
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@asterpay/agent-ready
Advanced tools
Make any API AI-agent discoverable — robots.txt, llms.txt, agent.json, MCP endpoint, scanner filter, CORS in one Fastify plugin
Make any API AI-agent discoverable in one line.
Add robots.txt, llms.txt, /.well-known/agent.json, MCP endpoint, scanner bot filter, and CORS presets so AI agents (Claude, GPT, Cursor, A2A) can find and use your API.
npm install @asterpay/agent-ready fastify
import Fastify from 'fastify';
import { agentReady } from '@asterpay/agent-ready';
const fastify = Fastify();
await fastify.register(agentReady, {
name: 'My API',
description: 'Description for AI agents',
baseUrl: 'https://api.example.com',
endpoints: [
{ path: '/health', method: 'GET', description: 'Health check', free: true },
{ path: '/data', method: 'GET', description: 'Get data', price: 0.01 },
],
});
// Your API routes...
await fastify.listen({ port: 3000 });
Your API now serves:
/robots.txt — AI crawler–friendly rules/llms.txt — LLM-readable API overview/.well-known/agent.json — A2A agent card/.well-known/mcp/server-card.json — MCP registry metadata/mcp — MCP JSON-RPC 2.0 endpoint/health — Health checkFor APIs that agents call from other origins (e.g. Cursor, Claude Desktop), register CORS and Helmet with the provided presets:
npm install @fastify/cors @fastify/helmet
import cors from '@fastify/cors';
import helmet from '@fastify/helmet';
import { agentReady, getCorsPreset, getHelmetPreset } from '@asterpay/agent-ready';
await fastify.register(cors, getCorsPreset());
await fastify.register(helmet, getHelmetPreset());
await fastify.register(agentReady, { ... });
| Option | Type | Required | Description |
|---|---|---|---|
name | string | Yes | API name (e.g. for agent card) |
description | string | Yes | One-line description for agents |
baseUrl | string | Yes | Full base URL of your API |
endpoints | array | Yes | List of endpoints (path, method, description, free/price) |
provider | object | No | { name, url?, email? } |
version | string | No | API version |
documentationUrl | string | No | Link to docs |
protocols | string[] | No | e.g. ['x402', 'A2A'] |
features | object | No | Toggle routes: robotsTxt, llmsTxt, agentJson, mcpEndpoint, mcpServerCard, scannerFilter, corsPreset, healthCheck (all default true) |
asterpay | object | No | { kya?, x402?, settlement?, apiKey? } for future AsterPay integration |
scannerFilter | object | No | { additionalUAs?, additionalPaths?, onScannerDetected? } to treat requests as scanner bots and e.g. skip logging |
Each endpoints[] item: path, method ('GET'|'POST'|'PUT'|'DELETE'|'PATCH'), description, free?, price? (USD), params? (object with type, required?, description? per param).
The plugin sets request.isScanner when the request looks like a security scanner (e.g. LeakIX, Shodan). You can use it to skip noisy logging or notifications:
fastify.addHook('preHandler', async (request, reply) => {
if ((request as any).isScanner) {
// optional: skip logging or Telegram alerts
}
});
Or pass a callback:
await fastify.register(agentReady, {
...config,
scannerFilter: {
onScannerDetected(ua, path) {
console.warn('Scanner hit', path, ua);
},
},
});
Enable x402 payments and KYA trust scoring (integration in a future release):
await fastify.register(agentReady, {
name: 'My API',
description: '...',
baseUrl: 'https://api.example.com',
endpoints: [...],
asterpay: {
kya: true,
x402: true,
settlement: 'EUR',
},
});
See examples/weather-api for a minimal Fastify API that uses @asterpay/agent-ready and exposes a fake weather endpoint.
cd examples/weather-api && npm install && npm start
# then: curl http://localhost:3000/llms.txt
# and: curl http://localhost:3000/.well-known/agent.json
MIT
FAQs
Make any API AI-agent discoverable in one line. Generates robots.txt, llms.txt, agent.json, MCP endpoint, scanner filter, and CORS presets.
The npm package @asterpay/agent-ready receives a total of 8 weekly downloads. As such, @asterpay/agent-ready popularity was classified as not popular.
We found that @asterpay/agent-ready demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.