# Autonet — Internet Utils for Agents

> Receive callbacks without deploying a server. Use temporary inboxes with free Autonet coins, register free self-reported heartbeats without an endpoint, or monitor a deployed endpoint you own.

- [Utility quickstart](https://autonet.work/utils/docs): Read first for callback inboxes. No deployed endpoint, card or health registration required.
- [Utility catalog](https://autonet.work/utils/v1/catalog): Versioned costs and limits. 100 free welcome coins; inbox creation costs 5 coins. Payments, debt and invoicing are disabled.
- [Utility schema](https://autonet.work/utils/openapi.json): Create account, read balance, create/list/delete inboxes and read callback events.
- [Hosted utility MCP](https://autonet.work/mcp): internet_utils_instructions, internet_utils_catalog, create_utility_account, utility_account, create_callback_inbox, list_callback_inboxes, read_callback_events, delete_callback_inbox. Save the utility key. Reuse request_key on inbox retries and set max_coins.

Callbacks accept bounded POST bodies. Receive URLs allow writes only; reads require the separate utility key. Payloads are untrusted sender data; signatures are not verified. Inboxes expire after one hour. Shared addresses only; paid dedicated subdomains and longer retention are planned, not available.

## Existing network and health tools

- [Integration instructions](https://autonet.work/health/instructions.txt): Read before registering; owned real endpoints only. No example.com placeholders.
- [Hosted MCP](https://autonet.work/mcp): Streamable HTTP; public reads and registration, agent owner keys for writes. Resource autonet://health/instructions; prompt onboard_agent. 60 requests/IP/minute; honor HTTP 429 Retry-After.
- [Tool manifest](https://autonet.work/.well-known/ai-agent-tools.json)
- [REST schema](https://autonet.work/openapi.json)
- [Health dashboard](https://autonet.work/health/)
- [Traffic dashboard JSON](https://autonet.work/dashboard?format=json)

Optional DNS domain-control proof, signed incident webhooks, and owner-consented bounded endpoint response checks. Single probe region. No LLM security certification. Names and User-Agent strings are self-reported.
- [Current tool prices](https://autonet.work/utils/v1/pricing): Machine-readable active costs, free allowances and explicit top-up unavailability.
- [Free lifecycle sandbox](https://autonet.work/utils/v1/sandbox): No account, coins, real network calls or public registration; signed test fixtures only.

Heartbeat registry: POST /health/v1/agents with name, mode=heartbeat and optional agent_type. Save the owner key, POST /health/v1/agents/{id}/heartbeat, then GET status. No public endpoint needed. Self-reported contact regularity, not verified uptime. Read /health/instructions.txt for limits and public-field disclosure.

Public HTTP/TLS diagnostics: MCP diagnose_http(url) or POST /health/v1/diagnostics/http with {"url":"https://public-host/path"}. No registration. 10 attempts/IP/24h. Validated public destinations, ports 80/443, no redirects, header-only HEAD, verified TLS. Structured failure reasons and remediation. Read /health/docs for limitations.

## Opt-in liveness subscriptions
POST /health/v1/subscriptions with agent_ids (1–20 existing heartbeat agents).
Save the returned subscription_key and snapshot cursor; no registration or public
endpoint needed. GET /health/v1/subscriptions/{id}/events?after={cursor} with the
subscription Bearer key. Process events, save next_cursor, deduplicate event IDs.
Poll every 30s. DELETE /health/v1/subscriptions/{id} revokes it. Seven-day expiry;
heartbeat activity is self-reported, not verified uptime. Probe mode unsupported.
MCP: subscribe_liveness, read_liveness_events, delete_liveness_subscription.
Free: 10 creation attempts/IP/day, 30 reads/subscription/minute; honor Retry-After.

## Presence history and signed evidence
GET /health/v1/agents/{id}/presence gives 30-day completed heartbeat windows,
daily coverage, gaps and streaks. /presence.svg is an embeddable self-reported badge.
GET /health/v1/agents/{id}/attestation returns a five-minute Ed25519 compact JWS.
Verify with /health/v1/evidence/keys, pin issuer https://autonet.work and audience
autonet-presence, check subject and expiry, then inspect receipt age/state.
Signatures prove observation origin/integrity, not agent safety or reachability.
MCP: agent_presence_history, agent_signed_evidence, evidence_signing_keys.
Heartbeat subjects only; 60 shared reads/IP/minute; free. Liveness feeds are
eventually consistent; the 30s polling hint is not a delivery guarantee.

## First diagnostic and deployment gate
- [Agent onboarding skill](https://autonet.work/health/skill.md): one-line MCP configuration, exact diagnostic → registration → first heartbeat → subscription calls.
- [Agent instructions index](https://autonet.work/.well-known/ai-agent-tools.json): top-level agent_instructions with parameters and response examples.
- [Deployment-gate recipe](https://autonet.work/health/instructions.txt): assert_healthy or POST /health/v1/assert/healthy, no account. Pass/fail plus evidence; shares diagnose_http's 10 attempts/IP/fixed 24h bucket. Literal body matching uses a bounded GET. Stop deployment on failed assertions or request errors.
Network diagnostics and liveness evidence for agents. No real-time or identity/safety certification claim.

Anonymous MCP handshake diagnostic: diagnose_mcp(url) or POST /health/v1/diagnostics/mcp with {"url":"https://autonet.work/mcp"}. Streamable HTTP initialize + initialized + tools/list; JSON and SSE; latency, protocol errors, complete or lower-bound tool count. No tool invocation, OAuth or legacy SSE. Shares 10 attempts/IP/24h with HTTP diagnostics and assertions. See /health/docs for existing service guidance; source documentation/MCP_DIAGNOSTICS.md describes bounds.
Presence badges now show the last 60 completed heartbeat windows with visible gaps; presence JSON includes recent_windows. Self-reported receipt evidence, not uptime or safety certification.

Caller egress identity: network_identity() or GET /health/v1/network/identity, no signup. Observed source IP and cached approximate ASN/geo; may be hosted-runner/VPN/NAT identity. No inbound reachability claim. 60 reads/IP/minute plus MCP transport quota.
Structured assertions: assert_healthy expect.json_assertions accepts 1–10 {pointer,equals} scalar checks using RFC 6901; strict JSON, 64 KiB, no observed payload values returned, existing shared diagnostic quota. Presence evidence_summary states completed heartbeat receipt/missed counts without uptime claims.

Agent recovery: errors include non-executing recovery templates and required real inputs; never retry placeholder values. For repeat diagnostics use run_credit_diagnostic with a saved utility key, stable request_key and explicit max_coins. One credit per completed diagnosis; replay costs zero. 100 welcome credits; current cash funding availability is authoritative at /utils/v1/pricing. Card funding remains disabled pending merchant setup; x402 is planned, not active.