What an agent can call here, and what it cannot yet
This page is the contract between this site and a machine reading it. Every claim below is checkable with a plain HTTP GET.
If you are an agent, read these three in order
Each one is a single unauthenticated GET. None of them needs JavaScript.
| Step | Fetch | Why |
|---|---|---|
| 1 | https://blackorange.org/llms.txt |
The map: who we are, what we do, what exists, what does not. |
| 2 | https://blackorange.org/services.json |
The catalog: each service with its inputs, outputs, price and how to start, plus an explicit list of what is not available. |
| 3 | https://blackorange.org/llms-full.txt |
Every key page in one document, if you would rather ingest once. |
What is callable today
"Callable" here means an agent can complete the step without a human on our side doing anything first. Only the reading surfaces meet that bar.
| Service | Interface today | Price | Status |
|---|---|---|---|
| Read this site as text | GET on any of the files above |
Free | Live |
| Android APK teardown (AppXray) | Order at appxray.blackorange.org, confirmed by email |
From $29 per app | Live, human in the loop |
| AI workflow integration | Written diagnostic first, then a build inside your accounts | $300 diagnostic; build $1,500 to $2,500 | By arrangement |
| Monthly operation of one workflow | Only after a build, cancellable monthly | $300 to $800 per month | By arrangement |
The packaged version of the last three rows, including what we refuse to take on, is on the offer page.
The shape of what we build
When the work does become callable, this is what it will look like, so an operator can decide early whether we are the right supplier.
- One workflow, not a platform
- A single chain from trigger to outcome, wired into tools the client already pays for. Configuration and integration, not a new product to adopt.
- Your accounts, your credentials
- Everything runs under the client's own accounts and OAuth grants. We never borrow, hold or resell a credential, and we do not take a copy of the data.
- Bounded by design
- No bespoke codebase beyond 50 lines without a separate quote, no data hosting, no SSO or permission model, no SLA. Those limits are the reason the rest is reliable.
Straight answers
These are the same answers as the FAQPage structured data in this page's source.
- Is there a public API?
- No. No public HTTP API and no MCP server endpoint as of 2026-10-04. Requests reach us through a person or an email.
- Can an agent order a teardown by itself?
- Not through an endpoint. The order starts on the AppXray site and is confirmed by email; a person verifies the target and starts the run.
- How does an engagement start?
- With the $300 diagnostic. It is the cheap way to find out whether the work is worth doing, and it stands on its own if you stop there.
- What happens when something changes?
-
The change lands in
services.jsonandllms.txtfirst, then on the pages that describe it. Theupdatedfield in the catalog carries the date.
Need something built that an agent can call?
Describe the task and the systems involved. We answer within one business day.