census / audit
9 x402 endpoints assessed · worst score 45/100 · generated 2026-09-22T21:14:44.156Z
Some endpoints are safe to pay
pay 6 · caution 1 · avoid 2
missing-trust-surface — 9 endpointsno-www-authenticate — 9 endpointsstale — 4 endpointsevaluation-traffic — 4 endpointsdescription-too-long — 2 endpointsbazaar-unavailable — 1 endpoint| method | resource | verdict | score | findings |
|---|---|---|---|---|
GET | https://api.invoket.com/legal/eu-act | caution | 45 | missing-trust-surface no-www-authenticate bazaar-unavailable |
GET | https://api.invoket.com/weather/forecast | avoid | 65 | missing-trust-surface no-www-authenticate description-too-long stale evaluation-traffic |
GET | https://api.invoket.com/iban/resolve/batch | pay | 75 | missing-trust-surface no-www-authenticate evaluation-traffic |
GET | https://api.invoket.com/legal/diff/batch | pay | 75 | missing-trust-surface no-www-authenticate evaluation-traffic |
GET | https://api.invoket.com/legal/history/batch | pay | 75 | missing-trust-surface no-www-authenticate evaluation-traffic |
GET | https://api.invoket.com/weather/forecast/daily | avoid | 75 | missing-trust-surface no-www-authenticate description-too-long stale |
GET | https://api.invoket.com/legal/article/batch | pay | 80 | missing-trust-surface no-www-authenticate stale |
GET | https://api.invoket.com/weather/forecast/batch | pay | 80 | missing-trust-surface no-www-authenticate stale |
GET | https://api.invoket.com/invoice/generate-pdf | pay | 85 | missing-trust-surface no-www-authenticate |
This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.
POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"api.invoket.com"}
Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.