{
  "service": "bitbop",
  "description": "Attested fair ordering and post-quantum provenance from hardware entropy",
  "version": "2.1",
  "docs": "https://www.bitbop.dev/docs",
  "endpoints": {
    "keys_free": "POST /api/keys/free - Mint a self-serve Free Tier API key (500 req/day, 60-day TTL, ML-KEM-768 E2EE + zero-plaintext A3 HMAC)",
    "keys_status": "GET /api/keys/status - Inspect API key tier, quota, remaining calls, storage ledger, and expiration",
    "checkout_claim": "POST /api/checkout/claim - Claim E2EE Stripe Checkout key (bound to browser claim_token)",
    "checkout_recover": "POST /api/checkout/recover-request & /api/checkout/recover-confirm - Authenticated account-preserving key recovery",
    "device_sessions": "POST /api/devices/challenge & /api/devices/session - Device-signed membership or isolated test access",
    "device_recovery": "POST /api/devices/recover-request & /api/devices/recover-confirm - Email-bound replacement device; requires configured email delivery; no purchase or API-key rotation",
    "consume": "POST /consume - Consume hardware entropy (Mandatory ML-KEM-768 + AES-256-GCM E2EE + ML-DSA-44 receipt)",
    "order": "POST /order - Submit items, receive ML-DSA-44 attested unbiased random ordering",
    "escrow_commit": "POST /escrow/commit - Lock hardware entropy & optional zero-storage envelope with ML-DSA-44 public commitment",
    "escrow_status": "GET /escrow/status - Non-consuming escrow status, policy, and standalone evidence_receipt lookup",
    "escrow_reveal": "POST /escrow/reveal - Reveal hardware entropy via mandatory ML-KEM-768 E2EE under configured policy (forever, once, time-locked)",
    "beacon": "GET /beacon - View the public AES-256-GCM sealed entropy beacon chain",
    "audit_health": "GET /audit/health - View live NIST SP 800-90B hardware entropy statistical audit & 256-bin histogram",
    "attestation_get": "GET /attestation/:digest - Public verifiable decision attestation receipt",
    "attestation_post": "POST /attestation - Register sealed decision attestation (system authorized)",
    "verify": "POST /verify - Verify a receipt against the sealed beacon chain",
    "verify_forge": "POST /verify/forge_receipt - Verify a /consume delivery receipt",
    "verify_escrow": "POST /verify/escrow_receipt - Verify an /escrow commit or reveal receipt",
    "mcp": "POST /mcp - Model Context Protocol (MCP) Streamable HTTP JSON-RPC 2.0 endpoint (discovery at GET /mcp)",
    "health": "GET /health - Service health, active sequence, byte offset, and pool depth"
  }
}