census / audit
7 x402 endpoints assessed · worst score 5/100 · generated 2026-09-27T01:18:15.147Z
No endpoint here is currently safe to pay
pay 0 · caution 0 · avoid 7
missing-trust-surface — 7 endpointsno-www-authenticate — 7 endpointsno-x402-header — 7 endpointsnot-402 — 7 endpointsunlisted — 7 endpoints| method | resource | verdict | score | findings |
|---|---|---|---|---|
GET | https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/docs/discover | avoid | 5 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/domain/preflight | avoid | 5 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/package/preflight | avoid | 5 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/page/downloads | avoid | 5 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/release/asset-resolve | avoid | 5 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/service/status | avoid | 5 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
GET | https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/url/preflight | avoid | 5 | not-402 no-x402-header missing-trust-surface no-www-authenticate unlisted |
This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.
POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run"}
Verdicts come from a continuous probe of x402 resources. How grading works. If you believe a verdict is wrong, re-probe with /api/seller/vet.