Evidence Crosscheck

Last 30 days

Uptime

100%

Response time

430 ms typical, 500 ms slowest 5%

Last check

3 h ago

Next check

any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X POST "https://agente.revenuerecoveryai.app/v1/x402/evidence-crosscheck" \
  -H "content-type: application/json" \
  -d '{"target_url":"https://api.example.com/v1/resource"}'

import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fagente.revenuerecoveryai.app%2Fv1%2Fx402%2Fevidence-crosscheck
const res = await pay("https://agente.revenuerecoveryai.app/v1/x402/evidence-crosscheck", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({"target_url":"https://api.example.com/v1/resource"}),
});
console.log(await res.json());

Example input

{
  "target_url": "https://api.example.com/v1/resource"
}

Example output

{
  "declared": {
    "amount": "10000",
    "method": "GET",
    "network": "eip155:8453",
    "pay_to": "0xabc...",
    "source": "bazaar"
  },
  "differences": [
    {
      "classification": "STALE_CATALOG_PRICE",
      "confidence": "HIGH",
      "declared": "10000",
      "evidence_refs": [
        "hash:sha256:7b21..."
      ],
      "field": "price",
      "observed": "12000",
      "reason": "the amount was stable across 3 observations and differs from the declared one (1.20x)",
      "rule_id": "XCC-010",
      "severity": "warning"
    }
  ],
  "duration_ms": 2410,
  "observed": {
    "payable": {
      "confidence": "HIGH",
      "evidence_hash": "sha256:1f0c...",
      "observations": 3,
      "observed_at": "2026-08-10T14:03:11+00:00",
      "source": "live_probe",
      "value": "LIVE_PAYABLE"
    },
    "price": {
      "confidence": "HIGH",
      "evidence_hash": "sha256:7b21...",
      "observations": 3,
      "observed_at": "2026-08-10T14:03:11+00:00",
      "source": "live_402_header",
      "value": "10000"
    }
  },
  "observed_at": "2026-08-10T14:03:11+00:00",
  "payability": {
    "delivery_verified": "UNAVAILABLE_BY_DESIGN",
    "live": "LIVE_PAYABLE",
    "note": "we never pay the target by design: post-payment delivery is not observable from here and is never inferred"
  },
  "receipt": {
    "alg": "Ed25519",
    "key_id": "k1",
    "signature": "..."
  },
  "rules_version": "2026.08.09.1",
  "schema_version": "1.0.0",
  "summary": {
    "actionable": 1,
    "differences": 1,
    "expected_behavior": 0,
    "status": "WARN"
  },
  "surfaces": {
    "bazaar": {
      "present": true
    },
    "live_402": {
      "declared_method": "GET",
      "observations": 3,
      "post_policy": null,
      "probed": true,
      "probed_method": "GET"
    },
    "method_bypass": {
      "method": "POST",
      "note": "the alternate method would be POST, which is never sent to a target solely to test for a bypass",
      "probed": false
    },
    "openapi": {
      "present": false
    },
    "well_known": {
      "present": true
    }
  },
  "target": "https://api.example.com/v1/resource"
}

Security scan

• No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks