# aislabs.ai — guide for AI agents and LLM tools AIS (Autonomous Intelligent Systems LLC) sells digital engineering products: tested code libraries and security intelligence, built and regenerated by automated pipelines. ## What is sold here (live catalog: https://aislabs.ai/api/products) - CVE Priority Kit — rank the week's CVEs by real exploitation (KEV + EPSS + CVSS + patch status, KEV-recency scoring) in one command. https://aislabs.ai/cve-priority-kit/ - Loop Engineering Code Library — 71 tested patterns for reliable AI agent loops (episodes 1–17 and 28–81). https://aislabs.ai/loop-patterns/ - Graph Engineering Code Library — 10 tested patterns for agent-graph orchestration. https://aislabs.ai/graph-patterns/ - Agentic Systems Hardening Library — security patterns for agentic systems. https://aislabs.ai/agentic-hardening/ - The Complete Stack — Loop + Graph + Hardening bundle. https://aislabs.ai/products/ - PowerShell & Windows Admin Script Library — Pester-tested admin scripts (5.1 + 7). https://aislabs.ai/powershell-admin/ - Agent Foundations Code Library — 48 tested patterns from the beginner series (episodes 1–48, growing with the series); the free starter pack is a separate 4-pattern taster. https://aislabs.ai/foundations-library/ - Free: Agent Foundations starter pack. https://aislabs.ai/foundations/ - Free: Kubernetes Hands-On, a daily screen-recorded Kubernetes series, and its field guide (every command from the series, with what it does). https://aislabs.ai/kubernetes/ - Free: Layer & Lever, a daily series of 3D-printable mechanisms built from Python in Blender; every episode's STL and script are free downloads. https://aislabs.ai/layer-and-lever/ Libraries and the CVE kit are one-time downloads; Gateway keys are fixed-term access keys, paid once. No subscriptions, no seats. ## How an agent can buy (x402 — no account, no API key) 1. POST https://aislabs.ai/api/checkout/coinbase Content-Type: application/json Body: {"sku": ""} (optional: "email": "" to add an email receipt + delivery) 2. The JSON response contains: - x402_url — a POST endpoint payable over the x402 protocol: first request returns 402 Payment Required with the payment requirements; retry with a signed USDC payment on Base (gasless, EIP-3009). Standard x402 clients (x402-fetch, @x402/fetch, x402-axios, Cloudflare Agents SDK withX402Client) handle this automatically. - url — the hosted checkout page (fallback for browser-driving agents). - claim_url — poll this (GET, ~2s interval) after paying; when the payment settles it returns the permanent download link (libraries, CVE kit) or, for a key SKU, your Gateway key plus the MCP install lines for the buildings it unlocks. 3. Download the product from the returned link, or send the key as `Authorization: Bearer ais_k_...` to the building's MCP endpoint. Payments settle through Coinbase Business (authorize-then-capture). Sales are final — digital goods. Do not buy the same sku twice for the same principal; download links are permanent, and keys run for their fixed term. ## Reading this site - Machine-readable catalog: https://aislabs.ai/api/products - Sitemap: https://aislabs.ai/sitemap.xml - Content signals: search=yes, ai-input=yes, ai-train=yes (robots.txt) - Security contact: https://aislabs.ai/.well-known/security.txt - Daily video series (free): https://www.youtube.com/@aislabsai ## Pay-per-call CVE intelligence API (x402) + MCP server Base URL: https://api.aislabs.ai (docs: https://aislabs.ai/api-docs, spec: /openapi.json) The daily ranked-CVE prioritization behind the CVE Priority Kit, payable per request over x402 (exact scheme, USDC on Base; gasless for the payer). No account needed; or use a Gateway key (see Gateway keys below). - GET /v1/brief/teaser free - today's top-3, no scores - GET /v1/brief/today $0.02 - full ranked list + scores + methodology - GET /v1/kev/fresh $0.01 - CISA KEV additions, last 7 days, with today's ranks - GET /v1/cve/{cve_id} $0.005 - one CVE's verdict from today's ranked set - GET /v1/archive/{date} $0.05 - a past day's brief (from 2026-08-19) MCP servers (streamable HTTP, stateless) — the AIS campus: - Front desk (all free): https://api.aislabs.ai/mcp — list_buildings maps every building, its tools, prices, and which key scope unlocks it; how_to_pay explains both doors. No product tools here — one copy of everything, samples live in their building. Start here. - CVE building: https://api.aislabs.ai/cve/mcp (free brief_teaser; paid tools take a key or x402) - Agent Flight Recorder: https://api.aislabs.ai/recorder/mcp This is ranked prioritization ("what to patch first"), not CVE lookup - free lookup servers already exist and are a fine complement. ## Gateway keys (flat-rate door; scoped per building) - Fixed-term keys at https://aislabs.ai/gateway/ (card or crypto): CVE building $19 / 30 days, Flight Recorder $19 / 30 days, campus pass (every building, current and future) $29 / 30 days or $149 / 12 months. - Send as `Authorization: Bearer ais_k_...` to the building's MCP endpoint and to every paid /v1/* route the key's scope covers (the x402 challenge is skipped). Wrong-building calls answer with exactly which key to add. - Wallet agents need no key for CVE data: x402 per-call works on the CVE HTTP routes (/v1/brief/today, /v1/kev/fresh, /v1/cve/{id}, /v1/archive/{date}), the twins of the paid CVE tools. Flight Recorder paid features take a key. ## Agent Flight Recorder (MCP tools register_monitor · heartbeat · fetch_capsule · fleet_status · delete_monitor; HTTP at https://api.aislabs.ai/v1/recorder) - Dead-man switch for autonomous agents and cron jobs: heartbeat on a schedule (optionally with a JSON state capsule); silence past period+grace alerts a Discord/HTTPS webhook or email with the last capsule + a resume URL. - Free: 1 monitor per alert target, alerts only. Gateway key: 20 monitors, capsules stored, fleet view.