# Compare x402 wallet risk and security APIs

x402 endpoints scoring addresses, contracts and counterparties, compared on price per call and on the observation window behind each figure.

> These are observations, not accusations. A band of LOW, MEDIUM or HIGH describes how much of
> what we check we were able to confirm — it is not a judgement about the operator of an
> endpoint. Every signal, its weight and its rationale are published at /methodology, and any
> operator can claim an endpoint, correct a fact or opt out at /crawler.

| Endpoint                      | Price per call | Network        | Asset          | Pays to                                    | Observed signals            | Watched for           | Terms last observed  |
| ----------------------------- | -------------- | -------------- | -------------- | ------------------------------------------ | --------------------------- | --------------------- | -------------------- |
| threat-feed                   | 0.005000 USDC  | eip155:8453    | USDC           | 0xD617a7145ca56E3ed58d639F9DEC6999B22441eE | 96/100 LOW (methodology v1) | under a day, 1 probe  | 2026-08-15T05:15:27Z |
| x402.fuchss.app               | 0.005000 USDC  | eip155:8453    | USDC           | 0xbBECBE90F28632a9d52ed67b33b43767b8c89285 | 96/100 LOW (methodology v1) | under a day, 1 probe  | 2026-08-15T05:01:09Z |
| AgentPay Pre-Trade Risk Check | 0.010000 USDC  | eip155:8453    | USDC           | 0xE8B25A72dD6aeF69515452a61AD231C7DF2843b7 | 96/100 LOW (methodology v1) | under a day, 1 probe  | 2026-08-15T05:00:29Z |
| AgentPay x402 Trust Oracle    | 0.010000 USDC  | eip155:8453    | USDC           | 0xE8B25A72dD6aeF69515452a61AD231C7DF2843b7 | 96/100 LOW (methodology v1) | under a day, 1 probe  | 2026-08-15T05:00:54Z |
| Trust Index                   | 0.010000 USDC  | eip155:8453    | USDC           | 0x53831fab63ba75a958115c3b4eb598a10cfcc7e0 | 96/100 LOW (methodology v1) | under a day, 1 probe  | 2026-08-15T06:00:34Z |
| HTTP Security Headers Check   | 0.010000 USDC  | eip155:8453    | USDC           | 0x7f8043c400799643bcb62B41B84b297a8Ecb7b9c | 96/100 LOW (methodology v1) | under a day, 2 probes | 2026-08-15T06:15:50Z |
| Wallet Screen                 | 0.020000 USDC  | eip155:8453    | USDC           | 0x127462e296fAc1A7F5cF33bA57bB2f0FFf5cD0B6 | 96/100 LOW (methodology v1) | under a day, 1 probe  | 2026-08-15T06:15:22Z |
| Vibe Springs                  | 0.030000 USDC  | eip155:8453    | USDC           | 0x38C063312719220c676E988f0DEE14B4ec0e44C8 | 96/100 LOW (methodology v1) | under a day, 1 probe  | 2026-08-15T05:45:32Z |
| CodePulse Agentic API         | — not observed | — not observed | — not observed | — not observed                             | — not observed              | under a day, 2 probes | 2026-08-15T14:31:26Z |
| recipient-check               | — not observed | — not observed | — not observed | — not observed                             | — not observed              | under a day, 1 probe  | 2026-08-15T05:30:23Z |

Sorted by price.

## What the facilitator claims

These figures are published by the facilitator that lists the endpoint. They are not our
observations, and they are shown separately from them for that reason. An advertised price and
the price the endpoint actually served us are two different facts, and a disagreement between
them is a finding rather than an error.

| Endpoint                      | Listed by    | Usage (30d)         | Unique payers (30d) | Advertised price |
| ----------------------------- | ------------ | ------------------- | ------------------- | ---------------- |
| threat-feed                   | coinbase-cdp | 8 calls in 30 days  | 7 unique payers     | 5000 atomic      |
| x402.fuchss.app               | coinbase-cdp | 31 calls in 30 days | 13 unique payers    | 5000 atomic      |
| AgentPay Pre-Trade Risk Check | coinbase-cdp | 50 calls in 30 days | 8 unique payers     | 10000 atomic     |
| AgentPay x402 Trust Oracle    | coinbase-cdp | 58 calls in 30 days | 6 unique payers     | 10000 atomic     |
| Trust Index                   | coinbase-cdp | 4 calls in 30 days  | 4 unique payers     | 10000 atomic     |
| HTTP Security Headers Check   | coinbase-cdp | 7 calls in 30 days  | 6 unique payers     | 10000 atomic     |
| Wallet Screen                 | coinbase-cdp | 9 calls in 30 days  | 3 unique payers     | 20000 atomic     |
| Vibe Springs                  | coinbase-cdp | 10 calls in 30 days | 4 unique payers     | 30000 atomic     |
| CodePulse Agentic API         | coinbase-cdp | 7 calls in 30 days  | 6 unique payers     | 10000 atomic     |
| recipient-check               | coinbase-cdp | 12 calls in 30 days | 5 unique payers     | 5000 atomic      |

## What this table does and does not say

- Availability and latency are not shown here. They are aggregates over the sampled probe dataset and are read one endpoint at a time, which is what the history page does — this page reads the index and makes no outbound request. Estimating them from the probe records kept in the database instead would over-report failure, because routine successful probes are deliberately not kept.
- Usage figures on this page are published by the facilitator that lists the endpoint (coinbase-cdp), not measured by us. They are shown because they are better data than anything we can collect — and attributed because they are somebody else's.

---

JSON: `/api/v1/compare?category=security-risk` · full per-endpoint records: `/api/v1/endpoints` · categories: `/api/v1/categories`

Every figure here is something we observed by asking the endpoint, except where it is labelled as
a facilitator's claim. Nothing on this page is a statement about an operator.