75trust / 100

Payee Check

by Verdict L402 in Security & trust

x402 APIPassing, checked 4 h ago

Invoice-fraud guard for AI agents that pay bills. Detects supplier bank-detail change fraud (BEC) before payment: checks the IBAN and sender domain against your supplier record (lookalike domains included), then reads pressure and off-channel requests. Returns ok, verify_callback or freeze_payment.

POST
https://verdict.kechlab.com/v1/payee-check
Price
$0.049
per call in USDC
Uptime
100%
last 30 days
Response time
584 ms
864 ms slowest 5%
Last check
Passed
4 h ago, next any minute now

Run a free test callHow to call it

Reliability

All checks passedSome failedAll failedNot checked

Status and outage history · Atom feed · Watch with other listings

How to call it

POST https://verdict.kechlab.com/v1/payee-check

Each call costs $0.0494 in USDC on Base, paid with the request over x402.

Run a free test callOne unpaid request, the way an agent sends it. You see the payment challenge it gets back. Nothing is charged.

Example request

From the listing.

POST https://verdict.kechlab.com/v1/payee-check
content-type: application/json

{
  "body": "Please find invoice 118 for 1250 EUR, due 30 November. Our payment details are unchanged.",
  "known_supplier": {
    "domain": "fournisseur.fr",
    "iban": "FR76 3000 6000 0112 3456 7890 189",
    "name": "Fournisseur SA"
  },
  "sender": "[email protected]",
  "subject": "Invoice 118"
}

Parameters

ParameterTypeRequiredDescription
bodystringYesthe email body
known_supplierobjectNo(optional but recommended) { name, domain, iban } from your supplier record
senderstringNo(optional) sender address
subjectstringNo(optional) email subject

Example response

The provider's example. We can't check it without paying.

Example response, 36 lines
{
  "mode": "payee-check",
  "paid_sats": 20,
  "payment_hash": "x402:<sha256 hex>",
  "receipt": {
    "payload": {
      "at": "<ISO 8601 time>",
      "kid": "<signing key id>",
      "mode": "payee-check",
      "payment_hash": "x402:<sha256 hex>",
      "v": 1,
      "verdict_sha256": "<sha256 hex of the verdict>"
    },
    "signature": "<base64url Ed25519 signature>"
  },
  "verdict": {
    "controls": {
      "domain_lookalike": false,
      "domain_unknown": false,
      "iban_differs": false,
      "iban_invalid": false,
      "ibans_found": 0,
      "referential_used": true
    },
    "decision": "ok",
    "instruction": "Pay according to the usual procedure.",
    "reasons": [],
    "rule": "freeze if the IBAN differs or the domain is a lookalike (safe checks, they override the engine) ; verify_callback if request for new bank >= 0.5, pressure >= 0.6, off-channel >= 0.5, or unknown sender ; otherwise ok",
    "scores": {
      "bank_change": 0.02,
      "nature": "normal_invoice",
      "off_channel": 0.02,
      "pressure": 0.02
    }
  }
}

Call it from code

The curl command shows the payment challenge. The JavaScript and Python versions pay and call, and never pay more than $0.0494.

curl: see the payment challenge
# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i -X POST 'https://verdict.kechlab.com/v1/payee-check' \
  -H 'content-type: application/json' \
  --data-raw '{"body":"Please find invoice 118 for 1250 EUR, due 30 November. Our payment details are unchanged.","known_supplier":{"domain":"fournisseur.fr","iban":"FR76 3000 6000 0112 3456 7890 189","name":"Fournisseur SA"},"sender":"[email protected]","subject":"Invoice 118"}'

# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - -X POST 'https://verdict.kechlab.com/v1/payee-check' \
  -H 'content-type: application/json' \
  --data-raw '{"body":"Please find invoice 118 for 1250 EUR, due 30 November. Our payment details are unchanged.","known_supplier":{"domain":"fournisseur.fr","iban":"FR76 3000 6000 0112 3456 7890 189","name":"Fournisseur SA"},"sender":"[email protected]","subject":"Invoice 118"}' \
  | grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decode
JavaScript: pay and call
// npm i @x402/fetch @x402/evm viem
import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

// Pays at most $0.0494 per call.
const client = new x402Client().setSpendControls({ maxAmountPerPayment: "$0.0494" });
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.EVM_PRIVATE_KEY) });
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? ToolVet checks it first for $0.005. Pay for that from a separate
// client: this one is capped at $0.0494 per payment. GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fverdict.kechlab.com%2Fv1%2Fpayee-check&method=POST
const res = await pay("https://verdict.kechlab.com/v1/payee-check", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
    "body": "Please find invoice 118 for 1250 EUR, due 30 November. Our payment details are unchanged.",
    "known_supplier": {
      "domain": "fournisseur.fr",
      "iban": "FR76 3000 6000 0112 3456 7890 189",
      "name": "Fournisseur SA"
    },
    "sender": "[email protected]",
    "subject": "Invoice 118"
  }),
});
console.log(res.status, await res.text());
Python: pay and call
# pip install "x402[requests,evm]"
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

# Pays at most $0.0494 per call.
client = x402ClientSync().set_spend_controls({"max_amount_per_payment": "$0.0494"})
register_exact_evm_client(client, EthAccountSigner(Account.from_key(os.environ["EVM_PRIVATE_KEY"])))

with x402_requests(client) as session:
    res = session.post(
        "https://verdict.kechlab.com/v1/payee-check",
        json={
            "body": "Please find invoice 118 for 1250 EUR, due 30 November. Our payment details are unchanged.",
            "known_supplier": {
                "domain": "fournisseur.fr",
                "iban": "FR76 3000 6000 0112 3456 7890 189",
                "name": "Fournisseur SA",
            },
            "sender": "[email protected]",
            "subject": "Invoice 118",
        },
    )
    print(res.status_code, res.text)

Security scan

No findings

We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
4 h agoPassed402370 ms$0.049
10 h agoPassed402649 ms$0.05
15 h agoPassed402607 ms$0.05
20 h agoPassed402630 ms$0.05
26 h agoPassed402500 ms$0.05
Show 10 older checks
30 h agoPassed402527 ms$0.05
35 h agoPassed402504 ms$0.05
40 h agoPassed402499 ms$0.05
45 h agoPassed402668 ms$0.05
2 days agoPassed402590 ms$0.05
2 days agoPassed402587 ms$0.05
2 days agoPassed402470 ms$0.051
3 days agoPassed402468 ms$0.052
3 days agoPassed402584 ms$0.052
3 days agoPassed402624 ms$0.052

History

24 Oct 2026Price changed from $0.05 to $0.049
24 Oct 2026Price changed from $0.05 to $0.05
23 Oct 2026Price changed from $0.05 to $0.05
23 Oct 2026Price changed from $0.05 to $0.05
23 Oct 2026Price changed from $0.05 to $0.05
23 Oct 2026Price changed from $0.05 to $0.05
22 Oct 2026Price changed from $0.05 to $0.05
22 Oct 2026Price changed from $0.05 to $0.05
22 Oct 2026Price changed from $0.05 to $0.05
22 Oct 2026Price changed from $0.051 to $0.05
22 Oct 2026Price changed from $0.052 to $0.051
21 Oct 2026Price changed from $0.052 to $0.052
21 Oct 2026Price changed from $0.052 to $0.052
21 Oct 2026Price changed from $0.051 to $0.052
21 Oct 2026Price changed from $0.051 to $0.051