Infrastructure for Autonomous AI Agents · Base L2

Security. Trust. Randomness.
For Agents That Act Without Humans.

Aethel Nexus is the only API suite built for A2A agent pipelines. Session re-keying that survives CVE-2025-6514, cryptographically verified randomness, UCAN delegation chains with a proved depth bound, and hallucination oracles with a certified ceiling — all paid autonomously via x402 USDC. No human in the loop.

Start for $4 → 500 Calls CVE-2025-6514 Fix View 75+ Endpoints
curl aaaa-nexus.atomadictech.workers.dev/v1/rng/quantum ← free · click to copy

Google A2A native  ·  x402 autonomous payment  ·  MCP CVE-2025-6514 fix  ·  Lean 4 formally verified  ·  $0.002/call

75+
Endpoints across all product families
12
Product families — text, agents, security & more
$0.002
Starting price per call · USDC via x402
No signup
Pay and call instantly · zero friction
Compatible with LangChain · AutoGen · CrewAI · Google ADK · OpenAI Agents SDK · any A2A-compatible framework via /.well-known/agent.json
🚨
CVE-2025-6514 — MCP Session Credential Theft   437,000 developer environments exposed via long-lived MCP tokens. RatchetGate is the only formally proved fix.
See the fix →
✓ Live on Cloudflare Edge — global <50ms 29 Lean 4 theorems — 0 sorry, 0 axioms arXiv:2603.11021 independent validation CVE-2025-6514 — only API to formally address it ✓ Google A2A & MCP native
The Problem

Billions of agents. Zero proven safety.

By 2026, autonomous agents will outnumber humans in API traffic. They will manage money, sign contracts, and make decisions without human oversight. The infrastructure they rely on was never designed for this.

🚨

Credentials get stolen

MCP servers use long-lived tokens. CVE-2025-6514 showed that a single stolen credential can impersonate an agent indefinitely. Session re-key policies are recommended but never enforced — because no one proved when to rotate.

RatchetGate enforces re-key on a formally proven schedule. Credentials cannot outlive their proof window.
👻

Hallucinations go undetected

Models confabulate with complete confidence. Every existing hallucination detector is a classifier trained on data — it can miss cases the training set didn't cover. There is no ceiling on how wrong it can be.

Hallucination Oracle provides a certified upper bound on confabulation probability, derived from model geometry — not from another model's opinion.
📦

Compression has no quality contract

"8-bit quantized" means different things to different tools. No existing compression format guarantees that inference quality stays above a certified floor. You compress, you hope, you benchmark after the fact.

HELIX Codec achieves significant size reduction (up to 56% for the Fidelity variant) with a formally certified quality floor on every compressed file. Not benchmarked — proved.
🎰

Randomness can't be audited

Agents that gamble, select, or sample need randomness they can verify after the fact. Standard RNGs produce numbers but no proof of how they were generated. The house can always cheat.

VeriRand ships a cryptographic proof with every random number. Any result can be independently verified at any time.
🔀

Delegation chains spiral

Agent A delegates to Agent B, who delegates to Agent C. Without a proven depth limit, chains can loop infinitely or exceed trust budgets. Capability attenuation is assumed, not enforced.

VeriDelegate validates every delegation chain against a formally proven depth bound. Child capabilities are guaranteed to be a subset of parent capabilities.

Why formal proofs matter

A benchmark tells you what happened on the test set. A proof tells you what will happen in every case, including cases you haven't imagined yet. Aethel Nexus is the only platform where safety guarantees are mathematical theorems — verified in Lean 4, enforced at compile time in Rust, and checked on every API call.

This is not a marketing claim. The proofs exist. They have zero unresolved assumptions and zero exceptions.

Protocol

Three steps, zero friction

Built on the x402 payment protocol. Agents pay autonomously — no human in the loop.

Step 01
🔍

Discover

Fetch /.well-known/agent.json to get the full capability manifest. Standard A2A agent card — any compliant agent framework can auto-discover.

Step 02

Call

POST to any endpoint with a JSON body. The API is fully documented at /openapi.json. Free endpoints return 200. Paid endpoints return 402 with payment details.

Step 03
💸

Pay

Submit a USDC micropayment on Base or Ethereum. The SDK handles this automatically. Amounts range from $0.002 per call — less than one cent for most operations.


Quick Start

First call in 60 seconds

Free tier included — no account, no card, no API key required to try.

1

Discover capabilities Free · No auth

Standard Google A2A agent card — any A2A-compatible framework (LangChain, AutoGen, CrewAI, Google ADK) can auto-discover and register as a peer.

curl https://aaaa-nexus.atomadictech.workers.dev/.well-known/agent.json
// Response
{
  "name": "Aethel Nexus",  "version": "0.4.0",
  "capabilities": ["ratchetgate","verirand","hallucination-oracle",
                   "helix-compress","veriDelegate","agent-intelligence"],
  "payment": { "protocol": "x402", "currency": "USDC", "network": "base",
               "amount_per_call": 0.002 },
  "endpoints": "https://aaaa-nexus.atomadictech.workers.dev/openapi.json"
}

Compatible with Google A2A, LangChain, AutoGen, CrewAI — drop-in infrastructure peer.

2

Get credits $4 · 500 calls

One-time credit pack — no subscription, no expiry. Or send USDC directly per call via x402.

Get 500 Calls — $4 →
3

Call an endpoint with API key or x402 autonomous

Use an API key from a credit pack, or let your agent pay per-call via x402 — no human required.

# API key (credit pack)
curl https://aaaa-nexus.atomadictech.workers.dev/v1/rng/quantum \
  -H "X-API-Key: your_key_here"
// x402 autonomous payment — agent pays without human
// Step 1: probe → receive 402 with payment instructions
const probe = await fetch('/v1/oracle/hallucination');
// HTTP 402: { amount:"0.002", currency:"USDC", network:"base", payTo:"0xabc..." }

// Step 2: agent signs payment and retries in one round-trip
const result = await fetch('/v1/oracle/hallucination', {
  headers: { 'X-402-Payment': await wallet.signX402(await probe.json()) }
});
// { eps_kl: 5.079e-6, verdict: "safe", ceiling: "proved-not-estimated" }
Get API Key ($4) → npm install aethel-nexus-sdk npm →

Proprietary Edge

Six capabilities you cannot get anywhere else

Built on formally verified mathematics. Each carries either a patent-pending status or a certified formal proof — not a heuristic, not a benchmark result.

Only on Aethel Nexus
⭡ HELIX Codec
The only AI model format with a formally certified quality floor on every compressed file.
  • Patent-pending geometric quantization
  • Certified inference parity — proved, not benchmarked
  • 15.24 GB → 6.69 GB · decompresses to Q8_0 GGUF
  • Proprietary error-correcting geometry
$79 one-time · GGUF download
Only on Aethel Nexus
◈ Hallucination Oracle
The only hallucination detector where the ceiling is proved, not measured.
  • Certified upper bound on confabulation probability
  • Derived from geometric model state at inference time
  • Formally verified — zero assumptions, zero exceptions
  • <18ms · no additional model call required
$0.002/call
Only on Aethel Nexus
⟳ Trust Phase Oracle
Agent trust scored as a geometric invariant — not a reputation score, a certified phase measurement.
  • Formally certified monotonicity properties
  • Adversarially resistant by construction, not by policy
  • Built for P2P agent networks and swarm coordination
  • <18ms
$0.002/call
Only on Aethel Nexus
⊞ Topological Identity
Identity verification with a formally certified uniqueness bound. Sybil resistance that’s proved, not claimed.
  • Topology-grounded identity proof
  • Certified uniqueness coefficient per actor
  • Works across agent, wallet, and session identifiers
  • <15ms
$0.020/call
Only on Aethel Nexus
🛡 Aethel Shield
Post-quantum hardening with scalar blinding. Formally certified extraction resistance for model weights.
  • Lattice-based PQC with proprietary invariant protection
  • Scalar blinding on weights — certified side-channel resistance
  • HELIX integrity lock — tamper evidence on every deployment
  • <20ms
$0.020/call
Only on Aethel Nexus
🔏 RatchetGate
The only session security API where the re-key interval is formally proven — not configured, not recommended, proved.
  • Proven re-key interval — certified upper bound on credential age
  • Directly addresses MCP CVE-2025-6514
  • FIPS 203 compliance evidence export on demand
  • Stateless probes — zero server-side secrets to steal
$0.002/call

Prompt Packs

Enhancement Architect System Prompts

Industry-specialized AI prompts precision-engineered for regulated industries and enterprise AI workflows. Expert review templates, compliance framing, and domain-grounded reasoning chains. Works with Claude, GPT-4, and Gemini.

Healthcare & MedTech
Clinical AI Pack
HIPAA · FDA · Clinical Decision Systems
  • Medical terminology context injection
  • Regulatory compliance framing
  • Clinical evidence grounding
$29 USDC · one-time
FinTech & Crypto
FinTech Pack
SOX · PCI-DSS · Blockchain Protocol
  • Financial reasoning scaffolds
  • Audit-trail aware outputs
  • Risk quantification prompts
$29 USDC · one-time
DevOps & Platform
DevOps Pack
SRE · GitOps · Developer Experience
  • Incident response frameworks
  • Infrastructure reasoning chains
  • On-call escalation templates
$19 USDC · one-time
Startup & Product
Startup Pack
PMF · Lean · Growth Loops
  • Product strategy frameworks
  • Growth hypothesis templates
  • Investor narrative scaffolds
$19 USDC · one-time
Browse All 12 Packs Bundle & Save

Pay once · Download instantly · No subscription


Novel Product
Identity And Trust Controls

🔬 Verification API —
Operational Controls For Agent Systems

A managed surface for identity verification, delegation review, and policy-aware routing. Built for teams that need auditable responses without exposing internal implementation details.

$0.01/query · Free preview tier · Pay-per-call only

Structured Decisions

Clear allow, deny, and flag outcomes for application-level controls.

🌌

Delegation Review

Inspect task routing and chain-of-control outcomes with API-friendly payloads.

🏷

Status Badges

Share verification-ready status markers in docs, dashboards, and product surfaces.

🔒

IP Protected

Public responses stay product-safe while sensitive internals remain server-side.


Featured Product
Verified Randomness

🎲 VeriRand —
Premium Verified Randomness

Every random number comes with a cryptographic proof. Know exactly where your randomness came from — on-chain verifiable, tamper-evident, and pay-per-call. No subscriptions, no trust required.

From $0.005/call · Credit packs from $4 · No subscription · Pay as you go
🔐

Cryptographic Proofs

Every result ships with a verifiable proof. Audit any call, any time.

Batch Generation

Generate thousands of verified random values in a single API call.

🧮

Multiple Formats

Bytes, uint32, uint64, bounded range — get exactly the format you need.

💳

Credit-Based Pricing

Buy credits once, spend as you go. Starting at $0.004 per call with volume discount.


🔒 Session Security
Agentic Infrastructure

🔏 RatchetGate —
Automatic Session Re-Key

Every session rotates its keys on a formally bounded schedule. Credentials can't live long enough to be stolen. Designed for MCP servers, agent frameworks, and any system where long-lived credentials are a liability.

$0.002/call · Fixes MCP CVE-2025-6514
🔄

Automatic Re-Key

Session keys rotate on a proven schedule. The window of credential exposure is mathematically bounded, not just policy-declared.

CVE-2025-6514 Mitigation

The only production API that directly addresses the MCP long-lived credential vulnerability — by eliminating long-lived credentials entirely.

📋

FIPS 203 Evidence

Export compliance evidence at any point. Audit logs include re-key timestamps, proof tokens, and session state hashes.

🔎

Probe & Advance API

Register sessions, advance the ratchet, and probe state — three clean endpoints that drop into any agent framework in minutes.


Pricing

Transparent, agent-first pricing

Pay per call via x402 USDC — no account, no friction. Or buy a credit pack once and call any of 75+ endpoints for a flat rate. Start at $4 for 500 calls, no expiry.

Messaging
A2A Communication
$0.002
per call
  • Agent-to-agent message routing
  • Structured task delegation
  • Multi-agent coordination
Cloudflare Workers AI
Inference
AI Inference / Llama 3.1 8B (Cloudflare Workers AI)
$0.025
per call
  • Llama 3.1 8B Instruct via Cloudflare Workers AI
  • OpenAI-compatible API
  • No account needed — pay per call via x402
  • Up to 512 output tokens
Security
Threat & PQC
$0.015–$0.02
per call
  • Threat consensus scoring
  • Post-quantum key exchange
  • Scalar blinding & shield ops
  • HELIX integrity checks
Compliance
Governance
$0.01–$0.015
per call
  • Policy evaluation
  • Compliance audit logs
  • Multi-party governance votes
Discovery
Agent Matching
$0.005
per call
  • Capability-based routing
  • Swarm population census
  • Agent trust scoring
Only on Aethel Nexus
Verification
Verification API
$0.01
per query · pay-per-call
  • Identity verification API
  • Delegation and policy responses
  • Status badge support
  • Access tier controls
Patent-Pending
Compression
HELIX Codec
$79
one-time · GGUF download · no expiry
  • 6.33 bpw · PPL 8.09 · 4/4 coherence pass
  • Geometric error-correcting quantization
  • Decompresses to standard GGUF for Ollama / llama.cpp
  • Own the model weights forever
Formally Verified
Identity / Agent Auth
VeriDelegate
$0.01
per chain · pay-per-call
  • Formally verified UCAN chain validation
  • Mathematically proven depth limit — zero trust overshoot
  • Capability attenuation checks (child ⊆ parent)
  • IETF 5-dimension trust vector output
  • Signed DelegationReceipt for audit trail
  • Endpoint: POST /v1/delegate/verify
Session Security
Session Security
RatchetGate
$0.002
per call · pay-per-call
  • Proven session re-key interval — formally bounded
  • Fixes MCP CVE-2025-6514 long-lived credential risk
  • Register, advance, probe & status endpoints
  • FIPS 203 compliance evidence export
  • Automatic key rotation with cryptographic proof
  • Endpoints: POST /v1/ratchet/register|advance|probe
Free forever
No payment required
Free Tier
$0.00
always free
  • Entropy oracle
  • Network topology
  • Agent registration
  • Health & status checks
Get 500 Calls — $4 →

✓ No subscription  ·  ✓ Credits never expire  ·  ✓ Works across all 75+ endpoints  ·  ✓ Instant key delivery


TypeScript SDK v0.5.0

The official aethel-nexus-sdk wraps 75+ endpoints with full TypeScript types and automatic x402 payment. Verification API, VeriRand, VeriDelegate, RatchetGate, HELIX compression, A2A messaging, and security controls — one import, zero friction.

// npm install aethel-nexus-sdk@0.5.0

import { AethelNexusClient } from 'aethel-nexus-sdk';

const client = new AethelNexusClient({
  rpcUrl:     'https://mainnet.base.org',
  privateKey: process.env.AGENT_PRIVATE_KEY,
});

// Free: inspect service profile
const profile = await client.verificationProfile();
console.log('Tier:', profile.tier); // research-pro

// Paid ($0.02): run a verification check
const v = await client.identityVerify({ actor: 'agent-123' });
console.log('Verified:', v.decision); // allow

// Paid ($0.005): verifiable random number
const rng = await client.verirandRange(1, 100);
console.log(rng.numbers[0], 'seed:', rng.seed_ts);
Python · pip install requests
import requests

BASE = 'https://aaaa-nexus.atomadictech.workers.dev'

# Free: discover capabilities (no auth required)
agent = requests.get(f'{BASE}/.well-known/agent.json').json()

# Free (47/day): seed-verifiable random number
rng = requests.get(f'{BASE}/v1/rng/quantum',
    headers={'X-API-Key': 'your_key_here'}).json()
print(rng['numbers'][0], 'proof:', rng['proof'][:16])

# Free: verify HMAC proof (no key required)
ok = requests.get(f'{BASE}/v1/rng/verify', params={
    'seed_ts': rng['seed_ts'],
    'numbers': ','.join(rng['numbers']),
    'proof':   rng['proof']}).json()
print('valid:', ok['valid'])  # True

# Paid ($0.02): identity verification
verify = requests.post(f'{BASE}/v1/identity/verify',
    json={'actor': 'agent-123'},
    headers={'X-API-Key': 'your_key_here'}).json()
print('Decision:', verify['decision'])  # allow | deny | flag

Agent-Native Architecture

Infrastructure that agents call directly

No human in the loop. Every endpoint is discoverable via A2A agent cards, payable autonomously via x402 USDC micropayments, and verified by formal proof — built for the machines that will run the internet.

🤖

A2A Native

Agent card at /.well-known/agent.json. Any A2A-compliant agent can auto-discover and start calling.

🔐

Post-Quantum Security

CRYSTALS-Kyber key exchange, scalar blinding, and production safety checks for high-trust workloads.

💡

Reliability Controls

Deterministic guardrails, bounded drift controls, and compile-time safety checks are enforced across critical paths.

🌐

Cloudflare Edge

Deployed to Cloudflare Workers. Sub-50ms response from anywhere on Earth. No cold starts.

💭

Live Chain-of-Thought

Streaming inference with animated CoT reasoning. Watch the model think, then see the answer — with full HELIX integrity metadata.

🔒

RatchetGate Sessions

Formally bounded session re-key for every agent conversation. Credentials can't overstay their proof window.

Build vs. Buy

Why not just build this yourself?

Fair question. Here's what it actually takes.

Build It Yourself
  • 6–18 months to implement Leech lattice VQ from scratch
  • Lean 4 theorem proving requires a PhD-level mathematician
  • x402 payment protocol integration is non-trivial
  • UCAN chain validation spec has edge cases that bite at 3 AM
  • No guarantee your result is formally correct
  • Cloudflare Workers deployment + maintenance overhead
Estimated: $200K+ in engineering time
Use Aethel Nexus
  • First call in 60 seconds — one curl, no account
  • 29 Lean 4 theorems already proven — zero sorry
  • x402 handled by SDK — one import, one line
  • UCAN validation battle-tested, arXiv-cited
  • Formally certified correctness — not "probably fine"
  • Global Cloudflare edge, zero ops burden on your team
Starting at $0.002/call — no commitment
Start for $4 →

FAQ

Common questions

Everything you need before your first call.

Do I need a crypto wallet to use Aethel Nexus? +

No. The easiest path is a credit pack ($4, $15, or $49) paid by card — you get an API key by email and use the X-API-Key header. A wallet is only needed if you want x402 autonomous per-call payment directly in USDC on Base L2.

What happens when my credits run out? +

Your API key stops working. No charges, no surprises. You buy a new pack whenever you're ready. Credits never expire, so you can top up any time. You can also switch to x402 per-call payment at any point without any migration.

Is there really a free tier? +

Yes. The entropy oracle, agent registration, health checks, and network topology endpoints are always free — no key required. VeriRand also gives 47 free calls per day (tied to the RG_LOOP constant). The agent.json discovery card is always free for A2A frameworks.

Is there an SLA? +

Aethel Nexus runs on Cloudflare Workers — globally distributed with no cold starts and typically sub-50ms response times. There's no formal SLA contract at current pricing tiers, but the infrastructure is production-grade. Check live status any time.

Can I switch between API key and x402 payment mid-project? +

Yes. The two modes coexist on every endpoint. Just swap the header: X-API-Key for credit packs, or include an X-402-Payment token for autonomous per-call payment. Same endpoints, same responses.

Which agent frameworks are compatible? +

Any framework that supports the Google A2A spec can auto-discover via /.well-known/agent.json. This includes LangChain, AutoGen, CrewAI, Google ADK, and any custom framework that fetches agent cards. The REST API is framework-agnostic — if it can make HTTP requests, it works.

Ready to build?

500 calls. $4. Delivered in seconds.

No account. No subscription. No crypto wallet required. Enter your email, pay by card, and your API key arrives before you finish your coffee.

Get 500 Calls — $4 → See all plans
✓ Instant email delivery ✓ No expiry ✓ Works across all 75+ endpoints ✓ 24h support