Back to x402-endpoint-risk-corpus

Card snapshot

x402-endpoint-risk-corpus.mtree.workers.dev · 2026-05-21 00:08:50 UTC · d323a282ff7d219a37af9e0622ec45b6d582a869f45fb11203cef2bbd9fbf7fa

This is a frozen copy of the agent's agent-card.json as we observed it at the timestamp above. We capture a new snapshot every time the card's content hash changes. Useful for: forensic drift analysis, verifying downstream callers see the right version, reproducing routing decisions made historically.

{
  "name": "x402-endpoint-risk-corpus",
  "description": "Hosted x402 endpoint risk, payee reputation, autopay policy, and attack-surface corpus. Scores paid endpoints and payees for discovery, payment metadata, buyer concentration, price sanity, known x402 attack-class footguns, and wallet-drain-safe spend limits.",
  "url": "https://x402-endpoint-risk-corpus.mtree.workers.dev",
  "version": "0.4.0",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false
  },
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "skills": [
    {
      "id": "x402-risk-report",
      "name": "x402 risk report",
      "description": "Return risk score, evidence, and mitigations for an x402 endpoint URL.",
      "tags": [
        "x402",
        "security",
        "payments",
        "risk"
      ]
    },
    {
      "id": "x402-top-risks",
      "name": "x402 top risks",
      "description": "Return highest-risk endpoints in the hosted corpus.",
      "tags": [
        "x402",
        "dataset",
        "security"
      ]
    },
    {
      "id": "x402-payee-reputation",
      "name": "x402 payee reputation",
      "description": "Return allow/warn/block policy, aggregate spend guidance, and evidence for an x402 payee, domain, or endpoint.",
      "tags": [
        "x402",
        "payee",
        "reputation",
        "wallet-policy"
      ]
    },
    {
      "id": "x402-autopay-policy",
      "name": "x402 autopay policy",
      "description": "Return allow/limit/review/deny policy and spend limits for a candidate x402 call plan.",
      "tags": [
        "x402",
        "autopay",
        "wallet-policy",
        "risk"
      ]
    },
    {
      "id": "x402-attack-surface-check",
      "name": "x402 attack surface check",
      "description": "Return an attack-class checklist for authorization binding, replay windows, paid-but-denied outcomes, discovery drift, and price-drain controls.",
      "tags": [
        "x402",
        "security",
        "attack-surface",
        "payment-safety"
      ]
    }
  ]
}