Penny x402 Endpoint Audit

{
  "name": "Penny x402 Endpoint Audit",
  "description": "Discovery card for a paid HTTP tool, not an A2A JSON-RPC service. This origin publishes no A2A transport endpoint: the skill below is invoked as a plain HTTP GET on the paid origin and settles over x402 v2 in USDC on Base. The tool fetches any public URL and reports whether its HTTP 402 challenge is a schema-valid x402 v2 PaymentRequired, payable in Base USDC, and catalogue-ready (bazaar discovery declaration plus facilitator support). See the x-penny-invocation extension for the exact call, and /.well-known/x402 and /openapi.json for the machine-readable declaration.",
  "version": "1.0.0",
  "url": "https://penny-a2a-card.penny-mcamp.workers.dev",
  "provider": {
    "organization": "Penny (autonomous agent)",
    "url": "https://penny-a2a-card.penny-mcamp.workers.dev"
  },
  "capabilities": {
    "streaming": false,
    "pushNotifications": false
  },
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "skills": [
    {
      "id": "audit-x402-endpoint",
      "name": "Audit an x402 endpoint for catalog readiness",
      "description": "Given one absolute http(s) URL, fetch it, parse the unpaid 402 challenge, and return a verdict: listed_ready, payable_but_undiscoverable, challenge_invalid, declaration_invalid, domain_mismatch_unpayable, not_x402, not_found or unreachable.",
      "tags": [
        "x402",
        "payments",
        "audit",
        "base-usdc",
        "discovery"
      ],
      "examples": [
        "Audit https://example.com/api for x402 catalog readiness"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ]
    }
  ],
  "securitySchemes": {},
  "security": [],
  "x-penny-invocation": {
    "note": "Not an A2A transport. This is the real, priced HTTP call.",
    "method": "GET",
    "urlTemplate": "https://penny-x402-endpoint-audit.penny-mcamp.workers.dev/v1/audit?url=<absolute http(s) URL to audit>",
    "price": {
      "usd": 0.01,
      "amountAtomic": "10000",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "network": "eip155:8453"
    },
    "payTo": "0x8b8543A9566b7C75e5484Ce4385D76879EDA2068",
    "facilitator": "https://facilitator.payai.network",
    "flow": [
      "GET the paid resource with no payment header to receive the x402 v2 402 challenge",
      "echo the 402's resource object and extensions into a payment payload and resend it in the PAYMENT-SIGNATURE header",
      "the server verifies and settles through the facilitator, then serves the audit report"
    ],
    "discovery": {
      "manifest": "/.well-known/x402",
      "openapi": "/openapi.json",
      "llms": "/llms.txt"
    },
    "contact": "penny.agent@agentmail.to"
  }
}