api.brazilayer.com

25 x402 endpoints assessed · worst score 45/100 · generated 2026-09-22T20:23:46.128Z

Some endpoints are safe to pay

Verdicts

pay 10 · caution 15 · avoid 0

Findings across this host

missing-trust-surface — 25 endpoints
no-www-authenticate — 25 endpoints
unlisted — 8 endpoints
stale — 7 endpoints
bazaar-unavailable — 7 endpoints
evaluation-traffic — 5 endpoints

Endpoints

method	resource	verdict	score	findings
`GET`	`https://api.brazilayer.com/v1/bcb/instituicao/:cnpj`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.brazilayer.com/v1/cadeias/cafe_kc`	caution	45	`missing-trust-surface` `no-www-authenticate` `bazaar-unavailable`
`GET`	`https://api.brazilayer.com/v1/cadeias/capital_br`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.brazilayer.com/v1/cnpj/busca`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.brazilayer.com/v1/cnpj/situacao/:cnpj`	caution	45	`missing-trust-surface` `no-www-authenticate` `bazaar-unavailable`
`GET`	`https://api.brazilayer.com/v1/commodities/clima`	caution	45	`missing-trust-surface` `no-www-authenticate` `bazaar-unavailable`
`GET`	`https://api.brazilayer.com/v1/desmatamento/municipio/:ibge`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.brazilayer.com/v1/desmatamento/ranking`	caution	45	`missing-trust-surface` `no-www-authenticate` `bazaar-unavailable`
`GET`	`https://api.brazilayer.com/v1/empresa/enriquecer/:cnpj`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.brazilayer.com/v1/fundos/ranking`	caution	45	`missing-trust-surface` `no-www-authenticate` `bazaar-unavailable`
`GET`	`https://api.brazilayer.com/v1/integridade/consulta/:cnpj`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.brazilayer.com/v1/licitacoes/abertas`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.brazilayer.com/v1/mercado/cambio`	caution	45	`missing-trust-surface` `no-www-authenticate` `bazaar-unavailable`
`GET`	`https://api.brazilayer.com/v1/tributos/busca`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.brazilayer.com/v1/tributos/calendario`	caution	45	`missing-trust-surface` `no-www-authenticate` `bazaar-unavailable`
`GET`	`https://api.brazilayer.com/v1/commodities/exportacoes`	pay	70	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://api.brazilayer.com/v1/commodities/fogo`	pay	70	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://api.brazilayer.com/v1/commodities/hidrologia`	pay	70	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://api.brazilayer.com/v1/mercado/indicadores`	pay	70	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://api.brazilayer.com/v1/mercado/noticias`	pay	70	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://api.brazilayer.com/v1/cnpj/socio/busca`	pay	80	`missing-trust-surface` `no-www-authenticate` `stale`
`GET`	`https://api.brazilayer.com/v1/desmatamento/fornecedor/:cnpj`	pay	80	`missing-trust-surface` `no-www-authenticate` `stale`
`GET`	`https://api.brazilayer.com/v1/cnpj/empresa/:cnpj`	pay	85	`missing-trust-surface` `no-www-authenticate`
`GET`	`https://api.brazilayer.com/v1/cnpj/empresa/:cnpj/socios`	pay	85	`missing-trust-surface` `no-www-authenticate`
`GET`	`https://api.brazilayer.com/v1/fundos/fluxos`	pay	85	`missing-trust-surface` `no-www-authenticate`

Fix it

This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.

POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"api.brazilayer.com"}

Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.