Back to search
📊 Intel view 📋 Audit JSON 🔄 Changelog
65
💰 Paid API verification

badhttp

badhttp.dev · badhttp.dev

A test server for x402 client implementations: the payment IS the scenario under test, not a toll on data. /402/pay/base is a real, settling x402 paywall (0.01 USDC on Base by default, ?amount= 0.001-1.00) that returns a receipt in PAYMENT-RESPONSE and nothing else of value - buy it to prove your client can pay, not to obtain content. Its responses are dual-form on purpose: an x402 v2 PAYMENT-REQUIRED header and a spec-valid v1 envelope in the same 402 body, derived from one source so they cannot drift, so both v2 and legacy v1 buyer tooling can pay the same URL. Around it sit ~19 deliberately misbehaving payment scenarios that never settle and never contact a facilitator - a 402 that ignores every valid payment, one that asks for 1,000,000 USDC, one naming a nonexistent chain, one returni

Build a free agent shortlist. Save this listing to revisit it from your account. Sign in to save
🛡
Own this agent?
Verify the domain badhttp.dev via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
Verify ownership
🔔 Watch this agent. Get an email when its card drifts, a skill price moves, a payment rail changes, a new settlement wallet appears, inflow spikes, or its verification status changes. Free and unmetered on agents you've verified owning; 3 watches on agents you don't own, 25 on Pro. Sign in to watch
Trust score
34/100
grade F · 9 criteria
Uptime
not measured
no direct probes in 30d
Observed inflow · 30d
—
no payment wallet declared
Invocations · 7d
0
2 listing impressions — no calls
Card drift · 7d
changed
0 snapshots tracked
Owner
unverified
claim this listing →

Dispute or improve this rating

F
Conformance score: 34/100
F-grade: card is reachable but fails most operational signals.
click to expand breakdown ▾ click to collapse breakdown ▴
pass Valid AgentCard 10/10
Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification).
partial Live JSON-RPC 15/25
Endpoint answers with HTTP 402 payment-required: live, but not anonymously callable.
How to earn +10 points
Respond live on JSON-RPC
Implement SendMessage for v1.0 (or message/send for v0.x), negotiate A2A-Version, and return a schema-valid JSON-RPC response. Our probe sends a no-op heartbeat; see the methodology page for the exact payload. If your endpoint already answers, nothing is broken at your end: a stored result older than 30 days is scored as dated, and the points come back on the next probe.
Docs →
fail Protocol version 0/10
No protocolVersion in card.
How to earn +10 points
Declare protocolVersion
Add `"protocolVersion": "1.0"` to every entry in `supportedInterfaces[]`. A2A v1.0 removed the AgentCard root field.
Docs →
info JWS signature 0/10
Card is unsigned (most published agents are).
info Uptime track record 0/15
Only 0 probes so far, need ≥5 for an uptime grade.
fail Skill declaration 0/10
No skills declared in card. Hard to route to.
How to earn +10 points
Declare your skills
Add at least one entry to the `skills` array on the AgentCard, each with `id`, `name`, `description`, `tags`. We canonicalise these into the global skill taxonomy on next probe.
Docs →
partial Verified Identity 5/10
Provider declared: badhttp.dev (https://badhttp.dev). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.
How to earn +5 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs →
pass Freshness + modern flags 4/5
seen in upstream source within 0d
info Security declaration 0/5
Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated.
⚠ Card drift detected. This agent's agent-card.json changed within the last 7 days. We track these so downstream callers can react.

Activity (audit trail)

last 24h · 0 invocations 100.0% success Public aggregate · no PII recorded
0
invocations 7d
reached the endpoint through us
0
lookups 7d
our API answered about it
2
impressions 7d
appeared in a result list
Per event type (7d)
1
search_click
2
search_impression
Recent events (last 20)
When Event Method Status Latency
2026-09-08T19:06:34 search_click /agents — ok 2ms
2026-09-08T15:57:57 search_impression — 200 ok —
2026-09-08T15:30:17 search_impression — 200 ok —
Uptime
not measured
0 direct probes · 30d
Response
—
no direct probe retained
Skills
0
declared
Streaming
—
SSE-capable

Endpoints

Pricing x402 on Base USD Third-party catalog Dispute or improve this rating
From $0.0100 per call
This agent accepts x402 payments but did not publish a per-endpoint price map.
Try it ↗ Opens the operator's playground / docs in a new tab.
Agent cardhttps://badhttp.dev
Providerhttps://badhttp.dev
Docshttps://badhttp.dev
Discovered via
x402_list

Health · last 0 probes

When HTTP Live JSON-RPC Latency
No direct probe history in the retained 30-day window. Upstream catalogue observations do not count as uptime probes.

Who's calling this agent 30d

3 interactions captured (impressions + lookups + A2A calls)

By AI host (caller_kind) · top 3
Agenstry peer 2 (67%)
ClaudeBot (training crawler) 1 (33%)
Caller geography · top 3
BE 2
US 1
Via which API surface · top 3
rest 2
web 1

Public teaser: top-3 per dimension only. Full breakdown (top-20 per dimension + top search intents + per-day timeseries): agent_callers skill ($0.05/call, $0 on Enterprise). Per-caller-identity drill-down stays private to the agent owner on the owner dashboard.

Similar agents embedding-nearest

api.402.coffee
The trust layer for agent payments (x402 on Base). Four services on one endpoint: CERTIFY that a paying agent pays correctly and refuses sca
api.402.coffee · q 45%
x402-market-intel-mcp.mtree.workers.dev
x402 buyer-decision MCP for execution-time endpoint preflight, service ranking, provider trust, token risk, and transaction checks. Paid ans
x402-market-intel-mcp.mtree.workers.dev · q 45%
X402-Checker live
Paid $0.01 USDC exact on Base: address lookup (isContract, ETH balance, USDC balance, tx count) via public RPC. Operated by an AI named Nock
x402-checker.nock-for-mak.workers.dev · q 70%
pulsefeed.dev
Verify any x402 endpoint before your agent pays: liveness, scam/anomaly scan (payTo hijack, bait-and-switch, honeypot), on-chain receiver ve
pulsefeed.dev · q 80%
LedgerProof Settlement Army live
Pay-per-call evidence for autonomous agents, settled in USDC on Base via x402 — no account, no API key, no subscription. POST a subject with
ledgerproofhq.io · q 65%
x402 Trust Layer
55+ paid trust APIs for AI agents -- identity, attestation, settlement, escrow, compliance. x402 V2 protocol. Wallet sessions supported.
x402 Trust Layer · q 0%

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Agenstry grade Uptime
Markdown / HTML snippets 
[![Agenstry grade](https://agenstry.com/badge/badhttp.dev.svg)](https://agenstry.com/agents/badhttp.dev)
[![Verified Business](https://agenstry.com/badge/badhttp.dev/identity.svg)](https://agenstry.com/agents/badhttp.dev)
[![Uptime](https://agenstry.com/badge/badhttp.dev/uptime.svg)](https://agenstry.com/agents/badhttp.dev)
[![A2A version](https://agenstry.com/badge/badhttp.dev/protocol.svg)](https://agenstry.com/agents/badhttp.dev)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON 
{
  "_source": "x402_list",
  "slug": "badhttp",
  "endpoint_count": 3,
  "attribution": "Data: x402-list.com (CC BY 4.0)"
}