# AI Act Check

> Pay-per-call API: where an AI use case sits under the EU AI Act (Regulation (EU) 2024/1689), plus overlapping GDPR duties. Rule-based, no LLM. Same answers, same verdict.

Price: 0.60 USD per POST /classify, paid over MPP (Machine Payments Protocol, HTTP 402). Everything else is free.

## How to use it

1. GET /questions (free): the questionnaire. Each question has an id, a type (boolean or enum with options), and may have ask_if.
2. Map your use case to answers: { "<question id>": true | false | "<option>" }. Answer every required question you can.
3. POST /classify with JSON { "use_case": "optional, max 1000 chars, never stored", "answers": { ... } }.
   - Bad JSON or invalid answers: 400 with the list, before any payment.
   - Otherwise 402 with a WWW-Authenticate: Payment challenge. Pay over MPP and retry (e.g. npx mppx@0.17.1 <url>).
   - Paid: 200 with the verdict and a Payment-Receipt header.

## Response (Verdict)

{ "tier": "prohibited" | "high" | "limited" | "minimal" | "incomplete",
  "role": string | null,
  "matched": [{ "id", "tier", "title", "article", "note"? }],
  "obligations": [{ "law": "AI Act" | "GDPR", "text", "article", "role", "applies_from", "key"? }],
  "gdpr_short": string[], "missing": string[], "invalid": string[],
  "rules_version": string, "disclaimer": string }

tier "incomplete" means required answers are missing (listed in "missing"); it is still a paid 200.

Other routes: GET /health, GET /openapi.json, GET /live, GET /live/feed, GET /console (a page for people: three prepared cases, paid from a test wallet).

Nothing about your use case or answers is stored; the receipts log holds time, tier, amount and receipt id only. The live screen keeps the last 20 verdicts for 24 hours.

Disclaimer: A first-pass classification from your answers, not legal advice.