Reference
The one rule, the trade, execution presets, and the tracker API surface — moved here from the main page (2026-10-17/18). The protocol spec lives in the repository under protocol/msp-v1.md.
The one rule
Host to consume — or stake a cloud key. A peer earns swarm access by verifiably hosting the models it uses, or by serving a cloud model through its own provider key (DeepSeek or OpenRouter — joining with just a key lands in the next app release). Contribution is checked, not paid for: no credits, no payments, and prompts and completions never touch this site.
The trade
One to one, token for token. You may pull from the swarm up to what your own hardware and model can serve — a capacity measured when you prove hosting, not a debt earned from others using you. Whether or not anyone is pulling from your model right now never matters: your pull budget is your verified serving capacity, refilled continuously. The rule ships in watch mode first — budgets are measured and shown before they bind.
Presets
| Preset | What runs | Correctness |
|---|---|---|
| FAST | single host | lossless — the baseline |
| BALANCED | single + hedged (≤3 raced peers) | lossless |
| DEEP | best-of-n + deliberation roles | approximate — never lossless |
| VERIFIED | BALANCED + audited chain | carries audit proofs |
| MAXIMUM | sanctioned composition of gated modes | union of component labels |
Swarm modes engage only when measured to beat the fastest eligible single host — otherwise automatic fallback. Accuracy benefits (better answers, even when slower) and mixed-model work stay behind their own correctness gates.
Tracker API (v1)
| GET /api/v1/health | liveness + protocol version |
| GET /api/v1/catalog | signed catalog envelope (schema v2) |
| GET /api/v1/catalog/{profile_id} | single-profile envelope |
| POST /api/v1/auth/device/start | device enrollment start |
| POST /api/v1/auth/device/complete | session issuance (403 pending until approved) |
| POST /api/v1/admin/devices/approve | device approval by pairing code (admin, /verify page) |
| POST /api/v1/peers/register | lease issuance (60–90 s TTL) |
| POST /api/v1/peers/heartbeat | lease extension + revocation notices |
| POST /api/v1/peers/drain | exclude peer from lookups |
| POST /api/v1/peers/challenge/start | hosting challenge |
| POST /api/v1/peers/challenge/complete | record timings, mark passed |
| POST /api/v1/peers/lease | eligibility lease issuance (ADR-012); response carries the swarm balance view (ADR-041) |
| GET /api/v1/peers?profile_id=… | peer lookup, limit ≤ 50 |
| POST /api/v1/rendezvous/offer | signaling relay |
| POST /api/v1/rendezvous/answer | signaling relay |
| GET /api/v1/rendezvous/pending | mailbox drain (delete-on-read) |
| POST /api/v1/events/job-result | receipt digest + outcome + the counter-signed receipt (ADR-030) |
| POST /api/v1/receipt | canonical receipt intake |
| POST /api/v1/session-authorize | cooperative session metadata |
| POST /api/v1/audit | audit-epoch sweep (admin) |
| POST /api/v1/admin/catalog/candidates | candidate insert (admin) |
| POST /api/v1/admin/catalog/promote | candidate → active (admin) |