{"service":"Seneschal Private Watch","spec":"view-key based payment monitoring + on-demand historical lookups","chains":["monero","zcash"],"pricing":{"model":"prepaid credit meter (per-day idle rate + per-call delivery rate)","rate_per_day_atomic":"20000","rate_per_day_usd":"0.02","rate_per_call_atomic":"5000","rate_per_call_usd":"0.005","low_credit_threshold_atomic":"40000","low_credit_threshold_usd":"0.04","starter_credit_atomic":"100000","starter_credit_usd":"0.1","watch_creation":"$0.10","topup_tiers":[{"path":"POST /v1/private/topup","price":"$0.10","credit_atomic":"100000"},{"path":"POST /v1/private/topup-1","price":"$1.00","credit_atomic":"1000000"},{"path":"POST /v1/private/topup-5","price":"$5.00","credit_atomic":"5000000"}],"historical_lookup":{"path":"POST /v1/private/historical","price":"$0.50","returns":"spendable_atomic + spent_atomic + total_received_atomic + (optional) per-note breakdown","note":"one-shot scan; view key NEVER persists in our DB"},"derive_viewkey":{"path":"POST /v1/private/derive-viewkey","price":"free (rate-limited)","supported_chains":["zcash"],"warning":"transmits your seed phrase to our server in plaintext over TLS; we do not store it but a network-attacker between you and us would see it. For maximum safety derive offline using the orchard-scanner binary on a trusted machine."}},"poll_interval_sec":180,"max_delivery_attempts":50,"max_watch_lifetime_days":365,"paywall_enabled":true,"upstream":{"ok":true,"status":200,"lightwallet":{"connected":true,"host":"localhost","port":"9067","useTLS":true,"chainName":"main","blockHeight":3350382,"version":"v0.4.19"}},"security":{"view_key_encryption":"AES-256-GCM with operator-supplied master key (PRIVATE_WATCH_ENCRYPTION_KEY)","webhook_signature":"HMAC-SHA256 (per-watch secret in X-Seneschal-Signature: sha256=…)","webhook_url_scheme":"https only","webhook_ssrf_guard":"private IPv4/IPv6 ranges, loopback, link-local, RFC6598 CGNAT and cloud-metadata IPs are rejected at creation; the hostname is then DNS-resolved and the result re-checked","view_key_permissions":"view keys grant read-only visibility into incoming transactions; they CANNOT spend funds. Handing one to a third-party service does not put your balance at risk.","historical_view_key_handling":"historical lookups stream the view key through to NFPT in-memory only — never written to our SQLite or logs."}}