{"audit":{"version":"1.5","generated_at":"2026-11-02T19:25:53.223482+00:00","generated_by":"Agenstry","report_url":"https://agenstry.com/agents/x402check.dev","methodology_url":"https://agenstry.com/methodology","verifier_jwks_url":"https://agenstry.com/.well-known/jwks.json","subject":{"domain":"x402check.dev","name":"x402check","url":"https://x402check.dev/.well-known/agent-card.json"}},"identity":{"provider":{"organization":"x402check","url":"https://x402check.dev"},"registry_verification":null,"signature":{"signed":false,"signature_valid":null}},"protocol":{"version":"2","supports_streaming":false,"supports_push_notifications":false},"operational":{"live_state":"no_url","live_responds":null,"last_status_code":200,"last_elapsed_ms":28,"last_error":null},"track_record":{"first_seen":"2026-11-01T14:50:27.090655+00:00","last_checked":"2026-11-02T16:58:31.598247+00:00","last_seen_ok":"2026-11-02T16:58:31.598247+00:00","checks_total":4,"checks_ok":4,"uptime_pct":100.0,"uptime_window_days":30,"uptime_probes":3,"archived":false,"archived_reason":null},"conformance":{"score":44,"grade":"D","summary":"D-grade: significant issues, auth-gated, partially broken, or stale.","criteria":[{"key":"valid_card","label":"Valid AgentCard","points":10,"max_points":10,"status":"pass","detail":"Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification)."},{"key":"live_responds","label":"Live JSON-RPC","points":10,"max_points":25,"status":"partial","detail":"Card declares only gRPC / HTTP+JSON interfaces; the live probe covers JSON-RPC, so the endpoint was not exercised. Not a defect in the card."},{"key":"protocol_version","label":"Protocol version","points":2,"max_points":10,"status":"partial","detail":"Declares unrecognised version '2'."},{"key":"signature","label":"JWS signature","points":0,"max_points":10,"status":"info","detail":"Card is unsigned (most published agents are)."},{"key":"uptime","label":"Uptime track record","points":0,"max_points":15,"status":"info","detail":"Only 3 probes so far, need ≥5 for an uptime grade."},{"key":"skills","label":"Skill declaration","points":10,"max_points":10,"status":"pass","detail":"Declares 3 skills with structured metadata."},{"key":"verified_identity","label":"Verified Identity","points":5,"max_points":10,"status":"partial","detail":"Provider declared: x402check (https://x402check.dev). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit."},{"key":"freshness","label":"Freshness + modern flags","points":5,"max_points":5,"status":"pass","detail":"declares 1 modern capability flag(s) (x402); seen in upstream source within 0d"},{"key":"security","label":"Security declaration","points":2,"max_points":5,"status":"partial","detail":"Declares 1 security scheme(s) but none use PKCE or mTLS."}]},"card_read":{"findings":[],"clean":true,"source_url":"https://x402check.dev/.well-known/agent-card.json"},"skills":[{"id":"preflight_one","name":"Preflight one x402 tool","description":"Check before paying one absolute https x402 seller URL. Use for: is this API a scam; is this endpoint safe/legit; verify payTo; detect price or wallet drift; check uptime; validate 402 payment requirements; budget guard before signing USDC on Base; debug a failing 402.","tags":["x402","trust","preflight","safety","payTo","verify","uptime","scam-check","check-before-paying","budget-guard"],"examples":["GET https://x402check.dev/preflight?url=https://seller.example/api (pay $0.01 first)","Is https://seller.example/x402 safe to pay?","Is this API a scam before I pay?","Check before paying this x402 tool","Verify payTo for this x402 tool before settle","Has this seller changed price or wallet?","Is this x402 endpoint down?"],"inputModes":["application/json"],"outputModes":["application/json"]},{"id":"verify_payto","name":"Verify x402 payTo","description":"Extract and verify the receiving wallet (payTo) from a seller's live 402 challenge, with history of wallet rotations. Use before signing a USDC transfer.","tags":["x402","payTo","verify","wallet","Base","USDC"],"examples":["What payTo address does this x402 tool demand?","Compare payTo to my allowlist before settle"],"inputModes":["application/json"],"outputModes":["application/json"]},{"id":"preflight_batch","name":"Compare / batch preflight x402 tools","description":"Trust-check up to 25 seller URLs in one request. Charged per URL (N × unit) in a single Exact settlement. Use when comparing candidates, picking cheapest/most reliable, or screening Bazaar hits before paying.","tags":["x402","trust","batch","compare","cheapest","reliable"],"examples":["POST https://x402check.dev/preflight {\"urls\":[\"https://a.example\",\"https://b.example\"]}","Which of these paid APIs is safest and cheapest?"],"inputModes":["application/json"],"outputModes":["application/json"]}],"provenance":[{"source":"agentic_market","first_seen":"2026-11-01T14:50:27.090655+00:00"},{"source":"recrawl_paid","first_seen":"2026-11-01T14:55:57.769519+00:00"},{"source":"recrawl_warm","first_seen":"2026-11-02T04:01:03.593678+00:00"}],"recent_probes":[{"fetched_at":"2026-11-02T16:58:31.598247+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":28,"live_responds":null},{"fetched_at":"2026-11-02T04:01:03.593678+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":33,"live_responds":null},{"fetched_at":"2026-11-01T14:55:57.769519+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":48,"live_responds":null}],"catalog_attestation":null,"operator_revenue_evidence":{"evidence_class":"operator_submitted","authenticity":{"rung":"no_operator_evidence","rank":0,"why":"No verifiable operator evidence has been submitted for this agent.","thresholds":{"min_independent_payers":3,"min_verified_usd":25.0},"engine_table":"agent_authenticity","merge_rule":"max(existing_rank, rank)"},"metric_metadata":{"provenance":"operator_submitted_evidence","confidence":"attested","coverage":{"numerator":0},"as_of":"2026-11-02T19:25:53.232346+00:00","definition":"Revenue proofs submitted by the verified owner and re-checked by Agenstry against the settlement chain or the operator's own Stripe account. Only independently confirmed proofs are counted."},"counts":{"retained":0,"verified":0,"unverifiable":0},"verified":{"gross_usd":0.0,"transactions":0,"independent_payers":0},"detail_url":"https://agenstry.com/api/agents/x402check.dev/evidence","dispute_url":"https://agenstry.com/agents/x402check.dev/dispute"},"verification_history":[],"signatures":[{"protected":"eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vYWdlbnN0cnkuY29tLy53ZWxsLWtub3duL2p3a3MuanNvbiIsImtpZCI6ImFnZW50ZmluZGVyLWVzMjU2LTEiLCJ0eXAiOiJKT1NFIn0","signature":"b1jkg0xO06cQX2gB8JkPLCMdRRmSgVCCRQAqGCUn7eF4Pqzbo6RvSTXeYHRh-fl-afTuhFbHF6sZmYdnIHutKg"}]}