{"uid":"cap_qRLc4PtJd_M9uD-l1R2Gt","slug":"crawler-identity-verification-for-x402-mpp-merchants-9972faa9","name":"Crawler Identity Verification for x402/MPP Merchants","description":"Decision procedure for x402/MPP merchants receiving inbound requests that claim an AI crawler user-agent (ClaudeBot, GPTBot, PerplexityBot, CCBot, cohere-ai, etc.) but may be mass vulnerability scanners spoofing those names to get past bot defenses. Inputs: user-agent string, source IP, claimed origin domain, request path set, rate, and whether the endpoint demands a 402 challenge. Steps: 1) extract claimed crawler identity; 2) look up the identity's published IP ranges or reverse-DNS pattern;","url":"https://k2so.wrong.systems/api/services/crawler-identity-verification-x402-merchants?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","properties":{"meta":{"enum":["0","1"],"type":"string","description":"Set to 1 for free metadata JSON (no payment required)"},"topic":{"type":"string","description":"Optional topic override for the decision procedure"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","title":"crawler identity verification before serving paid endpoints paid response","$schema":"https://json-schema.org/draft/2020-12/schema","required":["ok","paid","service","provider","result"],"properties":{"ok":{"type":"boolean"},"paid":{"type":"boolean"},"result":{"type":"object","required":["ok","service"],"properties":{"ok":{"type":"boolean","description":"Handler success"},"brief":{"type":"string","description":"Decision procedure prose for agents"},"model":{"type":"string"},"topic":{"type":"string"},"service":{"type":"string","description":"Service slug"},"procedure":{"type":"string"},"generatedAt":{"type":"string","description":"ISO-8601 timestamp"},"generationSource":{"enum":["llm","reasoning","deterministic"],"type":"string"}}},"payment":{"type":"object","properties":{"code":{"type":"string"},"payer":{"type":"string"},"detail":{"type":"string"},"selfPay":{"type":"boolean"},"transaction":{"type":"string"}}},"service":{"type":"string"},"provider":{"type":"string","const":"K-2SO"}}}}}}},"responseSchema":{"type":"json","example":{"ok":true,"paid":true,"result":{"ok":true,"brief":"plain prose decision procedure (120+ words)","model":"deepseek/deepseek-v4-flash-0731","topic":"string topic","service":"crawler-identity-verification-x402-merchants","procedure":"same as brief","generatedAt":"2026-01-01T00:00:00.000Z","generationSource":"deterministic"},"service":"crawler-identity-verification-x402-merchants","provider":"K-2SO"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"down","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_L6xzXATxAGiT2pgSOqNj8","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns a decision procedure for distinguishing legitimate AI crawler bots from vulnerability scanners spoofing crawler user-agents at x402/MPP paid endpoints.","exampleAgentPrompt":"I'm running an x402-protected endpoint and getting requests claiming to be GPTBot — can you give me a decision procedure to verify whether the source IP and user-agent are actually from a legitimate OpenAI crawler or a scanner spoofing it?","exampleUseCases":[{"title":"Block scanner spoofing ClaudeBot at paid endpoint","prompt":"I'm getting a lot of traffic to my x402 API that claims to be ClaudeBot but the IPs look suspicious — give me a step-by-step procedure to verify if these are real Anthropic crawlers or vulnerability scanners trying to get past my bot defenses."},{"title":"Validate PerplexityBot before serving paid content","prompt":"Before I let PerplexityBot access my micropayment-gated content endpoint, I need a decision procedure that checks the user-agent, source IP range, and reverse-DNS against Perplexity's published crawler specs — can you run that check?"},{"title":"High-rate CCBot traffic anomaly investigation","prompt":"My x402 merchant endpoint is seeing a burst of CCBot-claimed requests at unusually high rates — walk me through a procedure to determine if this is a legitimate Common Crawl scrape or a mass vulnerability scan spoofing that user-agent."}],"resultDescription":"Returns a JSON object containing a plain-prose decision procedure (120+ words) describing step-by-step how to verify the claimed crawler identity, along with the service slug, provider name, generation source (llm/reasoning/deterministic), the model used, and an ISO-8601 timestamp. The 'brief' and 'procedure' fields contain the actionable verification steps.","failureModes":["Missing or malformed query parameters may return an incomplete or generic procedure","Non-payment or failed 402 challenge returns a payment-required response without the decision content","Invalid topic override may cause the procedure to be off-target","High load on the LLM backend may increase latency or return a deterministic fallback","IP ranges for newer or obscure crawlers may not be in the knowledge base, leading to inconclusive verdicts"],"whenToPreferThis":"Choose this endpoint when you are operating an x402 or micropayment-protected API and need a structured, authoritative decision procedure to distinguish real AI crawler bots (ClaudeBot, GPTBot, CCBot, PerplexityBot, cohere-ai) from vulnerability scanners spoofing those identities. It is especially valuable when you want a ready-made prose procedure you can feed directly to an agent rather than implementing IP range lookups and reverse-DNS checks yourself.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T22:28:33.269Z","isFirstParty":false,"canonicalSlug":"crawler-identity-verification-for-x402-mpp-merchants-9972faa9"}