These are observations, not accusations. A band of LOW, MEDIUM or HIGH describes how much of what we check we were able to confirm — it is not a judgement about the operator of an endpoint. Every signal, its weight and its rationale are published on the methodology page, and any operator can claim an endpoint, correct a fact or opt out.
What does this x402 endpoint charge?
0.002500 USDC per request
https://2s.io/api/calendar/holidays
Risk band: LOW
100/100
WIRE_FORMS_DISAGREEBoth wire forms were served and they describe different terms.
Endpoint
| URL | https://2s.io/api/calendar/holidays |
|---|---|
| Canonical | https://2s.io/api/calendar/holidays |
| Endpoint id | d55dea1d1980f5cfe29a89c9854dd2cf |
| HTTP status | 402 |
| Latency | 75 ms |
| Redirects | 0 |
| TLS | handshake okThe negotiated TLS version is not exposed to a Worker. |
| Wire form | both the v2 header and a v1 body |
| Bytes read | 3789 |
| Strict decoder | accepteddecodePaymentRequired, imported from tx402 — the same code the SDK runs before it pays. |
Payment
accepted by the decoderThese terms were accepted by the strict decoder tx402 uses before it pays.
| Price | 0.002500 USDC |
|---|---|
| Amount (atomic) | 2500 |
| Scheme | exact |
| Network | eip155:8453 in manifestRecognized means present in the tx402 signed release manifest. Nothing more is claimed. |
| Asset | USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 in manifestRecognized means present in the tx402 signed release manifest. Nothing more is claimed. |
| Pay to | 0x2b6D4988Db4723E6908Db86Ab2b8dFBc51FC32C5 |
| Pay to declared dynamic | nox402 v2 has no on-the-wire declaration of a dynamic payTo, so this is usually unobservable. |
| Authorization window | 60s |
| Resource | https://2s.io/api/calendar/holidays |
| MIME type | application/json |
| Description | List the official holidays for a country and year, with exact observed dates including substitute days (e.g. a Saturday July 4th observed on Friday). Query: country (ISO 3166-1 alpha-2, 200+ supported), year, optional region (subdivision code like CA for US-California or BY for DE-Bavaria), optional types filter (public, bank, school, optional, observance — comma-separated), optional lang (ISO 639-1) for localized names. Returns one item per holiday: { date (YYYY-MM-DD), name, type, substitute, rule }. Dates are computed from maintained per-country rules — including movable feasts and lunar-calendar holidays — so they stay correct year over year. Use for scheduling, delivery estimates, payment terms, and SLA math. |
| Facilitator | not observed |
This endpoint offers 2 ways to pay. The card above describes the first, which is the order the server stated its own preference in.
| Alternative 2 | 2500 (atomic units) · solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · exact |
|---|
Risk
Band: LOW 100/100 · v1 · static_onlyA band describes how much of what we check we were able to confirm. It is not a judgement about the operator of an endpoint.
- Result: pass 25 The challenge decodes under the strict x402 decoder tx402 uses before paying. challenge_decodes
- Result: pass 15 The challenge describes the endpoint that served it. resource_origin_match
- Result: pass 12 The amount is a canonical atomic integer. amount_canonical
- Result: pass 12 The recipient is a well-formed address for the declared network. pay_to_wellformed
- Result: pass 8 The network is in the tx402 signed release manifest. network_recognized
- Result: pass 8 The asset is in the tx402 signed release manifest for this network. asset_recognized
- Result: skip — The challenge named no facilitator. facilitator_known
- Result: pass 6 The payment scheme is one tx402 can route. scheme_known
- Result: pass 5 The endpoint was reached over a valid TLS connection. tls_ok
- Result: pass 4 The authorization window is within the maximum tx402 will sign for. timeout_sane
- Result: pass 3 No redirect downgraded the connection. redirect_scheme_downgrade
- Result: pass 3 The endpoint serves the x402 v2 header form. wire_form
- Result: pass 2 The amount is within the range we see for x402 endpoints. amount_magnitude_band
Security
nothing failing
A check that could not run reports skip, and a skip is never counted as a pass.
- Result: pass wire_form_detected Served as both.
- Result: pass base64_strict The strict decoder accepted the header's base64 framing.
- Result: pass json_wellformed
- Result: pass x402_version_known Declared x402Version 2.
- Result: pass accepts_present The challenge offers 2 ways to pay.
- Result: pass size_within_limit Read 3789 bytes, within the probe's cap.
- Result: pass network_caip2_wellformed network: eip155:8453
- Result: pass network_recognized Recognized means present in the tx402 signed release manifest.
- Result: pass asset_recognized Recognized means present in the tx402 signed release manifest.
- Result: pass amount_atomic_canonical
- Result: pass amount_positive
- Result: pass pay_to_wellformed
- Result: pass max_timeout_sane
- Result: pass resource_origin_match
- Result: pass scheme_known
- Result: skip facilitator_known The challenge named no facilitator.
- Result: pass mime_type_wellformed mimeType: application/json
- Result: pass extra_wellformed `extra` carries 2 field(s), preserved verbatim.
- Result: skip amount_within_observed_range needs our data No prior observations of this endpoint.
- Result: skip recipient_matches_observed needs our data No prior observations of this endpoint.
Observed
| First seen | 2026-08-15T04:00:12Z |
|---|---|
| Last seen | 2026-08-15T14:32:23Z |
| Scans recorded | 2 |
| Availability (30d) | not measured yet |
| Latency p50 | not measured yet |
| 2026-08-15T05:15:53Z | first_seen: challenge_hash — → d7db6b09f776a527d4129ce80acd35f842a2f10605a71d9684381078d3d10390 |
|---|
Test with tx402 →
Pre-filled with this endpoint's real terms. Your signer stays in your process — this service never sees a key, never asks for one, and cannot build a payment.
CLI — dry run, nothing is signed
npx tx402 call "https://2s.io/api/calendar/holidays" \
--max-spend "0.002500 USDC" \
--network "eip155:8453" \
--dry-run
# --dry-run stops after the policy decision. Nothing is signed and nothing is spent.
TypeScript
import { createTx402Client } from "tx402";
// Your signer stays in your process. tools.tx402.io never sees a key,
// never asks for one, and cannot build a payment.
import { signers } from "./signers.js";
const tx402 = createTx402Client({
signers,
policy: {
maxPerRequest: "0.002500 USDC",
allowedDomains: ["2s.io"],
allowedNetworks: ["eip155:8453"],
},
});
// Policy and budget are committed before the signer is reachable, so a
// refusal here is a payment that was never authorized.
const response = await tx402.fetch("https://2s.io/api/calendar/holidays");
Python
from tx402 import Tx402Client, Policy
# Your signer stays in your process. tools.tx402.io never sees a key,
# never asks for one, and cannot build a payment.
tx402 = Tx402Client(
evm_signer=evm,
policy=Policy(
max_per_request="0.002500 USDC",
allowed_domains=["2s.io"],
allowed_networks=["eip155:8453"],
),
)
# Policy and budget are committed before the signer is reachable, so a
# refusal here is a payment that was never authorized.
response = tx402.fetch("https://2s.io/api/calendar/holidays")
This report, as JSON or Markdown
curl -sS 'https://tools.tx402.io/api/v1/inspect?url=https%3A%2F%2F2s.io%2Fapi%2Fcalendar%2Fholidays'
# The same result as Markdown, for a terminal or an agent:
curl -sS -H 'Accept: text/markdown' 'https://tools.tx402.io/inspect?url=https%3A%2F%2F2s.io%2Fapi%2Fcalendar%2Fholidays'
The challenge, as served
Public data: the endpoint serves this to anyone who asks. It is shown exactly as it arrived, truncated to the documented cap.
raw challenge
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-256 of the canonicalized challenge: 64bc47fe893dba79dae656c3294f9b9da4c1e825681764c3fb924a2da2efcdc9
Raw signals
The exact input the scoring function was given. A signal we could not determine has
observed: false and contributes nothing to the score — it is never counted as a failure.
signals
[
{
"id": "probe_ok",
"value": true,
"observed": true,
"detail": null
},
{
"id": "challenge_served",
"value": true,
"observed": true,
"detail": null
},
{
"id": "challenge_decodes",
"value": true,
"observed": true,
"detail": null
},
{
"id": "wire_form",
"value": "both",
"observed": true,
"detail": null
},
{
"id": "x402_version",
"value": 2,
"observed": true,
"detail": null
},
{
"id": "tls_ok",
"value": true,
"observed": true,
"detail": null
},
{
"id": "tls_protocol",
"value": null,
"observed": false,
"detail": "The negotiated TLS version is not exposed to the probe."
},
{
"id": "redirect_count",
"value": 0,
"observed": true,
"detail": null
},
{
"id": "redirect_scheme_downgrade",
"value": false,
"observed": true,
"detail": "Cross-scheme redirects are refused."
},
{
"id": "resource_origin_match",
"value": true,
"observed": true,
"detail": null
},
{
"id": "network_recognized",
"value": true,
"observed": true,
"detail": "Recognized means present in the tx402 signed release manifest."
},
{
"id": "asset_recognized",
"value": true,
"observed": true,
"detail": "Recognized means present in the tx402 signed release manifest."
},
{
"id": "facilitator_known",
"value": null,
"observed": false,
"detail": "The challenge named no facilitator."
},
{
"id": "amount_canonical",
"value": true,
"observed": true,
"detail": null
},
{
"id": "amount_magnitude_band",
"value": "micro",
"observed": true,
"detail": null
},
{
"id": "pay_to_wellformed",
"value": true,
"observed": true,
"detail": null
},
{
"id": "pay_to_declared_dynamic",
"value": false,
"observed": true,
"detail": null
},
{
"id": "timeout_sane",
"value": true,
"observed": true,
"detail": null
},
{
"id": "scheme_known",
"value": true,
"observed": true,
"detail": null
},
{
"id": "requirement_count",
"value": 2,
"observed": true,
"detail": null
},
{
"id": "challenge_size_bytes",
"value": 3789,
"observed": true,
"detail": null
},
{
"id": "first_seen_age_days",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "scan_count",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "availability_30d",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "latency_p50_ms",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "price_changes_90d",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "recipient_changes_90d",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "recipient_unstable_undeclared",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "terms_changed_within_24h",
"value": null,
"observed": false,
"detail": "No history yet."
}
]