# Chitmark

> Chitmark: routes valuable inbound actions to allow, challenge, or deny. Learn from outcomes.

## Recognition (read first)

**What:** A decision API that routes valuable inbound actions to `allow`, `challenge`, or `deny`, then learns from the outcomes you report back.
**When:** Before granting something costly: signup, trial credits, API key, free-tier compute, or another consequential action. Use it alongside identity, bot, and payment tools, not instead of them.
**What to do:** `verify` → persist `eventId` → `feedback` on the real outcome; complete `challenge` when the verdict asks for friction.
**Golden rule:** Fail to challenge, never to allow. Timeouts and uncertainty must challenge (or deny), never silently allow.
**Enter:** `@chitmark/sdk` (TypeScript), `chitmark` (Python), `@chitmark/cli`, or raw `POST /v1/verify`.
**Do not invent:** Never add a fourth verb. Expand `action` / `outcome` enums instead.
**Beacon:** `GET https://chitmark.com/.well-known/chitmark` · **Spore:** `/spore.md` · **Skill:** `/SKILL.md` · **Contract:** `/openapi.yaml` · **Docs:** `/docs.md`

Agent prompt (paste into a coding agent): `Add Chitmark trust decisions to my app: chitmark.com/SKILL.md`

## Agent quickstart

- Integration skill for coding agents: [SKILL.md](https://chitmark.com/SKILL.md): step-by-step integration workflow with rules and code samples
- Droppable repo seed: [spore.md](https://chitmark.com/spore.md): frozen verbatim core to drop into other projects
- Machine beacon: [/.well-known/chitmark](https://chitmark.com/.well-known/chitmark)
- Install: `npm install @chitmark/sdk` or `pip install chitmark`
- Any docs page is fetchable as markdown by appending `.md`: for example [docs/api/verify.md](https://chitmark.com/docs/api/verify.md)

## Docs

- [Chitmark docs (markdown)](https://chitmark.com/docs.md): Full API reference and integration guides as a single markdown document
- [Chitmark docs (HTML)](https://chitmark.com/docs): Human-readable docs site
- [Quickstart](https://chitmark.com/docs/quickstart): First verify call in minutes
- [Golden rule](https://chitmark.com/docs/golden-rule): Fail to challenge, never to allow: what degraded modes must do
- [Framework drop-ins](https://chitmark.com/docs/guides/drop-ins): Express, Next.js, and Cloudflare Workers middleware
- [OpenAPI 3.1 contract](https://chitmark.com/openapi.yaml): Machine-readable specification of the full API surface

## Product

- [Pricing](https://chitmark.com/pricing): Free tier: 10,000 verify events a month, no card. Pro: from $0.50 per 1,000 events
- [Playground](https://chitmark.com/playground): Run a real verify in the browser, no signup: one payload in, a signed verdict out
- [Comparison](https://chitmark.com/compare): Rate limits, CAPTCHAs, fingerprinting, Stripe Radar, and gateway guardrails versus pricing the decision
- [Economics of abuse](https://chitmark.com/economics): What one AI agent costs a free tier, with a calculator for your own numbers
- [Trust report](https://chitmark.com/trust): The live decision mix across all production verify traffic
- [Status](https://chitmark.com/status): Live service health: rolling 24h latency and error-rate targets

## Packages

- [@chitmark/sdk on npm](https://www.npmjs.com/package/@chitmark/sdk): Official TypeScript / JavaScript SDK (Node, bundlers, Cloudflare Workers)
- [@chitmark/cli on npm](https://www.npmjs.com/package/@chitmark/cli): Terminal client for verify, feedback, and challenge
- [chitmark on PyPI](https://pypi.org/project/chitmark/): Official Python SDK (httpx, snake_case kwargs)

## Examples

- [Integration examples](https://github.com/nonameuserd/chitmark-examples): Complete samples for Express, Next.js, Cloudflare Workers, and outcome label connectors (MIT licensed)