These are observations, not accusations. A band of LOW, MEDIUM or HIGH describes how much of what we check we were able to confirm — it is not a judgement about the operator of an endpoint. Every signal, its weight and its rationale are published on the methodology page, and any operator can claim an endpoint, correct a fact or opt out.
What does this x402 endpoint charge?
0.010000 USDC per request
https://agentpay.tools/tools/pre_trade_check/callWIRE_FORMS_DISAGREEBoth wire forms were served and they describe different terms.
Endpoint
| URL | https://agentpay.tools/tools/pre_trade_check/call |
|---|---|
| Canonical | https://agentpay.tools/tools/pre_trade_check/call |
| Endpoint id | cf62c1ae46c07fd278f81e24aa5bd0b1 |
| HTTP status | 402 |
| Latency | 272 ms |
| Redirects | 0 |
| TLS | handshake okThe negotiated TLS version is not exposed to a Worker. |
| Wire form | both the v2 header and a v1 body |
| Bytes read | 4932 |
| Strict decoder | accepteddecodePaymentRequired, imported from tx402 — the same code the SDK runs before it pays. |
Payment
accepted by the decoderThese terms were accepted by the strict decoder tx402 uses before it pays.
| Price | 0.010000 USDC |
|---|---|
| Amount (atomic) | 10000 |
| Scheme | exact |
| Network | eip155:8453 in manifestRecognized means present in the tx402 signed release manifest. Nothing more is claimed. |
| Asset | USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 in manifestRecognized means present in the tx402 signed release manifest. Nothing more is claimed. |
| Pay to | 0xE8B25A72dD6aeF69515452a61AD231C7DF2843b7 |
| Pay to declared dynamic | nox402 v2 has no on-the-wire declaration of a dynamic payTo, so this is usually unobservable. |
| Authorization window | 300s |
| Resource | https://agentpay.tools/tools/pre_trade_check/call |
| MIME type | application/json |
| Description | AgentPay tool call |
| Facilitator | not observed |
Risk
Band: LOW 96/100 · v1 · static_onlyA band describes how much of what we check we were able to confirm. It is not a judgement about the operator of an endpoint.
- Result: pass 25 The challenge decodes under the strict x402 decoder tx402 uses before paying. challenge_decodes
- Result: pass 15 The challenge describes the endpoint that served it. resource_origin_match
- Result: pass 12 The amount is a canonical atomic integer. amount_canonical
- Result: pass 12 The recipient is a well-formed address for the declared network. pay_to_wellformed
- Result: pass 8 The network is in the tx402 signed release manifest. network_recognized
- Result: pass 8 The asset is in the tx402 signed release manifest for this network. asset_recognized
- Result: skip — The challenge named no facilitator. facilitator_known
- Result: pass 6 The payment scheme is one tx402 can route. scheme_known
- Result: pass 5 The endpoint was reached over a valid TLS connection. tls_ok
- Result: warn 4 The authorization window is outside the maximum tx402 will sign for. timeout_sane
- Result: pass 3 No redirect downgraded the connection. redirect_scheme_downgrade
- Result: pass 3 The endpoint serves the x402 v2 header form. wire_form
- Result: pass 2 The amount is within the range we see for x402 endpoints. amount_magnitude_band
Security
1 to look at
A check that could not run reports skip, and a skip is never counted as a pass.
- Result: pass wire_form_detected Served as both.
- Result: pass base64_strict The strict decoder accepted the header's base64 framing.
- Result: pass json_wellformed
- Result: pass x402_version_known Declared x402Version 2.
- Result: pass accepts_present The challenge offers one way to pay.
- Result: pass size_within_limit Read 4932 bytes, within the probe's cap.
- Result: pass network_caip2_wellformed network: eip155:8453
- Result: pass network_recognized Recognized means present in the tx402 signed release manifest.
- Result: pass asset_recognized Recognized means present in the tx402 signed release manifest.
- Result: pass amount_atomic_canonical
- Result: pass amount_positive
- Result: pass pay_to_wellformed
- Result: warn max_timeout_sane Authorization window 300s exceeds the tx402 maximum of 60s.
- Result: pass resource_origin_match
- Result: pass scheme_known
- Result: skip facilitator_known The challenge named no facilitator.
- Result: pass mime_type_wellformed mimeType: application/json
- Result: pass extra_wellformed `extra` carries 3 field(s), preserved verbatim.
- Result: skip amount_within_observed_range needs our data No prior observations of this endpoint.
- Result: skip recipient_matches_observed needs our data No prior observations of this endpoint.
Observed
| First seen | 2026-08-15T04:00:12Z |
|---|---|
| Last seen | 2026-08-15T14:32:22Z |
| Scans recorded | 2 |
| Availability (30d) | not measured yet |
| Latency p50 | not measured yet |
| 2026-08-15T05:00:27Z | first_seen: challenge_hash — → dde63c23d93efae0e18102ea415b27c9d5d4bec81dcbc6586bbdd8662b659ff6 |
|---|
Test with tx402 →
Pre-filled with this endpoint's real terms. Your signer stays in your process — this service never sees a key, never asks for one, and cannot build a payment.
npx tx402 call "https://agentpay.tools/tools/pre_trade_check/call" \
--max-spend "0.010000 USDC" \
--network "eip155:8453" \
--dry-run
# --dry-run stops after the policy decision. Nothing is signed and nothing is spent.
import { createTx402Client } from "tx402";
// Your signer stays in your process. tools.tx402.io never sees a key,
// never asks for one, and cannot build a payment.
import { signers } from "./signers.js";
const tx402 = createTx402Client({
signers,
policy: {
maxPerRequest: "0.010000 USDC",
allowedDomains: ["agentpay.tools"],
allowedNetworks: ["eip155:8453"],
},
});
// Policy and budget are committed before the signer is reachable, so a
// refusal here is a payment that was never authorized.
const response = await tx402.fetch("https://agentpay.tools/tools/pre_trade_check/call");
from tx402 import Tx402Client, Policy
# Your signer stays in your process. tools.tx402.io never sees a key,
# never asks for one, and cannot build a payment.
tx402 = Tx402Client(
evm_signer=evm,
policy=Policy(
max_per_request="0.010000 USDC",
allowed_domains=["agentpay.tools"],
allowed_networks=["eip155:8453"],
),
)
# Policy and budget are committed before the signer is reachable, so a
# refusal here is a payment that was never authorized.
response = tx402.fetch("https://agentpay.tools/tools/pre_trade_check/call")
curl -sS 'https://tools.tx402.io/api/v1/inspect?url=https%3A%2F%2Fagentpay.tools%2Ftools%2Fpre_trade_check%2Fcall'
# The same result as Markdown, for a terminal or an agent:
curl -sS -H 'Accept: text/markdown' 'https://tools.tx402.io/inspect?url=https%3A%2F%2Fagentpay.tools%2Ftools%2Fpre_trade_check%2Fcall'
The challenge, as served
Public data: the endpoint serves this to anyone who asks. It is shown exactly as it arrived, truncated to the documented cap.
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
SHA-256 of the canonicalized challenge: dde63c23d93efae0e18102ea415b27c9d5d4bec81dcbc6586bbdd8662b659ff6
Raw signals
The exact input the scoring function was given. A signal we could not determine has
observed: false and contributes nothing to the score — it is never counted as a failure.
[
{
"id": "probe_ok",
"value": true,
"observed": true,
"detail": null
},
{
"id": "challenge_served",
"value": true,
"observed": true,
"detail": null
},
{
"id": "challenge_decodes",
"value": true,
"observed": true,
"detail": null
},
{
"id": "wire_form",
"value": "both",
"observed": true,
"detail": null
},
{
"id": "x402_version",
"value": 2,
"observed": true,
"detail": null
},
{
"id": "tls_ok",
"value": true,
"observed": true,
"detail": null
},
{
"id": "tls_protocol",
"value": null,
"observed": false,
"detail": "The negotiated TLS version is not exposed to the probe."
},
{
"id": "redirect_count",
"value": 0,
"observed": true,
"detail": null
},
{
"id": "redirect_scheme_downgrade",
"value": false,
"observed": true,
"detail": "Cross-scheme redirects are refused."
},
{
"id": "resource_origin_match",
"value": true,
"observed": true,
"detail": null
},
{
"id": "network_recognized",
"value": true,
"observed": true,
"detail": "Recognized means present in the tx402 signed release manifest."
},
{
"id": "asset_recognized",
"value": true,
"observed": true,
"detail": "Recognized means present in the tx402 signed release manifest."
},
{
"id": "facilitator_known",
"value": null,
"observed": false,
"detail": "The challenge named no facilitator."
},
{
"id": "amount_canonical",
"value": true,
"observed": true,
"detail": null
},
{
"id": "amount_magnitude_band",
"value": "small",
"observed": true,
"detail": null
},
{
"id": "pay_to_wellformed",
"value": true,
"observed": true,
"detail": null
},
{
"id": "pay_to_declared_dynamic",
"value": false,
"observed": true,
"detail": null
},
{
"id": "timeout_sane",
"value": false,
"observed": true,
"detail": "Authorization window 300s exceeds the tx402 maximum of 60s."
},
{
"id": "scheme_known",
"value": true,
"observed": true,
"detail": null
},
{
"id": "requirement_count",
"value": 1,
"observed": true,
"detail": null
},
{
"id": "challenge_size_bytes",
"value": 4932,
"observed": true,
"detail": null
},
{
"id": "first_seen_age_days",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "scan_count",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "availability_30d",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "latency_p50_ms",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "price_changes_90d",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "recipient_changes_90d",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "recipient_unstable_undeclared",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "terms_changed_within_24h",
"value": null,
"observed": false,
"detail": "No history yet."
}
]