tx402 tools

These are observations, not accusations. A band of LOW, MEDIUM or HIGH describes how much of what we check we were able to confirm — it is not a judgement about the operator of an endpoint. Every signal, its weight and its rationale are published on the methodology page, and any operator can claim an endpoint, correct a fact or opt out.

What does this x402 endpoint charge?

https only. We fetch it once, read the 402, and stop.

0.010000 USDC per request

https://makespdf.com/api/v1/markdown
LOW 100/100

Observed 2026-08-15T14:31:21Z · 1448 ms · HTTP 402 · v1 methodology

Endpoint

URL https://makespdf.com/api/v1/markdown
Canonical https://makespdf.com/api/v1/markdown
Endpoint id 60b65d3cf2648cc82cfeb538e9d7d84b
HTTP status 402
Latency 1448 ms
Redirects 0
TLS handshake okThe negotiated TLS version is not exposed to a Worker.
Wire form both the v2 header and a v1 body
Bytes read 1667
Strict decoder accepteddecodePaymentRequired, imported from tx402 — the same code the SDK runs before it pays.

Payment

accepted by the decoder

These terms were accepted by the strict decoder tx402 uses before it pays.

Price 0.010000 USDC
Amount (atomic) 10000
Scheme exact
Network eip155:8453 in manifestRecognized means present in the tx402 signed release manifest. Nothing more is claimed.
Asset USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 in manifestRecognized means present in the tx402 signed release manifest. Nothing more is claimed.
Pay to 0x9bB96Acb3fD11D8949D862736B96e7e12D319DC4
Pay to declared dynamic nox402 v2 has no on-the-wire declaration of a dynamic payTo, so this is usually unobservable.
Authorization window 60s
Resource https://makespdf.com/api/v1/markdown
MIME type application/pdf
Description Convert GitHub-flavoured Markdown to a tagged, accessible PDF — PDF/UA-1 + PDF/A-2A dual-compliant out of the box.
Facilitator not observed

Risk

LOW 100/100 · v1 · static_only

A band describes how much of what we check we were able to confirm. It is not a judgement about the operator of an endpoint.

  • pass 25 The challenge decodes under the strict x402 decoder tx402 uses before paying. challenge_decodes
  • pass 15 The challenge describes the endpoint that served it. resource_origin_match
  • pass 12 The amount is a canonical atomic integer. amount_canonical
  • pass 12 The recipient is a well-formed address for the declared network. pay_to_wellformed
  • pass 8 The network is in the tx402 signed release manifest. network_recognized
  • pass 8 The asset is in the tx402 signed release manifest for this network. asset_recognized
  • skip — The challenge named no facilitator. facilitator_known
  • pass 6 The payment scheme is one tx402 can route. scheme_known
  • pass 5 The endpoint was reached over a valid TLS connection. tls_ok
  • pass 4 The authorization window is within the maximum tx402 will sign for. timeout_sane
  • pass 3 No redirect downgraded the connection. redirect_scheme_downgrade
  • pass 3 The endpoint serves the x402 v2 header form. wire_form
  • pass 2 The amount is within the range we see for x402 endpoints. amount_magnitude_band
Weights, thresholds and the rationale for each signal are published at the methodology page. Adding up the weights above reproduces the score — that reproducibility is how a verdict can be argued with.

Security

nothing failing

A check that could not run reports skip, and a skip is never counted as a pass.

  • pass wire_form_detected Served as both.
  • pass base64_strict The strict decoder accepted the header's base64 framing.
  • pass json_wellformed
  • pass x402_version_known Declared x402Version 2.
  • pass accepts_present The challenge offers one way to pay.
  • pass size_within_limit Read 1667 bytes, within the probe's cap.
  • pass network_caip2_wellformed network: eip155:8453
  • pass network_recognized Recognized means present in the tx402 signed release manifest.
  • pass asset_recognized Recognized means present in the tx402 signed release manifest.
  • pass amount_atomic_canonical
  • pass amount_positive
  • pass pay_to_wellformed
  • pass max_timeout_sane
  • pass resource_origin_match
  • pass scheme_known
  • skip facilitator_known The challenge named no facilitator.
  • pass mime_type_wellformed mimeType: application/pdf
  • pass extra_wellformed `extra` carries 2 field(s), preserved verbatim.
  • skip amount_within_observed_range needs our data No prior observations of this endpoint.
  • skip recipient_matches_observed needs our data No prior observations of this endpoint.
Checks marked “needs our data” compare this scan against the corpus, which is still filling up.

Observed

first scan

First seen: just now · no history yet

Availability, latency and price stability need repeated observations over time. One probe is not a measurement of any of them, so none is shown.

This endpoint is now in the corpus, so the crawler will keep watching it. Price and recipient changes are recorded permanently; availability and latency are sampled.

Test with tx402 →

Pre-filled with this endpoint's real terms. Your signer stays in your process — this service never sees a key, never asks for one, and cannot build a payment.

CLI — dry run, nothing is signed 
npx tx402 call "https://makespdf.com/api/v1/markdown" \
  --max-spend "0.010000 USDC" \
  --network "eip155:8453" \
  --dry-run

# --dry-run stops after the policy decision. Nothing is signed and nothing is spent.
TypeScript 
import { createTx402Client } from "tx402";
// Your signer stays in your process. tools.tx402.io never sees a key,
// never asks for one, and cannot build a payment.
import { signers } from "./signers.js";

const tx402 = createTx402Client({
  signers,
  policy: {
    maxPerRequest: "0.010000 USDC",
    allowedDomains: ["makespdf.com"],
    allowedNetworks: ["eip155:8453"],
  },
});

// Policy and budget are committed before the signer is reachable, so a
// refusal here is a payment that was never authorized.
const response = await tx402.fetch("https://makespdf.com/api/v1/markdown");
Python 
from tx402 import Tx402Client, Policy

# Your signer stays in your process. tools.tx402.io never sees a key,
# never asks for one, and cannot build a payment.
tx402 = Tx402Client(
    evm_signer=evm,
    policy=Policy(
        max_per_request="0.010000 USDC",
        allowed_domains=["makespdf.com"],
        allowed_networks=["eip155:8453"],
    ),
)

# Policy and budget are committed before the signer is reachable, so a
# refusal here is a payment that was never authorized.
response = tx402.fetch("https://makespdf.com/api/v1/markdown")
This report, as JSON or Markdown 
curl -sS 'https://tools.tx402.io/api/v1/inspect?url=https%3A%2F%2Fmakespdf.com%2Fapi%2Fv1%2Fmarkdown'

# The same result as Markdown, for a terminal or an agent:
curl -sS -H 'Accept: text/markdown' 'https://tools.tx402.io/inspect?url=https%3A%2F%2Fmakespdf.com%2Fapi%2Fv1%2Fmarkdown'

Share this report

Share links expire. Nothing is recorded about who created one.

The challenge, as served

Public data: the endpoint serves this to anyone who asks. It is shown exactly as it arrived, truncated to the documented cap.

raw challenge 
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

SHA-256 of the canonicalized challenge: 4fc02493818b56221eb967ca8f2de9ecd4c09cf1963f7956c1ee3effea14580d

Raw signals

The exact input the scoring function was given. A signal we could not determine has observed: false and contributes nothing to the score — it is never counted as a failure.

signals 
[
  {
    "id": "probe_ok",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "challenge_served",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "challenge_decodes",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "wire_form",
    "value": "both",
    "observed": true,
    "detail": null
  },
  {
    "id": "x402_version",
    "value": 2,
    "observed": true,
    "detail": null
  },
  {
    "id": "tls_ok",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "tls_protocol",
    "value": null,
    "observed": false,
    "detail": "The negotiated TLS version is not exposed to the probe."
  },
  {
    "id": "redirect_count",
    "value": 0,
    "observed": true,
    "detail": null
  },
  {
    "id": "redirect_scheme_downgrade",
    "value": false,
    "observed": true,
    "detail": "Cross-scheme redirects are refused."
  },
  {
    "id": "resource_origin_match",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "network_recognized",
    "value": true,
    "observed": true,
    "detail": "Recognized means present in the tx402 signed release manifest."
  },
  {
    "id": "asset_recognized",
    "value": true,
    "observed": true,
    "detail": "Recognized means present in the tx402 signed release manifest."
  },
  {
    "id": "facilitator_known",
    "value": null,
    "observed": false,
    "detail": "The challenge named no facilitator."
  },
  {
    "id": "amount_canonical",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "amount_magnitude_band",
    "value": "small",
    "observed": true,
    "detail": null
  },
  {
    "id": "pay_to_wellformed",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "pay_to_declared_dynamic",
    "value": false,
    "observed": true,
    "detail": null
  },
  {
    "id": "timeout_sane",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "scheme_known",
    "value": true,
    "observed": true,
    "detail": null
  },
  {
    "id": "requirement_count",
    "value": 1,
    "observed": true,
    "detail": null
  },
  {
    "id": "challenge_size_bytes",
    "value": 1667,
    "observed": true,
    "detail": null
  },
  {
    "id": "first_seen_age_days",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "scan_count",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "availability_30d",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "latency_p50_ms",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "price_changes_90d",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "recipient_changes_90d",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "recipient_unstable_undeclared",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  },
  {
    "id": "terms_changed_within_24h",
    "value": null,
    "observed": false,
    "detail": "No history yet."
  }
]

JSON Markdown Methodology Error reference