census / audit
11 x402 endpoints assessed · worst score 10/100 · generated 2026-09-22T21:14:07.783Z
Some endpoints are safe to pay
pay 2 · caution 1 · avoid 8
missing-trust-surface — 11 endpointsno-www-authenticate — 11 endpointsno-x402-header — 8 endpointsnot-402 — 8 endpointsunlisted — 8 endpointsbazaar-unavailable — 1 endpoint| method | resource | verdict | score | findings |
|---|---|---|---|---|
GET | https://api.kakerapetit.dev/v1/calendar/ics | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.kakerapetit.dev/v1/check-duplicate-image | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.kakerapetit.dev/v1/compare-product-photo | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.kakerapetit.dev/v1/find-near-duplicate | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.kakerapetit.dev/v1/jp-company/governance | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.kakerapetit.dev/v1/jp-company/snapshot | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.kakerapetit.dev/v1/text/similarity | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.kakerapetit.dev/v1/verify-reference-image | avoid | 10 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://api.kakerapetit.dev/v2/calendar | caution | 40 | missing-trust-surface no-www-authenticate bazaar-unavailable |
GET | https://api.kakerapetit.dev/v2/rankings | pay | 80 | missing-trust-surface no-www-authenticate |
GET | https://api.kakerapetit.dev/v2/screener | pay | 80 | missing-trust-surface no-www-authenticate |
This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.
POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"api.kakerapetit.dev"}
Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.