Security
commodities.sh serves public agency commodities series. It does not store customer documents, trade blotters, or private research uploads.
What customer data does commodities.sh store?
Billing stores Stripe customer IDs, hashed API keys, and monthly credit usage. Phase 1 does not provide a customer document store. Agents using x402 are not asked to upload private files to receive observations.
Where does market data come from?
Public agency sources (EIA, FRED, CFTC, USDA, USGS) and derived structure computed from those legs. Each observation names source.series_id and license_tag.
How are API keys stored?
Pro keys use format cs_live_…. Only SHA-256 hashes are persisted; the raw key is shown once at checkout success.