x402 resource directory
Find paid HTTP operations and MCP tools by URL, host, method or tool name. Compare payment terms across networks and catalogs.
- Distinct HTTP URLs
- 164,839
- Distinct MCP URLs
- 43
- Catalog observations
- 263,972
- URLs with a 402 in 7 days
- 2,279
- Network identifiers
- 183
These results as JSON · Clear filters
POST
https://x402.nz1labs.com/v1/batch
· 2 observations
Batch vulnerability scan for up to 50 dependencies in one call (OSV database). Returns per-package vulnerable flags with CVE/GHSA ids, CVSS vectors and fixed versions.
-
Base
·
exact$0.0500 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 1 calls and 1 unique payers in 30 days. Last call . -
Base
·
exact$0.0500 (USDC)agentic.market · seen
POST
https://x402.nz1labs.com/v1/commit
· 2 observations
Check whether a specific git commit of a package is affected by known vulnerabilities (OSV commit query). Useful for pinned/vendored dependencies.
-
Base
·
exact$0.0200 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 1 calls and 1 unique payers in 30 days. Last call . -
Base
·
exact$0.0200 (USDC)agentic.market · seen
POST
https://x402.nz1labs.com/v1/crates-io
· 2 observations
Check a specific crates.io package version for known vulnerabilities (OSV database). Returns CVE/GHSA ids, CVSS vectors, summaries and fixed versions. Dedicated endpoint for crates.io dependency auditing.
-
Base
·
exact$0.0200 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 1 calls and 1 unique payers in 30 days. Last call . -
Base
·
exact$0.0200 (USDC)agentic.market · seen
GET
https://x402.nz1labs.com/v1/cves/:id
· 2 observations
Full details for one CVE, GHSA or OSV vulnerability id from the OSV database: affected ranges, severity vectors, references, fixed versions across all ecosystems.
-
Base
·
exact$0.0200 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 1 calls and 1 unique payers in 30 days. Last call . -
Base
·
exact$0.0200 (USDC)agentic.market · seen
POST
https://x402.nz1labs.com/v1/go
· 2 observations
Check a specific Go package version for known vulnerabilities (OSV database). Returns CVE/GHSA ids, CVSS vectors, summaries and fixed versions. Dedicated endpoint for Go dependency auditing.
-
Base
·
exact$0.0200 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 1 calls and 1 unique payers in 30 days. Last call . -
Base
·
exact$0.0200 (USDC)agentic.market · seen
POST
https://x402.nz1labs.com/v1/maven
· 2 observations
Check a specific Maven package version for known vulnerabilities (OSV database). Returns CVE/GHSA ids, CVSS vectors, summaries and fixed versions. Dedicated endpoint for Maven dependency auditing.
-
Base
·
exact$0.0200 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 1 calls and 1 unique payers in 30 days. Last call . -
Base
·
exact$0.0200 (USDC)agentic.market · seen
POST
https://x402.nz1labs.com/v1/npm
· 2 observations
Check a specific npm package version for known vulnerabilities (OSV database). Returns CVE/GHSA ids, CVSS vectors, summaries and fixed versions. Dedicated endpoint for npm dependency auditing.
-
Base
·
exact$0.0200 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 3 calls and 2 unique payers in 30 days. Last call . -
Base
·
exact$0.0200 (USDC)agentic.market · seen
POST
https://x402.nz1labs.com/v1/packagist
· 2 observations
Check a specific Packagist package version for known vulnerabilities (OSV database). Returns CVE/GHSA ids, CVSS vectors, summaries and fixed versions. Dedicated endpoint for Packagist dependency auditing.
-
Base
·
exact$0.0200 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 1 calls and 1 unique payers in 30 days. Last call . -
Base
·
exact$0.0200 (USDC)agentic.market · seen
POST
https://x402.nz1labs.com/v1/pypi
· 2 observations
Check a specific PyPI package version for known vulnerabilities (OSV database). Returns CVE/GHSA ids, CVSS vectors, summaries and fixed versions. Dedicated endpoint for PyPI dependency auditing.
-
Base
·
exact$0.0200 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 1 calls and 1 unique payers in 30 days. Last call . -
Base
·
exact$0.0200 (USDC)agentic.market · seen
POST
https://x402.nz1labs.com/v1/query
· 2 observations
Scan an npm, PyPI, RubyGems, Go, Maven, crates.io or Packagist package version for known vulnerabilities (OSV database). Returns CVE/GHSA ids, CVSS vectors, summaries and fixed versions.
-
Base
·
exact$0.0200 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 3 calls and 1 unique payers in 30 days. Last call . -
Base
·
exact$0.0200 (USDC)agentic.market · seen
POST
https://x402.nz1labs.com/v1/rubygems
· 2 observations
Check a specific RubyGems package version for known vulnerabilities (OSV database). Returns CVE/GHSA ids, CVSS vectors, summaries and fixed versions. Dedicated endpoint for RubyGems dependency auditing.
-
Base
·
exact$0.0200 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 1 calls and 1 unique payers in 30 days. Last call . -
Base
·
exact$0.0200 (USDC)agentic.market · seen
GET
https://x402.nz1labs.com/v1/vulns/:id
· 2 observations
Full details for one vulnerability by id (GHSA-, CVE-, OSV- prefixed) from the OSV database: affected ranges, severity vectors, references, fixed versions.
-
Base
·
exact$0.0200 (USDC)Recipient0xBb2186dd8569eF2FE39dDF8E9796640b057FfEe3Coinbase CDP · seenCoinbase CDP reports 1 calls and 1 unique payers in 30 days. Last call . -
Base
·
exact$0.0200 (USDC)agentic.market · seen
Counts describe directory coverage, including testnets. Each resource groups the same URL, HTTP method or MCP tool across sources. A catalog sighting records published terms. A live 402 records the endpoint’s reply to an unpaid request.