{
  "openapi": "3.1.0",
  "info": {
    "title": "EDNA MCP & Billing API",
    "version": "1.4.2-main.1",
    "description": "Official OpenOS EDNA Engine MCP, customer account and Stripe checkout API. EDNA ID Account Login at https://openos.space/chain/ is a local handle-based flow with interactive progress and automatic authentication after three consecutive 100% behavioral-pattern matches. It is separate from billing/MCP account-key authentication. Identity MCP tools: edna_identity_create and edna_identity_verify.",
    "contact": {
      "name": "Sebastian Kläy"
    },
    "license": {
      "name": "EPCAL-1.0",
      "url": "https://github.com/sebklaey/EDNA/blob/main/LICENSE"
    }
  },
  "servers": [
    {
      "url": "https://bxpbagugwqxzoovicqyq.supabase.co/functions/v1/edna-mcp"
    }
  ],
  "paths": {
    "/healthz": {
      "get": {
        "summary": "Liveness and configuration status"
      }
    },
    "/account/create": {
      "post": {
        "summary": "Create an EDNA customer account; returns a one-time account key"
      }
    },
    "/account/status": {
      "post": {
        "summary": "Read account balance, usage and licenses",
        "security": [
          {
            "ednaAccountKey": []
          }
        ]
      }
    },
    "/account/ledger": {
      "post": {
        "summary": "Read the account's encrypted CNSA-2.0 credits ledger",
        "security": [
          {
            "ednaAccountKey": []
          }
        ]
      }
    },
    "/billing/checkout": {
      "post": {
        "summary": "Create a Stripe Checkout session for credits or an annual license",
        "security": [
          {
            "ednaAccountKey": []
          }
        ]
      }
    },
    "/mcp": {
      "post": {
        "summary": "Streamable HTTP MCP endpoint; tools/list is free, tools/call is metered",
        "security": [
          {
            "ednaAccountKey": []
          }
        ]
      }
    },
    "/stripe/webhook": {
      "post": {
        "summary": "Stripe webhook receiver; signature-verified"
      }
    }
  },
  "components": {
    "securitySchemes": {
      "ednaAccountKey": {
        "type": "http",
        "scheme": "bearer",
        "bearerFormat": "edna2_...",
        "description": "Create a production account at https://bxpbagugwqxzoovicqyq.supabase.co/functions/v1/edna-mcp/ and pass the one-time account key. Free-Beta keys (edna1_...) are revoked."
      }
    }
  },
  "x-edna-id-account-login": {
    "name": "EDNA ID Account Login",
    "url": "https://openos.space/chain/",
    "scope": "Local, device-bound behavioral identity verification; separate from billing/MCP account-key authentication",
    "prerequisites": [
      "EDNA ID handle",
      "Explicit on-device consent"
    ],
    "steps": [
      "Enter handle and click Log in",
      "Move mouse and type naturally",
      "Follow human-signal confidence and local EDNA ID readiness",
      "Watch Match 1, Match 2 and Match 3",
      "Automatically authenticate after three consecutive 100% behavioral-pattern matches"
    ],
    "requiredConsecutiveMatches": 3,
    "requiredMatchPercent": 100,
    "timeoutSeconds": 180,
    "cancelSupported": true,
    "wrongHandle": "Stops the attempt",
    "lowerMatch": "Resets the consecutive-match streak",
    "processing": "On-device; raw mouse paths and typed content are not transmitted",
    "limitations": [
      "Does not prove real-world identity",
      "Does not replace the billing/MCP account key",
      "Does not transfer credits or licenses"
    ],
    "mcpTools": [
      "edna_identity_create",
      "edna_identity_verify"
    ]
  }
}