# Agent quickstart

Give this page (or `https://dev.cofferline.com/llms.txt`) to your agent.

Everything below is live today. Base URL: `https://api.dev.cofferline.com/v1`.

1. **Discover.** `GET https://dev.cofferline.com/.well-known/cofferline.json` — capabilities, pricing, auth, ToS (hash-referenced).
2. **Evaluate.** `POST https://api.dev.cofferline.com/v1/quotes` — free, no auth. Compare the best full-size venue quote against a sliced-execution estimate; all numbers from live venue APIs.
3. **Authenticate.** `POST https://api.dev.cofferline.com/v1/auth/challenge` with `{"address": "0x…"}`, sign the returned SIWE message (EOA, EIP-1271, and ERC-6492 all verify), then `POST https://api.dev.cofferline.com/v1/auth/verify` → `cl_sess_…` bearer token.
4. **Get a key.** `POST https://api.dev.cofferline.com/v1/keys` → `cl_key_…` (returned once; scopes `read`/`write`/`admin`).
5. **Operate from the spec.** `GET https://api.dev.cofferline.com/openapi.json` is generated from the same schemas that validate requests. Mutations accept `Idempotency-Key`. Errors are always `{code, message, remediation, docs_url, request_id}`.

**Roadmap (not yet live):** policies, on-chain delegations, conversion intents, gas management, statements, webhooks, x402 payment for paid tiers. The manifest's `capabilities` array is the source of truth for what exists.