{"uid":"cap_okvHD_03WNYq3_vLqZqW5","slug":"synthex-forge-x402-authorized-red-team-scan-591f0c06","name":"Synthex Forge x402 Authorized Red Team Scan","description":"Synthex Forge x402 Receive: 41 paid verification, attestation and governance endpoints (Ed25519 + SHA-256 signed artifacts) plus free verify/public-key/standard sibling routes. Paid routes answer HTTP 402 with an x402 v2 `payment-required` envelope (atomic USDC on Base mainnet, chain ID 8453). Free routes are declared with `security: []` per the x402scan discovery spec.","url":"https://x402.synthexforge.com/v1/security/redteam/authorized-scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"target_url":{"type":"string"},"authorized_tests":{"type":"array"},"scope_description":{"type":"string"},"authorization_evidence":{"type":"array"}}},"responseSchema":{"type":"json","example":{"ok":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.25","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.25/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.25","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.25","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_nD4yEpsN0onhJtIpMCWrA","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.25","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Executes a paid, authorized red team security scan against a target URL, returning a signed attestation of findings with Ed25519 + SHA-256 proof.","exampleAgentPrompt":"Run an authorized red team scan on https://app.mycompany.com — include SQL injection and XSS tests, scope it to the login and checkout flows, and provide the authorization evidence from our signed engagement letter.","exampleUseCases":[{"title":"Compliance-ready pentest attestation","prompt":"I need to run an authorized security scan on https://staging.acmecorp.com covering authentication bypass and CSRF tests, scoped to the user account management module. We have a signed authorization document — can you run the scan and get back a cryptographically signed artifact I can use for our SOC2 audit?"},{"title":"Pre-launch red team verification","prompt":"Before we go live on Friday, scan https://beta.launchapp.io for XSS and injection vulnerabilities — the scope is the public-facing API endpoints only, and I've got written authorization from the CISO as evidence."},{"title":"Governance artifact for third-party audit","prompt":"Our external auditors need proof that we ran an authorized red team assessment on https://portal.fintech-client.com. Run a scan covering privilege escalation and insecure direct object reference tests, scoped to the admin dashboard, and return a signed governance record we can hand over."}],"resultDescription":"Returns a JSON object with an 'ok' boolean confirming the scan was accepted, along with a signed attestation artifact (Ed25519 + SHA-256) documenting the authorized scan execution, findings summary, and scope confirmation suitable for governance and compliance records.","failureModes":["Missing or invalid authorization_evidence causes rejection of the request","target_url not reachable or out of scope returns an error","Insufficient USDC balance or payment failure results in HTTP 402 with payment-required envelope","Invalid authorized_tests values not recognized by the scan engine","Scope description too vague causes scan to be rejected for governance reasons"],"whenToPreferThis":"Choose this endpoint when you need not just a security scan but a cryptographically signed, attestable record of an authorized red team engagement — especially for compliance, SOC2, or governance requirements where proof of authorization and Ed25519-signed artifacts are mandatory. Prefer this over generic scanning tools when the auditability and blockchain-payment provenance of the engagement matter.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T00:50:08.692Z","isFirstParty":false,"canonicalSlug":"synthex-forge-x402-authorized-red-team-scan-591f0c06"}