census / audit
10 x402 endpoints assessed · worst score 15/100 · generated 2026-09-22T20:24:19.491Z
No endpoint here is currently safe to pay
pay 0 · caution 0 · avoid 10
missing-trust-surface — 10 endpointsno-www-authenticate — 10 endpointsno-x402-header — 10 endpointsnot-402 — 10 endpointsunlisted — 10 endpoints| method | resource | verdict | score | findings |
|---|---|---|---|---|
GET | https://api.agentmercantile.com/v1/allowance-exposure | avoid | 15 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.agentmercantile.com/v1/bazaar-visibility | avoid | 15 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.agentmercantile.com/v1/payment-authority-snapshot | avoid | 15 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.agentmercantile.com/v1/portfolio-preflight | avoid | 15 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.agentmercantile.com/v1/productive-venue-snapshot | avoid | 15 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.agentmercantile.com/v1/transaction-gas-preflight | avoid | 15 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.agentmercantile.com/v1/url-context | avoid | 15 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.agentmercantile.com/v1/web-change-snapshot | avoid | 15 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.agentmercantile.com/v1/x402-presign-handoff | avoid | 15 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.agentmercantile.com/v1/x402-service-change-snapshot | avoid | 15 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.
POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"api.agentmercantile.com"}
Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.