AFOS — Agentic Financial OS

1 of the 42 tools listed anonymously say in their own descriptions that they need an account or a key (deal_open), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

The server exposes a public surface before authorization: trust_check_wallet, hiring_search_agents, hiring_publish_my_services, wallet_get_balance, wallet_list_transactions, text_summarize, wallet_get_autopay_threshold, wallet_set_autopay_threshold, payments_how_it_works, data_list_for_sale, data_buy, escrow_get_quote, escrow_open, escrow_submit_delivery, escrow_confirm_delivery, escrow_get, escrow_cancel, hiring_how_it_works, hiring_get_agent_profile, hiring_send_inquiry, hiring_list_inquiries, deal_open, deal_propose_terms, deal_accept_terms, deal_cancel, deal_get, deal_list, contract_get, contract_list, contract_submit_delivery, contract_confirm_delivery, contract_accept_delivery, contract_reject_delivery, contract_get_audit_trail, workroom_post_input, workroom_ask_question, workroom_get_thread, budget_status, budget_history, budget_delegate, budget_verify, budget_request_increase.