These are observations, not accusations. A band of LOW, MEDIUM or HIGH describes how much of what we check we were able to confirm — it is not a judgement about the operator of an endpoint. Every signal, its weight and its rationale are published on the methodology page, and any operator can claim an endpoint, correct a fact or opt out.
What does this x402 endpoint charge?
1000 (atomic units) per request
https://palmyr.ai/social/twitter/registered/mine
Risk band: LOW
87/100
WIRE_FORMS_DISAGREEBoth wire forms were served and they describe different terms.
Endpoint
| URL | https://palmyr.ai/social/twitter/registered/mine |
|---|---|
| Canonical | https://palmyr.ai/social/twitter/registered/mine |
| Endpoint id | 8ad8e17547465e12fad3e830d3965eff |
| HTTP status | 402 |
| Latency | 436 ms |
| Redirects | 0 |
| TLS | handshake okThe negotiated TLS version is not exposed to a Worker. |
| Wire form | both the v2 header and a v1 body |
| Bytes read | 2793 |
| Strict decoder | accepteddecodePaymentRequired, imported from tx402 — the same code the SDK runs before it pays. |
Payment
accepted by the decoderThese terms were accepted by the strict decoder tx402 uses before it pays.
| Price | 1000 (atomic units) |
|---|---|
| Amount (atomic) | 1000 |
| Scheme | exact |
| Network | solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp in manifestRecognized means present in the tx402 signed release manifest. Nothing more is claimed. |
| Asset | Palmyr EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v not in manifestRecognized means present in the tx402 signed release manifest. Nothing more is claimed. |
| Pay to | GqSs5L9aPWGJwyRQe35YKQaWMDPh3R1dMqfSEPhSgkM |
| Pay to declared dynamic | nox402 v2 has no on-the-wire declaration of a dynamic payTo, so this is usually unobservable. |
| Authorization window | 60s |
| Resource | https://palmyr.ai/social/twitter/registered/mine |
| MIME type | application/json |
| Description | List registered X accounts your wallet owns or has shared access to. |
| Facilitator | https://palmyr.ai/x402 |
This endpoint offers 2 ways to pay. The card above describes the first, which is the order the server stated its own preference in.
| Alternative 2 | 0.001000 USDC · eip155:8453 · exact |
|---|
Risk
Band: LOW 87/100 · v1 · static_onlyA band describes how much of what we check we were able to confirm. It is not a judgement about the operator of an endpoint.
- Result: pass 25 The challenge decodes under the strict x402 decoder tx402 uses before paying. challenge_decodes
- Result: pass 15 The challenge describes the endpoint that served it. resource_origin_match
- Result: pass 12 The amount is a canonical atomic integer. amount_canonical
- Result: pass 12 The recipient is a well-formed address for the declared network. pay_to_wellformed
- Result: pass 8 The network is in the tx402 signed release manifest. network_recognized
- Result: warn 8 The asset is not in the tx402 signed release manifest for this network. asset_recognized
- Result: warn 6 The facilitator is not on the published list. facilitator_known
- Result: pass 6 The payment scheme is one tx402 can route. scheme_known
- Result: pass 5 The endpoint was reached over a valid TLS connection. tls_ok
- Result: pass 4 The authorization window is within the maximum tx402 will sign for. timeout_sane
- Result: pass 3 No redirect downgraded the connection. redirect_scheme_downgrade
- Result: pass 3 The endpoint serves the x402 v2 header form. wire_form
- Result: skip — Not evaluable, so it was not scored. amount_magnitude_band
Security
2 to look at
A check that could not run reports skip, and a skip is never counted as a pass.
- Result: pass wire_form_detected Served as both.
- Result: pass base64_strict The strict decoder accepted the header's base64 framing.
- Result: pass json_wellformed
- Result: pass x402_version_known Declared x402Version 2.
- Result: pass accepts_present The challenge offers 2 ways to pay.
- Result: pass size_within_limit Read 2793 bytes, within the probe's cap.
- Result: pass network_caip2_wellformed network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
- Result: pass network_recognized Recognized means present in the tx402 signed release manifest.
- Result: warn asset_recognized Recognized means present in the tx402 signed release manifest.
- Result: pass amount_atomic_canonical
- Result: pass amount_positive
- Result: pass pay_to_wellformed
- Result: pass max_timeout_sane
- Result: pass resource_origin_match
- Result: pass scheme_known
- Result: warn facilitator_known On the published list. That is the whole claim.
- Result: pass mime_type_wellformed mimeType: application/json
- Result: pass extra_wellformed `extra` carries 3 field(s), preserved verbatim.
- Result: skip amount_within_observed_range needs our data No prior observations of this endpoint.
- Result: skip recipient_matches_observed needs our data No prior observations of this endpoint.
Observed
| First seen | 2026-08-15T04:00:12Z |
|---|---|
| Last seen | 2026-08-15T14:37:38Z |
| Scans recorded | 2 |
| Availability (30d) | not measured yet |
| Latency p50 | not measured yet |
| 2026-08-15T05:30:49Z | first_seen: challenge_hash — → fd3ecb322ee2fd4131adc609d118b8b51a9426fe3d4b80bf09d469f3aedfc4ae |
|---|
Test with tx402 →
Pre-filled with this endpoint's real terms. Your signer stays in your process — this service never sees a key, never asks for one, and cannot build a payment.
CLI — dry run, nothing is signed
# This endpoint's amount or asset could not be read, so --max-spend is left for you to set.
npx tx402 call "https://palmyr.ai/social/twitter/registered/mine" \
--network "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp" \
--dry-run
# --dry-run stops after the policy decision. Nothing is signed and nothing is spent.
TypeScript
import { createTx402Client } from "tx402";
// Your signer stays in your process. tools.tx402.io never sees a key,
// never asks for one, and cannot build a payment.
import { signers } from "./signers.js";
const tx402 = createTx402Client({
signers,
policy: {
// The observed amount could not be read as canonical money — set your own cap.
allowedDomains: ["palmyr.ai"],
allowedNetworks: ["solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],
},
});
// Policy and budget are committed before the signer is reachable, so a
// refusal here is a payment that was never authorized.
const response = await tx402.fetch("https://palmyr.ai/social/twitter/registered/mine");
Python
from tx402 import Tx402Client, Policy
# Your signer stays in your process. tools.tx402.io never sees a key,
# never asks for one, and cannot build a payment.
tx402 = Tx402Client(
solana_signer=solana,
policy=Policy(
# The observed amount could not be read as canonical money — set your own cap.
allowed_domains=["palmyr.ai"],
allowed_networks=["solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],
),
)
# Policy and budget are committed before the signer is reachable, so a
# refusal here is a payment that was never authorized.
response = tx402.fetch("https://palmyr.ai/social/twitter/registered/mine")
This report, as JSON or Markdown
curl -sS 'https://tools.tx402.io/api/v1/inspect?url=https%3A%2F%2Fpalmyr.ai%2Fsocial%2Ftwitter%2Fregistered%2Fmine'
# The same result as Markdown, for a terminal or an agent:
curl -sS -H 'Accept: text/markdown' 'https://tools.tx402.io/inspect?url=https%3A%2F%2Fpalmyr.ai%2Fsocial%2Ftwitter%2Fregistered%2Fmine'
The challenge, as served
Public data: the endpoint serves this to anyone who asks. It is shown exactly as it arrived, truncated to the documented cap.
raw challenge
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-256 of the canonicalized challenge: fd3ecb322ee2fd4131adc609d118b8b51a9426fe3d4b80bf09d469f3aedfc4ae
Raw signals
The exact input the scoring function was given. A signal we could not determine has
observed: false and contributes nothing to the score — it is never counted as a failure.
signals
[
{
"id": "probe_ok",
"value": true,
"observed": true,
"detail": null
},
{
"id": "challenge_served",
"value": true,
"observed": true,
"detail": null
},
{
"id": "challenge_decodes",
"value": true,
"observed": true,
"detail": null
},
{
"id": "wire_form",
"value": "both",
"observed": true,
"detail": null
},
{
"id": "x402_version",
"value": 2,
"observed": true,
"detail": null
},
{
"id": "tls_ok",
"value": true,
"observed": true,
"detail": null
},
{
"id": "tls_protocol",
"value": null,
"observed": false,
"detail": "The negotiated TLS version is not exposed to the probe."
},
{
"id": "redirect_count",
"value": 0,
"observed": true,
"detail": null
},
{
"id": "redirect_scheme_downgrade",
"value": false,
"observed": true,
"detail": "Cross-scheme redirects are refused."
},
{
"id": "resource_origin_match",
"value": true,
"observed": true,
"detail": null
},
{
"id": "network_recognized",
"value": true,
"observed": true,
"detail": "Recognized means present in the tx402 signed release manifest."
},
{
"id": "asset_recognized",
"value": false,
"observed": true,
"detail": "Recognized means present in the tx402 signed release manifest."
},
{
"id": "facilitator_known",
"value": false,
"observed": true,
"detail": "On the published list. That is the whole claim."
},
{
"id": "amount_canonical",
"value": true,
"observed": true,
"detail": null
},
{
"id": "amount_magnitude_band",
"value": "unknown",
"observed": true,
"detail": null
},
{
"id": "pay_to_wellformed",
"value": true,
"observed": true,
"detail": null
},
{
"id": "pay_to_declared_dynamic",
"value": false,
"observed": true,
"detail": null
},
{
"id": "timeout_sane",
"value": true,
"observed": true,
"detail": null
},
{
"id": "scheme_known",
"value": true,
"observed": true,
"detail": null
},
{
"id": "requirement_count",
"value": 2,
"observed": true,
"detail": null
},
{
"id": "challenge_size_bytes",
"value": 2793,
"observed": true,
"detail": null
},
{
"id": "first_seen_age_days",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "scan_count",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "availability_30d",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "latency_p50_ms",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "price_changes_90d",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "recipient_changes_90d",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "recipient_unstable_undeclared",
"value": null,
"observed": false,
"detail": "No history yet."
},
{
"id": "terms_changed_within_24h",
"value": null,
"observed": false,
"detail": "No history yet."
}
]