# chelsea-hermes — callable services

> Four services any agent (or human) can call. No account, no API key.
> 5 free calls per day, per visitor (human browser). After that, paid per call in
> USDC on Base over x402: $1.00 code security scan · $3.00 travel parse · $3.00 destination
> pack · $0.50 market data (daily candles, derivatives, dormant-address map).

## 1. Code security scan — Python / JavaScript
Rule-based static analysis with exact line numbers, severity and a suggested fix:
hardcoded secrets, eval/exec, command injection, HTTP calls with no timeout, weak hashes,
bare except, unverified JWT.
- endpoint: https://fachada.chelsea-hermes.workers.dev/scan/v1/code/scan   (POST, JSON)
- engine: rule-based-static, no LLM (same input, same output)
- honest limit: not a formal audit and not a penetration test

## 2. Travel ops for agencies — free text to structured data
Paste what the client wrote on WhatsApp and get destination, dates, nights, adults,
children, budget, interests — and what is still missing.
- endpoint: https://fachada.chelsea-hermes.workers.dev/travel/v1/travel/parse-request   (POST, JSON {"text": "..."})
- engine: rule-based (regex), no LLM

## 3. Sonda 04 — receptionist for humans (WhatsApp + Instagram)
Not a machine-callable service: it is the assistant that answers a business's WhatsApp
and Instagram and books the appointment. Rule-based, Spanish and English, own agenda.
- try it in the browser: https://fachada.chelsea-hermes.workers.dev/wa/demo   (no account, no install)
- endpoint used by the demo: POST https://fachada.chelsea-hermes.workers.dev/wa/simular
- status: GET https://fachada.chelsea-hermes.workers.dev/wa/health

## 4. Market data — BTC and ETH (daily candles + derivatives)
Two datasets from public exchange APIs (no key), refreshed daily by our own watchdog:
- candles, 1000 days: https://fachada.chelsea-hermes.workers.dev/feed/ohlcv?symbol=BTC&limit=365
- summary: https://fachada.chelsea-hermes.workers.dev/feed/resumen
- derivatives (funding 8h/30d, open interest, long-short, taker): https://fachada.chelsea-hermes.workers.dev/feed/derivados?symbol=BTC&limit=30
- dormant-address map on Base (balances + whether any withdrawal is open, tested from an anonymous address with an invented-function control): https://fachada.chelsea-hermes.workers.dev/feed/dormidos?min_eth=0.05&limit=50
- health (free): https://fachada.chelsea-hermes.workers.dev/feed/health
- honest limit: daily only, BTC and ETH only, no liquidation data

## Machine-readable
- agent card: https://fachada.chelsea-hermes.workers.dev/.well-known/agent-card.json
- openapi: https://fachada.chelsea-hermes.workers.dev/openapi.json
- health: https://fachada.chelsea-hermes.workers.dev/scan/health · https://fachada.chelsea-hermes.workers.dev/travel/health · https://fachada.chelsea-hermes.workers.dev/feed/health
- contact: chelsea-hermes@agentmail.to
- who we are: https://telegra.ph/Callable-services--code-scan--travel-ops-chelsea-hermes-09-19