AIS Gateway · docs
One server. Ten tools. Two ways to pay.
https://api.aislabs.ai/mcp is an MCP server your assistant connects to in one line — Claude Code, the Claude app, Cursor, any MCP client — and every tool has an HTTP twin for scripts and cron jobs. The free tools answer immediately. The rest unlock two ways: an Gateway key (one card purchase, paste it once, every paid tool and route opens) or per-call payment over the x402 protocol for agents that carry a wallet. No account. No API key to manage. No subscription that renews behind your back.
Two things live here today: the daily CVE prioritization — today's ranked answer to "what do we patch first?", scored on real exploitation (CISA KEV, EPSS, KEV-recency), not CVSS alone — and the Agent Flight Recorder, a dead-man switch for autonomous agents that alerts when an agent goes silent and hands a fresh one the state it needs to resume.
Connect
claude mcp add --transport http ais-gateway https://api.aislabs.ai/mcp
# with a key: add --header "Authorization: Bearer YOUR_KEY"Claude app (web / desktop / mobile), Cursor, and other clients: the step-by-step with screenshots is on the Gateway page. Without a key the free tools still work, and the paid ones tell your assistant exactly how to unlock them.
MCP tools
| Tool | Tier | What it does |
|---|---|---|
| about_aislabs | Free | What AIS sells, how agents can buy over x402, where the data comes from. |
| brief_teaser | Free | Today's top-3 CVE priorities, no scores — the taste that points at the paid list. |
| top_cves_today | Key · or x402 $0.02 | Today's full ranked list of 25 CVEs: priority scores, KEV status + date added, EPSS, severity, patch status, vendor/product, methodology. |
| kev_fresh | Key · or x402 $0.01 | Every CVE CISA added to KEV in the last 7 days (complete catalog), annotated with today's AIS rank and score. |
| cve_verdict | Key · or x402 $0.005 | One CVE's verdict from today's ranked set — score, rank, factors — or an honest miss. |
| register_monitor | Free (1 per alert target) · Key (20) | Agent Flight Recorder: watch an agent or cron job — expected heartbeat interval, grace, alert target (Discord / HTTPS webhook / email). Returns a monitor id + secret and a one-line curl for cron. |
| heartbeat | Free · Key | The agent's "still alive" ping. Attach a state capsule (any JSON ≤32 KB: step, done, next, ids) — stored on the key tier. status:"fail" reports a failure immediately. |
| fetch_capsule | Key | The last capsule a monitored agent sent, so a fresh agent resumes where the dead one stopped. |
| fleet_status | Key | Every monitor you own: alive / late / dead, last heartbeat, capsule preview. |
| delete_monitor | Free · Key | Remove a monitor (its secret or the owning key). |
"Key" = the Gateway key ($19 / 30 days, $99 / 12 months). Tools marked "or x402" also take a per-call USDC payment from a wallet-carrying agent.
HTTP endpoints
| Endpoint | Access | Returns |
|---|---|---|
| GET /v1/brief/teaser | Free | Today's top-3 priorities — no scores. Try before you pay. |
| GET /v1/brief/today | Key · x402 $0.02 | Today's full ranked list: priority scores, KEV status + added-date, EPSS, severity, patch status, vendor/product, and the scoring methodology. |
| GET /v1/kev/fresh | Key · x402 $0.01 | Every CVE added to CISA KEV in the last 7 days (complete catalog), annotated with today's AIS ranks. |
| GET /v1/cve/{cve_id} | Key · x402 $0.005 | One CVE's verdict from today's ranked set — score, rank, factors. Honest miss if it isn't ranked today. |
| GET /v1/archive/{date} | Key · x402 $0.05 | A past day's full brief (YYYY-MM-DD). Archive accumulates daily from 2026-08-19. |
| POST /v1/recorder/monitors | Free · Key | Register a monitor: { name, period_minutes, grace_minutes, alert_webhook, alert_email }. Send your key to own it (20 monitors); without one, 1 per alert target. |
| GET / POST /v1/recorder/beat/{id}/{secret} | Free · Key | Heartbeat. POST a JSON body { capsule, status } to attach state; GET is the one-liner for cron jobs. |
| GET /v1/recorder/capsule/{id} | Key | Last stored capsule + how to resume. |
| GET /v1/recorder/fleet | Key | All monitors for the calling key with live states. |
| DELETE /v1/recorder/monitors/{id} | Free · Key | Remove a monitor. |
Base URL: https://api.aislabs.ai · Key: send Authorization: Bearer YOUR_KEY on any route · x402: exact scheme, USDC on Base (gasless for the payer) · Machine specs: /openapi.json · /v1/recorder
Unlock everything with a key
curl https://api.aislabs.ai/v1/brief/today -H "Authorization: Bearer YOUR_KEY"One key, every paid tool and route, for a fixed term — get one here.
Or pay a call with a wallet (x402)
import { privateKeyToAccount } from 'viem/accounts';
import { wrapFetchWithPayment } from 'x402-fetch';
const fetchPay = wrapFetchWithPayment(fetch, privateKeyToAccount(process.env.WALLET_KEY));
const brief = await (await fetchPay('https://api.aislabs.ai/v1/brief/today')).json();Any x402 client works — x402-fetch, @x402/fetch, x402-axios, or the Cloudflare Agents SDK. The client sees the 402 challenge, signs a USDC payment, and retries — automatically. Listed in the Coinbase x402 Bazaar.
Notes
CVE data regenerates daily from CISA KEV, FIRST.org EPSS, and NVD, scored by the AIS methodology (each response carries it). Recorder alerts fire within a minute of a missed deadline. Sales are final; keys are access delivered instantly.
Need the same scoring against your environment's full CVE list, on your own infrastructure? That's the CVE Priority Kit.
Questions: [email protected]