TOUGH LOVE SECURITY — Public APIs

Pay-per-call AI infrastructure. No accounts. No subscriptions. No expiring credits.

All endpoints accept both Stripe Checkout (for human users) and x402 (for AI agents and autonomous systems). All endpoints run on Cloudflare Workers AI for sub-second cold starts.

The endpoints

ImageGen — AI image generation

POST https://toughlovesec.win/api/imagegen

Stable Diffusion XL Lightning + Flux-1-Schnell. 1024x1024 output, 3-5 second generation.

Tier	Price	Per-image	Best for
Single	$0.50	$0.50	One-off test
12-pack	$1.99	$0.17	Variations, A/B thumbnails
100-bundle	$7.99	$0.08	Production volume
x402	per-call	$0.04	Autonomous agents

curl https://toughlovesec.win/api/imagegen \
  -X POST \
  -H "Content-Type: application/json" \
  -d '{"prompt":"a cyberpunk owl coding on a phone, neon, photoreal","model":"flux-1-schnell"}'

Buy via Stripe · Launch post

ClawWork — instant AI labor

POST https://toughlovesec.win/api/clawwork

Claude 4.7 Sonnet pipeline. Three discrete job tiers.

Tier	Price	Turnaround	Output
Quick Polish	$5	<90s	Copy-edited 3K-word doc
Deep Brief	$25	3-5 min	1.5K-3K word structured deliverable
Full Deliverable	$99	30 min - 4 hrs	End-to-end work product (decks, RFPs, calendars)
x402 polish	per-call	<90s	$0.05/call

curl https://toughlovesec.win/api/clawwork \
  -X POST \
  -H "Content-Type: application/json" \
  -d '{"tier":"polish","task":"Tighten this email","input":"Hey there..."}'

Buy via Stripe · Launch post

Contract Risk Score — smart contract security triage

POST https://toughlovesec.win/api/contract-risk-score

Ten-category risk scoring for Ethereum, Base, Arbitrum, and Optimism contracts. Static analysis + bytecode disassembly + known-exploit signature matching.

Tier	Price	Per-call
5-pack	$1.25	$0.25
x402	per-call	$0.25

curl https://toughlovesec.win/api/contract-risk-score \
  -X POST \
  -H "Content-Type: application/json" \
  -d '{"address":"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D","chain":"ethereum"}'

Categories scored: admin-key centralization · oracle exposure · reentrancy signatures · known exploit patterns · honeypot indicators · ownership concentration · verified source · permission creep · external call depth · flash loan compatibility.

Buy via Stripe · Launch post

Other free TLS endpoints

These are not part of the paid API suite, but they're public and useful:

• Free Scan — 40-minute external attack-surface scan, no charge
• Breach Tracker — public HHS healthcare breach feed (auto-updated)
• LIA HIPAA Coach — AI HIPAA compliance officer for solo practices ($39/$99 mo)

How x402 works on these endpoints

1. Client makes request without payment
2. Server returns HTTP 402 Payment Required with payment challenge in response headers
3. Client wallet signs payment (USDC on Base via EIP-3009)
4. Client retries request with X-Payment header
5. Server verifies on-chain, returns the result

Total round trip: 4-8 seconds on a warm wallet, 6-15 seconds on a cold one.

Sample integration (TypeScript)

import { fetch402 } from "x402-fetch"; // any x402 client lib

const response = await fetch402("https://toughlovesec.win/api/imagegen", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    prompt: "minimalist logo for a HIPAA pentest firm, neon cyan on black",
    model: "flux-1-schnell"
  }),
  wallet: yourWallet
});

const { image_url } = await response.json();

Why TLS built these

TLS is a healthcare-pentest practice in Atlanta. We needed AI infrastructure for our own ops (image gen for marketing, AI labor for client deliverables, smart contract scoring as a community service). Once the workers were live and battle-tested internally, opening them up as paid public endpoints was a 200-line worker change.

The pricing reflects what they actually cost to deliver — not what a SaaS pricing committee would charge. The x402 rates are designed to fit comfortably inside an autonomous agent's budget.

Status

All three endpoints went live week of 2026-04-29. Currently processing real traffic.

• Uptime: Cloudflare Workers — 99.99% historical
• Latency: sub-100ms cold start, model inference dominates
• Region: edge-served from 300+ Cloudflare PoPs
• Settlement: Base mainnet for x402, Stripe for fiat tiers

Topics

ai-agents · x402 · defi-security · stable-diffusion · flux · hipaa-compliance · cloudflare-workers · claude-api · stripe · usdc · base-mainnet · pay-per-call · agent-economy

Contact

• Site: toughlovesec.win
• LIA HIPAA officer: toughlovesec.win/lia-coach
• Lemorris Love (founder): toughlovesec.win/about

---

Built by TOUGH LOVE SECURITY on Cloudflare Workers AI. Powered by Stripe + x402. Atlanta, GA.