apexfaucet.xyz

25 x402 endpoints assessed · worst score 50/100 · generated 2026-09-27T04:36:57.785Z

Some endpoints are safe to pay

Verdicts

pay 14 · caution 11 · avoid 0

Findings across this host

missing-trust-surface — 25 endpoints
no-www-authenticate — 25 endpoints
evaluation-traffic — 14 endpoints
thin-listing — 14 endpoints
unlisted — 11 endpoints

Endpoints

method	resource	verdict	score	findings
`GET`	`https://apexfaucet.xyz/api/x402/arc-agent-market`	caution	50	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://apexfaucet.xyz/api/x402/arc-agent-watch`	caution	50	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://apexfaucet.xyz/api/x402/arc-agents`	caution	50	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://apexfaucet.xyz/api/x402/arc-cost`	caution	50	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://apexfaucet.xyz/api/x402/arc-counterparty`	caution	50	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://apexfaucet.xyz/api/x402/arc-hook-risk`	caution	50	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://apexfaucet.xyz/api/x402/arc-payment`	caution	50	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://apexfaucet.xyz/api/x402/arc-sniper-pnl`	caution	50	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://apexfaucet.xyz/api/x402/arc-verdict`	caution	50	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://apexfaucet.xyz/api/x402/arc-x402`	caution	50	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://apexfaucet.xyz/api/x402/flux-intel`	caution	50	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://apexfaucet.xyz/api/x402/arc-archive`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/arc-bridge`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/arc-deployers`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/arc-eurc`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/arc-fee-flow`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/arc-gas`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/arc-graveyard`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/arc-impostors`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/chain-status`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/exit-check-bulk`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/firehose`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/pools`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/screener-bulk`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://apexfaucet.xyz/api/x402/site-extract`	pay	80	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`

Fix it

This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.

POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"apexfaucet.xyz"}

Verdicts come from a continuous probe of x402 resources. How grading works. If you believe a verdict is wrong, re-probe with /api/seller/vet.