# What does this x402 endpoint charge? **4000 (atomic units) per request** on `solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp` · risk LOW (88/100, v1) ## ENDPOINT | Field | Value | | ----------- | ------------------------------------------------ | | URL | https://glim.sh/api/v1/twitter/users/:ref/tweets | | Canonical | https://glim.sh/api/v1/twitter/users/:ref/tweets | | Endpoint id | e37e038af4212bd6208e5e7aef5ced66 | | HTTP status | 402 | | Latency | 464 ms | | Redirects | 0 | | TLS | handshake ok | | Wire form | x402 v2 — PAYMENT-REQUIRED header | | Bytes read | 398 | | Observed at | 2026-08-15T15:18:42Z | | Decoder | accepted — decodePaymentRequired from tx402 | ## PAYMENT These terms were accepted by the strict decoder tx402 uses before it pays. | Field | Value | | ----------------------- | --------------------------------------------------------------------------------- | | Price | 4000 (atomic units) | | Amount (atomic) | 4000 | | Scheme | exact | | Network | solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · in the tx402 signed manifest | | Asset | unknown symbol EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v · not in the manifest | | Pay to | 9MkM5Ra48KFcSv9HDQ8sb3C3r5HjouEwGQ6sp1cx1vde | | Pay to declared dynamic | no | | Authorization window | 300s | | Resource | https://glim.sh/api/v1/twitter/users/:ref/tweets | | MIME type | application/json | | Description | A user's recent tweets, ~20/page. Body: optional cursor + include_replies only | | Facilitator | not observed | This endpoint offers 3 ways to pay. The report describes the first, which is the order the server stated its own preference in. | # | Requirement | | - | --------------------------------------------------------------------- | | 1 | 4000 (atomic units) · solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · exact | | 2 | 0.004000 USDC · eip155:8453 · exact | | 3 | 4000 (atomic units) · eip155:143 · exact | ## OBSERVED | Field | Value | | ------------------ | -------------------- | | First seen | 2026-08-15T04:00:12Z | | Last seen | 2026-08-15T15:18:42Z | | Scans recorded | 3 | | Availability (30d) | not measured yet | | Latency p50 | not measured yet | | Changed at | What changed | | -------------------- | ----------------------------------------------------------------------------------------------- | | 2026-08-15T05:01:01Z | first_seen: challenge_hash — → 09f92c1826eebffd1d884b930d4db54d36ba643462565fbf41cc278cbc9cb39f | ## SECURITY 0 failed, 2 warned, 15 passed. A check that could not run reports `skip` and is never counted as a pass. | Check | Detail | | ---------------------------------- | -------------------------------------------------------------- | | pass wire_form_detected | Served as v2-header. | | pass base64_strict | The strict decoder accepted the header's base64 framing. | | pass json_wellformed | — | | pass x402_version_known | Declared x402Version 2. | | pass accepts_present | The challenge offers 3 ways to pay. | | pass size_within_limit | Read 398 bytes, within the probe's cap. | | pass network_caip2_wellformed | network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp | | pass network_recognized | Recognized means present in the tx402 signed release manifest. | | warn asset_recognized | Recognized means present in the tx402 signed release manifest. | | pass amount_atomic_canonical | — | | pass amount_positive | — | | pass pay_to_wellformed | — | | warn max_timeout_sane | Authorization window 300s exceeds the tx402 maximum of 60s. | | pass resource_origin_match | — | | pass scheme_known | — | | skip facilitator_known | The challenge named no facilitator. | | pass mime_type_wellformed | mimeType: application/json | | pass extra_wellformed | `extra` carries 1 field(s), preserved verbatim. | | skip amount_within_observed_range | No prior observations of this endpoint. | | skip recipient_matches_observed | No prior observations of this endpoint. | ## RISK — LOW (88/100) score_version `v1` · confidence `static_only` · 11 signals scored A band describes how much of what we check we were able to confirm. It is not a judgement about the operator of an endpoint. | Signal | Weight Finding | | ------------------------------- | ------------------------------------------------------------------------------------- | | pass challenge_decodes | 25 The challenge decodes under the strict x402 decoder tx402 uses before paying. | | pass resource_origin_match | 15 The challenge describes the endpoint that served it. | | pass amount_canonical | 12 The amount is a canonical atomic integer. | | pass pay_to_wellformed | 12 The recipient is a well-formed address for the declared network. | | pass network_recognized | 8 The network is in the tx402 signed release manifest. | | warn asset_recognized | 8 The asset is not in the tx402 signed release manifest for this network. | | skip facilitator_known | 0 The challenge named no facilitator. | | pass scheme_known | 6 The payment scheme is one tx402 can route. | | pass tls_ok | 5 The endpoint was reached over a valid TLS connection. | | warn timeout_sane | 4 The authorization window is outside the maximum tx402 will sign for. | | pass redirect_scheme_downgrade | 3 No redirect downgraded the connection. | | pass wire_form | 3 The endpoint serves the x402 v2 header form. | | skip amount_magnitude_band | 0 Not evaluable, so it was not scored. | Methodology: https://tools.tx402.io/methodology?v=v1 ## TEST WITH TX402 Nothing below sends a key anywhere. tx402 commits policy and budget before the signer is reachable, so a refusal is a payment that was never authorized. ```bash # This endpoint's amount or asset could not be read, so --max-spend is left for you to set. npx tx402 call "https://glim.sh/api/v1/twitter/users/:ref/tweets" \ --network "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp" \ --dry-run # --dry-run stops after the policy decision. Nothing is signed and nothing is spent. ``` ```ts import { createTx402Client } from "tx402"; // Your signer stays in your process. tools.tx402.io never sees a key, // never asks for one, and cannot build a payment. import { signers } from "./signers.js"; const tx402 = createTx402Client({ signers, policy: { // The observed amount could not be read as canonical money — set your own cap. allowedDomains: ["glim.sh"], allowedNetworks: ["solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"], }, }); // Policy and budget are committed before the signer is reachable, so a // refusal here is a payment that was never authorized. const response = await tx402.fetch("https://glim.sh/api/v1/twitter/users/:ref/tweets"); ``` ```python from tx402 import Tx402Client, Policy # Your signer stays in your process. tools.tx402.io never sees a key, # never asks for one, and cannot build a payment. tx402 = Tx402Client( solana_signer=solana, policy=Policy( # The observed amount could not be read as canonical money — set your own cap. allowed_domains=["glim.sh"], allowed_networks=["solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"], ), ) # Policy and budget are committed before the signer is reachable, so a # refusal here is a payment that was never authorized. response = tx402.fetch("https://glim.sh/api/v1/twitter/users/:ref/tweets") ``` --- | Representation | URL | | -------------- | --- | | HTML | https://tools.tx402.io/inspect?url=https%3A%2F%2Fglim.sh%2Fapi%2Fv1%2Ftwitter%2Fusers%2F%3Aref%2Ftweets | | Markdown | https://tools.tx402.io/inspect.md?url=https%3A%2F%2Fglim.sh%2Fapi%2Fv1%2Ftwitter%2Fusers%2F%3Aref%2Ftweets | | JSON | https://tools.tx402.io/api/v1/inspect?url=https%3A%2F%2Fglim.sh%2Fapi%2Fv1%2Ftwitter%2Fusers%2F%3Aref%2Ftweets | | History | https://tools.tx402.io/history?url=https%3A%2F%2Fglim.sh%2Fapi%2Fv1%2Ftwitter%2Fusers%2F%3Aref%2Ftweets | Decoded by `tx402@0.2.0` — the same strict decoder the SDK runs before it pays.