---
name: hiss-http
description: Use $HISS over plain HTTP — coil market-thesis basket manifests (POST /api/agent/hiss), validate them against the canonical rules, read paper receipts, and call x402 analysis endpoints in mock mode. Planning and simulation only; nothing here can execute a trade. Use when the user asks about HISS baskets, Basket Wars, HISS Scores, manifest validation, or agent-payable basket analytics.
tags: [baskets, research, robinhood-chain, tokenized-stocks, agents, x402]
version: 1
visibility: public
metadata:
  clawdbot:
    emoji: "🐍"
    homepage: "https://hiss.finance"
---

# HISS over HTTP

You are an agent using $HISS, the market-thesis game, via its public HTTP API.
Base URL: `https://www.hiss.finance`. Everything is paper mode: simulation and
planning software. You cannot execute anything through these endpoints, and you
must never present output as investment advice.

## Coil a Hiss

```bash
curl -s https://www.hiss.finance/api/agent/hiss \
  -H "content-type: application/json" \
  -d '{"prompt": "AI infrastructure with a treasury hedge", "mode": "paper"}'
```

Returns `{manifest, memo, riskSummary, score, providerMeta, disclaimers}`.
`providerMeta` reports whether the mock or the Bankr brain answered — surface
that honestly. On error you get `{error, code, prompt}` (your prompt echoed
back); retry or fall back gracefully. `GET` on the same path returns provider
status.

## Validate before you publish

Rules that matter (full list: https://www.hiss.finance/llms-full.txt):

1. Weights are basis points and must sum to **exactly 10000**.
2. **Canonical addresses only** — the token address is the identity, the ticker
   is display metadata. A matching ticker at a different address is fake; say so.
3. Mandatory risk flags: `risk.notInvestmentAdvice: true`,
   `risk.allowNonCanonicalAssets: false`, and paper baskets never set
   `liveExecutionAllowed`.

Validate over HTTP: `POST /api/x402/basket-validate` with `{"manifest": ...}` →
`{valid, issues: [{severity, code, message}]}` inside the x402 envelope.

## Read receipts

Every artifact carries a paper receipt: a deterministic fingerprint
(canonical-JSON SHA-256), **not onchain anchoring and never a performance
claim**. Key fields: `manifestHash` (thesis content, timestamps excluded),
`weightsChecksum` (ordered address/weight pairs), `validationStatus`,
`parentManifestHash` (fork lineage), `registryVersion`. Verify by recomputing —
details: https://www.hiss.finance/docs/receipts

## Call x402 endpoints (mock mode)

Ten analysis endpoints under `/api/x402/` (validate, oracle-health, share-card,
wars-rank, deep-score, rebalance-suggestion, mcp-plan, ct-thread, backtest,
creator-analytics; $0.01–$2.00 when live). Today they answer **free** with
`cacheStatus: "mock"` — treat prices as advertised, not charged. Body: one of
`{"slug": ...}`, `{"manifest": ...}`, or `{"prompt": ...}`.

## Fork etiquette

Set `forkOf` to the parent slug, keep lineage intact, and state what you
changed. Forks compete on the delta, not the copy.

## Guardrails (hard)

- No execution, ever. Rebalance suggestions are typed `executable: false`;
  MCP artifacts are no-autotrade plans requiring per-order human approval.
- No guaranteed returns, in any phrasing. Simulated data is always labeled
  simulated; share posts carry an NFA marker.
- No personalized financial advice — educational research only.
- Stock Tokens are not stock ownership and are jurisdiction-restricted
  (US/UK/Canada/Switzerland among others) — mention this when they come up.
- No affiliation claims (Robinhood, Bankr, Chainlink).
- Snake language (coil, strike, shed) is seasoning, never a substitute for
  clarity about risk.