# ProofDesk Launch Audit API

> Deterministic source-level launch QA and declared metadata extraction for HTTPS pages on a temporary managed-host allowlist. No account or API key. Pay per request through x402 v2.

## Canonical resources

- Public API: https://proofdesk-audit-api.konstanta-work-x.chatgpt.site
- Source and assisted orders: https://github.com/SpaleRuby/proofdesk-audit-api
- OpenAPI 3.1: https://proofdesk-audit-api.konstanta-work-x.chatgpt.site/openapi.json
- Free example response: https://proofdesk-audit-api.konstanta-work-x.chatgpt.site/api/example
- Health: https://proofdesk-audit-api.konstanta-work-x.chatgpt.site/api/health

## Paid endpoints

### Full launch audit — $0.04 USDC

POST https://proofdesk-audit-api.konstanta-work-x.chatgpt.site/api/audit
Content-Type: application/json
Body: {"url":"https://example.com"}

An unpaid request returns HTTP 402 and a PAYMENT-REQUIRED header. Payment options are $0.04 USDC on Base mainnet or Solana mainnet. The response is JSON with a score, pass/warn/fail counts, evidence, prioritized fixes, and a bounded same-host link sample. The report checks technical SEO and launch-readiness signals including title and description metadata, canonical and social tags, meta robots directives, page structure, and links.

### Declared metadata extraction — $0.01 USDC

POST https://proofdesk-audit-api.konstanta-work-x.chatgpt.site/api/metadata
Content-Type: application/json
Body: {"url":"https://example.com"}

The metadata endpoint returns the title, description, canonical, language, viewport, meta robots, favicon, Open Graph, and Twitter Card values declared in the fetched HTML source. Missing declarations are returned as null and listed in missingFields. It does not render JavaScript, fetch linked assets, probe links, or emulate a social platform preview.

## Scope

For temporary network-safety containment, the URL hostname must be one of these provider-owned managed-hosting domains or a subdomain:

github.io, pages.dev, vercel.app, netlify.app, webflow.io, framer.website, onrender.com, railway.app, surge.sh, firebaseapp.com, web.app, readthedocs.io, gitbook.io, wordpress.com, myshopify.com, wixsite.com, carrd.co, typedream.app, trycloudflare.com, chatgpt.site, example.com

Arbitrary custom domains are rejected before fetching. Every redirect is checked against the same allowlist, and only standard HTTPS port 443 is accepted. ProofDesk performs automated source-level launch heuristics. It is not penetration testing, legal advice, or a complete WCAG accessibility certification.

## Assisted service

A fixed-price $10 assisted audit adds evidence verification, a prioritized top-five action plan, concrete copy or markup suggestions, and one clarification. It is transparently AI-assisted. Open the structured request form in the source repository and wait for scope confirmation before paying.

## Hosting

The canonical API is published on a stable production hostname. Discover routes and schemas from the OpenAPI document above rather than caching an alternate origin.