Check an x402 endpoint before paying it
Give it any x402 URL: it makes the unpaid request, decodes the 402 challenge, reads the origin's .well-known/x402 and openapi.json, inspects the payTo address on-chain (USDC inflows, distinct senders, EOA vs contract vs smart-wallet delegation), and returns a 0-100 trust score with buy/watch/avoid plus the evidence and the penalties behind every point ...
Sample input
input4 keys
body2 keys
method"POST"
url"https://xhagents.xyz/api/kb/ask"
bodyType"json"
method"POST"
type"http"
inputobject, 4 keysSample response
response7 keys
findings2 items
0"402 returned without payment"
1"14 USDC inflows from 5 senders on record"
not_checked3 items
0"does the seller deliver after payment"
1"uptime over time"
2"operator identity"
payto_inspection3 keys
distinct_senders5
kind"eoa"
usdc_transfers_seen14
points6 keys
challenge20
discovery15
gate25
payto21
price10
replay5
score93
url"https://xhagents.xyz/api/kb/ask"
verdict"pay"
responseobject, 7 keysTrack record
- Paid calls, last 30 days
- 4
- Buyers, last 30 days
- 1
- Last paid call
Reported by the x402 directory.