{"uid":"cap_SwiJuCfhrQa5qCTfR8IFY","slug":"trollbridge-egress-audit-1c3bf109","name":"TrollBridge Egress Audit","description":"The insurance booth for AI agents, with Mini's Agent Supply Store on the side of the road. One hundred checkpoints: pre-transaction safety lanes (honeypot, approval-risk, rug-score, receipt-check, tx-dryrun, permit-scan, airdrop-verdict, deployer-history, wallet-watch, secret-scan at $0.02 USDC per call; the protection tier — /contract-check, /approval-screen, /tx-plain-english, /honeypot-check, /tx-simulate, /redteam, /skill-scan, /verdict, /egress-audit, /tool-gate, /airlock, /repo-scan, /prove, /task-scope — at $0.10; the one-call /shield don't-get-rugged screen at $0.25; the full /preflight bundle at $0.05), bounty intel (bounties, fresh, verdicts, deadlines, sweepstakes, opportunities) at $0.02 USDC per call, trader intel (/prices and /quant at $0.02; /enrich and /token-check at $0.05; /contract-check and /honeypot-check at $0.10; /sec-facts at $0.05), market intel (/markets and /search at $0.05; /grants at $0.02), DeFi intel (/yields and /new-pairs at $0.05; /gas and /defi at $0.02), AI intel (/models at $0.02), agent-ops intel (/prompt-cost, /model-picks, /rpc-speed, /terms-tldr, /scrape, /gigs, /retry-verify, /idempotency, /verify-independent at $0.02; /site-watch, /wallet-check, /code-run, /regulatory-pack, /sage, /cron-watch, /caveat-check, /tripwire, /escrow, /trust, /bridge-fees, /dao-votes, /dev-activity, /dex-arb, /dydx-perps, /funding-rates, /gas-predict, /hack-tracker, /long-short-ratio, /lp-yields, /mev-scan, /open-interest, /perp-basis, /polymarket-odds, /rwa-watch, /sentiment, /stablecoin-flows, /tokenomics, /top-movers, /whale-watch, and /yield-stable at $0.05; /approval-screen, /tx-plain-english, /tx-simulate, and /task-scope at $0.10; /scam-scan deep scan at $5.00 or 30-day subscription at $30.00), supply store (/road-pack combo meal at $0.05; curated datasets, the /audit-prep pre-audit review, and the /prove-state symbolic-execution run at $1.00; the /audit AI-agent audit at $25.00). Every lane answers before money moves — heuristic verdicts, not audits. Don't get rugged.","url":"https://mini-tollbooth.onrender.com/egress-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["log"],"properties":{"log":{"type":"string","description":"JSON array of outbound requests: [{url, method, body_snippet}]. URL-encoded."},"manifest":{"type":"string","description":"Optional JSON {endpoints: [...]} of declared endpoints (domains or URLs). URL-encoded."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"lane":"/egress-audit","summary":"…","verdict":"REVIEW","findings":[{"type":"undeclared-endpoint","detail":"…","url_host":"webhook.example.net","request_index":3}],"description":"NOT AN AUDIT — heuristic egress screen: paste your agent's outbound request log (JSON: url, method, body_snippet) plus an optional declared-endpoint manifest, and get flagged workspace-content and secret leaks to unvetted endpoints plus declared-vs-actual endpoint analysis. Verdict: EXFILTRATION_RISK, REVIEW, or CLEAN ($0.10).","requests_analyzed":12,"undeclared_endpoints":["webhook.example.net"]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm__o7rVrA2H2tmZfHwlCuM6","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Screens an AI agent's outbound request log for data exfiltration risks, secret leaks, and undeclared endpoint calls, returning a CLEAN/REVIEW/EXFILTRATION_RISK verdict.","exampleAgentPrompt":"Can you run an egress audit on my agent's last 12 outbound requests — here's the log as a JSON array with url, method, and body_snippet for each — and check them against my declared endpoint manifest to see if anything is leaking secrets or calling unauthorized hosts?","exampleUseCases":[{"title":"Agent data exfiltration detection","prompt":"My autonomous trading agent just ran a session — here's its full outbound request log as a JSON array. Can you audit it against my declared endpoints list and tell me if it's leaking any API keys or hitting any hosts it shouldn't be?"},{"title":"Post-deployment agent network review","prompt":"I just deployed a new AI agent and want to make sure it's only calling the endpoints I approved. Here's its request log and my declared manifest — can you screen it and flag anything that looks like undeclared or suspicious egress?"},{"title":"Secret leak scan in agent traffic","prompt":"I'm worried my agent might be exfiltrating workspace content or tokens in its outbound HTTP calls. Can you scan this JSON request log for secret leaks and tell me if the verdict is CLEAN or if there's something I need to worry about?"}],"resultDescription":"A JSON object containing a lane identifier, a natural-language summary, an overall verdict (EXFILTRATION_RISK, REVIEW, or CLEAN), a findings array with typed findings (e.g. undeclared-endpoint, secret-leak) including detail and host info, a count of requests analyzed, and a list of undeclared endpoint hostnames detected.","failureModes":["Missing or malformed 'log' query parameter returns an error — log must be a URL-encoded JSON array","Improperly formatted request objects (missing url, method, or body_snippet fields) may cause incomplete analysis","Very large request logs may be truncated or timeout","Payment of $0.10 USDC required per call via x402 — missing payment returns 402","False negatives possible as analysis is heuristic, not deterministic"],"whenToPreferThis":"Use this endpoint when you need to audit an AI agent's actual outbound HTTP traffic for exfiltration, secret leaks, and calls to undeclared or unauthorized endpoints — especially as a post-session or post-deployment check. Prefer it over generic network monitoring tools when you want a structured verdict (EXFILTRATION_RISK/REVIEW/CLEAN) with per-finding detail tailored to AI agent behavior, and when you have a declared endpoint manifest to diff against actual traffic.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T12:37:57.931Z","isFirstParty":false,"canonicalSlug":"trollbridge-egress-audit-1c3bf109"}