@m2msentinel/sdk

M2M Sentinel SDKs

Production API Base URL: https://api.m2msentinel.com (with fallback https://m2msentinel.com).

M2M Sentinel reports selected static EVM bytecode capabilities, common proxy structures, evidence quality, and sourced Base market observations. Factual static capability observation — not a formal reachability audit, safety guarantee, or transaction advice. Transaction middleware therefore requires a caller-defined policy and has no built-in allow threshold.

Installation

JavaScript / TypeScript (npm)

npm install m2m-sentinel-sdk@1.1.1

Python (PyPI)

pip install m2m-sentinel==1.1.0

MCP Server (Model Context Protocol)

npx -y m2m-sentinel-sdk
# or
npx -y m2m-sentinel-mcp

Authentication and x402

Send API keys only in x-api-key (or Authorization: Bearer). Query-string credentials are rejected with HTTP 401. Payable routes also support x402 v2 on Base USDC. An unpaid call returns a base64 PAYMENT-REQUIRED challenge when the facilitator is ready; a successful settlement returns PAYMENT-RESPONSE.

Public Routes

• GET /v1/status
• GET /v1/stats (public privacy envelope; exact aggregate commercial counters are operator-only)
• GET /v1/plans
• GET /v1/demo/audit/:address for the published sample allowlist
• GET /v1/audit/:address (requires API key or x402 payment)

The JavaScript, TypeScript, and Python clients expose multi-period purchase/renewal and wallet recovery without requiring callers to hand-build requests:

await client.createSubscriptionIntent('GROWTH', wallet, {
  durationDays: 90,
  renewExistingKey: true,
  apiKey: existingPaidKey
});
const challenge = await client.createRecoveryChallenge(wallet, { txHash });
await client.claimRecoveredKey(challenge.intent.id, walletSignature);

getPublicStats() returns the counter-free privacy envelope. Operator-only detail has a deliberately separate getOperatorAggregateStats(days, token) method and sends the operator token only as Authorization: Bearer. This is for private server/operator tooling only: never embed or bundle the operator token in browser, mobile, SDK-distribution, or customer code.

Disclaimer & Limitations

M2M Sentinel extracts static EVM opcode capabilities and EIP-1967/UUPS proxy implementation slots on Base Mainnet. Factual static capability observation — not a formal reachability audit, safety guarantee, or transaction advice.