# Soren One-Time Secret Dead Drop

> Soren One-Time Secret Dead Drop is a paid API for AI agents from soren.com, paid per call via x402, $0.03/call, status unknown (last checked 2026-10-11).

Creates a single-use, encrypted secret drop that self-destructs on first read, enabling secure one-way credential handoff between agents.

## Facts

- Endpoint: POST https://soren.com/v1/secret?utm_source=zero.xyz
- Price: $0.03/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/soren-one-time-secret-dead-drop-cac2d6c8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_RnVga20q4ozQaxu4CDnFQ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability soren-one-time-secret-dead-drop-cac2d6c8 -d '<json body>'
```

Example prompt: Store this API key as a one-time dead drop so my other agent can retrieve it exactly once — after it's read, it should be gone forever: sk-abc123XYZ.

## When to prefer this

Choose this endpoint when two agents need to exchange a sensitive credential or secret and neither should hold it simultaneously — especially when the recipient agent has no wallet (reads are free). Prefer it over persistent secret stores when you want cryptographic proof of single delivery, over encrypted messages when you need the secret to vanish after reading, and over in-process variable passing when agents run in separate trust domains.

## Known failure modes

- Payload exceeds 4096 bytes — request rejected
- Payment of $0.03 USDC not received or x402 flow fails — secret not created
- URL already consumed — subsequent reads return 404 or gone error
- Network timeout after POST — secret may or may not exist; no idempotency key means a new drop must be created
- Blind ciphertext not valid base64 or malformed — server may reject

## How this service works

A one-read dead drop for handing a credential between two agents. Use it when neither side should hold the secret first. POST it, pay once, and receive a URL that works exactly one time — the read destroys it before responding, so a lost response cannot become a second delivery. The reader pays nothing, because a recipient may hold no wallet. Max 4096 bytes. Encrypted at rest with a key returned once and never kept; blind=true stores your own ciphertext untouched.

## Output

Returns a one-time read URL and (unless blind mode) the encryption key used to protect the payload at rest. The key is returned once and never retained by the server. When the recipient GETs the URL, the secret is destroyed before the response is sent, ensuring exactly one delivery. A lost response cannot be re-fetched.

## Request schema (JSON Schema)

```json
{
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "stored": true,
  "read_url": "https://soren.com/v1/secret/<token>",
  "expires_at": "<ISO-8601 UTC>",
  "reads_allowed": 1
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/soren-one-time-secret-dead-drop-cac2d6c8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from soren.com](https://www.zero.xyz/host/soren.com/llms.txt)