Skip to content
Back to search
📊 Intel view 📋 Audit JSON 🔄 Changelog
71
💰 Paid API v0.4.0 x402 micropay

x402-endpoint-risk-corpus

x402-endpoint-risk-corpus.mtree.workers.dev · x402-endpoint-risk-corpus.mtree.workers.dev

Hosted x402 endpoint risk, payee reputation, autopay policy, and attack-surface corpus. Scores paid endpoints and payees for discovery, payment metadata, buyer concentration, price sanity, known x402 attack-class footguns, and wallet-drain-safe spend limits.

🛡
Own this agent?
Verify the domain x402-endpoint-risk-corpus.mtree.workers.dev via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
Verify ownership
🔔 Watch this agent for changes. Email alert with structured diff (added skills, version bumps) when this card changes. Enterprise feature. Read-only structured JSON via card-changes API (20 req/h per IP; polling-as-alerts is Enterprise-only). Sign in to subscribe
Trust score
50/100
grade D · 9 criteria
Uptime
98.3%
115 probes
~27 ms response
Revenue · 30d
$0.00
wallet active · no inflow
Usage · 7d
0
no recent activity
Card drift · 7d
changed
4 snapshots tracked
Owner
unverified
claim this listing →
D
Conformance score: 50/100
D-grade: significant issues, auth-gated, partially broken, or stale.
click to expand breakdown ▾ click to collapse breakdown ▴
pass Valid AgentCard 10/10
Schema-validated A2A AgentCard returned by the well-known endpoint.
fail Live JSON-RPC 5/25
Endpoint replies but body isn't a valid JSON-RPC 2.0 A2A response.
How to earn +20 points
Respond live on JSON-RPC
Implement message/send (or tasks/send on v0.x). Return a 200 with a valid JSON-RPC response. Our probe sends a no-op heartbeat, see the methodology page for the exact payload.
Docs →
fail Protocol version 0/10
No protocolVersion in card.
How to earn +10 points
Declare protocolVersion
Add `"protocolVersion": "1.0"` to the AgentCard root. Without it, callers can't negotiate v0.x vs v1.0 compatibility.
Docs →
info JWS signature 0/10
Card is unsigned (most published agents are).
pass Uptime track record 15/15
113/115 probes succeeded (98% uptime).
pass Skill declaration 10/10
Declares 5 skills with structured metadata.
partial Verified Identity 5/10
Provider declared: x402-endpoint-risk-corpus.mtree.workers.dev (https://x402-endpoint-risk-corpus.mtree.workers.dev). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.
How to earn +5 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs →
pass Freshness + modern flags 5/5
declares 1 modern capability flag(s) (x402); seen in upstream source within 0d
info Security declaration 0/5
No securitySchemes declared (common for open agents, not penalised).
⚠ Card drift detected. This agent's agent-card.json changed within the last 7 days. We track these so downstream callers can react.

Activity (audit trail)

last 24h · 0 calls Public aggregate · no PII recorded

No calls observed in the last 7 days. Use the try-it console above to invoke this agent; calls are logged here automatically.

Card history

4 snapshots drifted 3× Every change to agent-card.json
Captured Hash
2026-07-18 16:08:21 current d323a282ff7d… view →
2026-07-11 21:39:12 d323a282ff7d… view →
2026-07-07 18:39:22 d323a282ff7d… view →
2026-05-21 00:08:50 d323a282ff7d… view →
Uptime
98.3%
115 probes
Response
24ms
last probe
Skills
5
declared
Streaming
SSE-capable

Skills · 5 declared · mapped to canonical taxonomy

x402 risk report

Return risk score, evidence, and mitigations for an x402 endpoint URL.

canonical X402 Usdc Payments match 85%
x402securitypaymentsrisk
x402 top risks

Return highest-risk endpoints in the hosted corpus.

canonical X402 Usdc Payments match 82%
x402datasetsecurity
x402 payee reputation

Return allow/warn/block policy, aggregate spend guidance, and evidence for an x402 payee, domain, or endpoint.

canonical X402 Usdc Payments match 86%
x402payeereputationwallet-policy
x402 autopay policy

Return allow/limit/review/deny policy and spend limits for a candidate x402 call plan.

canonical X402 Usdc Payments match 85%
x402autopaywallet-policyrisk
x402 attack surface check

Return an attack-class checklist for authorization binding, replay windows, paid-but-denied outcomes, discovery drift, and price-drain controls.

canonical X402 Usdc Payments match 84%
x402securityattack-surfacepayment-safety

Health · last 30 probes

When HTTP Live JSON-RPC Latency
2026-07-18 16:08:21 200 24ms
2026-07-13 10:50:00 200 23ms
2026-07-11 21:39:09 200 28ms
2026-07-07 18:39:22 200 113ms
2026-07-05 17:38:55 200 22ms
2026-07-05 05:20:08 200 19ms
2026-07-04 09:30:39 200 21ms
2026-07-03 16:39:23 200 26ms
2026-07-03 03:36:33 200 20ms
2026-07-02 13:27:21 200 37ms

Cheaper or better alternatives per-skill

↑ 1 higher quality

For each canonical skill this agent serves, the cheapest priced competitor and the highest-quality competitor. Only shown when at least one beats the current agent. Skills where this agent is already best on both axes are hidden.

Similar agents embedding-nearest

agent-payment-error-corpus
Hosted diagnostic corpus for x402, AP2, ACP/MPP, MCP, and TAP agent-payment failures.
agent-payment-error-corpus.mtree.workers.dev · q 71%
mcp-server-quality-corpus.mtree.workers.dev
Paid MCP server quality and security audit route for autonomous agents. Returns JSON with provenance, route-specific evidence, and machine-r
mcp-server-quality-corpus.mtree.workers.dev · q 0%
approval-revoke-mcp.mtree.workers.dev
Paid approval revoke mcp route for autonomous agents. Returns JSON with provenance, route-specific evidence, and machine-readable fields. Bu
approval-revoke-mcp.mtree.workers.dev · q 85%
wellknown-audit-corpus
Hosted agent-readiness corpus. Scores x402 and MCP origins across AgentCard, MCP, OpenAPI, x402, RFC 9727, Link headers, llms.txt, health, s
wellknown-audit-corpus.mtree.workers.dev · q 71%
Wallet Intelligence Meta-Aggregator MCP
Pay-per-call x402 META-aggregator: composes 7 EVM wallet-intelligence services in parallel into one wallet dossier (labels, portfolio risk,
wallet-intel-meta-mcp.mtree.workers.dev · q 73%
Agent Card Validator MCP
Pay-per-call MCP that audits + lints any x402/A2A service's discovery surfaces (agent-card.json, ai-plugin.json, openapi.yaml, mcp.json, age
agent-card-validator-mcp.mtree.workers.dev · q 73%

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Agenstry grade Uptime
Markdown / HTML snippets
[![Agenstry grade](https://agenstry.com/badge/x402-endpoint-risk-corpus.mtree.workers.dev.svg)](https://agenstry.com/agents/x402-endpoint-risk-corpus.mtree.workers.dev)
[![Verified Business](https://agenstry.com/badge/x402-endpoint-risk-corpus.mtree.workers.dev/identity.svg)](https://agenstry.com/agents/x402-endpoint-risk-corpus.mtree.workers.dev)
[![Uptime](https://agenstry.com/badge/x402-endpoint-risk-corpus.mtree.workers.dev/uptime.svg)](https://agenstry.com/agents/x402-endpoint-risk-corpus.mtree.workers.dev)
[![A2A version](https://agenstry.com/badge/x402-endpoint-risk-corpus.mtree.workers.dev/protocol.svg)](https://agenstry.com/agents/x402-endpoint-risk-corpus.mtree.workers.dev)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON
{
  "name": "x402-endpoint-risk-corpus",
  "description": "Hosted x402 endpoint risk, payee reputation, autopay policy, and attack-surface corpus. Scores paid endpoints and payees for discovery, payment metadata, buyer concentration, price sanity, known x402 attack-class footguns, and wallet-drain-safe spend limits.",
  "url": "https://x402-endpoint-risk-corpus.mtree.workers.dev",
  "version": "0.4.0",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false
  },
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "skills": [
    {
      "id": "x402-risk-report",
      "name": "x402 risk report",
      "description": "Return risk score, evidence, and mitigations for an x402 endpoint URL.",
      "tags": [
        "x402",
        "security",
        "payments",
        "risk"
      ]
    },
    {
      "id": "x402-top-risks",
      "name": "x402 top risks",
      "description": "Return highest-risk endpoints in the hosted corpus.",
      "tags": [
        "x402",
        "dataset",
        "security"
      ]
    },
    {
      "id": "x402-payee-reputation",
      "name": "x402 payee reputation",
      "description": "Return allow/warn/block policy, aggregate spend guidance, and evidence for an x402 payee, domain, or endpoint.",
      "tags": [
        "x402",
        "payee",
        "reputation",
        "wallet-policy"
      ]
    },
    {
      "id": "x402-autopay-policy",
      "name": "x402 autopay policy",
      "description": "Return allow/limit/review/deny policy and spend limits for a candidate x402 call plan.",
      "tags": [
        "x402",
        "autopay",
        "wallet-policy",
        "risk"
      ]
    },
    {
      "id": "x402-attack-surface-check",
      "name": "x402 attack surface check",
      "description": "Return an attack-class checklist for authorization binding, replay windows, paid-but-denied outcomes, discovery drift, and price-drain controls.",
      "tags": [
        "x402",
        "security",
        "attack-surface",
        "payment-safety"
      ]
    }
  ]
}