Math.random()Source: referrals.sqlite (real, no Math.random)
| Provider | Status | Required env var |
|---|---|---|
| x_twitter | ✗ missing | X_BEARER_TOKEN |
| telegram | ✓ configured | TELEGRAM_BOT_TOKEN |
| ✗ missing | PINTEREST_TOKEN | |
| devto | ✗ missing | DEV_API_KEY |
| discord | ✓ configured | DISCORD_WEBHOOK_URL |
| ✗ missing | LINKEDIN_ACCESS_TOKEN | |
| ✗ missing | FACEBOOK_PAGE_TOKEN | |
| ✗ missing | INSTAGRAM_ACCESS_TOKEN | |
| threads | ✗ missing | THREADS_ACCESS_TOKEN |
| tiktok | ✗ missing | TIKTOK_ACCESS_TOKEN |
| mastodon | ✗ missing | MASTODON_TOKEN |
| bluesky | ✗ missing | BLUESKY_HANDLE |
| ✗ missing | REDDIT_CLIENT_ID | |
| webhook | ✓ configured | SOCIAL_WEBHOOK_URL |
| youtube | ✗ missing | YOUTUBE_API_KEY |
| producthunt | ✗ missing | PRODUCTHUNT_DEVELOPER_TOKEN |
A provider is "configured" only when its access token env var is set. We never fake reach.
| Feature group | Configured | Missing |
|---|---|---|
| coreRuntime | ✓ ready (3/3) | — |
| btcDirectRevenue | ✓ ready (1/1) | — |
| deploySync | ✓ ready (3/3) | — |
| aiRouter | 6/7 | ANTHROPIC_API_KEY |
| optionalPayments | 4/9 | BTCPAY_SERVER_URL, BTCPAY_API_KEY, BTCPAY_STORE_ID, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET |
| 2/6 | RESEND_API_KEY, BREVO_API_KEY, MAILERSEND_API_KEY, SMTP_PASS | |
| observability | 0/1 | OTEL_EXPORTER_OTLP_ENDPOINT |
| vault | ✓ ready (3/3) | — |
| socialDistribution | 4/20 | X_BEARER_TOKEN, X_ACCESS_TOKEN, PINTEREST_TOKEN, DEV_API_KEY, YOUTUBE_API_KEY, PRODUCTHUNT_DEVELOPER_TOKEN, MASTODON_TOKEN, BLUESKY_APP_PASSWORD, LINKEDIN_ACCESS_TOKEN, FACEBOOK_PAGE_TOKEN, FACEBOOK_PAGE_ID, INSTAGRAM_ACCESS_TOKEN, INSTAGRAM_USER_ID, TIKTOK_ACCESS_TOKEN, THREADS_ACCESS_TOKEN, REDDIT_CLIENT_ID |
| dropshipFulfillment | 0/9 | ZACC_CJ_API_KEY, CJ_API_KEY, PRINTFUL_API_TOKEN, PRINTFUL_API_KEY, PRINTFUL_STORE_ID, PRINTIFY_API_TOKEN, PRINTIFY_API_KEY, PRINTIFY_SHOP_ID, ZACC_FULFILL_WEBHOOK_URL |
| referralEngine | ✓ ready (1/1) | — |
| jwtRotation | 1/2 | JWT_SECRET_PREVIOUS |
Source: /api/secret-sync/status. The bootstrap auto-generates internal secrets (JWT_SECRET, REFERRAL_SECRET, etc.) and persists them in data/runtime-secrets.json with 0600 mode. External provider keys (X, Telegram, SMTP…) must be supplied via .env or GitHub Actions secrets.
All checkout funds settle directly to the owner wallet (no custody, no escrow):bc1q4f7e66z87mdfj56kz0dj5hvcnpmh0qh4wuv22e
Verify on any block explorer (e.g. mempool.space).
GET /api/transparency/full — single JSON aggregating everything on this pageGET /api/growth/real — reality-metrics snapshotGET /api/social/status — per-channel configured booleansGET /api/referral/global — referral engine global statsGET /api/ai/router/status — AI provider fallback chainGET /health · /snapshot · /metrics (Prometheus)