api.onesource.io

25 x402 endpoints assessed · worst score 50/100 · generated 2026-09-22T20:23:08.954Z

Some endpoints are safe to pay

Verdicts

pay 14 · caution 11 · avoid 0

Findings across this host

missing-trust-surface — 25 endpoints
evaluation-traffic — 14 endpoints
thin-listing — 14 endpoints
unlisted — 11 endpoints

Endpoints

method	resource	verdict	score	findings
`GET`	`https://api.onesource.io/api/chain/allowance`	caution	50	`missing-trust-surface` `unlisted`
`GET`	`https://api.onesource.io/api/chain/call`	caution	50	`missing-trust-surface` `unlisted`
`GET`	`https://api.onesource.io/api/chain/code/:address`	caution	50	`missing-trust-surface` `unlisted`
`GET`	`https://api.onesource.io/api/chain/erc721-tokens`	caution	50	`missing-trust-surface` `unlisted`
`GET`	`https://api.onesource.io/api/chain/estimate-gas`	caution	50	`missing-trust-surface` `unlisted`
`GET`	`https://api.onesource.io/api/chain/nft-metadata`	caution	50	`missing-trust-surface` `unlisted`
`GET`	`https://api.onesource.io/api/chain/nft-owner`	caution	50	`missing-trust-surface` `unlisted`
`GET`	`https://api.onesource.io/api/chain/pending`	caution	50	`missing-trust-surface` `unlisted`
`GET`	`https://api.onesource.io/api/chain/proxy/:address`	caution	50	`missing-trust-surface` `unlisted`
`GET`	`https://api.onesource.io/api/chain/storage`	caution	50	`missing-trust-surface` `unlisted`
`GET`	`https://api.onesource.io/api/chain/total-supply`	caution	50	`missing-trust-surface` `unlisted`
`GET`	`https://api.onesource.io/api/chain/block-number`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/block/:number`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/chain-id`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/contract/:address`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/ens/:input`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/erc1155-balance`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/erc20-balance`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/erc20-transfers`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/events`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/live-balance`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/network-info`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/nonce/:address`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/receipt/:hash`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`
`GET`	`https://api.onesource.io/api/chain/tx/:hash`	pay	80	`missing-trust-surface` `thin-listing` `evaluation-traffic`

Fix it

This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.

POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"api.onesource.io"}

Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.