{"uid":"cap_R_4A67Yf5wp_nmIWMtSyA","slug":"x402-trust-scan-68ffa71a","name":"x402 Trust Scan","description":"Pre-payment trust check of any x402 endpoint, so an agent can filter malformed or unknown (honeypot) endpoints before spending. Reads the target's own 402 terms (reachability, HTTPS, well-formed x402 v2, Bazaar discovery extension) and the public Coinbase CDP catalog (whether the payTo has settled history). Returns tier ESTABLISHED/BASIC/UNVERIFIED, a 0-100 trust_score, per-signal booleans and reasons. It never pays the target; a high tier is not a guarantee. Query: ?url=<x402 endpoint url>","url":"https://gdzlcxskuhupymyxywzm.supabase.co/functions/v1/x402scan/v1/scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"Full URL of the x402 endpoint to assess (https)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_PFj0ieb7dXZzYW5XwS8_T","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Pre-payment trust assessment of an x402 endpoint, returning a tier (ESTABLISHED/BASIC/UNVERIFIED), a 0-100 trust score, and per-signal booleans before an agent spends any funds.","exampleAgentPrompt":"Before my agent calls that x402 endpoint at https://api.example.com/data, run a trust scan on it so I can see its trust tier and score — I want to make sure it's not a honeypot before spending anything.","exampleUseCases":[{"title":"Pre-payment honeypot filter","prompt":"I'm about to have my agent pay an x402 endpoint at https://some-new-api.xyz/v1/prices — can you scan it first and tell me if it's ESTABLISHED, BASIC, or UNVERIFIED, and what the trust score is? I don't want to throw money at a scam."},{"title":"Vetting marketplace discovery results","prompt":"I found a few x402 APIs on agentic.market that look useful — can you trust-scan https://payments.databroker.io/weather for me so I can see if its payTo address has any Coinbase settlement history and whether it's properly x402 v2 compliant?"},{"title":"Agent safety gate before autonomous spend","prompt":"My autonomous agent is about to call https://api.cryptofeed.io/x402/prices and pay 0.05 USDC — run x402 Trust Scan on that URL first and block the payment if the trust tier comes back UNVERIFIED."}],"resultDescription":"Returns a trust tier (ESTABLISHED, BASIC, or UNVERIFIED), a numeric trust_score from 0 to 100, and a set of per-signal boolean results with human-readable reasons covering: endpoint reachability, HTTPS use, well-formed x402 v2 response, presence in Bazaar discovery, and whether the payTo address has settled payment history in the Coinbase CDP catalog.","failureModes":["Target URL is unreachable — reachability signal fails, trust score lowered","Target does not return a 402 response — x402 conformance signals fail","Malformed or missing 'url' query parameter — request rejected with validation error","Supabase function cold start may add latency on first call","payTo address not found in CDP catalog — CDP history signal fails but call still succeeds","HTTPS not enforced on target — HTTPS signal fails with explanatory reason"],"whenToPreferThis":"Use this endpoint whenever an AI agent is about to autonomously pay an unfamiliar x402 endpoint and needs a fast pre-payment safety gate. It is specifically designed for the x402 protocol ecosystem and checks signals (Bazaar discovery, CDP settlement history, x402 v2 conformance) that generic URL reputation services do not cover. Prefer it over manual inspection or generic domain checkers when the risk is financial loss from a honeypot or malformed endpoint.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-25T10:32:11.520Z","isFirstParty":false,"canonicalSlug":"x402-trust-scan-68ffa71a"}