Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Markdown developer guide for AINative Echo account and payout APIs, with disclosed authenticated API examples but no hidden execution or local persistence.
Review the AINative API domain and only run the payout, markup, Stripe onboarding, or auto-payout examples when you intend to change that developer account. Treat the JWT token as sensitive and avoid pasting it into untrusted logs or shared code.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
requests.post(
"https://api.ainative.studio/api/v1/echo/register",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"developer_name": "My App", "website": "https://myapp.com"}
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Set 25% markup (range: 0.0 to 0.40)
requests.put(
"https://api.ainative.studio/api/v1/echo/markup",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"markup_rate": 0.25}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Set 25% markup (range: 0.0 to 0.40)
requests.put(
"https://api.ainative.studio/api/v1/echo/markup",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"markup_rate": 0.25}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Minimum payout: $10
payout = requests.post(
"https://api.ainative.studio/api/v1/echo/payout",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"amount": 50.00}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Enable weekly automatic payouts
requests.post(
"https://api.ainative.studio/api/v1/echo/settings/auto",
headers={"Authorization": f"Bearer {jwt_token}"},
json={"enabled": True, "minimum_amount": 10.00, "schedule": "weekly"}