75trust / 100

Seller Report

by Tanod agentscan in Other

x402 APIPassing, checked 4 h ago

agentscan (Tanod) x402 seller report: lint, price position, buyer preflight and Bazaar demand for one endpoint, with coded fixes. Use when an x402 seller wants one report on their endpoint: lint, price position, buyer preflight, Bazaar demand, fixes.

POST https://tanod.dev/v1/x402/seller-report

Last 30 days

All checks passedSome failedAll failedNot checked

Status and outage history · Atom feed

Uptime
100%
Response time
363 ms typical, 363 ms slowest 5%
Last check
4 h ago
Next check
any minute now

How to call it

POST https://tanod.dev/v1/x402/seller-report

Each call costs $0.01 in USDC on Base, paid with the request over x402.

Run a free test callOne unpaid request, the way an agent sends it. You see the payment challenge it gets back. Nothing is charged.

Example request

From the listing.

POST https://tanod.dev/v1/x402/seller-report
content-type: application/json

{
  "url": "https://api.example.com/v1/weather"
}

Parameters

ParameterTypeRequiredDescription
methodstring or nullNoOptional. Default: GET, then POST if GET answers 404 or 405. Default: null.
urlstringYesPublic https URL of your x402 endpoint (host name, port 443). Requested once without payment.

Example response

The provider's example. We can't check it without paying.

Example response, 101 lines
{
  "checked_at": "2026-10-13T08:00:00Z",
  "demand": {
    "age_basis": "observed",
    "calls_30d": 0,
    "first_seen": "2026-10-10",
    "history_days": 4,
    "in_latest_snapshot": true,
    "last_called_at": null,
    "last_seen": "2026-10-13",
    "listed": true,
    "listed_price_usd": 0.01,
    "ok": true,
    "payers_30d": 0,
    "source": "cdp_bazaar"
  },
  "fixes": [
    {
      "action": "Publish your payTo in /.well-known/x402 so buyers can bind your domain to the payee.",
      "code": "publish_payto",
      "severity": "info",
      "source": "preflight"
    },
    {
      "action": "When-to-use sentence: No \"use when\" sentence found. Fix: Add one.",
      "code": "lint_missing_use_when",
      "severity": "caution",
      "source": "lint"
    }
  ],
  "lint": {
    "checks_passed": 9,
    "description_length": 28,
    "errors": 0,
    "ok": true,
    "problems": [
      {
        "code": "missing_use_when",
        "message": "When-to-use sentence: No \"use when\" sentence found. Fix: Add one.",
        "severity": "warning"
      }
    ],
    "score": 95,
    "suggested_description": "Weather forecast for a city. Use when an agent needs weather data from this endpoint.",
    "warnings": 1
  },
  "method": "GET",
  "note": "Automated and heuristic, not an audit. One unpaid request to your endpoint at the time shown (nothi…",
  "preflight": {
    "live": {
      "http_status": 402,
      "price_usd": 0.01,
      "response_ms": 240,
      "state": "x402"
    },
    "ok": true,
    "payto_binding": "unknown",
    "reasons": [
      {
        "code": "payto_binding_unknown",
        "message": "The endpoint's origin publishes no payment address to compare with.",
        "severity": "info"
      }
    ],
    "verdict": "caution"
  },
  "price": {
    "benchmark": {
      "closest": [],
      "distinct_hosts": 17,
      "found": true,
      "matched_offers": 42,
      "median_usd": 0.01,
      "p25_usd": 0.005,
      "p75_usd": 0.02,
      "query": "weather forecast city",
      "rank": {
        "equal": 5,
        "higher": 20,
        "lower": 17,
        "percentile": 46.4,
        "price_usd": 0.01
      },
      "ratio_to_median": 1
    },
    "category": {
      "hosts": 22,
      "listings": 40,
      "median_usd": 0.01,
      "name": "weather-geo",
      "ratio_to_median": 1,
      "usable": true
    },
    "listed_usd": 0.01,
    "live_usd": 0.01,
    "ok": true
  },
  "snapshot": "2026-10-13T04:31:37Z",
  "untrusted_content": true,
  "url": "https://api.example.com/v1/weather"
}

Call it from code

The curl command shows the payment challenge. The JavaScript and Python versions pay and call, and never pay more than $0.01.

curl: see the payment challenge
# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i -X POST 'https://tanod.dev/v1/x402/seller-report' \
  -H 'content-type: application/json' \
  --data-raw '{"url":"https://api.example.com/v1/weather"}'

# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - -X POST 'https://tanod.dev/v1/x402/seller-report' \
  -H 'content-type: application/json' \
  --data-raw '{"url":"https://api.example.com/v1/weather"}' \
  | grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decode
JavaScript: pay and call
// npm i @x402/fetch @x402/evm viem
import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

// Pays at most $0.01 per call.
const client = new x402Client().setSpendControls({ maxAmountPerPayment: "$0.01" });
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.EVM_PRIVATE_KEY) });
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? ToolVet checks it first for $0.005. Pay for that from a separate
// client: this one is capped at $0.01 per payment. GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Ftanod.dev%2Fv1%2Fx402%2Fseller-report&method=POST
const res = await pay("https://tanod.dev/v1/x402/seller-report", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
    "url": "https://api.example.com/v1/weather"
  }),
});
console.log(res.status, await res.text());
Python: pay and call
# pip install "x402[requests,evm]"
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

# Pays at most $0.01 per call.
client = x402ClientSync().set_spend_controls({"max_amount_per_payment": "$0.01"})
register_exact_evm_client(client, EthAccountSigner(Account.from_key(os.environ["EVM_PRIVATE_KEY"])))

with x402_requests(client) as session:
    res = session.post(
        "https://tanod.dev/v1/x402/seller-report",
        json={
            "url": "https://api.example.com/v1/weather",
        },
    )
    print(res.status_code, res.text)

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
4 h agoPassed402384 ms$0.01
7 h agoPassed402363 ms$0.01
17 h agoPassed402355 ms$0.01