These are observations, not accusations. A band of LOW, MEDIUM or HIGH describes how much of what we check we were able to confirm — it is not a judgement about the operator of an endpoint. Every signal, its weight and its rationale are published on the methodology page, and any operator can claim an endpoint, correct a fact or opt out.

What does this x402 endpoint charge?

0.005000 USDC per request

https://coingecko.use.x402atlas.com/markets

LOW 96/100

Observed 2026-08-15T14:33:13Z · 212 ms · HTTP 402 · v1 methodology

WIRE_FORMS_DISAGREEBoth wire forms were served and they describe different terms.

Endpoint

What we observed about the endpoint
URL	https://coingecko.use.x402atlas.com/markets
Canonical	https://coingecko.use.x402atlas.com/markets
Endpoint id	9550a11121373608c200b11f17953779
HTTP status	402
Latency	212 ms
Redirects	0
TLS	handshake okThe negotiated TLS version is not exposed to a Worker.
Wire form	both the v2 header and a v1 body
Bytes read	2032
Strict decoder	accepteddecodePaymentRequired, imported from tx402 — the same code the SDK runs before it pays.

Payment

accepted by the decoder

These terms were accepted by the strict decoder tx402 uses before it pays.

The payment terms this endpoint asks for
Price	0.005000 USDC
Amount (atomic)	5000
Scheme	exact
Network	eip155:8453 in manifestRecognized means present in the tx402 signed release manifest. Nothing more is claimed.
Asset	USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 in manifestRecognized means present in the tx402 signed release manifest. Nothing more is claimed.
Pay to	0x32793F68dC2EA26BBC75eB900DA120069e8B6d02
Pay to declared dynamic	nox402 v2 has no on-the-wire declaration of a dynamic payTo, so this is usually unobservable.
Authorization window	300s
Resource	https://coingecko.use.x402atlas.com/markets
MIME type	application/json
Description	Top crypto coins ranked by market cap — paginated market data (price, market-cap rank, symbol) in any currency, CoinGecko-sourced.
Facilitator	not observed

This endpoint offers 4 ways to pay. The card above describes the first, which is the order the server stated its own preference in.

Other accepted ways to pay
Alternative 2	5000 (atomic units) · eip155:137 · exact
Alternative 3	5000 (atomic units) · eip155:42161 · exact
Alternative 4	5000 (atomic units) · solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · exact

Risk

LOW 96/100 · v1 · static_only

A band describes how much of what we check we were able to confirm. It is not a judgement about the operator of an endpoint.

Result: pass 25 The challenge decodes under the strict x402 decoder tx402 uses before paying. challenge_decodes
Result: pass 15 The challenge describes the endpoint that served it. resource_origin_match
Result: pass 12 The amount is a canonical atomic integer. amount_canonical
Result: pass 12 The recipient is a well-formed address for the declared network. pay_to_wellformed
Result: pass 8 The network is in the tx402 signed release manifest. network_recognized
Result: pass 8 The asset is in the tx402 signed release manifest for this network. asset_recognized
Result: skip — The challenge named no facilitator. facilitator_known
Result: pass 6 The payment scheme is one tx402 can route. scheme_known
Result: pass 5 The endpoint was reached over a valid TLS connection. tls_ok
Result: warn 4 The authorization window is outside the maximum tx402 will sign for. timeout_sane
Result: pass 3 No redirect downgraded the connection. redirect_scheme_downgrade
Result: pass 3 The endpoint serves the x402 v2 header form. wire_form
Result: pass 2 The amount is within the range we see for x402 endpoints. amount_magnitude_band

Security

1 to look at

A check that could not run reports skip, and a skip is never counted as a pass.

Result: pass wire_form_detected Served as both.
Result: pass base64_strict The strict decoder accepted the header's base64 framing.
Result: pass json_wellformed
Result: pass x402_version_known Declared x402Version 2.
Result: pass accepts_present The challenge offers 4 ways to pay.
Result: pass size_within_limit Read 2032 bytes, within the probe's cap.
Result: pass network_caip2_wellformed network: eip155:8453
Result: pass network_recognized Recognized means present in the tx402 signed release manifest.
Result: pass asset_recognized Recognized means present in the tx402 signed release manifest.
Result: pass amount_atomic_canonical
Result: pass amount_positive
Result: pass pay_to_wellformed
Result: warn max_timeout_sane Authorization window 300s exceeds the tx402 maximum of 60s.
Result: pass resource_origin_match
Result: pass scheme_known
Result: skip facilitator_known The challenge named no facilitator.
Result: pass mime_type_wellformed mimeType: application/json
Result: pass extra_wellformed `extra` carries 4 field(s), preserved verbatim.
Result: skip amount_within_observed_range needs our data No prior observations of this endpoint.
Result: skip recipient_matches_observed needs our data No prior observations of this endpoint.

Observed

What the corpus knows about this endpoint
First seen	2026-08-15T04:00:12Z
Last seen	2026-08-15T14:33:13Z
Scans recorded	2
Availability (30d)	not measured yet
Latency p50	not measured yet

Recorded changes to this endpoint's terms
2026-08-15T05:15:34Z	first_seen: challenge_hash — → 84ac8904eb6d36b3ea3063eed825c0ce2297d6d2301deb01eb62b8bbd4a5c742

Test with tx402 →

Pre-filled with this endpoint's real terms. Your signer stays in your process — this service never sees a key, never asks for one, and cannot build a payment.

CLI — dry run, nothing is signed

npx tx402 call "https://coingecko.use.x402atlas.com/markets" \
  --max-spend "0.005000 USDC" \
  --network "eip155:8453" \
  --dry-run

# --dry-run stops after the policy decision. Nothing is signed and nothing is spent.

TypeScript

import { createTx402Client } from "tx402";
// Your signer stays in your process. tools.tx402.io never sees a key,
// never asks for one, and cannot build a payment.
import { signers } from "./signers.js";

const tx402 = createTx402Client({
  signers,
  policy: {
    maxPerRequest: "0.005000 USDC",
    allowedDomains: ["coingecko.use.x402atlas.com"],
    allowedNetworks: ["eip155:8453"],
  },
});

// Policy and budget are committed before the signer is reachable, so a
// refusal here is a payment that was never authorized.
const response = await tx402.fetch("https://coingecko.use.x402atlas.com/markets");

Python

from tx402 import Tx402Client, Policy

# Your signer stays in your process. tools.tx402.io never sees a key,
# never asks for one, and cannot build a payment.
tx402 = Tx402Client(
    evm_signer=evm,
    policy=Policy(
        max_per_request="0.005000 USDC",
        allowed_domains=["coingecko.use.x402atlas.com"],
        allowed_networks=["eip155:8453"],
    ),
)

# Policy and budget are committed before the signer is reachable, so a
# refusal here is a payment that was never authorized.
response = tx402.fetch("https://coingecko.use.x402atlas.com/markets")

This report, as JSON or Markdown

curl -sS 'https://tools.tx402.io/api/v1/inspect?url=https%3A%2F%2Fcoingecko.use.x402atlas.com%2Fmarkets'

# The same result as Markdown, for a terminal or an agent:
curl -sS -H 'Accept: text/markdown' 'https://tools.tx402.io/inspect?url=https%3A%2F%2Fcoingecko.use.x402atlas.com%2Fmarkets'

The challenge, as served

Public data: the endpoint serves this to anyone who asks. It is shown exactly as it arrived, truncated to the documented cap.

raw challenge

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

SHA-256 of the canonicalized challenge: 14af1a2fed6d206aebc4272adbc0e32ac9f7739267084d6c2d0929a244e3f96c

Raw signals

The exact input the scoring function was given. A signal we could not determine has observed: false and contributes nothing to the score — it is never counted as a failure.

signals

[
  {
    "id": "probe_ok",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "challenge_served",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "challenge_decodes",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "wire_form",
    "value": "both",
    "observed": true,
    "detail": null
  },
  {
    "id": "x402_version",
    "value": 2,
    "observed": true,
    "detail": null
  },
  {
    "id": "tls_ok",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "tls_protocol",
    "value": null,
    "observed": false,
    "detail": "The negotiated TLS version is not exposed to the probe."
  },
  {
    "id": "redirect_count",
    "value": 0,
    "observed": true,
    "detail": null
  },
  {
    "id": "redirect_scheme_downgrade",
    "value": false,
    "observed": true,
    "detail": "Cross-scheme redirects are refused."
  },
  {
    "id": "resource_origin_match",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "network_recognized",
    "value": true,
    "observed": true,
    "detail": "Recognized means present in the tx402 signed release manifest."
  },
  {
    "id": "asset_recognized",
    "value": true,
    "observed": true,
    "detail": "Recognized means present in the tx402 signed release manifest."
  },
  {
    "id": "facilitator_known",
    "value": null,
    "observed": false,
    "detail": "The challenge named no facilitator."
  },
  {
    "id": "amount_canonical",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "amount_magnitude_band",
    "value": "micro",
    "observed": true,
    "detail": null
  },
  {
    "id": "pay_to_wellformed",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "pay_to_declared_dynamic",
    "value": false,
    "observed": true,
    "detail": null
  },
  {
    "id": "timeout_sane",
    "value": false,
    "observed": true,
    "detail": "Authorization window 300s exceeds the tx402 maximum of 60s."
  },
  {
    "id": "scheme_known",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "requirement_count",
    "value": 4,
    "observed": true,
    "detail": null
  },
  {
    "id": "challenge_size_bytes",
    "value": 2032,
    "observed": true,
    "detail": null
  },
  {
    "id": "first_seen_age_days",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "scan_count",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "availability_30d",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "latency_p50_ms",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "price_changes_90d",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "recipient_changes_90d",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "recipient_unstable_undeclared",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "terms_changed_within_24h",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  }
]

JSON Markdown Methodology Error reference