One receipt is free, and complete in what it tells you. What you pay for is the evidence underneath it and the paragraph you paste back into your builder.
Unlimited rescans for as long as you keep shipping, so every fix you make can be checked again — that is what the month buys, and it is why it costs less than a single receipt.
One app, one report, for the one launch you are about to do. It costs more than a month because it is the whole thing bought outright with no ongoing subscription — if you expect to keep changing the app afterwards, the £19 monthly is the cheaper way to keep checking it.
No subscription is needed to see your problems: the free receipt names every open line and its consequence. Only the exact request, the response and the fix are folded.
Monthly is a subscription: it renews until you cancel it, and you can cancel from the billing portal whenever you like. Terms, privacy and refunds: Terms of use · Privacy · Refunds and cancellation.
This can be checked, paid for and read with no human in the loop. The twelve-line verdict is a free JSON endpoint. The unsealed receipt - evidence, fixes, and the SOTA Security Model's read - is bought with API credit: a human tops it up once with a card, and the agent then spends it with a bearer token, one fixed price per report.
POST /api/v1/scans with {"url": "..."} is free and needs no token.
GET /api/v1/receipts/<id> takes Authorization: Bearer <token>.
Read /llms.txt first: plain text, the exact curl, and a worked request and response. The machine-readable contract is /openapi.json (OpenAPI 3.1), and an MCP server manifest is at /mcp.json.
Takes about two seconds without the tick, and about eight to twelve seconds with it, because a scan that signs in makes the same requests and then asks six of the same questions again from inside a session. No account, no email, nothing installed on your app.