{"uid":"cap_LQnoKElrTu08TClC-9fsp","slug":"lineagelint-x402-challenge-audit-84bf729d","name":"LineageLint x402 Challenge Audit","description":"An autonomous paid API accepting USDC on Base mainnet.","url":"https://47-85-47-24.sslip.io/v1/x402-challenge-audit","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","properties":{},"additionalProperties":false}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","required":["analyzer","label","protocol_version","verdict","automation_ready","risk_score","accepted_option_count","policy_safe_option_count","findings","checks","normalized_options","policy","coverage"],"properties":{"label":{"type":"string"},"checks":{"type":"object"},"policy":{"type":"object"},"verdict":{"enum":["BLOCK","WARN","PASS"],"type":"string"},"analyzer":{"type":"string"},"coverage":{"type":"object"},"findings":{"type":"array","items":{"type":"object"}},"risk_score":{"type":"integer","maximum":100,"minimum":0},"automation_ready":{"type":"boolean"},"protocol_version":{"type":["integer","null"]},"normalized_options":{"type":"array","items":{"type":"object"}},"accepted_option_count":{"type":"integer","minimum":0},"policy_safe_option_count":{"type":"integer","minimum":0}}}}}}},"responseSchema":{"type":"json","example":{"label":"paid-example:x402-challenge","checks":{"within_budget":true,"recipient_bound":true,"supported_version":true,"has_payment_options":true,"has_policy_safe_option":true,"bazaar_metadata_complete":true},"policy":{"expected_asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","require_bazaar":true,"expected_pay_to":null,"max_amount_usdc":"0.05","expected_network":"eip155:8453","max_timeout_seconds":300},"verdict":"PASS","analyzer":"x402-challenge-audit/1.0","coverage":{"source_format":"json-object","challenge_bytes":468,"challenge_sha256":"e2be325f2158ef5cf381a24934582e8e6a7321a3f58ff30aeb19db175984db42","wallet_or_signature_used":false,"external_targets_contacted":false,"original_challenge_returned":false},"findings":[],"risk_score":0,"automation_ready":true,"protocol_version":2,"normalized_options":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","pay_to":"0x1111111111111111111111111111111111111111","scheme":"exact","network":"eip155:8453","amount_usdc":"0.05","policy_safe":true,"amount_atomic":"50000","max_timeout_seconds":300}],"accepted_option_count":1,"policy_safe_option_count":1}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_18aU8ROp83M57ZSlld-LK","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits and validates an x402 payment challenge payload, scoring its risk, checking policy compliance, and returning a PASS/WARN/BLOCK verdict with detailed findings.","exampleAgentPrompt":"Can you audit the x402 payment challenge this API returned and tell me if it's safe to pay — give me the verdict, risk score, and whether it's automation-ready?","exampleUseCases":[{"title":"Validate payment challenges before batch processing","prompt":"I'm getting hundreds of x402 payment challenges from different APIs. Before my agent auto-pays any of them, can you audit each one and flag which ones are risky or don't match our budget policy? I need the verdict and risk score for each."},{"title":"Ensure micropayments comply with security policy","prompt":"My agent handles lots of small USDC transactions on Base. Before paying any x402 challenge, please check it against our security requirements—make sure the recipient is bound, we're within budget, and it's safe to automate. Give me a clear pass or block."},{"title":"Audit third-party API payment demands","prompt":"This third-party service is asking my agent to pay an x402 challenge to unlock data. Before I authorize the payment, audit the challenge for any security issues or policy violations and tell me if it's automation-ready or if I should block it."}],"resultDescription":"A JSON object containing: a verdict (PASS, WARN, or BLOCK), a risk_score (0-100), an automation_ready boolean, a list of findings (issues found), a checks object (policy compliance flags like within_budget, recipient_bound, supported_version), normalized payment options with asset/network/amount details, a coverage report describing how the challenge was analyzed, and policy metadata including expected asset, network, and max USDC amount.","failureModes":["Invalid or missing HTTP method in request — returns 400","Challenge payload not present or malformed — may return BLOCK verdict with findings","Unsupported protocol version — reflected in checks.supported_version=false and elevated risk_score","No policy-safe payment options found — verdict WARN or BLOCK","Payment before analysis completes — 402 response requiring USDC payment first"],"whenToPreferThis":"Use this endpoint when you need to programmatically audit an x402 payment challenge before deciding whether to pay it — especially in automated agent workflows where you want a machine-readable PASS/WARN/BLOCK verdict, policy compliance checks, and a risk score rather than inspecting the raw challenge yourself. Prefer this over manual inspection when safety, budget compliance, and recipient binding need to be verified at scale.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-13T18:50:11.254Z","isFirstParty":false}