CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

30.8 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 1 flagged

Securityscore 88 · 1 finding

MEDIUM"Never tell the user" non-disclosure imperative in the skillSS-SKILL-INJECT-IMPERATIVE-01 · Prompt injection · CONTRIBUTING.md

MEDIUM — it fires on intent; whether the agent honors the non-disclosure imperative depends on the host model.

Why it matters

A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.

The exact value spotted

excerptCONTRIBUTING.md· markdown

86- Never commit API keys, tokens, or secrets

87- Report security vulnerabilities privately to **[email protected]**

88- Do not disclose vulnerabilities publicly until a fix is released

89- Follow the security model in `docs/SECURITY.md`

Occurrences

1 occurrence · at L88

How to fix

Remove the non-disclosure imperative, or rescope it so it limits output format, not honesty to the user.

Delete any "never reveal / never tell the user" line aimed at the model's own behavior.
Keep legitimate confidentiality rules about external data (e.g. "do not echo API keys"), which are user-protective, not user-deceiving.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-IMPERATIVE-01sha25640f836ae691c1fe8…rubric 365aacaView on GitHub

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md11.7 KB · Markdown

BTCFi API

Bitcoin Intelligence API for AI Agents

Live at btcfi.aiindigo.com · Built by AI Indigo · GitHub

BTCFi API is an agent-native Bitcoin intelligence platform providing 80+ endpoints across Bitcoin, Ethereum, Solana, Lightning Network, Runes, and Taproot Assets. Powered by x402 micropayments — pay $0.01–$0.05 per query in USDC, no API keys or subscriptions required. CoinGecko integration provides multi-currency pricing (38 fiat currencies). AI agents discover endpoints at /llms.txt and integrate via MCP, SDK, or raw HTTP.

Free Tier

100 calls/day per IP — no signup, no API keys, just make a request:

curl https://btcfi.aiindigo.com/api/v1/fees

{
  "fastest": 12,
  "30min": 8,
  "1hr": 5,
  "economy": 3,
  "fastestUSD": "$2.40",
  "recommended": "8 sat/vB"
}

Quick Start

AI Agents (MCP):

npx @aiindigo/btcfi-mcp

SDK:

npm install @aiindigo/btcfi

import { BTCFi } from "@aiindigo/btcfi";

const btcfi = new BTCFi({ network: "base" });
const fees = await btcfi.fees();
const risk = await btcfi.intelligence.risk("bc1q...");

Raw HTTP:

# Free endpoint — no auth needed
curl https://btcfi.aiindigo.com/api/v1/mempool

# Paid endpoint — requires x402 micropayment
curl -X GET https://btcfi.aiindigo.com/api/v1/intelligence/whales \
  -H "X-Payment: <x402-payment-proof>"

OpenAPI Spec:

https://btcfi.aiindigo.com/openapi.json

API Reference

Core Bitcoin Endpoints

Endpoint	Description	Price
`GET /api/v1/fees`	Fee estimates (fastest, 30min, 1hr, economy) with USD values	$0.01
`GET /api/v1/mempool`	Mempool summary, tx count, size, fee histogram	$0.01
`GET /api/v1/address/{addr}`	Address balance, tx count, funded/spent stats	$0.01
`GET /api/v1/address/{addr}/utxos`	Unspent transaction outputs	$0.01
`GET /api/v1/address/{addr}/txs`	Transaction history	$0.01
`GET /api/v1/tx/{txid}`	Full transaction details	$0.01
`GET /api/v1/tx/{txid}/status`	Confirmation status	$0.01
`POST /api/v1/tx/broadcast`	Broadcast signed transaction	$0.05
`GET /api/v1/block/latest`	Latest blocks with details	$0.01
`GET /api/v1/block/{id}`	Block by height or hash	$0.01

Intelligence Endpoints

Endpoint	Description	Price
`GET /api/v1/intelligence/fees`	AI fee prediction (1h, 6h, 24h windows)	$0.02
`GET /api/v1/intelligence/whales`	Large transaction detection	$0.02
`GET /api/v1/intelligence/risk/{addr}`	Address risk scoring	$0.02
`GET /api/v1/intelligence/network`	Hashrate, difficulty, congestion	$0.02
`GET /api/v1/intelligence/consolidate/{addr}`	UTXO consolidation advice	$0.02
`GET /api/v1/intelligence/mvrv`	MVRV ratio	$0.02
`GET /api/v1/intelligence/sopr`	SOPR (Spent Output Profit Ratio)	$0.02
`GET /api/v1/intelligence/nupl`	NUPL (Net Unrealized Profit/Loss)	$0.02
`GET /api/v1/intelligence/hodl-waves`	HODL wave distribution	$0.02

Security Endpoints

Endpoint	Description	Price
`GET /api/v1/security/threat/{addr}`	YARA-pattern threat analysis (8 patterns)	$0.02

ZK Proof Endpoints

Endpoint	Description	Price
`POST /api/v1/zk/balance-proof`	Prove balance ≥ threshold	$0.03
`POST /api/v1/zk/age-proof`	Prove UTXO age ≥ N blocks	$0.03
`POST /api/v1/zk/membership`	Prove set membership	$0.03
`POST /api/v1/zk/verify`	Verify any ZK proof	$0.01

Solv Protocol Endpoints

Endpoint	Description	Price
`GET /api/v1/solv/reserves`	SolvBTC supply, backing ratio, TVL	$0.02
`GET /api/v1/solv/yield`	xSolvBTC APY, yield strategies	$0.02
`GET /api/v1/solv/liquidity`	Cross-chain SolvBTC distribution	$0.02
`GET /api/v1/solv/risk`	Multi-factor risk assessment	$0.02

Cross-Chain Endpoints

Ethereum ($0.01):

Endpoint	Description
`GET /api/v1/eth/gas`	ETH gas prices
`GET /api/v1/eth/address/{addr}`	ETH address balance
`GET /api/v1/eth/tx/{hash}`	ETH transaction details

Solana ($0.01):

Endpoint	Description
`GET /api/v1/sol/fees`	SOL priority fees
`GET /api/v1/sol/address/{addr}`	SOL address balance

Runes Endpoints

Endpoint	Description	Price
`GET /api/v1/runes`	List all Bitcoin Runes tokens	$0.02
`GET /api/v1/runes/trending`	Trending Runes by 24h activity	$0.02
`GET /api/v1/runes/{ticker}`	Runes token details	$0.02
`GET /api/v1/runes/{ticker}/holders`	Holder distribution	$0.02
`GET /api/v1/runes/{ticker}/transfers`	Recent transfers	$0.02

Taproot Assets Endpoints

Endpoint	Description	Price
`GET /api/v1/taproot/assets/{addr}`	Taproot Assets held by address	$0.02
`GET /api/v1/taproot/assets/{addr}/{assetId}`	Taproot Asset details	$0.02

Lightning Network Endpoints

Endpoint	Description	Price
`GET /api/v1/lightning/node/{pubkey}`	Lightning node info	$0.02
`GET /api/v1/lightning/channels/{chanId}`	Channel details	$0.02
`GET /api/v1/lightning/routing-fee`	Routing fee estimate	$0.02
`GET /api/v1/intelligence/lightning`	Lightning network intelligence	$0.02

Portfolio Endpoints

Endpoint	Description	Price
`GET /api/v1/portfolio`	List portfolios	$0.01
`GET /api/v1/portfolio/{userId}`	Get user portfolio	$0.01
`GET /api/v1/portfolio/{userId}/analytics`	Portfolio analytics	$0.02
`GET /api/v1/intelligence/portfolio/{addr}`	Address portfolio analysis	$0.02

Alerts Endpoints

Endpoint	Description	Price
`GET /api/v1/alerts`	List alert rules	Free
`GET /api/v1/alerts/rules`	Manage alert rules	Free
`DELETE /api/v1/alerts/rules/{id}`	Delete alert rule	Free
`GET /api/v1/alerts/history`	Alert trigger history	Free
`POST /api/v1/alerts/evaluate`	Evaluate alert conditions	Free

Price Endpoints

Endpoint	Description	Price
`GET /api/v1/price`	BTC price (CoinGecko: 38 fiat currencies)	Free

Real-Time Streams

Endpoint	Description	Price
`GET /api/v1/stream`	SSE: new blocks, fee changes, mempool surges	$0.01
`GET /api/v1/stream/whales`	SSE: whale transaction alerts (`?min=100` BTC)	$0.01

Agent Integration

Endpoint	Description	Price
`GET /api/mcp`	MCP server info and tools	Free
`GET /llms.txt`	AI agent discovery file	Free
`GET /api/v1/agent-skills`	Agent skill registry	Free

System Endpoints

Endpoint	Description	Price
`GET /api/health`	System health check	Free
`GET /api/v1/staking/status`	Staking tier and rate limit status	Free

Pricing

Category	Price (USDC)
Core Bitcoin (fees, mempool, address, tx, block)	$0.01
Intelligence (whales, risk, MVRV, SOPR, NUPL, HODL waves, cluster, graph)	$0.02
Security (threat analysis)	$0.02
Solv Protocol (reserves, yield, liquidity, risk)	$0.02
Runes (tokens, holders, transfers, trending)	$0.02
Taproot Assets (asset list, asset details)	$0.02
Lightning Network (nodes, channels, routing fees)	$0.02
Portfolio (addresses, analytics)	$0.01–$0.02
ZK Proofs (balance, age, membership)	$0.03
Transaction broadcast	$0.05
Ethereum / Solana	$0.01
Streams (SSE)	$0.01
Price (CoinGecko multi-currency)	Free
Alerts (rules, history, evaluate)	Free
System (health, status)	Free
Agent Discovery (/llms.txt, /api/mcp)	Free

Free Tier: 100 calls/day per IP, no signup required.

Authentication

BTCFi API uses x402 micropayments — no API keys, no OAuth, no subscriptions.

Free endpoints — No authentication. Just make a request.
Paid endpoints — Include an X-Payment header with a USDC micropayment proof.
Payment networks:

Base (EVM L2) — Coinbase facilitator, zero fees, ERC-3009
Solana — NLx402 by PCEF (nonprofit), zero fees

Request signing (optional, for higher rate limits):

Wallet-based signing with Ed25519 (Solana) or secp256k1 (EVM)
Headers: X-Signature, X-Nonce, X-Signer, X-Timestamp

Free for Humans

Completely free — no signup, no API keys, no secrets. This is a PUBLIC repository. Just open Telegram:

[@BTC_Fi_Bot](https://t.me/BTC_Fi_Bot) — 38 commands + inline mode:

/start /help /price /whale /fear /hash /mempool /halving /etf /funding /dominance /mining /lightning /signal /l2 /block /mvrv /sopr /nupl /entity /portfolio /staking /threat /eth_addr /sol_addr /digest /alerts /watch /unwatch /watchlist /runes /ordinals /taproot /cluster /graph /batch /webhooks /premium

[@BTCFi_Whales](https://t.me/BTCFi_Whales) — Real-time whale transaction alerts, auto-posted every 15 min
[Web Dashboard](https://btcfi.aiindigo.com/dashboard) — Live BTC price, fees, mempool, address lookup, whale watch

Security

Wallet-based request signing (Ed25519 + secp256k1)
Encrypted responses (Curve25519 + XSalsa20-Poly1305)
Zero-knowledge proofs (Groth16)
8 YARA-style threat detection patterns
Nonce replay protection
PEAC Protocol cryptographic receipts
Tiered rate limiting (free: 100/min, signed: 500/min, paid: unlimited)

Report vulnerabilities: [email protected]

Self-Hosted

Run the API locally for development or private deployment:

git clone https://github.com/aiindigo925/btcfi-api.git
cd btcfi-api
npm install
cp .env.example .env    # Configure environment variables
npm run dev              # Start on port 3001

Required environment variables:

UPSTASH_REDIS_REST_URL — Redis connection for caching
UPSTASH_REDIS_REST_TOKEN — Redis auth token
X402_NETWORK — Payment network (base or solana)
X402_FACILITATOR_URL — x402 facilitator endpoint

Documentation

Doc	Description
docs/ROADMAP.md	Project history and future plans
docs/ARCHITECTURE.md	System design and endpoint reference
docs/SECURITY.md	Security model and features
docs/CHANGELOG.md	Version history

Packages & Distribution

Package	Description
`@aiindigo/btcfi`	TypeScript SDK — 28 methods
`@aiindigo/btcfi-mcp`	MCP Server — 45 tools for Claude, ChatGPT, Gemini
MCP Registry	`io.github.aiindigo925/btcfi`
Glama	Indexed — searchable MCP directory
@BTC_Fi_Bot	Telegram bot — 28 commands + inline mode

Contributing

We welcome contributions! See CONTRIBUTING.md for guidelines.

License

No token. No API keys. Just Bitcoin data. Ship > talk. 🚀

Btcfi Api— agent skill

Is Btcfi Api safe to install?

BTCFi API

Free Tier

Quick Start

API Reference

Core Bitcoin Endpoints

Intelligence Endpoints

Security Endpoints

ZK Proof Endpoints

Solv Protocol Endpoints

Cross-Chain Endpoints

Runes Endpoints

Taproot Assets Endpoints

Lightning Network Endpoints

Portfolio Endpoints

Alerts Endpoints

Price Endpoints

Real-Time Streams

Agent Integration

System Endpoints

Pricing

Authentication

Free for Humans

Security

Self-Hosted

Documentation

Packages & Distribution

Contributing

License

Audit the pieces. Scan the whole. Decide.