api.craigmbrown.com

30 x402 endpoints assessed · worst score 30/100 · generated 2026-09-22T20:24:39.452Z

Some endpoints are safe to pay

Verdicts

pay 4 · caution 15 · avoid 11

Findings across this host

missing-trust-surface — 30 endpoints
no-www-authenticate — 30 endpoints
thin-listing — 19 endpoints
evaluation-traffic — 15 endpoints
stale — 10 endpoints
unlisted — 10 endpoints
bazaar-unavailable — 1 endpoint
description-too-long — 1 endpoint

Endpoints

method	resource	verdict	score	findings
`GET`	`https://api.craigmbrown.com/v1/services/procurement.trust-layer`	avoid	30	`missing-trust-surface` `no-www-authenticate` `unlisted` `description-too-long`
`GET`	`https://api.craigmbrown.com/v1/services/attestation.single-use-seal`	avoid	35	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.craigmbrown.com/v1/services/crypto.investment-plays`	avoid	35	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.craigmbrown.com/v1/services/crypto.market-analyzer`	avoid	35	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.craigmbrown.com/v1/services/data.sec-edgar-filing`	avoid	35	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.craigmbrown.com/v1/services/data.web-extract`	avoid	35	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.craigmbrown.com/v1/services/finops.token-spend-audit`	avoid	35	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.craigmbrown.com/v1/services/oracle.volatility-monitor`	avoid	35	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.craigmbrown.com/v1/services/research.topic-news-scanner`	avoid	35	`missing-trust-surface` `no-www-authenticate` `bazaar-unavailable`
`GET`	`https://api.craigmbrown.com/v1/services/social.verified_introduction`	avoid	35	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.craigmbrown.com/v1/services/translation.zh-en`	avoid	35	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.craigmbrown.com/v1/services/data.business-registry`	caution	60	`missing-trust-surface` `no-www-authenticate` `thin-listing` `stale` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/ops.due-diligence-scan`	caution	60	`missing-trust-surface` `no-www-authenticate` `thin-listing` `stale` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/oracle.alert-generator`	caution	60	`missing-trust-surface` `no-www-authenticate` `thin-listing` `stale` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/oracle.comprehensive-report`	caution	60	`missing-trust-surface` `no-www-authenticate` `thin-listing` `stale` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/oracle.historical-analysis`	caution	60	`missing-trust-surface` `no-www-authenticate` `thin-listing` `stale` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/oracle.market-arbitrage`	caution	60	`missing-trust-surface` `no-www-authenticate` `thin-listing` `stale` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/security.audit-attestation`	caution	60	`missing-trust-surface` `no-www-authenticate` `thin-listing` `stale` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/ops.link-integrity`	caution	65	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/oracle.price-feed`	caution	65	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/oracle.sentiment-analysis`	caution	65	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/research.topic-sentiment-analyzer`	caution	65	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/security.concordium-card-verify`	caution	65	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/security.injection-resilience`	caution	65	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/security.massat-conformance`	caution	65	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/trust.receipt-verify`	caution	65	`missing-trust-surface` `no-www-authenticate` `thin-listing` `evaluation-traffic`
`GET`	`https://api.craigmbrown.com/v1/services/agent.prehire-check`	pay	70	`missing-trust-surface` `no-www-authenticate` `thin-listing` `stale`
`GET`	`https://api.craigmbrown.com/v1/services/agent.trust-badge`	pay	70	`missing-trust-surface` `no-www-authenticate` `thin-listing` `stale`
`GET`	`https://api.craigmbrown.com/v1/services/reputation.lookup`	pay	70	`missing-trust-surface` `no-www-authenticate` `thin-listing` `stale`
`GET`	`https://api.craigmbrown.com/v1/services/security.process-attestation`	pay	75	`missing-trust-surface` `no-www-authenticate` `thin-listing`

Fix it

This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.

POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"api.craigmbrown.com"}

Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.