Receipts.
A receipt is a signed record of one crossing: a call to a model, a page fetched, a record kept, a month closed. The session receipt stays with the seat. The other crossings are priced on the card.
A hit, a miss, a fetch, a call out, a custody note, and the month are priced. The session is not. The clock leaf is the hour the receipt was placed in. That hour is published, and its Merkle root is anchored to Bitcoin through OpenTimestamps.
Anyone can check a receipt without an account. Paste it into Verify, or check the signature against the published key.
What a receipt can prove.
One row per kind. The kind says what the receipt proves.
| Kind | What it proves |
|---|---|
| Sessionsession | A tagged run closed into one checkable object, pulled with GET /v1/sessions/{id}, with the id itself never inside. Inspecting it does not bill. |
| Cache HITcache_hit | Proof of an exact replay served by the pipe: the model, the tokens not bought again, the pipe cost, the serving plane, and the request digest. |
| Cache MISScache_miss | Proof of the fill that followed: zero tokens replayed, the miss rate as pipe cost, the same request digest a later hit will share. |
| Web fetchweb_fetch | A governed, ledgered crossing per URL. Robots, PII and SSRF checks run before anything reaches the model. No fetch-kind JWS exists. |
| API callapi_call | Proof of one completed third-party GET through the pipe, 200 or 500. The request digest covers service, path and query, never the raw path. |
| Custodycustody | A signed, chained note that this system retained, accessed, amended, or deleted something. Digests only; deletion is a tombstone. |
| Statementstatement | The UTC month, closed for the whole org: totals, pipe rent and an explicitly estimated-avoided figure. The blob you keep after the hot copy ages out. |
How it is signed.
Ed25519 is the signature on every live receipt, and anyone can check it against the published key.
| Signature | Status | What that means |
|---|---|---|
| Ed25519 | Live | The signature on every receipt today. It checks against the published key. The name has to match, and the signature has to be intact. |
| A shared secret | Out | A stranger could not check it, so it is not a receipt. |
Live receipt
A current receipt, loaded from the public API.
This receipt is live. It is fetched in your browser from the public endpoint, with no account and no key.
- Name
- Metrecept showcase
- Token
- sQ-OjUXFSS78cxb9
- Created
- 22 October 2026
- Period
- all-time
- Requests
- 17
- Cache-hit tokens
- 95
- Cache-hit ratio
- 40.6%
- Estimate only
- Yes
Directory + kid
The public forever-link is the directory and the kid. Session, statement and custody stay seated.
https://api.metrecept.co.uk/.well-known/http-message-signatures-directory