80trust / 100

Buy The Mandate

by SCVD General Store in Security & trust

x402 APIPassing, checked 3 h ago

The Mandate. REQUIRES ?mandate= on the paid request — a signed request without it is refused before the gate and no money moves. A signed JSON mandate record — the claimed instructions verbatim, submitted_as (agent or principal, itself a claim), declared_cap_usdc and expires_at where given (declared, never enforced), dated, its evidence hash bound into the purchase certificate's attests field — plus a stable mandate URL serving the record free forever, and a mandate_id every…

GET https://scvd.store/api/buy/the_mandate

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
238 ms typical, 375 ms slowest 5%
Last check
3 h ago
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://scvd.store/api/buy/the_mandate?agent_name=friendly-agent&declared_cap_usdc=10&mandate=Research+x402+tooling+and+buy+verification+artifacts+as+needed%2C+at+most+%245+per+item."
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fscvd.store%2Fapi%2Fbuy%2Fthe_mandate
const res = await pay("https://scvd.store/api/buy/the_mandate?agent_name=friendly-agent&declared_cap_usdc=10&mandate=Research+x402+tooling+and+buy+verification+artifacts+as+needed%2C+at+most+%245+per+item.");
console.log(await res.json());

Example input

{
  "agent_name": "friendly-agent",
  "declared_cap_usdc": "10",
  "mandate": "Research x402 tooling and buy verification artifacts as needed, at most $5 per item."
}

Example output

{
  "badge_url": "https://scvd.store/badges/41.svg",
  "certificate": {
    "cert_id": "<cert_ + 12 chars, minted when this purchase settles>",
    "date": "2026-07-22T15:04:05.000Z",
    "item": "the_mandate",
    "patron_number": 41
  },
  "deliverable": "<the The Mandate itself, as text>",
  "item_id": "the_mandate",
  "message": "Pleasure doing business. Here's your goods, warm off the shelf.",
  "paid_usdc": 0.1,
  "patron_number": 41,
  "signature": "<128 hex chars, ed25519>",
  "tip_usdc": 0,
  "verify_url": "https://scvd.store/api/verify/<your cert_id>"
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
3 h agoPassed402238 ms$0.1
6 h agoPassed402388 ms$0.1
9 h agoPassed402375 ms$0.1
14 h agoPassed40296 ms$0.1