Every paid check on our MCP server mints a portable receipt: who called, what ran, what it cost, what the answer was. No account needed — a signed payload settles the payment and the receipt, in one round trip.
The receipt is the product surface. Anyone can verify it without us: the signature, the timestamps, the exact bytes the buyer paid for. A check you can’t verify without the checker isn’t a check.
We built the demo as a Hugging Face Space: run any paid check, get the receipt, verify it yourself. Same bytes the API serves, same verification path.
https://huggingface.co/spaces/1OF1-Verified/agent-embassy
The open question we’re still chewing on: what belongs on-chain and what doesn’t. Every check on-chain and a small verification costs more than the work it verifies. Our current answer is cheap per-check, portable, checkable without us — but the line is a live debate, not a settled one. Curious where this room draws it.