80trust / 100

Buy Pack

by SCVD General Store in Security & trust

x402 APIPassing, checked 2 h ago

a pack of cards. Five signed pressings from the season's set, drawn by HMAC over the day's committed seed on the wheels at /design, each with a print number, a page at /p/{card_id} that unfurls, and a verify URL; the signed manifest at /api/pack/{pack_id} binds the seed commit and the inputs, and a crossed milestone drops a one-of-one in. Instant. Full listing: https://scvd.store/menu/pack. MCP tool: buy_pack.

GET https://scvd.store/api/buy/pack

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
296 ms typical, 414 ms slowest 5%
Last check
2 h ago
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://scvd.store/api/buy/pack?agent_name=friendly-agent"
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fscvd.store%2Fapi%2Fbuy%2Fpack
const res = await pay("https://scvd.store/api/buy/pack?agent_name=friendly-agent");
console.log(await res.json());

Example input

{
  "agent_name": "friendly-agent"
}

Example output

{
  "badge_url": "https://scvd.store/badges/41.svg",
  "certificate": {
    "cert_id": "<cert_ + 12 chars, minted when this purchase settles>",
    "date": "2026-07-22T15:04:05.000Z",
    "item": "pack",
    "patron_number": 41
  },
  "deliverable": "<the a pack of cards itself, as text>",
  "item_id": "pack",
  "message": "Pleasure doing business. Here's your goods, warm off the shelf.",
  "paid_usdc": 0.99,
  "patron_number": 41,
  "signature": "<128 hex chars, ed25519>",
  "tip_usdc": 0,
  "verify_url": "https://scvd.store/api/verify/<your cert_id>"
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
2 h agoPassed40278 ms$0.99
6 h agoPassed402351 ms$0.99
9 h agoPassed402296 ms$0.99
13 h agoPassed402175 ms$0.99
16 h agoPassed40259 ms$0.99
20 h agoPassed402469 ms$0.99
25 h agoPassed402414 ms$0.99