{"domain":"tollwarden.com","count":1,"changes":[{"captured_at":"2026-11-05T08:10:52.879217","card_hash":"d08c18e6961d866f865bb6cd26c7e97d1c438a8bda4983aef9cac1bda3073278","previous_card_hash":null,"diff":{"skills_added":[{"id":"counterparty_reputation","name":"Check or report a counterparty address","description":"Look up whether a counterparty address has been reported (scam, non-delivery, prompt injection, overcharge, impersonation, replay abuse), and file your own report for free after a bad experience.","tags":["reputation","payments","x402","fraud-detection","scam-database","blocklist"],"inputModes":null,"outputModes":null},{"id":"scan_incoming_payment","name":"Check a 402 offer before paying it","description":"Call before the agent pays a 402 offer / payment request it received. Answers 'is this offer safe to pay?' — checks the resource URL for spoofing (IP hosts, punycode, shorteners, credential demands), price sanity, replay, and counterparty reputation. Returns allow/flag/block.","tags":["security","payments","x402","firewall","fraud-detection","phishing","scam-prevention"],"inputModes":null,"outputModes":null},{"id":"scan_outgoing_payment","name":"Check a payment before sending it","description":"Call before the agent settles an outgoing x402 payment. Answers 'is this safe to send?' — catches paying an address that came from injected content the agent just read, replayed nonces, overpayment vs the quote, secrets/PII in payment metadata, fake/lookalike USDC contracts, address poisoning, and reported counterparties. Returns allow/flag/block.","tags":["security","payments","x402","firewall","fraud-detection","prompt-injection","scam-prevention","wallet-security","agent-safety"],"inputModes":null,"outputModes":null}],"skills_removed":[],"skills_changed":[],"fields_changed":[{"field":"name","before":null,"after":"TollWarden"},{"field":"description","before":null,"after":"Call this before your agent settles any x402 payment to check it for fraud. TollWarden answers 'is this payment safe to send?' and 'is this 402 offer safe to pay?' — catching payments to attacker-controlled addresses injected into content the agent just read (prompt-injection-triggered payments), replayed authorizations, overpayment vs the quote, secrets leaking through payment metadata, fake/lookalike USDC contracts, and address poisoning. Returns allow/flag/block with machine-readable reasons and an Ed25519-signed verdict a wallet can enforce. Non-custodial: never holds keys or funds; wraps whatever wallet/facilitator the agent already uses."},{"field":"version","before":null,"after":"1.6.0"},{"field":"protocolVersion","before":null,"after":"0.3.0"},{"field":"url","before":null,"after":"https://tollwarden.com"},{"field":"capabilities","before":null,"after":{"streaming":false,"pushNotifications":false}},{"field":"provider","before":null,"after":{"organization":"TollWarden","url":"https://tollwarden.com"}}],"other_changed":true,"is_empty":false,"human_summary":"added 3 skills · name ∅ → TollWarden · description ∅ → Call this before your agent settles any  · version ∅ → 1.6.0 · protocolVersion ∅ → 0.3.0 · url ∅ → https://tollwarden.com · capabilities ∅ → none · provider ∅ → TollWarden"}}]}