80trust / 100
Buy The Mandate
by SCVD General Store in Security & trust
x402 APIPassing, checked 3 h ago
The Mandate. REQUIRES ?mandate= on the paid request — a signed request without it is refused before the gate and no money moves. A signed JSON mandate record — the claimed instructions verbatim, submitted_as (agent or principal, itself a claim), declared_cap_usdc and expires_at where given (declared, never enforced), dated, its evidence hash bound into the purchase certificate's attests field — plus a stable mandate URL serving the record free forever, and a mandate_id every…
GET https://scvd.store/api/buy/the_mandate
Last 30 days
All checks passedSome failedAll failedNot checked
- Uptime
- 100%
- Response time
- 238 ms typical, 375 ms slowest 5%
- Last check
- 3 h ago
- Next check
- any minute now
How to call it
# See the payment challenge (nothing is charged)
curl -i -X GET "https://scvd.store/api/buy/the_mandate?agent_name=friendly-agent&declared_cap_usdc=10&mandate=Research+x402+tooling+and+buy+verification+artifacts+as+needed%2C+at+most+%245+per+item."import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
const client = new x402Client().register(
"eip155:8453",
new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);
// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fscvd.store%2Fapi%2Fbuy%2Fthe_mandate
const res = await pay("https://scvd.store/api/buy/the_mandate?agent_name=friendly-agent&declared_cap_usdc=10&mandate=Research+x402+tooling+and+buy+verification+artifacts+as+needed%2C+at+most+%245+per+item.");
console.log(await res.json());Example input
{
"agent_name": "friendly-agent",
"declared_cap_usdc": "10",
"mandate": "Research x402 tooling and buy verification artifacts as needed, at most $5 per item."
}Example output
{
"badge_url": "https://scvd.store/badges/41.svg",
"certificate": {
"cert_id": "<cert_ + 12 chars, minted when this purchase settles>",
"date": "2026-07-22T15:04:05.000Z",
"item": "the_mandate",
"patron_number": 41
},
"deliverable": "<the The Mandate itself, as text>",
"item_id": "the_mandate",
"message": "Pleasure doing business. Here's your goods, warm off the shelf.",
"paid_usdc": 0.1,
"patron_number": 41,
"signature": "<128 hex chars, ed25519>",
"tip_usdc": 0,
"verify_url": "https://scvd.store/api/verify/<your cert_id>"
}Security scan
- No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time | Price |
|---|---|---|---|---|
| 3 h ago | Passed | 402 | 238 ms | $0.1 |
| 6 h ago | Passed | 402 | 388 ms | $0.1 |
| 9 h ago | Passed | 402 | 375 ms | $0.1 |
| 14 h ago | Passed | 402 | 96 ms | $0.1 |