mcp.zensched.com

25 x402 endpoints assessed · worst score 40/100 · generated 2026-09-22T20:24:49.771Z

Some endpoints are safe to pay

Verdicts

pay 2 · caution 23 · avoid 0

Findings across this host

missing-trust-surface — 25 endpoints
no-www-authenticate — 25 endpoints
stale — 19 endpoints
evaluation-traffic — 19 endpoints
unlisted — 5 endpoints

Endpoints

method	resource	verdict	score	findings
`GET`	`https://mcp.zensched.com/x402/tools/account_get`	caution	40	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://mcp.zensched.com/x402/tools/account_setup`	caution	40	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://mcp.zensched.com/x402/tools/billing_status`	caution	40	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://mcp.zensched.com/x402/tools/brand_create`	caution	40	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://mcp.zensched.com/x402/tools/usage_get`	caution	40	`missing-trust-surface` `no-www-authenticate` `unlisted`
`GET`	`https://mcp.zensched.com/x402/tools/account_activity`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/account_export`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/account_set_contact`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/account_set_payroll_period`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/api_key_list`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/billing_portal_link`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/brand_archive`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/brand_list`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/event_list`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/form_list`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/location_create`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/location_search`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/report_summary`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/shift_list`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/timesheet_export`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/timesheet_status`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/webhook_register`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/worker_search`	caution	65	`missing-trust-surface` `no-www-authenticate` `stale` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/tools/policy_archive`	pay	70	`missing-trust-surface` `no-www-authenticate` `evaluation-traffic`
`GET`	`https://mcp.zensched.com/x402/geocode`	pay	75	`missing-trust-surface` `no-www-authenticate` `stale`

Fix it

This page is free and shows what is wrong. The full audit adds severity, business impact and the exact fix for every finding, EIP-712 signed so you can hand it to whoever maintains the service.

POST https://enclave402.com/api/audit/host — $25.000 USDC via x402, body {"host":"mcp.zensched.com"}

Verdicts come from a continuous probe of x402 resources. How grading works · our own settlement ledger and self-dealing share. If you believe a verdict is wrong, re-probe with /api/seller/vet.