2s.io

25 x402 endpoints assessed · worst score 40/100 · generated 2026-09-22T20:23:26.446Z

Some endpoints are safe to pay

Verdicts

pay 2 · caution 12 · avoid 11

Findings across this host

missing-trust-surface — 25 endpoints
no-www-authenticate — 25 endpoints
unlisted — 21 endpoints
description-too-long — 11 endpoints
evaluation-traffic — 2 endpoints

Endpoints

method	resource	verdict	score	findings
`GET`	`https://2s.io/api/airport/near`	avoid	40	`missing-trust-surface` `no-www-authenticate` `unlisted` `description-too-long`
`GET`	`https://2s.io/api/calendar/business-days`	avoid	40	`missing-trust-surface` `no-www-authenticate` `unlisted` `description-too-long`
`GET`	`https://2s.io/api/calendar/holidays`	avoid	40	`missing-trust-surface` `no-www-authenticate` `unlisted` `description-too-long`
`GET`	`https://2s.io/api/convert/unit`	avoid	40	`missing-trust-surface` `no-www-authenticate` `unlisted` `description-too-long`
`GET`	`https://2s.io/api/finance/figi-search`	avoid	40	`missing-trust-surface` `no-www-authenticate` `unlisted` `description-too-long`
`GET`	`https://2s.io/api/gov/usgs-water`	avoid	40	`missing-trust-surface` `no-www-authenticate` `unlisted` `description-too-long`
`GET`	`https://2s.io/api/security/package`	avoid	40	`missing-trust-surface` `no-www-authenticate` `unlisted` `description-too-long`
`GET`	`https://2s.io/api/timezone/lookup`	avoid	40	`missing-trust-surface` `no-www-authenticate` `unlisted` `description-too-long`
`GET`	`https://2s.io/api/url/clean`	avoid	40	`missing-trust-surface` `no-www-authenticate` `unlisted` `description-too-long`
`GET`	`https://2s.io/api/bank/lookup`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/crypto/hyperliquid-funding`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/domain/whois`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/geo/ip`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/geocode/address`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/geocode/reverse`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/stocks/earnings-surprises`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/stocks/metrics`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/vehicle/vin-decode`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/weather/current`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/weather/zip`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/wikipedia/summary`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://2s.io/api/url/map`	avoid	70	`missing-trust-surface` `no-www-authenticate` `description-too-long` `evaluation-traffic`
`GET`	`https://2s.io/api/fx/rates`	pay	75	`missing-trust-surface` `no-www-authenticate` `evaluation-traffic`
`GET`	`https://2s.io/api/stocks/quote`	avoid	80	`missing-trust-surface` `no-www-authenticate` `description-too-long`
`GET`	`https://2s.io/api/search/ai`	pay	85	`missing-trust-surface` `no-www-authenticate`

Fix it

This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.

POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"2s.io"}

Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.