```mermaid
flowchart LR
  P(["Person opens an already issued link"]) --> A["paymentrequired.com (apex directory)"]
  A -->|"/s short link"| S["short_links resolve, same origin"]
  A -->|"/bridge/privy"| B["approval page, same origin"]
  A -->|"/api/browser-sessions/id"| Q{"row held here and not a guest or buy link?"}
  Q -->|"yes"| H["answer on original path<br/>archival row"]
  Q -->|"no"| O["bridge replay owner-first<br/>wallet, then banking"]
  O --> W["wallet service"]
  O --> K["banking service"]
  A -.->|"/mcp"| G["410 mcp_moved, no replay"]
```

# Already issued apex links (kept independent of the retired `/mcp`)

[← Index](index.md) · [Overview](overview.md)

> Evidence labels: **CODE** = read in the cited file at the recorded revision/hash; **FIXTURE** = parent-accepted combined cloud fixture run 99/99 (`directory-wave/parent-directory-wave-acceptance.json`), not live; **LIVE-RO** = observed read-only on the live host 2026-10-14 (raw files in `evidence/live-probes/`); **UNVERIFIED** = not executed here. Topology = accepted directory-wave source, **not deployed**. Nothing in this handbook moved money, signed, or activated a card.

Links an agent already handed to a person on `https://paymentrequired.com/...` keep their **original path**; retiring `/mcp` does not touch them. The handbook keeps these addresses verbatim; it does not rewrite them to subdomains.

| Issued path | What answers | Code |
|---|---|---|
| `GET /s`, `POST /s` | short-link page and resolver on the apex | `facade:src/server.mjs:146` |
| `GET /bridge/privy` | approval page on the apex | `facade:src/server.mjs:179` |
| `/api/browser-sessions/<id>[/callback\|/approval\|/connection]` | owner-first replay to wallet, then banking; archival row answers only if no owner holds it | `facade:src/server.mjs:205`, `facade:src/server.mjs:122` |
| `/api/browser-sessions/<id>/connection` (archival) | connection completion on the original path | `facade:src/server.mjs:224` |
| `/mcp` | **410**, nothing parsed, forwarded or replayed | `facade:src/server.mjs:155` |

Observed: FIXTURE (accepted 99/99): issued G/GA/W/B/B0 links answered with zero payment delta; banking direct accepted a retained apex pass via identity hand-off (`probe-directory.json` keys `G_link…B0_link`, `banking_direct_accepts_retained_GA_pass_via_handoff`). Live: **UNVERIFIED** (topology not deployed).