superappstb/protocol-watch/

STB DeFi reputation

Eight lines on one contract before money moves: exit amount, yield split, audit links, incident note, admin, age, holder concentration, and governance. Unknown stays unknown. No score.

x402usdc@superappstbdefiriskdue-diligencevaultsecurity

Examples it gives

GET https://superapp-api.spendthebits.com/x402/@superappstb/reputation/

STB Yield Safety Score

0-100 safety score with components (protocol trust, TVL depth, audits, track record), observed and risk-adjusted APR, and whether STB's Auto-Defense would exit — for every vetted stablecoin vault, or one by ?venue=<id|pool address>.

x402usdc@superappstbdefiyieldriskstablecoin

Examples it gives

GET https://superapp-api.spendthebits.com/x402/@superappstb/yield-safety/

SpendTheBits gift cards

Real gift cards (Amazon, Tim Hortons, Starbucks and hundreds more, USA + Canada) an AI agent buys with USDC over x402. Each amount is a payable URL; the card is issued to the agent's owner and never leaves their app.

x402usdcgift-cards@stb

Examples it gives

GET https://x402.spendthebits.com/@stb/cards/

1800Baskets 10 USD gift card

A gift card as an x402 resource: the 402 is the $0.05 quote fee; the paid response carries the exact total and pay_url.

x402usdcgift-cards@stb

Examples it gives

GET https://x402.spendthebits.com/@stb/cards/usa/1800baskets/10/

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

SpendTheBits Payable Handles (agent card)

a2a-agent-card

Priced, pay-per-call x402 resources: address risk screening, yield safety scores, gift cards. Settles in USDC.

https://superapp-api.spendthebits.com/.well-known/agent-card.json

SpendTheBits Payable Handles (OpenAPI)

openapi

OpenAPI 3.1 description of every public paid endpoint.

https://superapp-api.spendthebits.com/openapi.json

SpendTheBits Payable Handles (x402 manifest)

json

x402 discovery manifest listing public payable resources.

https://superapp-api.spendthebits.com/.well-known/x402

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: SpendTheBits — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.0
Extensions: https://x402.org — required of clients
Resources are paid HTTP GETs (x402 v2): the first request answers 402 with the price; retry with a signed USDC payment. This is not an A2A message endpoint.
https://modelcontextprotocol.io
Gift cards for the signed-in person, from any MCP client. Ask-first: the AI requests a card, the owner approves and pays on their phone.

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: extensions pushNotifications streaming
Agent card: https://superapp-api.spendthebits.com/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.