{"uid":"cap_c_YSRKYpFcTadyOdSrqc0","slug":"barriere-access-keys-audit-af0c171f","name":"Barriere Access Keys Audit","description":"No conflicting access keys audit fetches current public evidence from the supplied target and evaluates the documented criterion. It returns the observation, threshold, verdict, exact evidence source, limitations and a mode-specific action. The check is passive: no login attempt, payload injection, exploit, purchase, form submission or load test is performed.","url":"https://barriere.halowerk.com/v1/accesskeys-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"target":{"type":"string","maxLength":2048,"minLength":3,"description":"Public HTTP(S) URL or domain to inspect. A bare domain is normalized to HTTPS."},"context":{"type":"object","description":"Optional non-secret correlation labels returned unchanged only in the request lifecycle.","maxProperties":12,"additionalProperties":{"type":["string","number","boolean","null"]}},"baseline":{"type":["object","null"],"description":"Optional baseline returned by a previous snapshot call.","additionalProperties":true},"compare_url":{"type":"string","maxLength":2048,"minLength":3,"description":"Optional public comparison URL. Used by change and monitoring services."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_2gSlTC2SigRGcOWk-ci2l","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Passively audits a public URL or domain for conflicting access keys, returning observations, thresholds, verdicts, evidence sources, limitations, and recommended actions.","exampleAgentPrompt":"Can you passively audit https://example.com for conflicting access keys and give me a verdict with the evidence source and any recommended action?","exampleUseCases":[{"title":"Pre-launch security check","prompt":"Before we go live, can you run an access keys audit on https://staging.myapp.com and tell me if there are any conflicting access keys and what the verdict is?"},{"title":"Continuous monitoring baseline comparison","prompt":"Run an access keys audit on https://api.myservice.com and compare it against the baseline snapshot from last week — let me know if anything has changed or if there are any conflicts."},{"title":"Third-party vendor vetting","prompt":"We're considering integrating with https://vendor-api.thirdparty.com — can you audit it for conflicting access keys and tell me the evidence, verdict, and any limitations I should know about?"}],"resultDescription":"Returns a structured report containing the observation (what was found), the threshold used for evaluation, the verdict (pass/fail/warning), the exact evidence source, any limitations of the passive check, and a mode-specific recommended action. No login, payload injection, or exploit is performed.","failureModes":["Target URL is unreachable or returns a non-2xx response, resulting in inability to fetch evidence","Malformed or non-public URL provided, causing normalization or validation failure","Target domain has no detectable access key artifacts, returning an inconclusive observation","Rate limiting or blocking by the target server preventing evidence collection","Baseline object is malformed or incompatible, causing comparison to be skipped"],"whenToPreferThis":"Choose this endpoint when you need a passive, non-invasive audit of a public URL or domain specifically for conflicting access keys — without triggering any login attempts, payload injections, or load tests. Ideal for pre-launch checks, vendor vetting, or continuous monitoring scenarios where you want documented evidence, a threshold-based verdict, and an actionable recommendation without touching authenticated or private surfaces.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-02T06:30:20.427Z","isFirstParty":false,"canonicalSlug":"barriere-access-keys-audit-af0c171f"}