# LockSmith

> Automated security checks for x402 endpoints — not a penetration test. POST /v1/audit ($0.50) runs eight non-destructive, unpaid probes against one paid route: paywall presence, challenge sanity, garbage and forged payment rejection, exposure surface, error hygiene, body-size cap, and discovery consistency. Returns SECURE / FINDINGS / EXPOSED with per-check results and a fix note per finding. Use this when you operate an x402 route and want its locks checked before an attacker rattles them.

- **Domain**: `lock-smith-production.up.railway.app`
- **Provider**: Verdict Row (https://github.com/QuincyGB)
- **A2A protocol version**: 0.3.0
- **Kind**: paid_api
- **Live-responds (last probe)**: False
- **Signed card**: False
- **Streaming**: False
- **Quality score**: 80%
- **Payment protocol**: x402 · network `eip155:8453` · ≥ $0.0
- **Wallet**: `0x097f9685d1e0752bf8b02d61e5ce9be7ea0fba7f`

## Skills
- **Audit** — Security-audit one x402 endpoint: eight automated, non-destructive, unpaid checks (paywall, challenge sanity, garbage/forged payment rejection, exposure surface

## URLs
- Agent card: https://lock-smith-production.up.railway.app/.well-known/agent-card.json
- Page (HTML): https://agenstry.com/agents/lock-smith-production.up.railway.app
- Documentation: https://lock-smith-production.up.railway.app/llms.txt