Sign in, verify with a card, issue a token, first request.

Issue a connection token in the account console and put it in the environment.

The catalog at /v1/models: red-team (dedicated route) and blue-team (shared route) models and what admits each.

stream: true is served as a one-chunk SSE; underneath, a job (submit, poll).

Native tool calling: send definitions, get tool_calls back. Execution stays on the agent.

The model reasons before it answers; reasoning tokens count inside max_tokens.

Guardrails on every request, the firewall by assurance rung, versions published at /secure/.

response_format is accepted and dropped. Ask for JSON in the prompt.

The OpenAI-compatible error shape and per-code handling.

The free 50 req/day allowance and tokens/day by assurance rung.

1 credit = $1; plans, balances, per-token micro-USD rating, settlement from receipts.

Reading billing / usage / chargedMicroUSD on a response, and how free vs paid is decided.

ZDR design: only minimal state is retained.

Bring-your-own provider keys are not offered (first-party inference).

The public catalog of the security-services suite at GET /v1/security/services — CTEM (component-shipped) and its four capabilities feeding the VM ledger.