83trust / 100

Inspect

by Quartermaster x402 Inspector in Markets & finance

x402 APIPassing, checked 3 h ago

Inspect and lint any x402 paid endpoint: decodes the 402 payment challenge, names the network and asset, and flags misconfigurations including missing Bazaar discovery metadata.

GET https://quartermaster.surewhynot.app/v1/x402/inspect

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
42 ms typical, 42 ms slowest 5%
Last check
3 h ago
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://quartermaster.surewhynot.app/v1/x402/inspect?url=https%3A%2F%2Fapi.example.com%2Fpaid-endpoint"
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fquartermaster.surewhynot.app%2Fv1%2Fx402%2Finspect
const res = await pay("https://quartermaster.surewhynot.app/v1/x402/inspect?url=https%3A%2F%2Fapi.example.com%2Fpaid-endpoint");
console.log(await res.json());

Example input

{
  "url": "https://api.example.com/paid-endpoint"
}

Example output

{
  "accepts": [
    {
      "asset_name": "USDC (Base mainnet)",
      "network": "eip155:8453",
      "network_name": "Base mainnet",
      "pay_to": "0x...",
      "scheme": "exact"
    }
  ],
  "findings": [
    "No `bazaar` discovery extension declared - settlements will NOT list this endpoint in the Coinbase Bazaar catalog."
  ],
  "has_bazaar_discovery_metadata": false,
  "http_status": 402,
  "is_x402": true,
  "url": "https://api.example.com/paid-endpoint",
  "x402_version": 2
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
3 h agoPassed40237 ms$0.002
6 h agoPassed402654 ms$0.002
11 h agoPassed40242 ms$0.002