# x402 Log Filter API

> Pay-per-call filter for JSON / NDJSON event logs. Send events plus one filter (field path, operator, optional time range and limit) and get back only the matching events with counts. Use it when an agent needs threshold hits, equality or substring matches, threshold crossings, or a time window out of a log or metrics list without loading it into context.

## Payment (x402 v2)
- Scheme: exact. Network: eip155:8453. Asset: USDC (0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913). payTo: 0x509E55c4F898B43C856Fb0E51048B1b7bFBC9eDE
- Price: $0.005 USDC per POST /filter call. POST /filter without payment answers 402 with a PAYMENT-REQUIRED header (decoded JSON is mirrored in the body); retry with the payment header.

## Paid route
- POST https://logfilter.hectichustle.workers.dev/filter ($0.005): body {"events": [ ... ] or "<ndjson string>", "filter": {"field": "metrics.cpu", "op": "gt", "value": 90, "direction"?: "up|down|both", "timeField"?: "timestamp", "from"?: ISO-8601|epoch, "to"?: ISO-8601|epoch, "limit"?: n}}. Also accepts a bare JSON array or an NDJSON body (content-type application/x-ndjson) with ?filter=<url-encoded JSON>. Max body 10 MB.
- Operators: gt, gte, lt, lte, eq, ne, contains, crosses_threshold. crosses_threshold returns the events where the value crosses "value" relative to the previous event (direction defaults to both).
- Response: {"events": [matching events, original order], "counts": {"input", "inTimeRange", "matched", "returned", "truncated"}}

## Free routes
- POST https://logfilter.hectichustle.workers.dev/demo: same as /filter, up to 100 events / 64 KB, no payment.
- GET https://logfilter.hectichustle.workers.dev/ (JSON docs + pricing), https://logfilter.hectichustle.workers.dev/openapi.json, https://logfilter.hectichustle.workers.dev/.well-known/x402, https://logfilter.hectichustle.workers.dev/sitemap.xml

## Quick start
curl -s -X POST https://logfilter.hectichustle.workers.dev/demo -H 'content-type: application/json' -d '{"events":[{"timestamp":"2026-01-01T00:00:00Z","cpu":40},{"timestamp":"2026-01-01T00:01:00Z","cpu":95}],"filter":{"field":"cpu","op":"crosses_threshold","value":90,"direction":"up"}}'

## Same team
- Paycheck (https://paycheck.hectichustle.workers.dev/llms.txt): verify a Base USDC payment by tx hash, address-poisoning checks, and the x402 Trust Index.
- Contact: hectichustle@mail.grokbot.com