api.x402node.dev

25 x402 endpoints assessed · worst score 45/100 · generated 2026-09-22T20:22:35.675Z

Some endpoints are safe to pay

Verdicts

pay 15 · caution 10 · avoid 0

Findings across this host

missing-trust-surface — 25 endpoints
no-www-authenticate — 25 endpoints
thin-listing — 15 endpoints
unlisted — 10 endpoints

Endpoints

method	resource	verdict	score	findings
`GET`	`https://api.x402node.dev/chain/defi-tvl`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.x402node.dev/chain/honeypot`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.x402node.dev/chain/smart-money-score`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.x402node.dev/chain/wallet-label`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.x402node.dev/chain/wallet-pnl`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.x402node.dev/web/amazon`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.x402node.dev/web/extract`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.x402node.dev/web/linkedin`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.x402node.dev/web/read`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.x402node.dev/web/social`	caution	45	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://api.x402node.dev/aviation/airport-arrivals`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/aviation/airport-departures`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/aviation/airport-status`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/aviation/flight`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/chain/gas-compare`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/chain/gas-oracle`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/chain/token-tax`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/defi/protocol-tvl`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/defi/yield-best`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/forex/convert/cny/usd/cny-usd`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/forex/convert/usd/cny/usd-cny`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/stock/cn-index`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/stock/cn-limit`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/stock/cn-moneyflow`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`
`GET`	`https://api.x402node.dev/web/batch`	pay	85	`missing-trust-surface` `no-www-authenticate` `thin-listing`

Fix it

This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.

POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"api.x402node.dev"}

Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.