# OnlyBots — Game Keys API for AI Agents

> Agent-native REST API for buying video game keys. USDC or credit card payments. Instant delivery. No registration.

## MCP (Model Context Protocol)
- MCP Server: https://mcp.onlybots.it/mcp
- Transport: Streamable HTTP
- Tools: search_games, get_game_details, browse_filters, get_price_quote, confirm_purchase, check_order, request_refund
- Connect from Claude Desktop, ChatGPT, Cursor, Windsurf — zero config, just add the URL.

## REST API Documentation
- OpenAPI 3.1 Spec: https://api.onlybots.it/openapi.json
- Markdown Docs: https://api.onlybots.it/docs/markdown
- Interactive Docs (Swagger UI): https://api.onlybots.it/docs
- Agent Discovery Manifest: https://api.onlybots.it/.well-known/agent.json
- Health & Trust Stats: https://api.onlybots.it/health

## Quick Start (REST)
1. GET /games?q=battlefield&platform=Steam — browse catalog
2. POST /purchase {"game_id": "..."} — get payment details (HTTP 402)
3. Send USDC on Base chain OR use card_payment_url for card/PayPal/Apple Pay
4. POST /purchase {"game_id": "...", "tx_hash": "0x..."} — receive game key instantly

## Quick Start (MCP)
1. Add MCP URL to your AI agent: https://mcp.onlybots.it/mcp
2. search_games({ query: "Battlefield" }) — find games
3. get_price_quote({ game_id: "..." }) — lock price, get payment details
4. confirm_purchase({ game_id: "...", tx_hash: "0x..." }) — pay and get key

## Payment Methods
- USDC on Base chain (instant, onchain verification via ERC-20 Transfer logs)
- Credit card, debit card, PayPal, Apple Pay via Coinbase Onramp (5-15 min delivery)

## Security
- quote_id (from 402 response) required with tx_hash — acts as purchase session token, prevents front-running
- Sender wallet extracted from onchain Transfer event and permanently bound to order
- Only the originating wallet can retrieve the key (GET /orders) or request a refund (POST /refund)
- tx_hash unique constraint in database prevents double-spend

## Refund Policy
- not_delivered: instant auto-refund
- key_invalid, key_already_redeemed, wrong_product: verified within 24 hours
- 7-day dispute window on every purchase
- Endpoint: POST /refund

## Operator
Botsignals LLC
1007 N Orange St. 4th Floor 2476, Wilmington, DE 19801, USA
info@onlybots.it