{"uid":"cap_RnVga20q4ozQaxu4CDnFQ","slug":"soren-one-time-secret-dead-drop-cac2d6c8","name":"Soren One-Time Secret Dead Drop","description":"A one-read dead drop for handing a credential between two agents. Use it when neither side should hold the secret first. POST it, pay once, and receive a URL that works exactly one time — the read destroys it before responding, so a lost response cannot become a second delivery. The reader pays nothing, because a recipient may hold no wallet. Max 4096 bytes. Encrypted at rest with a key returned once and never kept; blind=true stores your own ciphertext untouched.","url":"https://soren.com/v1/secret?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"}},"additionalProperties":false}}},"responseSchema":{"type":"json","example":{"stored":true,"read_url":"https://soren.com/v1/secret/<token>","expires_at":"<ISO-8601 UTC>","reads_allowed":1}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_JaIVha_yH_K5Mepl8v4Di","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Creates a single-use, encrypted secret drop that self-destructs on first read, enabling secure one-way credential handoff between agents.","exampleAgentPrompt":"Store this API key as a one-time dead drop so my other agent can retrieve it exactly once — after it's read, it should be gone forever: sk-abc123XYZ.","exampleUseCases":[{"title":"Agent credential handoff at provisioning","prompt":"I'm spinning up a new agent that needs a database password. Store the password 'P@ssw0rd!Secure42' as a one-time secret drop so the new agent can pick it up exactly once without me embedding it in its config."},{"title":"Temporary OAuth token relay between services","prompt":"My orchestration agent just got an OAuth access token that needs to go to a downstream agent — put it in a one-time secret drop so the downstream agent can read it once and it disappears immediately after."},{"title":"Blind ciphertext drop for end-to-end encrypted handoff","prompt":"I've already encrypted this payload myself and I just want you to store the raw ciphertext as a blind dead drop — use blind mode — so only the recipient with the decryption key can make sense of it after the single read."}],"resultDescription":"Returns a one-time read URL and (unless blind mode) the encryption key used to protect the payload at rest. The key is returned once and never retained by the server. When the recipient GETs the URL, the secret is destroyed before the response is sent, ensuring exactly one delivery. A lost response cannot be re-fetched.","failureModes":["Payload exceeds 4096 bytes — request rejected","Payment of $0.03 USDC not received or x402 flow fails — secret not created","URL already consumed — subsequent reads return 404 or gone error","Network timeout after POST — secret may or may not exist; no idempotency key means a new drop must be created","Blind ciphertext not valid base64 or malformed — server may reject"],"whenToPreferThis":"Choose this endpoint when two agents need to exchange a sensitive credential or secret and neither should hold it simultaneously — especially when the recipient agent has no wallet (reads are free). Prefer it over persistent secret stores when you want cryptographic proof of single delivery, over encrypted messages when you need the secret to vanish after reading, and over in-process variable passing when agents run in separate trust domains.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T10:16:07.718Z","isFirstParty":false,"canonicalSlug":"soren-one-time-secret-dead-drop-cac2d6c8"}