Fresh402

npx add-mcp 'https://fresh402.kirilllabs.workers.dev/mcp'

Fresh402

A low-cost freshness oracle for AI agents, powered by x402.

Fresh402 lets an AI agent register a web resource once, then cheaply check whether it has materially changed before spending money on a browser session, scraper, API call, or LLM context.

• Free baseline registration
• $0.005 USDC per freshness check
• REST API
• MCP support
• x402 payments on Base mainnet
• Persistent watch IDs
• HTML, JSON, and text monitoring
• Noise filtering and deterministic diffs

Why Fresh402?

AI agents often need to answer a simple question:

Has this resource changed since the last time I looked at it?

Fetching, rendering, parsing, and sending an entire page through an LLM can cost much more than answering that question.

Fresh402 acts as a cheap first step:

1. Register a resource for free.
2. Receive a persistent watch_id.
3. Ask Fresh402 whether it changed.
4. Only perform expensive downstream work when necessary.

Live API

Production:

https://fresh402.kirilllabs.workers.dev

Health and service metadata:

GET /

Pricing

Operation	Price
Register baseline	Free
Freshness check	$0.005 USDC
Network	Base mainnet
Payment protocol	x402

Quick start

1. Register a baseline

Registration is free.

curl -X POST \
  https://fresh402.kirilllabs.workers.dev/v1/register \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com"}'

Example response:

{
  "watch_id": "w_0123456789abcdef0123456789abcdef",
  "url": "https://example.com",
  "created": true,
  "baseline_created": true,
  "content_kind": "html"
}

Registering the same resource again returns the existing baseline without refetching it.

That prevents the free registration endpoint from being used as a free repeated freshness check.

2. Check the resource

curl -X POST \
  https://fresh402.kirilllabs.workers.dev/v1/check \
  -H "Content-Type: application/json" \
  -d '{"watch_id":"w_0123456789abcdef0123456789abcdef","include_diff":true}'

Without payment, Fresh402 returns an x402 payment requirement.

The current price is $0.005 USDC on Base mainnet (eip155:8453).

An x402-compatible client can satisfy the payment requirement and retry the request automatically.

REST API

POST /v1/register

Create or retrieve a persistent baseline for free.

Example with HTML scoping:

{
  "url": "https://example.com/pricing",
  "selector": "#pricing",
  "ignore_selectors": [
    ".timestamp",
    ".advertisement"
  ]
}

For JSON resources:

{
  "url": "https://api.example.com/data",
  "ignore_json_paths": [
    "/generated_at",
    "/items/*/last_seen"
  ]
}

Wildcard * JSON Pointer segments are supported.

POST /v1/check

Paid freshness check.

{
  "watch_id": "w_0123456789abcdef0123456789abcdef",
  "max_age_seconds": 300,
  "include_diff": true
}

Supported inputs include:

• watch_id
• url
• previous_hash
• selector
• ignore_selectors
• ignore_json_paths
• max_age_seconds
• include_diff

max_age_seconds lets agents reuse sufficiently fresh shared Fresh402 state instead of forcing another upstream fetch.

GET /v1/history

Retrieve stored snapshot history using a watch_id or URL.

GET /v1/diff

Retrieve change information for a watched resource.

GET /v1/stats

Retrieve public service usage statistics.

MCP

Fresh402 exposes a Streamable HTTP MCP endpoint:

https://fresh402.kirilllabs.workers.dev/mcp

Available tools:

fresh402_register

Free.

Creates or retrieves a persistent baseline and returns a watch_id.

fresh402_check

Costs $0.005 USDC.

Checks whether a registered or caller-supplied resource changed.

The tool exposes x402 payment metadata so compatible agents can discover and pay for the operation programmatically.

Change detection

Fresh402 is designed to reduce false positives from irrelevant page noise.

HTML selector scoping

Monitor only part of a page:

{
  "url": "https://example.com/pricing",
  "selector": "#pricing"
}

HTML noise filtering

Remove volatile elements before fingerprinting:

{
  "ignore_selectors": [
    ".timestamp",
    ".visitor-counter",
    ".advertisement"
  ]
}

Canonical JSON

JSON is canonicalized before hashing, so object key ordering does not cause false changes.

JSON Pointer ignores

Known volatile JSON fields can be removed before fingerprinting.

{
  "ignore_json_paths": [
    "/generated_at",
    "/items/*/last_seen"
  ]
}

Conditional HTTP revalidation

Fresh402 can use upstream ETag and Last-Modified metadata when available.

Deterministic diff

When comparable previous content exists, include_diff: true can return a compact deterministic change summary.

Persistent watches

Fresh402 v1.1 introduced persistent agent watches.

A registered resource receives a stable identifier:

w_0123456789abcdef0123456789abcdef

Fresh402 stores watch state and bounded snapshot history in Cloudflare D1.

Repeated free registration does not refresh an existing watch. A paid check is required to fetch fresh upstream state.

Architecture

Fresh402 currently uses:

• Cloudflare Workers
• Cloudflare D1
• Coinbase / CDP x402 infrastructure
• Base mainnet
• USDC
• Model Context Protocol (MCP)
• TypeScript

The goal is to keep freshness checks cheap enough that agents can use Fresh402 before more expensive browsing, scraping, or reasoning work.

Security

Fresh402 validates outbound targets and includes protections intended to reduce SSRF risk.

Payment credentials and deployment secrets are supplied through runtime environment configuration and are not stored in this repository.

Resource limits

• New free registrations (REST and MCP combined) are limited to 10 attempts per target hostname and 60 attempts overall per 60 seconds, in each Cloudflare location. Paths, queries, ports and selector/ignore-rule variants share the hostname limit. Failed upstream attempts also consume quota. Existing watches are returned without a fetch or quota charge; paid checks do not use these limits.
• REST returns 429 registration_rate_limited with Retry-After: 60 when a limit is reached. Missing or unavailable rate limit bindings return 503 registration_unavailable for new registrations. MCP reports these through the existing tool-error path.
• Every incoming POST body is capped at 65,536 bytes before JSON parsing, payment handling, MCP dispatch or cloning (413 request_too_large). Reading an incoming body has a 10-second deadline (408 request_timeout).
• Upstream response bodies are streamed with a 5,000,000-byte limit (413 content_too_large), including when Content-Length is absent or misleading. A single 10-second deadline covers redirects, headers and body reading (504 upstream_timeout). Unused and rejected streams are cancelled.
• Concurrent creation of the same watch saves only one baseline and one initial snapshot. A losing free registration returns the stored baseline; overlapping initial requests can still perform separate upstream fetches, subject to the registration limits.

The two rate limit bindings and their thresholds are declared in wrangler.jsonc; keep their namespace IDs unique within the Cloudflare account. These Cloudflare limits are local to each location and eventually consistent. They mitigate bursts but are not a strict worldwide quota or a storage/billing cap. Legitimate users sharing a target hostname also share its allowance. The global_fetch_strictly_public compatibility flag remains enabled to protect against private addresses reached through DNS.

Local verification

Use Node.js 24, then run:

npm ci
npx tsc --noEmit
npx tsc --noEmit -p test/tsconfig.json
npm test -- --run

Tests use a local Workers runtime, isolated D1 data and mocked upstream requests. They do not require payment credentials or access production. GitHub Actions runs these same checks on pull requests and pushes to main; the workflow has no deployment step.

Current release

v1.1.1

Highlights:

• Persistent watch_id
• Free baseline registration
• Anti-free-refresh behavior
• HTML selector scoping
• HTML ignore selectors
• Canonical JSON monitoring
• Wildcard JSON Pointer ignore paths
• Shared freshness caching
• Caller-supplied previous_hash
• Deterministic inline diff
• ETag / Last-Modified revalidation
• Bounded snapshot retention
• REST and MCP support

Status

Fresh402 is live and usable today.

The project is still early and the API may evolve as real agent usage patterns become clearer.

Author

Built and maintained by Kirill Radchenko.

Issues, integrations, feedback, and AI-agent use cases are welcome.